This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8961befc-36db-4a85-bd90-b08394c9c488.roa File: 8961befc-36db-4a85-bd90-b08394c9c488.roa (raw, json) Hash identifier: LrcrqwHX+HJCqh28vXjeEY0suU4FQQKgOq8NBGElRNw= Subject key identifier: 89:5F:89:15:82:FB:37:A1:66:C0:4E:F5:6E:85:FF:65:F5:A3:0A:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7593A28B5F1C0A000379F8D30B30EC5C51A1C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8961befc-36db-4a85-bd90-b08394c9c488.roa Signing time: Fri 05 Dec 2025 02:10:59 +0000 ROA not before: Fri 05 Dec 2025 02:10:59 +0000 ROA not after: Thu 05 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:a2:8b:5f:1c:0a:00:03:79:f8:d3:0b:30:ec:5c:51:a1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 5 02:10:59 2025 GMT Not After : Mar 5 23:59:59 2026 GMT Subject: serialNumber=d16fba02a8e8d55cc05e53fbbf7b474f922bd411c73a2281499be7f8d45cc8b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:73:e0:e0:09:3f:96:cb:ae:47:f9:67:19: 3a:3c:eb:ef:74:07:e8:b8:20:5f:a9:d6:f8:e1:06: a1:21:d5:02:ee:3e:de:5b:82:94:17:55:df:1d:c9: 5a:2b:6e:91:b3:3b:09:64:1e:00:f7:81:46:b6:ea: 1e:bc:b4:af:61:04:bb:69:eb:91:08:99:40:8b:22: 18:71:85:01:69:55:13:65:a4:b5:a0:23:57:de:39: 11:9e:6b:48:c9:f0:b6:e5:41:10:e7:6d:42:37:05: 37:1e:30:31:35:90:25:19:b5:cd:6e:a4:aa:a9:97: 7e:8a:71:5b:c1:8c:3a:b7:50:f7:20:a8:21:d8:00: d1:31:9e:7d:0a:cf:d9:fb:db:a3:56:f3:09:fe:f7: 6d:09:55:9d:b0:ff:bf:26:de:f6:7e:51:15:7a:e8: 8e:6a:50:1d:93:f0:c8:8e:75:45:9c:3d:3a:a9:6a: b1:11:b0:70:45:77:a4:d4:39:d4:59:f2:50:ab:4a: 19:14:83:00:03:ff:8f:dd:24:d4:28:fa:60:5a:33: f5:53:7f:6d:5c:06:73:61:33:5a:d9:22:db:4a:ac: c9:2d:5f:79:a5:e3:05:54:0d:9a:f6:f6:68:fa:c4: 95:55:12:4b:33:3a:f7:3d:83:42:30:06:e2:7f:a0: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:89:15:82:FB:37:A1:66:C0:4E:F5:6E:85:FF:65:F5:A3:0A:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8961befc-36db-4a85-bd90-b08394c9c488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.217.0/24 Signature Algorithm: sha256WithRSAEncryption ac:f8:2a:b7:17:63:dd:c0:2b:17:f5:63:01:0a:95:ea:49:97: ab:9e:6e:1b:6e:ee:08:77:46:bd:97:a0:a9:4e:2e:a1:68:80: 45:89:e6:a4:ea:17:d0:36:f4:8c:46:5a:4d:19:c1:fb:94:69: fe:8a:c1:90:59:04:19:c6:3f:f3:1c:b5:3c:14:d3:24:7c:3b: d0:09:bf:bf:cb:d0:10:77:c1:68:ec:e1:60:d6:73:e0:98:f0: f5:af:0e:5a:65:49:b8:2f:7e:00:4e:87:aa:bb:ed:5b:5b:39: c0:df:2f:6d:fd:ca:11:61:52:1d:fa:cb:80:d6:ef:02:e1:ca: ba:65:d1:08:eb:fa:6f:d5:a2:6a:5b:8b:69:db:af:59:b2:ba: dd:0c:2d:9b:ec:b1:0d:0d:bb:0a:9e:d5:24:e7:e9:c2:bb:f1: 18:82:95:2a:93:49:f0:7f:42:d1:3d:c9:8f:0b:61:d6:59:53: 5c:64:08:de:60:d2:02:8d:f0:c1:a7:1f:95:02:20:8b:e2:05: 8b:43:65:bc:bb:2e:ab:97:bd:21:0b:d6:95:4a:ec:42:d3:0b: ce:6b:85:05:72:7d:a3:e7:ef:5e:09:c7:c0:e3:ff:6f:3a:03: 46:58:d8:04:22:3d:ea:b6:d2:ee:fd:d7:8f:0c:00:47:4f:45: 13:e8:a2:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITdZOii18cCgADefjTCzDsXFGhxTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEyMDUwMjEwNTlaFw0yNjAzMDUyMzU5NTla MHoxSTBHBgNVBAUTQGQxNmZiYTAyYThlOGQ1NWNjMDVlNTNmYmJmN2I0NzRmOTIy YmQ0MTFjNzNhMjI4MTQ5OWJlN2Y4ZDQ1Y2M4YjMxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK74c+DgCT+Wy65H+WcZOjzr73QH6LggX6nW+OEGoSHVAu4+ 3luClBdV3x3JWitukbM7CWQeAPeBRrbqHry0r2EEu2nrkQiZQIsiGHGFAWlVE2Wk taAjV945EZ5rSMnwtuVBEOdtQjcFNx4wMTWQJRm1zW6kqqmXfopxW8GMOrdQ9yCo IdgA0TGefQrP2fvbo1bzCf73bQlVnbD/vybe9n5RFXrojmpQHZPwyI51RZw9Oqlq sRGwcEV3pNQ51FnyUKtKGRSDAAP/j90k1Cj6YFoz9VN/bVwGc2EzWtki20qsyS1f eaXjBVQNmvb2aPrElVUSSzM69z2DQjAG4n+gFoUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSJX4kVgvs3oWbATvVuhf9l9aMKuTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvODk2MWJlZmMtMzZkYi00YTg1LWJkOTAtYjA4Mzk0YzljNDg4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABJE2TANBgkqhkiG9w0BAQsFAAOCAQEArPgqtxdj3cArF/VjAQqV6kmXq55u G27uCHdGvZegqU4uoWiARYnmpOoX0Db0jEZaTRnB+5Rp/orBkFkEGcY/8xy1PBTT JHw70Am/v8vQEHfBaOzhYNZz4Jjw9a8OWmVJuC9+AE6HqrvtW1s5wN8vbf3KEWFS HfrLgNbvAuHKumXRCOv6b9WialuLaduvWbK63Qwtm+yxDQ27Cp7VJOfpwrvxGIKV KpNJ8H9C0T3Jjwth1llTXGQI3mDSAo3wwacflQIgi+IFi0NlvLsuq5e9IQvWlUrs QtMLzmuFBXJ9o+fvXgnHwOP/bzoDRljYBCI96rbS7v3XjwwAR09FE+iiqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:05 2025 by rpki-client