This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4914976-fca5-4a38-819e-dabc3c914ea2.roa File: f4914976-fca5-4a38-819e-dabc3c914ea2.roa (raw, json) Hash identifier: JsfCpookByVnO1u9feE009PBlKrLUM9ReNxMie7XqEc= Subject key identifier: ED:5C:42:23:D0:C9:7A:16:76:56:9D:41:52:CA:22:45:AD:FB:0B:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32B47C7D9AF65ABFA192CCC1BB1B73FA5C7590C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4914976-fca5-4a38-819e-dabc3c914ea2.roa Signing time: Sat 06 Dec 2025 03:30:17 +0000 ROA not before: Sat 06 Dec 2025 03:30:17 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.249.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b4:7c:7d:9a:f6:5a:bf:a1:92:cc:c1:bb:1b:73:fa:5c:75:90:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 6 03:30:17 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=248e548d38df65b98247a3958bb384c8014eed21913c1a943ca658e6ca4f439a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:55:5b:df:56:a2:cc:c0:65:c8:a0:c5:d8: 4a:93:a1:cd:bb:7a:9d:0c:00:73:40:f0:cf:50:6d: 29:6c:b3:b7:dd:69:26:66:bd:2a:3c:bf:08:f9:7f: 86:ec:37:7c:fa:f9:cd:08:a6:dd:17:3c:99:9a:f3: 5f:c2:54:6b:8d:a5:9a:01:38:55:ef:90:f0:27:10: e5:6c:ad:c6:93:3b:96:9d:57:0a:9e:df:00:2e:2d: 41:4d:f6:5c:08:35:e3:8f:f4:d1:b3:20:a6:1b:9c: ff:95:a2:f5:a5:36:8c:f8:72:c8:55:de:92:af:58: bc:43:2f:25:ab:a8:6b:c6:d7:f7:8c:f8:7e:c2:24: c1:2f:84:66:f3:e7:bc:11:1a:e9:b6:5c:76:76:95: fa:df:28:05:5f:98:b2:fb:d8:46:52:57:0d:b9:3d: 9e:16:90:4d:14:af:9d:b7:0f:42:52:b9:99:22:90: 6c:f1:86:34:7c:9b:5a:60:58:38:ca:63:59:bc:57: e8:1d:d5:8c:7b:16:eb:b4:93:a0:22:12:80:8d:94: 06:77:15:db:87:b3:49:4d:fc:9f:7a:ce:d1:41:a2: 88:6f:73:5d:f4:b8:3a:14:f3:7b:35:b0:3e:6d:97: 21:ac:9e:31:a1:be:ac:b5:02:6a:ea:c3:83:9f:89: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:42:23:D0:C9:7A:16:76:56:9D:41:52:CA:22:45:AD:FB:0B:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4914976-fca5-4a38-819e-dabc3c914ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.249.153.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d4:97:be:48:c2:3b:ec:2c:d7:00:f5:be:19:ac:c5:e1:c8: 58:b0:95:64:59:4b:96:b2:10:cf:7d:17:e5:1d:fa:b5:59:f6: 27:8f:ff:d5:10:45:89:3a:63:de:e7:7b:67:e1:de:6f:1a:93: 52:77:1f:bb:3a:57:7c:bc:a8:67:7d:7c:8d:67:6a:a9:bd:a7: a0:14:30:58:42:f8:8a:f8:ea:01:31:41:b9:3c:a2:e1:a7:8c: 49:ad:f2:c8:87:39:dc:11:1c:4d:db:e6:9d:7f:09:76:ec:d3: 8c:3e:72:2f:38:bf:82:db:c7:24:c2:f5:e5:4c:68:ef:66:29: 8e:81:00:09:b9:d5:fd:77:fb:31:13:f9:ca:0d:94:a7:2e:67: eb:0b:53:9e:ce:f6:be:e8:95:95:62:71:26:4f:c9:00:1c:e7: 8e:32:cd:d9:1d:d6:ae:d3:65:46:7c:b0:d1:15:ea:ad:07:37: 17:b8:55:2a:a9:e7:91:19:90:95:99:ad:f0:d3:65:d4:71:61: 2f:1d:14:ff:a7:a0:7c:86:25:d1:18:a9:50:19:1c:02:c6:e8: 39:d2:05:21:50:40:04:da:f4:cb:13:fb:32:0a:93:ff:0e:73: 7f:3c:49:19:3d:04:30:6a:f4:b2:2f:05:7f:06:94:75:ca:16: f8:bc:2a:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMrR8fZr2Wr+hkszBuxtz+lx1kMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA2MDMzMDE3WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDhlNTQ4ZDM4ZGY2NWI5ODI0N2EzOTU4YmIzODRjODAx NGVlZDIxOTEzYzFhOTQzY2E2NThlNmNhNGY0MzlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiJFVb31aizMBlyKDF2EqToc27ep0MAHNA8M9QbSlss7fd aSZmvSo8vwj5f4bsN3z6+c0Ipt0XPJma81/CVGuNpZoBOFXvkPAnEOVsrcaTO5ad Vwqe3wAuLUFN9lwINeOP9NGzIKYbnP+VovWlNoz4cshV3pKvWLxDLyWrqGvG1/eM +H7CJMEvhGbz57wRGum2XHZ2lfrfKAVfmLL72EZSVw25PZ4WkE0Ur523D0JSuZki kGzxhjR8m1pgWDjKY1m8V+gd1Yx7Fuu0k6AiEoCNlAZ3FduHs0lN/J96ztFBoohv c130uDoU83s1sD5tlyGsnjGhvqy1Amrqw4OfiTDjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7VxCI9DJehZ2Vp1BUsoiRa37CzowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y0OTE0OTc2LWZjYTUtNGEzOC04MTllLWRhYmMzYzkxNGVhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2+ZkwDQYJKoZIhvcNAQELBQADggEBAEfUl75IwjvsLNcA9b4ZrMXhyFiw lWRZS5ayEM99F+Ud+rVZ9ieP/9UQRYk6Y97ne2fh3m8ak1J3H7s6V3y8qGd9fI1n aqm9p6AUMFhC+Ir46gExQbk8ouGnjEmt8siHOdwRHE3b5p1/CXbs04w+ci84v4Lb xyTC9eVMaO9mKY6BAAm51f13+zET+coNlKcuZ+sLU57O9r7olZVicSZPyQAc544y zdkd1q7TZUZ8sNEV6q0HNxe4VSqp55EZkJWZrfDTZdRxYS8dFP+noHyGJdEYqVAZ HALG6DnSBSFQQATa9MsT+zIKk/8Oc388SRk9BDBq9LIvBX8GlHXKFvi8Kgw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:50 2025 by rpki-client