This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b44aee-9924-4835-9f90-9b5bbe2f8056.roa File: 20b44aee-9924-4835-9f90-9b5bbe2f8056.roa (raw, json) Hash identifier: kaGHGg99ssKPTnhXDyQgoojiIiRnVZyx1zLmX5eBQT4= Subject key identifier: BF:A8:1C:39:29:B9:65:8F:CC:68:B3:93:9C:D3:18:82:65:C2:52:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CDFEC1E1038C92BDA4C9BEEEC669D94FEE0A3EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b44aee-9924-4835-9f90-9b5bbe2f8056.roa Signing time: Wed 10 Dec 2025 00:20:39 +0000 ROA not before: Wed 10 Dec 2025 00:20:39 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:df:ec:1e:10:38:c9:2b:da:4c:9b:ee:ec:66:9d:94:fe:e0:a3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:20:39 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=b97428c23d0d126a2212d25e61c26a4d7e2a9cc2dc31ef1e151be90d3e31ad02, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:80:41:7f:61:85:da:84:73:4b:f7:93:7e:32: 90:62:a1:fd:4a:2f:a7:f8:92:3b:cd:8f:b8:0a:d6: 2c:e2:56:81:f8:c7:2d:05:49:50:6d:52:90:f3:62: 7a:ab:e2:0f:1a:58:42:d8:2b:f5:b4:39:07:e2:6c: 53:24:a2:65:b2:0e:08:58:89:56:bd:72:a3:23:bb: a2:c2:2e:5d:7e:af:6e:97:de:a8:83:01:7c:c2:e9: ae:4f:f0:68:b3:f8:1e:7a:f1:f0:74:da:bd:a8:3f: d1:7b:4e:8a:69:33:c1:30:2f:a4:73:05:77:8c:af: d2:a3:9e:d3:ce:4d:b1:eb:9a:a8:26:41:d5:0e:43: de:91:4b:e0:51:6e:46:c2:7a:9a:85:cd:80:8f:3d: 5e:1e:5a:2e:4d:8a:69:00:6b:8f:67:56:e9:52:34: c9:fd:00:44:67:5f:0b:0c:9e:46:97:bc:fa:f6:de: 34:5d:55:1c:0c:b1:74:91:4b:38:c1:2e:7c:69:5b: 10:ef:46:f4:c1:14:a7:39:22:52:76:dc:d7:81:1b: 78:40:8c:18:90:3e:40:36:c3:25:3d:98:fa:bf:81: 5a:af:96:4c:af:13:e1:c8:a4:0b:49:7f:b7:96:32: d3:1f:f9:57:eb:f8:7c:4e:2f:f5:9a:2f:80:a4:fa: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A8:1C:39:29:B9:65:8F:CC:68:B3:93:9C:D3:18:82:65:C2:52:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b44aee-9924-4835-9f90-9b5bbe2f8056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.188.0/23 Signature Algorithm: sha256WithRSAEncryption a4:9b:cc:d9:e6:b6:47:20:c7:fc:2f:dd:6e:9d:62:b3:58:6e: 53:59:4a:7f:4c:e5:66:90:3a:8c:62:2a:67:50:fc:bc:dd:3b: e1:f0:53:1e:28:e2:6d:ab:be:31:03:42:d6:b9:56:5d:66:a5: d8:fb:aa:00:19:b5:3d:83:e6:76:45:9d:a6:6c:6d:92:87:c0: 9d:54:a8:7f:39:8c:61:af:b3:21:2e:61:61:55:9b:79:76:38: 78:00:8a:8d:f7:a5:52:73:d7:a7:b0:a9:e0:a0:06:60:bd:41: 58:8d:b9:fa:1b:8e:9c:f3:40:e2:69:98:c4:20:2e:d9:60:63: 07:d0:f7:f6:1d:d2:b7:cb:cc:d0:87:87:44:e5:d0:36:08:c3: a4:c7:17:9b:3b:63:c1:05:c6:dc:88:fb:90:59:7f:6b:f7:34: 86:56:a0:5f:75:90:9b:9c:e1:04:ff:d4:ab:a3:41:a5:41:9f: e2:4c:f9:02:8a:45:fa:04:fa:d7:f6:01:33:f2:a0:ea:96:72: 3e:e0:9a:78:3c:75:e5:16:68:3f:05:12:ce:7d:7d:48:83:99: 55:63:d4:80:4c:07:b8:4c:a3:85:25:85:24:a0:f6:da:d4:01: 71:4e:a1:cc:19:03:05:3a:02:66:3a:0d:bf:aa:f9:ed:61:fd: a3:45:60:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULN/sHhA4ySvaTJvu7GadlP7go+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMDM5WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTc0MjhjMjNkMGQxMjZhMjIxMmQyNWU2MWMyNmE0ZDdl MmE5Y2MyZGMzMWVmMWUxNTFiZTkwZDNlMzFhZDAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSgEF/YYXahHNL95N+MpBiof1KL6f4kjvNj7gK1iziVoH4 xy0FSVBtUpDzYnqr4g8aWELYK/W0OQfibFMkomWyDghYiVa9cqMju6LCLl1+r26X 3qiDAXzC6a5P8Giz+B568fB02r2oP9F7ToppM8EwL6RzBXeMr9KjntPOTbHrmqgm QdUOQ96RS+BRbkbCepqFzYCPPV4eWi5NimkAa49nVulSNMn9AERnXwsMnkaXvPr2 3jRdVRwMsXSRSzjBLnxpWxDvRvTBFKc5IlJ23NeBG3hAjBiQPkA2wyU9mPq/gVqv lkyvE+HIpAtJf7eWMtMf+Vfr+HxOL/WaL4Ck+qG1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv6gcOSm5ZY/MaLOTnNMYgmXCUoUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwYjQ0YWVlLTk5MjQtNDgzNS05ZjkwLTliNWJiZTJmODA1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKBbwwDQYJKoZIhvcNAQELBQADggEBAKSbzNnmtkcgx/wv3W6dYrNYblNZ Sn9M5WaQOoxiKmdQ/LzdO+HwUx4o4m2rvjEDQta5Vl1mpdj7qgAZtT2D5nZFnaZs bZKHwJ1UqH85jGGvsyEuYWFVm3l2OHgAio33pVJz16ewqeCgBmC9QViNufobjpzz QOJpmMQgLtlgYwfQ9/Yd0rfLzNCHh0Tl0DYIw6THF5s7Y8EFxtyI+5BZf2v3NIZW oF91kJuc4QT/1KujQaVBn+JM+QKKRfoE+tf2ATPyoOqWcj7gmng8deUWaD8FEs59 fUiDmVVj1IBMB7hMo4UlhSSg9trUAXFOocwZAwU6AmY6Db+q+e1h/aNFYBo= -----END CERTIFICATE-----Generated at Sat Dec 27 15:49:19 2025 by rpki-client