This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa File: 40189ac3-c54b-4d57-b13f-8efd193da722.roa (raw, json) Hash identifier: Q00Q0mBNlA1Z6Tz1dcgsrKJhYA4V2Z9Pvp6JRl2n76A= Subject key identifier: 64:B7:C2:5E:8D:BF:DA:8A:D7:F7:D2:58:1E:AE:2A:15:85:C8:63:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61C3EBF0B586BBDEDD5F549FDA5E253B24F5F9CE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa Signing time: Wed 10 Dec 2025 00:21:00 +0000 ROA not before: Wed 10 Dec 2025 00:21:00 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 88.104.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c3:eb:f0:b5:86:bb:de:dd:5f:54:9f:da:5e:25:3b:24:f5:f9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:21:00 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=3c156be6e182f0e54f27daa1c0ce3d8b1a026fda68a396cb27888e873d887d64, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:70:d4:3c:b4:42:c0:1a:6c:3b:a8:28:fc:45: fc:b2:92:87:f9:4e:66:14:71:b2:52:51:92:32:81: f9:29:c2:28:35:3d:81:c8:4e:1f:ec:21:d5:d1:33: 1c:b6:0e:20:75:05:00:2d:b9:21:ff:81:3b:8f:5c: fa:e6:71:6c:8c:d0:f5:08:ee:f6:41:61:38:bc:24: 2a:ba:f6:ca:de:25:b4:2a:41:58:b5:5c:98:9e:31: b3:b5:07:17:3a:76:52:2c:6b:a6:3c:52:7f:ad:04: 74:73:3a:11:4e:8a:88:24:2f:d7:2e:08:73:5e:22: 98:84:b4:c5:d0:bb:e4:d1:f8:67:a7:1f:19:2b:a0: e2:e9:1a:e3:9b:f1:21:fc:41:b1:59:1e:d2:83:f4: 4b:57:a1:70:7b:42:7d:83:50:34:1e:b9:3d:90:a7: 7e:31:dd:f4:c8:f0:60:4f:87:ac:30:66:6f:fe:97: 4b:ea:00:74:d1:7c:53:63:14:32:9e:d6:a0:a6:8d: 01:b4:b5:b6:fa:3a:fa:49:d3:e3:54:12:e0:fe:2c: ae:5e:41:25:e2:83:4b:87:17:3f:f5:18:e2:9a:3a: 5f:27:6c:c2:33:86:b5:bf:48:c5:7c:6a:59:f0:0b: 8c:0b:04:30:9f:ea:af:91:a5:3e:10:94:43:e1:c8: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B7:C2:5E:8D:BF:DA:8A:D7:F7:D2:58:1E:AE:2A:15:85:C8:63:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption 83:2e:9a:9a:47:b9:9c:ba:64:7d:45:65:e3:2e:41:08:ef:74: c4:16:66:17:d7:2a:eb:22:91:96:7b:d9:02:7a:9f:0b:33:b2: 62:ae:e5:5c:5f:b9:91:55:bb:b6:7e:4c:fb:9e:c7:a2:aa:4d: 8e:0b:95:89:81:1c:b1:d8:30:ac:4e:08:be:21:55:b0:1d:c0: 81:8d:ce:9f:50:cb:50:38:36:6a:cf:2a:f3:73:1d:e8:c3:93: 90:4d:85:54:df:6a:cd:0f:cc:8f:cc:5b:fa:e9:44:9a:d5:70: e1:ea:9e:d8:ea:29:28:44:b1:e4:02:48:2c:1b:02:cd:73:bb: 29:5f:d4:7f:17:bf:d3:7d:06:f2:f4:02:8c:aa:1c:79:82:77: d0:eb:6d:03:8b:d5:78:56:18:44:d2:91:25:3c:8c:90:6c:6d: 46:b2:2e:68:bb:f2:fe:d6:46:d9:61:7a:92:86:7b:bf:71:c6: a2:5c:58:4e:ef:a2:8f:bd:d6:e8:b0:49:3f:f4:ef:7d:a1:a8: f7:ec:96:a1:d5:b9:c0:d3:00:5b:49:0f:b3:63:e3:a9:7c:c0: 4e:52:43:1a:bf:93:30:e3:b8:fe:9d:43:66:4e:21:0f:64:f3: ed:fb:84:3a:30:0b:77:8f:8d:e0:07:fe:96:61:07:fd:e7:22: 73:37:e8:7e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYcPr8LWGu97dX1Sf2l4lOyT1+c4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMTAwWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzE1NmJlNmUxODJmMGU1NGYyN2RhYTFjMGNlM2Q4YjFh MDI2ZmRhNjhhMzk2Y2IyNzg4OGU4NzNkODg3ZDY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhcNQ8tELAGmw7qCj8Rfyykof5TmYUcbJSUZIygfkpwig1 PYHITh/sIdXRMxy2DiB1BQAtuSH/gTuPXPrmcWyM0PUI7vZBYTi8JCq69sreJbQq QVi1XJieMbO1Bxc6dlIsa6Y8Un+tBHRzOhFOiogkL9cuCHNeIpiEtMXQu+TR+Gen HxkroOLpGuOb8SH8QbFZHtKD9EtXoXB7Qn2DUDQeuT2Qp34x3fTI8GBPh6wwZm/+ l0vqAHTRfFNjFDKe1qCmjQG0tbb6OvpJ0+NUEuD+LK5eQSXig0uHFz/1GOKaOl8n bMIzhrW/SMV8alnwC4wLBDCf6q+RpT4QlEPhyCm3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZLfCXo2/2orX99JYHq4qFYXIY88wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwMTg5YWMzLWM1NGItNGQ1Ny1iMTNmLThlZmQxOTNkYTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFYaDANBgkqhkiG9w0BAQsFAAOCAQEAgy6amke5nLpkfUVl4y5BCO90xBZm F9cq6yKRlnvZAnqfCzOyYq7lXF+5kVW7tn5M+57HoqpNjguViYEcsdgwrE4IviFV sB3AgY3On1DLUDg2as8q83Md6MOTkE2FVN9qzQ/Mj8xb+ulEmtVw4eqe2OopKESx 5AJILBsCzXO7KV/Ufxe/030G8vQCjKoceYJ30OttA4vVeFYYRNKRJTyMkGxtRrIu aLvy/tZG2WF6koZ7v3HGolxYTu+ij73W6LBJP/TvfaGo9+yWodW5wNMAW0kPs2Pj qXzATlJDGr+TMOO4/p1DZk4hD2Tz7fuEOjALd4+N4Af+lmEH/eciczfofg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:34:54 2025 by rpki-client