This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa File: 2ab45e62-7d44-4885-a10e-81a21539a820.roa (raw, json) Hash identifier: Fa1ypKWWbgSvSFALx9ITxmYEtFePIufUaa3fjeI1Ntc= Subject key identifier: 25:FE:16:85:76:F8:0F:A1:9D:E5:A5:BE:EA:8F:EA:A4:74:BF:38:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2083CB0BD6838AB89F8C4EA0986543508E1EE37D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa Signing time: Sun 07 Dec 2025 00:21:22 +0000 ROA not before: Sun 07 Dec 2025 00:21:22 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:83:cb:0b:d6:83:8a:b8:9f:8c:4e:a0:98:65:43:50:8e:1e:e3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 00:21:22 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=f4dd19b990d0c8406baa7b53ddad212db15086d73fde5e7d6b180b87ab895e15, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:90:55:18:96:f1:2e:4a:b2:d5:f9:7b:1b: 82:58:4b:c1:04:bb:9c:fa:c5:b9:e0:99:e1:79:3f: d1:59:1c:6a:18:79:44:63:77:66:d1:ac:55:df:20: 0c:5d:fd:6a:76:f4:87:f4:37:5d:bd:96:ce:a9:84: 8b:13:bf:b3:b4:e7:fa:79:63:42:d1:5a:08:ce:d9: 3f:a9:65:08:9b:55:d6:5e:8b:e8:a8:ae:1c:5b:b2: b9:94:7a:21:ed:d2:99:74:53:cc:9e:16:a7:17:6f: 5c:8a:ab:1c:ef:9c:02:ec:7e:f5:53:52:e0:a9:eb: a5:53:bb:e7:70:3f:d4:ea:5d:ce:2d:f1:8b:0c:77: 14:10:97:99:5b:37:e0:44:11:bf:ff:8a:5f:dc:c4: db:b5:cb:d0:9d:73:57:d0:e4:1c:5a:bf:41:93:fc: 70:6d:2c:c9:f0:23:64:63:b2:4d:73:a7:bd:0f:ce: 85:e0:36:08:57:0f:00:c9:ef:cf:33:a1:de:7d:0f: dc:f3:13:79:90:5b:8e:06:83:9d:cd:f1:2b:e8:6a: c9:c6:de:64:72:55:ad:d2:3b:8c:09:d2:a6:83:28: ae:77:d4:34:ea:c5:d1:b1:1f:ae:4f:19:f0:c2:f7: 1e:f4:77:cb:55:d7:5b:15:b2:80:b3:30:1c:cd:d6: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FE:16:85:76:F8:0F:A1:9D:E5:A5:BE:EA:8F:EA:A4:74:BF:38:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.72.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:ad:27:cb:ee:9a:d1:47:c8:f4:87:78:cb:80:3b:14:75:88: 5f:94:be:66:54:b7:a8:f4:c3:ef:08:11:47:1b:76:13:f4:65: 1b:56:ae:76:c4:23:60:f7:d6:5a:2d:6d:20:98:df:70:4c:09: cd:80:64:b4:11:f9:49:d1:70:97:90:52:3f:30:a7:5b:76:95: 88:3f:e8:b1:af:63:a5:de:e5:4e:e3:d6:ac:8c:a0:82:5d:33: e1:c7:dc:fe:24:4f:91:08:fe:5f:48:a1:5f:bf:39:ff:ea:cd: 7b:f1:b5:b6:27:e1:32:12:7f:5d:d0:77:02:bf:e0:e1:66:e6: b4:87:5a:fe:bf:d5:45:f8:9b:34:0c:c5:2e:24:65:9b:06:1d: 24:7b:65:04:3e:b1:f9:d2:e1:de:86:38:6d:97:0b:13:85:e2: 4e:b3:95:39:53:0a:d9:c8:60:51:46:b7:ae:70:ed:9b:85:af: c9:ea:84:28:bb:7b:e1:67:a9:c3:8d:11:f3:d8:1f:2d:6f:26: d8:09:c9:a5:ea:52:cf:e0:d2:0e:a0:7d:36:93:ac:5a:04:e0: 71:9a:8d:c2:0e:88:5b:e1:09:0d:10:5c:04:e6:81:89:97:75: a9:3d:42:46:ac:53:af:ab:5d:96:35:41:8a:36:4c:51:50:d9: 3d:c3:a5:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIIPLC9aDirifjE6gmGVDUI4e430wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDAyMTIyWhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGRkMTliOTkwZDBjODQwNmJhYTdiNTNkZGFkMjEyZGIx NTA4NmQ3M2ZkZTVlN2Q2YjE4MGI4N2FiODk1ZTE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+w5BVGJbxLkqy1fl7G4JYS8EEu5z6xbngmeF5P9FZHGoY eURjd2bRrFXfIAxd/Wp29If0N129ls6phIsTv7O05/p5Y0LRWgjO2T+pZQibVdZe i+iorhxbsrmUeiHt0pl0U8yeFqcXb1yKqxzvnALsfvVTUuCp66VTu+dwP9TqXc4t 8YsMdxQQl5lbN+BEEb//il/cxNu1y9Cdc1fQ5Bxav0GT/HBtLMnwI2Rjsk1zp70P zoXgNghXDwDJ788zod59D9zzE3mQW44Gg53N8SvoasnG3mRyVa3SO4wJ0qaDKK53 1DTqxdGxH65PGfDC9x70d8tV11sVsoCzMBzN1k+/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJf4WhXb4D6Gd5aW+6o/qpHS/ONEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhYjQ1ZTYyLTdkNDQtNDg4NS1hMTBlLTgxYTIxNTM5YTgyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXF0gwDQYJKoZIhvcNAQELBQADggEBAH+tJ8vumtFHyPSHeMuAOxR1iF+U vmZUt6j0w+8IEUcbdhP0ZRtWrnbEI2D31lotbSCY33BMCc2AZLQR+UnRcJeQUj8w p1t2lYg/6LGvY6Xe5U7j1qyMoIJdM+HH3P4kT5EI/l9IoV+/Of/qzXvxtbYn4TIS f13QdwK/4OFm5rSHWv6/1UX4mzQMxS4kZZsGHSR7ZQQ+sfnS4d6GOG2XCxOF4k6z lTlTCtnIYFFGt65w7ZuFr8nqhCi7e+FnqcONEfPYHy1vJtgJyaXqUs/g0g6gfTaT rFoE4HGajcIOiFvhCQ0QXATmgYmXdak9QkasU6+rXZY1QYo2TFFQ2T3Dpao= -----END CERTIFICATE-----Generated at Sun Dec 28 18:51:52 2025 by rpki-client