This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa File: 4a8ad419-80e8-4f51-a7c0-2715212906e9.roa (raw, json) Hash identifier: KU05FYSCV83OaugzwCo0wVroR7IIOD0AGVuHb2c94Wc= Subject key identifier: A6:80:6C:97:8D:6D:74:AD:FA:4B:D3:E2:7F:5E:6D:D5:39:8B:36:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2972F1A4D0AEFA43DAAA833DA6406086F5F5291D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa Signing time: Mon 08 Dec 2025 01:40:11 +0000 ROA not before: Mon 08 Dec 2025 01:40:11 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:72:f1:a4:d0:ae:fa:43:da:aa:83:3d:a6:40:60:86:f5:f5:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 8 01:40:11 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=25b0f6857bf37949429c329e3c5ed62f1eccebb17ded60cccd8b230fc9503401, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:1a:3a:5f:17:0e:b2:9d:89:b3:98:37:37: fd:d1:e7:69:49:76:2f:14:24:93:13:be:98:01:e6: 36:e8:d4:20:20:48:5b:17:cc:b3:ee:70:02:5e:a7: b1:7c:ed:97:66:79:91:8b:17:2d:69:13:af:48:1b: ae:e1:36:8a:9b:19:3f:08:7a:25:31:06:69:7b:90: 3d:8c:c1:14:21:b1:60:f3:a9:c6:cf:63:f8:fc:33: 54:72:93:b2:d7:11:9d:ac:ee:06:d5:5f:61:13:6d: 83:31:21:83:6d:57:34:cf:c1:b9:46:c9:31:0c:9b: 78:99:f3:9f:d1:de:ad:ee:92:4f:f9:20:95:0b:2a: ae:c5:4a:21:ad:00:9a:ca:e0:02:ed:bd:30:af:62: 94:12:4f:82:10:6c:35:af:ab:d1:80:b1:f1:47:ac: d0:dd:34:51:25:99:f9:44:43:f3:b7:4d:84:41:08: 80:da:cc:03:65:f3:14:ea:23:73:fb:ad:0c:13:ac: 72:a0:62:0b:07:8a:68:00:07:04:e1:87:57:48:07: ee:bf:ee:e8:09:e1:f9:d6:03:f0:85:e0:04:45:f2: 61:9e:6c:7a:20:63:07:b0:dc:f9:16:35:70:a1:a5: bc:69:b5:60:57:c4:ff:a9:4d:62:d3:5c:19:f3:31: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:6C:97:8D:6D:74:AD:FA:4B:D3:E2:7F:5E:6D:D5:39:8B:36:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.3.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4d:11:31:ca:a0:7c:60:04:91:11:df:5a:aa:4f:4c:a0:85: e0:1b:32:34:93:81:64:54:7b:89:0e:60:57:19:8c:f9:bb:51: dd:6c:a7:88:96:82:72:ce:70:bf:d8:0d:cf:8d:36:ba:44:44: 4c:ba:29:9f:3e:01:c8:03:01:e8:56:13:56:88:38:0c:67:59: 5e:5b:d7:af:8e:04:bd:f1:d7:1e:89:a4:a1:ac:fb:bf:90:46: 4b:23:63:11:c7:cc:32:d4:05:e7:57:86:da:a8:cc:6a:ee:52: d5:46:89:86:e1:86:98:90:38:cd:d9:18:c6:5b:3f:ce:bb:96: 81:ab:61:7a:3e:88:b9:20:20:bb:46:d7:5d:e5:7f:2b:a5:91: d6:01:23:d9:95:3c:da:e0:d0:10:0d:20:27:7f:70:55:e7:c0: 98:e0:27:e3:60:46:e9:93:2c:9d:bd:1e:7e:a4:b1:18:92:6c: 6f:f2:a6:e7:52:2d:19:a9:cf:28:97:c3:0c:3e:84:28:4a:ad: 51:0c:ec:b7:cb:39:8f:dc:e9:3a:40:bb:b9:27:ad:06:8d:26: 6e:b9:56:24:ab:6c:7e:47:4c:fc:ec:2a:0d:65:f5:93:6e:07: 5d:56:5a:4c:3e:1e:6a:cd:10:80:4d:0f:3b:70:e1:1e:b8:eb: d2:5d:a6:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKXLxpNCu+kPaqoM9pkBghvX1KR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA4MDE0MDExWhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWIwZjY4NTdiZjM3OTQ5NDI5YzMyOWUzYzVlZDYyZjFl Y2NlYmIxN2RlZDYwY2NjZDhiMjMwZmM5NTAzNDAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJTxo6XxcOsp2Js5g3N/3R52lJdi8UJJMTvpgB5jbo1CAg SFsXzLPucAJep7F87ZdmeZGLFy1pE69IG67hNoqbGT8IeiUxBml7kD2MwRQhsWDz qcbPY/j8M1Ryk7LXEZ2s7gbVX2ETbYMxIYNtVzTPwblGyTEMm3iZ85/R3q3ukk/5 IJULKq7FSiGtAJrK4ALtvTCvYpQST4IQbDWvq9GAsfFHrNDdNFElmflEQ/O3TYRB CIDazANl8xTqI3P7rQwTrHKgYgsHimgABwThh1dIB+6/7ugJ4fnWA/CF4ARF8mGe bHogYwew3PkWNXChpbxptWBXxP+pTWLTXBnzMZW/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpoBsl41tdK36S9Pif15t1TmLNowwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhOGFkNDE5LTgwZTgtNGY1MS1hN2MwLTI3MTUyMTI5MDZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAgMwDQYJKoZIhvcNAQELBQADggEBAJNNETHKoHxgBJER31qqT0ygheAb MjSTgWRUe4kOYFcZjPm7Ud1sp4iWgnLOcL/YDc+NNrpEREy6KZ8+AcgDAehWE1aI OAxnWV5b16+OBL3x1x6JpKGs+7+QRksjYxHHzDLUBedXhtqozGruUtVGiYbhhpiQ OM3ZGMZbP867loGrYXo+iLkgILtG113lfyulkdYBI9mVPNrg0BANICd/cFXnwJjg J+NgRumTLJ29Hn6ksRiSbG/ypudSLRmpzyiXwww+hChKrVEM7LfLOY/c6TpAu7kn rQaNJm65ViSrbH5HTPzsKg1l9ZNuB11WWkw+HmrNEIBNDztw4R6469JdptQ= -----END CERTIFICATE-----Generated at Thu Dec 18 07:35:48 2025 by rpki-client