This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa File: 2c35551e-a01f-4f64-b39a-f1ada190eab2.roa (raw, json) Hash identifier: hgswIEhOhXa1aV9atZYS/wzvuvlQJVejQceTqMZ9ngo= Subject key identifier: F0:20:45:E6:85:2E:46:63:AA:AB:27:9D:75:1A:5C:59:85:96:0B:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D440C01866225FD3A698A1EFB7FA33B73A48259 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa Signing time: Wed 10 Dec 2025 00:21:01 +0000 ROA not before: Wed 10 Dec 2025 00:21:01 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 100.42.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:44:0c:01:86:62:25:fd:3a:69:8a:1e:fb:7f:a3:3b:73:a4:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:21:01 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a1141daa9d36e3acbacfaba1deaac684e5eee8057fbc403035fdcc8dc6e5e41a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:01:7b:54:44:2c:2c:03:c9:a9:c9:65:1e: 3f:7e:b9:0d:d6:a5:f4:07:14:97:46:76:b6:47:e3: fd:77:c9:7d:14:88:3b:11:ba:e1:df:fe:f2:8c:61: 95:49:13:a5:6e:ce:68:95:a1:35:7d:99:15:66:a1: 46:ed:8b:87:92:78:8b:4a:8b:e3:33:a0:62:ae:40: c3:c1:8c:90:96:20:02:60:e4:3b:90:b3:3f:03:fc: 65:8a:dd:d9:a7:1d:ab:d0:4c:01:d3:a8:e0:5f:4d: 03:ec:fa:c7:bf:5a:49:1b:6a:91:91:f1:cc:34:4b: cc:7f:81:23:fd:a8:34:b6:49:51:68:93:e2:62:e0: d4:1b:5d:1f:a2:78:79:a2:2c:91:3b:cc:0c:a9:99: c1:5d:1f:97:2d:38:74:59:ea:40:84:80:7e:7e:55: 47:72:73:64:c1:da:40:54:67:1a:7a:64:67:ac:db: 61:a8:2f:71:2d:8d:19:73:ba:50:32:e8:8f:53:c6: c8:cc:f7:5d:1e:f4:3b:98:77:05:e2:e7:34:e2:82: 34:8b:e8:47:a2:d6:9a:db:6f:a9:0e:8e:8d:a5:b4: 49:1b:a6:a0:c2:fc:5f:1e:0d:fe:81:2a:b9:84:dc: c2:ba:c5:c3:5f:cb:1a:d0:2e:bc:19:e4:0f:7d:50: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:20:45:E6:85:2E:46:63:AA:AB:27:9D:75:1A:5C:59:85:96:0B:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.42.64.0/20 Signature Algorithm: sha256WithRSAEncryption 58:ab:35:a8:1e:9b:95:01:91:1a:e6:17:80:9d:f1:fe:56:ed: 24:c6:a0:35:03:c1:0e:39:d6:17:20:d2:67:29:8e:2c:46:94: a0:9b:e4:3c:51:bf:89:f8:98:2d:29:07:84:ff:74:41:ce:1d: 4c:85:63:a7:1d:e1:76:c4:61:86:73:e7:c0:34:7f:ea:d8:0d: 87:c0:fc:23:84:e2:3e:ef:36:d5:f8:c5:99:e7:32:1b:35:34: 4b:cc:b3:ec:32:c5:57:5b:c5:a5:e7:e6:ec:a3:a6:fa:78:2f: 78:f8:59:b0:9c:62:a9:d3:03:4a:8d:29:4f:cb:5f:7e:af:20: b6:73:8e:ba:b2:f9:44:ea:1f:64:e0:c9:e2:81:1b:9a:38:b8: c9:cd:60:1a:17:4c:78:f7:49:ae:3a:6a:aa:83:7d:6e:aa:c0: 12:9a:6d:1f:a9:8e:29:ef:ac:58:78:2c:d8:2c:60:e3:e4:e3: db:30:f3:58:62:4e:6e:5b:7c:22:61:6b:e0:26:7a:46:c8:38: db:4f:a4:f8:3a:02:62:e6:b2:67:4a:66:fd:4b:15:4c:d4:9e: ae:56:8d:8a:a4:5a:9d:b5:ab:1b:fb:13:17:ac:a6:31:c0:96: 59:9c:b1:4f:a4:b1:bd:6c:8c:f6:34:d2:92:f1:86:6e:d7:41: 61:06:bc:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXUQMAYZiJf06aYoe+3+jO3OkglkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMTAxWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTE0MWRhYTlkMzZlM2FjYmFjZmFiYTFkZWFhYzY4NGU1 ZWVlODA1N2ZiYzQwMzAzNWZkY2M4ZGM2ZTVlNDFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvGQF7VEQsLAPJqcllHj9+uQ3WpfQHFJdGdrZH4/13yX0U iDsRuuHf/vKMYZVJE6VuzmiVoTV9mRVmoUbti4eSeItKi+MzoGKuQMPBjJCWIAJg 5DuQsz8D/GWK3dmnHavQTAHTqOBfTQPs+se/WkkbapGR8cw0S8x/gSP9qDS2SVFo k+Ji4NQbXR+ieHmiLJE7zAypmcFdH5ctOHRZ6kCEgH5+VUdyc2TB2kBUZxp6ZGes 22GoL3EtjRlzulAy6I9TxsjM910e9DuYdwXi5zTigjSL6Eei1prbb6kOjo2ltEkb pqDC/F8eDf6BKrmE3MK6xcNfyxrQLrwZ5A99UL6hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8CBF5oUuRmOqqyeddRpcWYWWCykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjMzU1NTFlLWEwMWYtNGY2NC1iMzlhLWYxYWRhMTkwZWFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARkKkAwDQYJKoZIhvcNAQELBQADggEBAFirNagem5UBkRrmF4Cd8f5W7STG oDUDwQ451hcg0mcpjixGlKCb5DxRv4n4mC0pB4T/dEHOHUyFY6cd4XbEYYZz58A0 f+rYDYfA/COE4j7vNtX4xZnnMhs1NEvMs+wyxVdbxaXn5uyjpvp4L3j4WbCcYqnT A0qNKU/LX36vILZzjrqy+UTqH2TgyeKBG5o4uMnNYBoXTHj3Sa46aqqDfW6qwBKa bR+pjinvrFh4LNgsYOPk49sw81hiTm5bfCJha+AmekbIONtPpPg6AmLmsmdKZv1L FUzUnq5WjYqkWp21qxv7ExespjHAllmcsU+ksb1sjPY00pLxhm7XQWEGvFY= -----END CERTIFICATE-----Generated at Sat Dec 20 16:37:52 2025 by rpki-client