This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa File: 80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa (raw, json) Hash identifier: EIvYXGE+lDQUzh7JB2IZGrvXPPLl7T8jUlE7fGLqoII= Subject key identifier: 87:30:C0:82:8F:62:DE:4B:D5:38:D1:B7:93:49:63:D6:6B:36:42:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FCFF5019F059A017EF4D7A1C284D9E9C18AC5C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa Signing time: Wed 10 Dec 2025 00:20:05 +0000 ROA not before: Wed 10 Dec 2025 00:20:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.189.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cf:f5:01:9f:05:9a:01:7e:f4:d7:a1:c2:84:d9:e9:c1:8a:c5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:20:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=3cf51dc3c850e11fd132b41d5532fa85df1e3e48fb724d19dc8131a0fa0ccbe3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:dd:66:8e:59:b4:12:90:c6:77:ad:fc:9c: e0:e6:45:82:c1:74:eb:60:bf:71:8e:b7:28:4e:db: e5:17:a0:5a:3c:f5:96:f4:d8:1d:c9:58:a1:f1:fc: b7:ef:8d:c8:75:0f:a6:54:d5:b1:cb:5b:17:7f:35: e2:eb:f0:d6:65:53:76:84:99:ad:e7:84:de:15:a2: 88:39:00:22:ae:51:70:00:66:74:c2:9f:a5:cf:19: d3:eb:0c:42:9c:2b:c6:af:16:8b:bd:bb:b3:1c:ea: 0e:0e:62:a7:2b:72:5e:ff:9e:39:84:be:0f:0c:7d: 6c:a8:05:d6:1b:79:d1:fe:05:9f:25:2c:3e:64:da: 04:6d:63:09:e3:15:f7:d6:19:b8:18:4e:76:ee:ed: 08:33:46:c3:23:d6:ce:a7:15:ef:b8:55:03:51:b6: ff:ac:8e:79:04:33:44:98:fa:29:11:de:96:e5:aa: 2c:a5:b9:32:ea:e3:52:ff:5a:65:13:87:cf:70:79: 8f:28:49:ae:ca:19:24:52:23:9e:d0:c0:66:98:de: 60:79:88:ed:e0:bf:2c:eb:eb:ae:58:32:24:ab:bf: a7:1c:de:d2:78:0b:11:38:98:6a:19:a1:b2:2d:a5: 9c:17:7b:0f:e9:00:f9:df:83:18:a4:7d:a6:dd:67: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:C0:82:8F:62:DE:4B:D5:38:D1:B7:93:49:63:D6:6B:36:42:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.197.0/24 Signature Algorithm: sha256WithRSAEncryption 06:0e:40:fc:f4:72:f0:a6:7a:01:e7:cb:8e:69:1d:e1:cb:e2: c8:a4:d5:b5:3a:c4:35:af:94:c6:2a:0f:75:18:b0:27:98:2f: 40:34:3b:65:4d:d7:4a:5e:9a:0a:f8:4e:2f:c6:cd:c8:7b:4a: f7:f4:53:17:86:2c:e2:10:18:da:de:9a:ee:95:bd:60:4f:26: 60:37:80:ae:77:4a:4b:df:15:43:56:16:e2:0c:e9:4e:e3:dd: 0f:72:29:9c:ae:4d:65:07:bf:c1:b0:f2:da:f6:86:e4:da:d6: 7e:b3:f5:5a:0d:1c:89:87:a8:b2:d2:40:99:35:da:64:cf:41: 3f:07:31:ca:61:c3:26:a3:48:20:ee:bc:16:54:b4:9f:5c:af: c0:e1:64:2f:29:1d:b1:7e:bf:7a:80:15:ba:c2:24:d3:d5:1b: 29:7e:20:a4:be:cf:4e:db:af:bc:66:e4:ec:93:e5:23:fe:19: 20:e3:62:9b:70:ee:87:2a:c6:c6:19:72:ac:56:c1:ac:55:4b: c8:51:00:6e:db:8e:cd:ed:40:96:16:ae:34:89:b5:7b:d2:b7: b1:c8:93:7a:0c:3a:ec:56:af:35:df:d1:26:dd:df:6f:94:ed: 1e:83:ce:38:a2:57:06:d5:d6:09:0a:98:aa:ab:7a:a6:e0:86: 77:9e:4c:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL8/1AZ8FmgF+9NehwoTZ6cGKxcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMDA1WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2Y1MWRjM2M4NTBlMTFmZDEzMmI0MWQ1NTMyZmE4NWRm MWUzZTQ4ZmI3MjRkMTlkYzgxMzFhMGZhMGNjYmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK3t1mjlm0EpDGd638nODmRYLBdOtgv3GOtyhO2+UXoFo8 9Zb02B3JWKHx/Lfvjch1D6ZU1bHLWxd/NeLr8NZlU3aEma3nhN4Voog5ACKuUXAA ZnTCn6XPGdPrDEKcK8avFou9u7Mc6g4OYqcrcl7/njmEvg8MfWyoBdYbedH+BZ8l LD5k2gRtYwnjFffWGbgYTnbu7QgzRsMj1s6nFe+4VQNRtv+sjnkEM0SY+ikR3pbl qiyluTLq41L/WmUTh89weY8oSa7KGSRSI57QwGaY3mB5iO3gvyzr665YMiSrv6cc 3tJ4CxE4mGoZobItpZwXew/pAPnfgxikfabdZ6KnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhzDAgo9i3kvVONG3k0lj1ms2QtwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwNTA0ZTZhLTVjMTItNDc5ZC1iNDJmLWE5ZGRjYjI2MzljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcUwDQYJKoZIhvcNAQELBQADggEBAAYOQPz0cvCmegHny45pHeHL4sik 1bU6xDWvlMYqD3UYsCeYL0A0O2VN10pemgr4Ti/Gzch7Svf0UxeGLOIQGNremu6V vWBPJmA3gK53SkvfFUNWFuIM6U7j3Q9yKZyuTWUHv8Gw8tr2huTa1n6z9VoNHImH qLLSQJk12mTPQT8HMcphwyajSCDuvBZUtJ9cr8DhZC8pHbF+v3qAFbrCJNPVGyl+ IKS+z07br7xm5OyT5SP+GSDjYptw7ocqxsYZcqxWwaxVS8hRAG7bjs3tQJYWrjSJ tXvSt7HIk3oMOuxWrzXf0Sbd32+U7R6DzjiiVwbV1gkKmKqreqbghneeTFQ= -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:49 2025 by rpki-client