This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8149db4-f52c-451d-b5a9-8dd2027834e2.roa File: c8149db4-f52c-451d-b5a9-8dd2027834e2.roa (raw, json) Hash identifier: CUrOR36QiVbOGukZTmgQIHKIC3xxoApGnFHOEAdwJUI= Subject key identifier: 7E:3D:16:3A:DB:0A:6C:57:F0:37:71:83:F2:F4:A4:1E:83:D0:A7:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DC60803FD7C4C471AD14BB0F973FE662CD9FC1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8149db4-f52c-451d-b5a9-8dd2027834e2.roa Signing time: Fri 05 Dec 2025 00:50:42 +0000 ROA not before: Fri 05 Dec 2025 00:50:42 +0000 ROA not after: Thu 05 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c6:08:03:fd:7c:4c:47:1a:d1:4b:b0:f9:73:fe:66:2c:d9:fc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 5 00:50:42 2025 GMT Not After : Mar 5 23:59:59 2026 GMT Subject: serialNumber=c386921cd30945cf47f49a8f1825515990b59036d15dca39fb9d5f1f0e7c7ab9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:11:b9:ea:31:0b:25:35:4b:2b:dd:c3:b4: 16:4c:35:c6:8d:0d:7c:a6:f3:4e:63:ed:44:8c:17: d1:19:df:9d:5d:20:86:31:90:46:13:04:de:5f:49: 63:2c:f4:db:47:b9:f8:e4:72:9a:21:74:dc:dd:ac: ae:57:70:dc:d2:4b:db:88:e1:e1:d3:ab:de:ae:ee: f9:84:27:da:d0:23:e2:8c:e0:33:13:fc:6e:a4:30: b5:ee:4a:e3:c5:e4:48:e0:a3:6e:fa:0d:4f:b3:f8: 06:bf:bd:ae:0d:67:bd:28:38:05:4a:b2:8a:1d:9d: e8:26:aa:8c:c4:41:81:58:72:13:13:95:96:46:a5: de:8e:1d:f1:54:45:d8:2f:d8:cd:2a:f0:88:94:4e: 1c:bc:c6:d9:8f:b5:59:3f:3d:2d:ee:3d:fd:a2:bf: 65:1b:71:89:6c:62:fd:7f:dc:d1:b9:94:88:d1:d3: 8c:43:78:78:1f:5d:b3:9b:87:14:29:91:46:2d:47: 51:93:12:ce:75:fc:c7:03:0b:11:f1:fe:c9:7d:1e: 0f:04:81:e1:2f:94:f6:fc:c2:c5:7c:d8:a6:89:18: 56:24:96:d4:26:8e:3c:60:a7:7a:f2:cb:c5:18:18: 56:c5:01:6c:a2:d7:b5:31:7b:99:48:eb:50:2e:4f: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:16:3A:DB:0A:6C:57:F0:37:71:83:F2:F4:A4:1E:83:D0:A7:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8149db4-f52c-451d-b5a9-8dd2027834e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.120.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:c1:a3:39:2e:87:25:b6:d5:60:0c:88:b3:e3:2c:6e:cd:71: 4b:b8:c6:6d:19:f6:81:42:cd:59:b6:36:f6:34:76:40:a2:64: c5:9b:9c:7f:d5:55:eb:32:32:af:88:10:6f:e2:d4:bb:a7:c3: d3:75:98:86:fd:12:d4:62:3b:2a:c8:82:bd:fd:89:50:21:53: 5e:30:66:35:22:98:1e:76:c4:6e:04:26:9e:03:5d:38:0d:d0: ff:69:74:62:d8:a8:66:34:1f:52:cb:04:a1:1c:14:67:12:e2: 23:6a:e0:3a:5f:80:77:54:8e:b4:54:a0:0b:55:4e:54:10:e0: 40:59:b2:c1:ed:a5:3e:42:e7:9d:ef:92:c8:f2:97:76:b4:ad: 4f:1d:5c:c5:e7:49:14:97:37:77:00:d1:69:92:d4:38:37:66: 00:e2:1c:63:bd:4b:00:8a:74:50:87:2a:03:a6:40:15:9d:7f: bc:65:f0:80:ac:65:bc:9b:2e:f3:3e:8f:ad:83:90:4e:a2:fb: ac:e2:e0:60:0e:6e:79:ec:07:07:2a:0f:8d:2b:f1:2d:88:a3: d1:63:f2:fe:0d:70:31:87:d0:b4:96:dd:5a:15:49:ec:f4:b5: 6e:65:f7:cc:d5:a0:63:b4:cf:53:f6:f1:b0:be:82:63:df:36: 2b:a1:26:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPcYIA/18TEca0Uuw+XP+ZizZ/B0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA1MDA1MDQyWhcNMjYwMzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzg2OTIxY2QzMDk0NWNmNDdmNDlhOGYxODI1NTE1OTkw YjU5MDM2ZDE1ZGNhMzlmYjlkNWYxZjBlN2M3YWI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJehG56jELJTVLK93DtBZMNcaNDXym805j7USMF9EZ351d IIYxkEYTBN5fSWMs9NtHufjkcpohdNzdrK5XcNzSS9uI4eHTq96u7vmEJ9rQI+KM 4DMT/G6kMLXuSuPF5Ejgo276DU+z+Aa/va4NZ70oOAVKsoodnegmqozEQYFYchMT lZZGpd6OHfFURdgv2M0q8IiUThy8xtmPtVk/PS3uPf2iv2UbcYlsYv1/3NG5lIjR 04xDeHgfXbObhxQpkUYtR1GTEs51/McDCxHx/sl9Hg8EgeEvlPb8wsV82KaJGFYk ltQmjjxgp3ryy8UYGFbFAWyi17Uxe5lI61AuT+7rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfj0WOtsKbFfwN3GD8vSkHoPQp8UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4MTQ5ZGI0LWY1MmMtNDUxZC1iNWE5LThkZDIwMjc4MzRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRHgwDQYJKoZIhvcNAQELBQADggEBACrBozkuhyW21WAMiLPjLG7NcUu4 xm0Z9oFCzVm2NvY0dkCiZMWbnH/VVesyMq+IEG/i1Lunw9N1mIb9EtRiOyrIgr39 iVAhU14wZjUimB52xG4EJp4DXTgN0P9pdGLYqGY0H1LLBKEcFGcS4iNq4DpfgHdU jrRUoAtVTlQQ4EBZssHtpT5C553vksjyl3a0rU8dXMXnSRSXN3cA0WmS1Dg3ZgDi HGO9SwCKdFCHKgOmQBWdf7xl8ICsZbybLvM+j62DkE6i+6zi4GAObnnsBwcqD40r 8S2Io9Fj8v4NcDGH0LSW3VoVSez0tW5l98zVoGO0z1P28bC+gmPfNiuhJsc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:06 2025 by rpki-client