This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa File: 843bf734-db6e-432f-a611-4c86a79225b5.roa (raw, json) Hash identifier: Gr9nqAoVzdxgaWyGbHiQtqxsxi4C94PCufcNMKNxG2A= Subject key identifier: E1:7D:FB:5E:A2:20:A1:54:7A:DC:10:1C:87:73:96:8F:52:27:AF:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AB678FC52A115D472379EB702EB88B98DDCAC4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa Signing time: Sun 07 Dec 2025 02:31:38 +0000 ROA not before: Sun 07 Dec 2025 02:31:38 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.24.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b6:78:fc:52:a1:15:d4:72:37:9e:b7:02:eb:88:b9:8d:dc:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 02:31:38 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=6e38ea625cff7d7c136bfb363c9530a58b58feb1ad03b3ff3ec6db40e9c6d046, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:3f:d4:2b:e2:5e:14:36:5e:0f:29:f2:37: b9:b6:c1:4c:aa:c0:4e:fc:e3:7e:6e:e7:8f:b1:07: f2:99:e8:5a:56:86:07:00:d2:a3:e4:24:46:5e:04: 4f:04:91:78:f3:bf:19:9f:be:65:bc:10:60:a5:b2: 30:b5:83:54:af:f6:93:8e:6b:87:80:98:ef:cf:b4: b9:8a:ac:1d:99:1f:4c:7f:b5:61:b7:79:1a:d5:df: df:b5:9e:f3:32:32:70:58:d5:0d:0c:ee:1c:83:b0: 58:b3:e0:96:34:f8:ff:61:57:ea:cd:ed:55:d4:e3: 7d:e3:2f:71:7b:7a:5f:22:e5:92:e6:8a:59:98:6c: 8f:6a:26:35:dc:1d:92:17:22:1c:31:42:12:57:c8: 1d:bd:a9:ba:0d:14:48:ee:a3:ed:c7:24:69:57:da: d1:e1:cb:95:ed:55:0c:95:1a:db:d8:99:a5:a6:58: d0:32:d0:66:0f:f8:94:1b:fa:3d:7f:3c:c6:cf:38: b7:c5:ca:0b:00:94:f7:a8:55:3e:fc:9a:97:41:ba: 77:b0:dc:64:bf:1b:d5:e5:1e:76:b6:4c:79:44:e0: 52:97:6e:cd:05:46:66:6c:e5:d1:ba:d9:ef:09:e1: d1:ce:6b:5c:ae:ee:c3:5e:3b:08:76:f8:c1:3a:71: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:FB:5E:A2:20:A1:54:7A:DC:10:1C:87:73:96:8F:52:27:AF:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.24.30.0/23 Signature Algorithm: sha256WithRSAEncryption be:91:bc:ef:f6:01:4f:ea:16:f6:7a:50:70:18:d6:d0:d3:9f: ca:15:a6:06:01:ef:ec:26:75:aa:c4:c4:44:71:2d:cf:5d:f0: a9:77:79:77:bc:38:e6:da:2b:c0:a7:c5:60:73:78:83:24:9a: 55:61:99:f7:c2:7e:e4:cb:7b:24:2a:0b:bc:05:fb:28:48:33: f2:e9:7e:75:c5:7a:20:66:fd:f1:17:c9:fe:51:b2:4a:d9:39: d9:32:7c:ae:ba:0a:5c:2e:61:62:f9:94:a7:66:63:70:53:a3: fc:19:49:3d:b4:f2:cf:cc:91:4d:07:19:a6:fb:c7:90:13:5d: 77:26:11:60:d9:18:3f:4a:ea:34:09:4d:3c:36:0e:49:5b:0f: 3f:80:10:bd:5c:59:94:9f:3e:4f:48:15:28:4f:02:f7:6a:e7: 11:21:4c:ae:28:f5:08:40:ae:f9:a6:14:e6:3c:ee:bd:72:aa: 24:e4:e1:ef:c0:78:3b:7f:e4:d0:43:d2:7d:14:79:28:62:f0: 6c:a9:b5:aa:89:9a:90:17:4a:ed:48:fe:46:e1:d5:8c:5a:5e: 39:4e:58:cf:73:5b:a8:63:59:18:bf:ae:0b:9d:02:5a:1e:3b: e0:38:d4:13:75:cf:0f:86:b4:51:d8:f6:c6:36:1f:5b:5a:d9: d5:b1:d4:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCrZ4/FKhFdRyN563AuuIuY3crE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDIzMTM4WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTM4ZWE2MjVjZmY3ZDdjMTM2YmZiMzYzYzk1MzBhNThi NThmZWIxYWQwM2IzZmYzZWM2ZGI0MGU5YzZkMDQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw7T/UK+JeFDZeDynyN7m2wUyqwE78435u54+xB/KZ6FpW hgcA0qPkJEZeBE8EkXjzvxmfvmW8EGClsjC1g1Sv9pOOa4eAmO/PtLmKrB2ZH0x/ tWG3eRrV39+1nvMyMnBY1Q0M7hyDsFiz4JY0+P9hV+rN7VXU433jL3F7el8i5ZLm ilmYbI9qJjXcHZIXIhwxQhJXyB29qboNFEjuo+3HJGlX2tHhy5XtVQyVGtvYmaWm WNAy0GYP+JQb+j1/PMbPOLfFygsAlPeoVT78mpdBunew3GS/G9XlHna2THlE4FKX bs0FRmZs5dG62e8J4dHOa1yu7sNeOwh2+ME6cZq7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4X37XqIgoVR63BAch3OWj1InryQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0M2JmNzM0LWRiNmUtNDMyZi1hNjExLTRjODZhNzkyMjViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQGB4wDQYJKoZIhvcNAQELBQADggEBAL6RvO/2AU/qFvZ6UHAY1tDTn8oV pgYB7+wmdarExERxLc9d8Kl3eXe8OObaK8CnxWBzeIMkmlVhmffCfuTLeyQqC7wF +yhIM/LpfnXFeiBm/fEXyf5RskrZOdkyfK66ClwuYWL5lKdmY3BTo/wZST208s/M kU0HGab7x5ATXXcmEWDZGD9K6jQJTTw2DklbDz+AEL1cWZSfPk9IFShPAvdq5xEh TK4o9QhArvmmFOY87r1yqiTk4e/AeDt/5NBD0n0UeShi8GyptaqJmpAXSu1I/kbh 1YxaXjlOWM9zW6hjWRi/rgudAloeO+A41BN1zw+GtFHY9sY2H1ta2dWx1A0= -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:03 2025 by rpki-client