This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa File: 5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa (raw, json) Hash identifier: yFNVf30P9Z/eC43QSy9ti3Hw21Xqd0ie8yey+84YBCo= Subject key identifier: 7C:4A:DD:36:F9:C0:20:CA:4E:A8:CC:F8:94:22:61:55:19:97:E3:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D12EEB6DD27407E306186199E4E30D9D695A09A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa Signing time: Wed 10 Dec 2025 00:40:39 +0000 ROA not before: Wed 10 Dec 2025 00:40:39 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 88.108.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:12:ee:b6:dd:27:40:7e:30:61:86:19:9e:4e:30:d9:d6:95:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:40:39 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=3691dc09bb291194c6f53c749c2a3c46ae3a7e34fd6a8ca8346ff96d43e674a9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:a7:fa:f3:57:53:7e:98:6a:f5:5f:17:cf: a5:23:88:82:01:1b:d1:af:e8:cf:cb:3a:da:c2:a3: a4:92:88:f1:67:35:92:dd:c1:c3:31:86:8c:e9:0a: 3d:fc:23:a4:66:73:af:a1:1b:b0:90:6f:e2:f9:3b: 85:65:c4:6d:05:12:c3:19:45:ba:df:bf:45:3d:2f: 61:14:d0:2e:9c:01:7f:0c:9c:9c:16:d8:f0:0f:e1: f1:a6:1b:6f:83:c6:57:3e:a7:96:d4:a5:f9:47:b9: a2:01:e9:86:a2:c4:b5:af:bb:f4:61:70:bb:c1:64: 3d:86:18:4d:97:f2:b6:82:0b:9e:f8:f8:38:28:83: 81:1b:e6:5c:93:ee:a7:07:6c:11:b5:c2:1d:85:c3: eb:37:5b:9f:85:a9:8c:0f:19:32:3f:de:ee:d7:fb: 89:75:3d:bb:ce:8e:b8:ff:bb:2b:2d:70:98:04:f4: 86:f1:04:30:56:e7:87:7b:df:b6:75:f3:5a:80:f5: 39:2e:aa:d6:75:e9:04:70:c8:e1:75:b4:9d:5b:19: 86:1d:59:2e:cf:54:da:f6:cf:c5:59:49:ab:5a:85: 5f:d0:f2:f7:f0:70:67:70:0e:91:56:01:9c:dc:1a: c8:46:c4:ec:92:5a:59:77:f4:47:d9:42:9d:e2:95: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:DD:36:F9:C0:20:CA:4E:A8:CC:F8:94:22:61:55:19:97:E3:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bd0fe02-7e24-4fe5-9eec-faddec7a1852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.108.0.0/14 Signature Algorithm: sha256WithRSAEncryption cf:c3:a0:9c:77:e8:fa:76:52:af:41:7f:c4:6f:0b:15:1f:14: 75:21:57:d6:06:cf:2d:f7:e7:73:7a:6a:75:26:c8:b3:22:8b: 0c:5e:83:21:17:a2:2f:5c:42:d1:e2:47:81:f6:c4:17:3a:b2: c1:1a:04:cc:e0:3d:2d:61:88:24:a9:20:65:eb:80:50:2c:18: 02:7c:27:9b:53:09:9a:3d:26:61:5a:7a:c1:3e:78:38:c3:be: 91:42:3b:6d:c3:d7:03:ee:b8:a2:c3:35:db:2f:5c:26:9c:17: 1a:d6:45:ae:3e:9b:2c:2f:ba:68:52:2f:aa:4c:b9:e0:55:8f: ba:30:27:97:53:8e:c4:b5:fd:1c:2d:14:0f:dc:83:59:4a:f7: d5:11:9b:33:08:fe:40:c4:92:07:23:58:dd:30:fa:dd:39:88: a2:e0:c1:05:54:d8:55:94:f2:c5:b0:1c:a3:19:45:30:82:72: 52:3f:1e:67:21:d8:f6:06:64:4e:bd:17:7f:95:e8:b9:76:ee: a0:21:3a:a4:42:cb:01:91:3e:e8:3e:d8:d2:9b:2d:af:5c:e5: a1:00:6d:f7:f0:c5:33:ce:8e:b1:ec:bf:ef:2d:9c:16:95:fc: 63:3a:a8:8d:28:36:1f:53:21:d0:c0:a5:04:c1:cc:55:66:8c: 03:cd:a0:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXRLutt0nQH4wYYYZnk4w2daVoJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDA0MDM5WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjkxZGMwOWJiMjkxMTk0YzZmNTNjNzQ5YzJhM2M0NmFl M2E3ZTM0ZmQ2YThjYTgzNDZmZjk2ZDQzZTY3NGE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGYqf681dTfphq9V8Xz6UjiIIBG9Gv6M/LOtrCo6SSiPFn NZLdwcMxhozpCj38I6Rmc6+hG7CQb+L5O4VlxG0FEsMZRbrfv0U9L2EU0C6cAX8M nJwW2PAP4fGmG2+Dxlc+p5bUpflHuaIB6YaixLWvu/RhcLvBZD2GGE2X8raCC574 +Dgog4Eb5lyT7qcHbBG1wh2Fw+s3W5+FqYwPGTI/3u7X+4l1PbvOjrj/uystcJgE 9IbxBDBW54d737Z181qA9TkuqtZ16QRwyOF1tJ1bGYYdWS7PVNr2z8VZSatahV/Q 8vfwcGdwDpFWAZzcGshGxOySWll39EfZQp3ilXGrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfErdNvnAIMpOqMz4lCJhVRmX450wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViZDBmZTAyLTdlMjQtNGZlNS05ZWVjLWZhZGRlYzdhMTg1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJYbDANBgkqhkiG9w0BAQsFAAOCAQEAz8OgnHfo+nZSr0F/xG8LFR8UdSFX 1gbPLffnc3pqdSbIsyKLDF6DIReiL1xC0eJHgfbEFzqywRoEzOA9LWGIJKkgZeuA UCwYAnwnm1MJmj0mYVp6wT54OMO+kUI7bcPXA+64osM12y9cJpwXGtZFrj6bLC+6 aFIvqky54FWPujAnl1OOxLX9HC0UD9yDWUr31RGbMwj+QMSSByNY3TD63TmIouDB BVTYVZTyxbAcoxlFMIJyUj8eZyHY9gZkTr0Xf5XouXbuoCE6pELLAZE+6D7Y0pst r1zloQBt9/DFM86Osey/7y2cFpX8YzqojSg2H1Mh0MClBMHMVWaMA82gTg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:13 2025 by rpki-client