This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb5df2-4385-4856-8d1e-9265fda91321.roa File: 72fb5df2-4385-4856-8d1e-9265fda91321.roa (raw, json) Hash identifier: lGkmu1y+6ybFA9qr1fgTMRk23UdeoJ4QKZpWj9dzw30= Subject key identifier: 2D:0B:64:C4:E2:31:C8:AC:E0:3F:F7:50:6C:13:EF:56:51:6C:13:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EFDC75DF6CA13C5114C8E31989956485F6112 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb5df2-4385-4856-8d1e-9265fda91321.roa Signing time: Sat 22 Nov 2025 01:00:11 +0000 ROA not before: Sat 22 Nov 2025 01:00:11 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fd:c7:5d:f6:ca:13:c5:11:4c:8e:31:98:99:56:48:5f:61:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 22 01:00:11 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=a0b194a4163f2cb1415e35c0e405fdaf68bc885f257fe713ed19654dcd8ec4c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:32:1a:53:69:23:84:a8:04:2c:34:64:f1: 51:2d:6b:f4:93:1e:4a:94:ef:54:21:23:d9:6b:54: 98:31:9c:a1:82:87:44:72:6b:49:02:36:bf:f9:d8: ed:54:5b:2d:ee:92:5d:24:89:b0:c2:a8:d6:93:34: d4:31:b2:66:94:f4:62:f1:21:76:ed:a5:11:2d:58: 45:73:3f:8c:2a:b7:ac:1c:2b:11:82:d5:f8:11:0b: 46:cb:86:e7:35:fc:49:9d:d7:bf:1b:00:1d:39:ba: bb:52:55:fd:f5:e8:62:5e:25:30:60:38:24:9a:27: e6:72:f8:b5:59:97:86:6c:c3:2f:6b:67:86:82:38: 68:d3:76:58:f3:95:25:6b:43:f9:56:a2:f5:48:41: ad:9d:97:48:34:6e:3e:72:04:18:21:e6:e7:6d:fd: 1e:ca:a4:84:6a:94:44:35:27:54:90:c1:37:e0:1b: fd:f0:51:8e:9d:6d:9b:7b:32:77:c3:f6:4c:16:ee: a7:a3:26:82:0f:7b:9e:df:bb:12:6d:81:b0:69:f6: f3:7d:46:36:4b:77:db:de:f7:d3:01:80:c3:6f:45: 42:08:98:09:fc:5a:cd:ee:a8:41:a9:2c:c4:16:49: 46:ec:e3:84:06:bf:3f:cf:73:34:6b:b0:6f:72:d3: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:64:C4:E2:31:C8:AC:E0:3F:F7:50:6C:13:EF:56:51:6C:13:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb5df2-4385-4856-8d1e-9265fda91321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.0.0/17 Signature Algorithm: sha256WithRSAEncryption 65:8b:82:9b:04:30:59:fc:c1:25:9e:cf:83:9b:56:88:83:3d: f9:c3:f8:90:b8:d5:68:1b:c6:dc:7c:e2:81:21:c7:61:2c:54: 00:66:cc:bf:8f:76:20:cb:96:21:61:d9:f5:1c:01:c6:f1:6d: d7:30:7c:d2:4b:0b:8d:85:05:27:cf:42:bb:ec:67:02:b2:f6: 84:98:47:b2:96:ff:22:c3:2c:0b:7a:06:7c:ba:64:33:3a:5e: 0c:0b:a9:b5:04:f9:42:de:78:05:8c:9f:cb:d6:84:95:3f:32: 04:ed:92:17:cf:d1:51:29:d7:50:6a:10:13:7c:14:78:db:bc: 19:84:b9:70:d0:83:97:ee:ab:fe:02:6f:0f:bf:a6:f6:73:e4: 5b:ef:de:96:c1:13:da:b6:d5:c1:ba:c3:7a:15:17:35:2a:e2: d7:40:7c:cd:31:73:87:08:55:67:e6:e4:3d:ea:ee:a5:aa:14: 90:a0:17:a6:10:f2:63:97:a5:c6:32:d9:eb:59:31:27:cb:25: 99:ec:6d:e5:62:f9:46:dc:b3:5f:40:f9:f6:05:ee:93:fb:ac: 06:6e:2c:a3:07:a5:ac:ff:05:e5:26:4d:46:6a:bc:4d:48:96: 01:29:b2:6a:9f:fa:76:08:df:af:57:05:5e:c8:aa:d5:f7:2b: c5:a5:69:49 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITbv3HXfbKE8URTI4xmJlWSF9hEjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTExMjIwMTAwMTFaFw0yNjAyMjAyMzU5NTla MHoxSTBHBgNVBAUTQGEwYjE5NGE0MTYzZjJjYjE0MTVlMzVjMGU0MDVmZGFmNjhi Yzg4NWYyNTdmZTcxM2VkMTk2NTRkY2Q4ZWM0YzAxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMcdMhpTaSOEqAQsNGTxUS1r9JMeSpTvVCEj2WtUmDGcoYKH RHJrSQI2v/nY7VRbLe6SXSSJsMKo1pM01DGyZpT0YvEhdu2lES1YRXM/jCq3rBwr EYLV+BELRsuG5zX8SZ3XvxsAHTm6u1JV/fXoYl4lMGA4JJon5nL4tVmXhmzDL2tn hoI4aNN2WPOVJWtD+Vai9UhBrZ2XSDRuPnIEGCHm5239HsqkhGqURDUnVJDBN+Ab /fBRjp1tm3syd8P2TBbup6Mmgg97nt+7Em2BsGn2831GNkt329730wGAw29FQgiY Cfxaze6oQaksxBZJRuzjhAa/P89zNGuwb3LTiucCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQtC2TE4jHIrOA/91BsE+9WUWwTATAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNzJmYjVkZjItNDM4NS00ODU2LThkMWUtOTI2NWZkYTkxMzIxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBwOpADANBgkqhkiG9w0BAQsFAAOCAQEAZYuCmwQwWfzBJZ7Pg5tWiIM9+cP4 kLjVaBvG3HzigSHHYSxUAGbMv492IMuWIWHZ9RwBxvFt1zB80ksLjYUFJ89Cu+xn ArL2hJhHspb/IsMsC3oGfLpkMzpeDAuptQT5Qt54BYyfy9aElT8yBO2SF8/RUSnX UGoQE3wUeNu8GYS5cNCDl+6r/gJvD7+m9nPkW+/elsET2rbVwbrDehUXNSri10B8 zTFzhwhVZ+bkPerupaoUkKAXphDyY5elxjLZ61kxJ8slmext5WL5RtyzX0D59gXu k/usBm4sowelrP8F5SZNRmq8TUiWASmyap/6dgjfr1cFXsiq1fcrxaVpSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:55:44 2025 by rpki-client