This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa File: d489da28-9b7c-4eab-91b5-6553e8bd7602.roa (raw, json) Hash identifier: 7WTwTnR+S9n5Jtgt8yf32bwJXHkpKGFmvKN1lkGGO3o= Subject key identifier: E5:8D:1D:33:04:DB:42:1C:5A:11:B6:36:BA:15:CA:A7:1F:D6:7D:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 158989369DC2A97F16E7331E878CA54FBB9FD754 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa Signing time: Sat 06 Dec 2025 03:31:07 +0000 ROA not before: Sat 06 Dec 2025 03:31:07 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:89:89:36:9d:c2:a9:7f:16:e7:33:1e:87:8c:a5:4f:bb:9f:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 6 03:31:07 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=bf3837281bc15082bae1157e66084c6cba18a195460835be9b990045b4a430eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:14:a5:a3:0e:67:2e:f3:b2:aa:4d:5f:a2: cb:98:1d:a5:9e:90:63:98:2d:09:fa:8d:39:c5:de: 59:9c:52:94:fd:ea:42:74:ca:67:08:7a:44:05:f8: 5e:b7:77:5b:41:f8:72:18:c0:33:47:2f:41:71:4c: 05:5c:85:c6:6c:8f:c4:71:96:b0:ce:ec:e0:3f:9b: 1d:11:4d:af:fc:b4:2b:65:13:e8:15:dd:f5:7a:2a: 61:82:40:93:8e:e5:07:a7:1e:df:56:27:31:63:f3: 28:4f:6e:a1:35:e3:1a:8a:15:26:f1:71:fd:d9:bd: 76:d3:83:05:45:03:f8:ab:6a:20:ce:62:d0:36:58: ee:88:21:92:98:0c:dc:b5:68:c9:b2:28:d5:b5:4a: 07:60:76:74:50:0d:8e:87:51:72:d5:e2:f7:b8:67: 1b:a3:49:e9:4d:b8:e0:55:b1:fe:9d:6c:0b:a6:d4: bd:d5:c7:db:57:5f:5c:2f:4a:54:ab:ed:cb:25:f1: 79:27:5e:0c:92:b2:ec:47:42:08:c8:6f:7d:0f:55: 12:5e:d6:2f:37:f4:66:7e:59:4c:89:9b:d8:d9:23: 68:0f:09:a8:aa:bf:7c:61:d9:f5:50:97:fc:db:a1: bc:20:8b:d5:e4:df:64:e0:68:31:46:ac:73:66:5c: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8D:1D:33:04:DB:42:1C:5A:11:B6:36:BA:15:CA:A7:1F:D6:7D:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.223.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2f:b6:01:bb:e2:f4:e1:8b:85:0e:16:78:a2:8c:f5:9e:30: c0:7f:43:4b:73:aa:8d:f2:69:25:4d:fa:40:fc:b3:4a:f0:38: 63:c0:66:9b:79:97:17:c3:87:9a:3c:8a:58:85:57:67:7a:fc: ab:96:38:67:91:51:5b:07:e9:e2:83:ac:15:9b:16:a8:9f:6b: d7:61:ad:69:1f:8a:13:d0:39:8c:7a:04:30:7f:09:a6:a3:29: 0b:1d:08:23:c5:0f:fa:ce:c5:ad:72:11:c0:7b:04:67:6f:ff: 2e:ac:51:55:26:94:86:1d:66:21:6a:2a:49:09:f1:4c:5b:6d: 74:08:19:4f:b5:07:7b:de:9a:d3:80:ba:50:92:b2:dc:94:66: d1:80:28:dd:d5:87:72:d2:87:8d:cf:9b:1d:e7:58:44:ea:c9: 7f:77:dd:f2:cb:dc:41:f2:8b:85:60:df:ef:1c:97:7a:f7:bf: 2a:cb:56:9c:f4:a1:ef:ff:07:39:c1:3b:f2:56:b4:10:55:55: 70:20:06:44:e1:8c:51:85:37:3f:b0:d0:3d:f2:fe:93:90:4d: 11:5e:09:2c:03:37:f1:c0:8e:c4:7d:2e:55:b4:17:d8:54:ea: 6f:5f:7a:fc:7e:e2:04:95:af:e7:d9:88:a1:1b:31:b1:cf:9e: 61:cb:ce:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFYmJNp3CqX8W5zMeh4ylT7uf11QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA2MDMzMTA3WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjM4MzcyODFiYzE1MDgyYmFlMTE1N2U2NjA4NGM2Y2Jh MThhMTk1NDYwODM1YmU5Yjk5MDA0NWI0YTQzMGViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdIRSlow5nLvOyqk1fosuYHaWekGOYLQn6jTnF3lmcUpT9 6kJ0ymcIekQF+F63d1tB+HIYwDNHL0FxTAVchcZsj8RxlrDO7OA/mx0RTa/8tCtl E+gV3fV6KmGCQJOO5QenHt9WJzFj8yhPbqE14xqKFSbxcf3ZvXbTgwVFA/iraiDO YtA2WO6IIZKYDNy1aMmyKNW1SgdgdnRQDY6HUXLV4ve4ZxujSelNuOBVsf6dbAum 1L3Vx9tXX1wvSlSr7csl8XknXgySsuxHQgjIb30PVRJe1i839GZ+WUyJm9jZI2gP Caiqv3xh2fVQl/zbobwgi9Xk32TgaDFGrHNmXPY3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5Y0dMwTbQhxaEbY2uhXKpx/WfVkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ODlkYTI4LTliN2MtNGVhYi05MWI1LTY1NTNlOGJkNzYwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xd8wDQYJKoZIhvcNAQELBQADggEBAAQvtgG74vThi4UOFniijPWeMMB/ Q0tzqo3yaSVN+kD8s0rwOGPAZpt5lxfDh5o8iliFV2d6/KuWOGeRUVsH6eKDrBWb Fqifa9dhrWkfihPQOYx6BDB/CaajKQsdCCPFD/rOxa1yEcB7BGdv/y6sUVUmlIYd ZiFqKkkJ8UxbbXQIGU+1B3vemtOAulCSstyUZtGAKN3Vh3LSh43Pmx3nWETqyX93 3fLL3EHyi4Vg3+8cl3r3vyrLVpz0oe//BznBO/JWtBBVVXAgBkThjFGFNz+w0D3y /pOQTRFeCSwDN/HAjsR9LlW0F9hU6m9fevx+4gSVr+fZiKEbMbHPnmHLzkg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:11 2025 by rpki-client