This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa File: 66e59786-c1f4-4146-bccb-708e47a5469a.roa (raw, json) Hash identifier: UfzFaI8/UbbnQhF4kx0X0/i8RcOD9PBIrwa9i1I46Rs= Subject key identifier: 9A:ED:B1:B4:67:6B:59:46:94:6E:DA:1A:8E:62:F9:7A:DD:BC:9F:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74A2DC456573CA89190497E58AA25EE9A417B115 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa Signing time: Sun 07 Dec 2025 00:40:06 +0000 ROA not before: Sun 07 Dec 2025 00:40:06 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:dc:45:65:73:ca:89:19:04:97:e5:8a:a2:5e:e9:a4:17:b1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 00:40:06 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=277efaefb6a0de17142591eb3c49645638d4a21beef02ff6ac70a9b254ba3c2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:aa:3a:48:c0:8a:7f:7b:30:48:81:e6:6d: 4f:65:2f:d3:7f:2c:8b:66:26:40:87:83:ad:2a:dd: 81:0e:89:a5:30:e8:bf:4c:be:85:e0:1d:5f:c5:f3: ed:89:68:40:bc:e1:51:5c:65:a9:cf:44:e2:a1:c1: b7:b3:4d:70:86:32:51:6e:82:c0:be:9d:66:02:e4: 44:6c:ff:06:55:bd:92:dc:30:06:ec:4f:2a:34:63: a8:7b:e2:e3:c1:61:4f:1a:f5:18:db:2b:b9:18:a7: bd:c8:44:46:79:98:37:28:22:51:06:ff:34:79:8b: d8:0b:39:b5:db:70:4b:59:62:e6:a8:33:73:d3:d4: df:04:19:ba:8d:61:36:3a:20:ef:2d:11:7e:d1:de: b2:c9:b4:23:45:9b:4e:e5:2c:ab:64:d0:e0:0b:a1: 2f:7f:0c:95:71:73:7e:07:0f:33:96:df:2e:77:e2: f8:2a:b7:04:8f:fd:ce:cc:28:31:3e:72:07:65:eb: 62:80:1a:a1:aa:33:fb:19:1e:bc:c0:35:74:75:fc: 62:89:fd:0f:a0:00:15:57:f4:75:ae:6c:1d:6a:6a: 49:0a:5a:74:47:ec:e1:63:2f:60:20:b9:fd:d8:52: e4:f1:91:95:0a:02:83:54:ae:29:ab:05:70:11:2f: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:B1:B4:67:6B:59:46:94:6E:DA:1A:8E:62:F9:7A:DD:BC:9F:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66e59786-c1f4-4146-bccb-708e47a5469a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:76:8e:49:a4:d1:a3:a0:b2:99:ad:ab:7e:65:8c:04:80:20: f9:f3:9a:28:4b:89:f2:09:b7:d9:bd:ef:8f:d0:aa:6a:ec:21: be:45:62:ac:6e:fe:a8:83:cb:cf:aa:de:14:6c:4a:96:32:11: 48:07:d4:55:ee:6e:fb:03:de:5a:d8:af:be:c3:9e:75:71:d7: 80:52:b7:e1:e7:ca:58:aa:bd:cc:8a:0e:52:a8:d1:17:cf:ca: ed:42:3b:6d:38:68:1a:e2:33:08:5c:0b:9c:a9:fc:e1:9a:4e: ef:56:2d:04:d4:29:14:54:0a:76:58:34:c5:09:7a:1d:5a:4a: d4:ae:08:f2:0d:ff:54:f7:8b:56:72:29:53:bf:be:ff:87:ee: 83:c9:11:58:33:21:45:8f:a8:f0:1f:bb:fc:2c:b1:07:d3:75: 4c:70:4c:b2:e7:c5:70:fe:26:95:d7:a7:01:02:b6:e3:aa:fc: 76:45:6b:cf:fd:bd:04:85:f2:58:28:3d:5b:16:d3:c1:a4:c5: fb:70:dc:1e:76:42:56:6b:82:a2:53:4e:c3:ec:c9:92:04:3b: 2b:f3:4f:60:6d:bf:09:65:22:44:5e:5f:b3:26:38:12:f7:c9: 2b:b5:20:a7:4f:8c:20:30:09:9f:fc:75:f4:c0:8a:86:d9:32: 08:93:a7:de -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdKLcRWVzyokZBJfliqJe6aQXsRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDA0MDA2WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzdlZmFlZmI2YTBkZTE3MTQyNTkxZWIzYzQ5NjQ1NjM4 ZDRhMjFiZWVmMDJmZjZhYzcwYTliMjU0YmEzYzJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzv6o6SMCKf3swSIHmbU9lL9N/LItmJkCHg60q3YEOiaUw 6L9MvoXgHV/F8+2JaEC84VFcZanPROKhwbezTXCGMlFugsC+nWYC5ERs/wZVvZLc MAbsTyo0Y6h74uPBYU8a9RjbK7kYp73IREZ5mDcoIlEG/zR5i9gLObXbcEtZYuao M3PT1N8EGbqNYTY6IO8tEX7R3rLJtCNFm07lLKtk0OALoS9/DJVxc34HDzOW3y53 4vgqtwSP/c7MKDE+cgdl62KAGqGqM/sZHrzANXR1/GKJ/Q+gABVX9HWubB1qakkK WnRH7OFjL2Aguf3YUuTxkZUKAoNUrimrBXARL3/tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmu2xtGdrWUaUbtoajmL5et28n0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2ZTU5Nzg2LWMxZjQtNDE0Ni1iY2NiLTcwOGU0N2E1NDY5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoMDANBgkqhkiG9w0BAQsFAAOCAQEAtnaOSaTRo6Cyma2rfmWMBIAg+fOa KEuJ8gm32b3vj9CqauwhvkVirG7+qIPLz6reFGxKljIRSAfUVe5u+wPeWtivvsOe dXHXgFK34efKWKq9zIoOUqjRF8/K7UI7bThoGuIzCFwLnKn84ZpO71YtBNQpFFQK dlg0xQl6HVpK1K4I8g3/VPeLVnIpU7++/4fug8kRWDMhRY+o8B+7/CyxB9N1THBM sufFcP4mldenAQK246r8dkVrz/29BIXyWCg9WxbTwaTF+3DcHnZCVmuColNOw+zJ kgQ7K/NPYG2/CWUiRF5fsyY4EvfJK7Ugp0+MIDAJn/x19MCKhtkyCJOn3g== -----END CERTIFICATE-----Generated at Sat Dec 20 14:41:16 2025 by rpki-client