This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa File: 90a34226-8954-43ec-a5aa-84840736f53b.roa (raw, json) Hash identifier: G1Rr7b9wI/dpMME4D3B4sHdJAhRQJnggou5m89ev42A= Subject key identifier: 3E:D7:10:F0:DE:D1:7B:39:1B:AB:7A:5E:EC:98:65:88:0D:BD:99:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 299468B279E35C588092093FFAD0648070CE5A42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa Signing time: Sun 07 Dec 2025 01:00:07 +0000 ROA not before: Sun 07 Dec 2025 01:00:07 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 44.248.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:94:68:b2:79:e3:5c:58:80:92:09:3f:fa:d0:64:80:70:ce:5a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 01:00:07 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=593c637f695acdd6096384d563db55f1f29561ff0e443c53b0ce1bd2ad66e286, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:4a:d1:86:d8:0d:32:a2:1b:f4:75:5f:d4: 92:85:94:1f:2d:75:f2:2e:a4:51:47:ca:f2:64:31: e6:74:89:5a:b1:4f:30:8b:76:3e:8b:3d:ec:56:15: f1:35:42:08:1c:6f:71:b0:b0:a0:1c:70:a6:b0:cf: b9:1c:35:5a:f9:1a:e5:c1:0b:79:c3:86:d8:4e:90: e9:6e:9d:7a:1a:fc:a1:60:49:7c:b4:c6:ad:e5:9f: 75:74:16:7e:6e:61:c2:cd:95:1a:b1:ca:12:1d:96: b8:6b:92:ed:35:af:60:86:d3:40:a5:10:a6:c6:cf: 69:a3:73:2e:b5:34:b0:99:da:23:dc:37:31:43:45: 3a:f0:da:a1:bc:83:73:c3:9c:23:eb:84:15:01:fd: 16:fa:3e:d3:4e:cb:57:fd:7d:eb:e4:da:58:64:4c: 06:fe:af:76:96:36:45:d7:b4:12:15:a9:ed:da:29: 26:97:6d:f0:39:d6:b4:79:72:23:f2:37:6f:a2:ba: 68:dc:0f:91:0b:a8:6e:c6:9d:58:22:54:ee:6e:3e: e1:23:5d:ba:65:0a:32:a2:f7:7d:b8:4c:18:f4:97: 99:d1:fa:bb:7c:d6:90:b1:7c:8b:6d:6c:c4:10:52: 44:b7:35:a7:e2:df:fd:ba:c1:ee:12:ac:f4:f9:78: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:10:F0:DE:D1:7B:39:1B:AB:7A:5E:EC:98:65:88:0D:BD:99:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a34226-8954-43ec-a5aa-84840736f53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.248.100.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:85:bd:9c:3b:ac:4b:fe:13:18:58:ac:c5:00:82:53:0a:4a: c6:1b:82:20:6a:d8:ef:f4:84:5c:48:80:42:98:52:8f:f7:eb: 39:19:d6:fb:2f:69:92:64:c1:64:e0:9a:86:cd:58:f9:d6:e7: 57:18:1a:45:25:e5:2f:d1:d4:be:91:db:0d:53:5b:97:a1:cd: d1:9a:96:c0:88:5d:51:73:22:5a:1a:d1:24:ff:69:6f:45:82: 27:06:85:18:69:d2:c9:f4:73:55:5c:8d:e2:7b:7c:ec:34:ed: ff:1c:32:80:1b:8e:51:fa:d4:dd:79:a4:f0:1d:50:bc:b7:74: fa:f6:c5:c2:ae:b1:1b:28:2c:af:af:80:d7:46:1f:f7:de:01: f5:29:af:69:19:a6:97:91:e9:bd:e6:14:c6:4a:92:a2:05:73: 6d:36:4e:8c:77:3f:33:ef:0c:d5:bd:4c:51:af:c0:d7:23:d8: 5d:8f:85:e2:d4:1b:f6:9d:32:4b:ed:cf:23:09:c9:b8:87:fc: 82:33:2d:6c:bc:28:ac:50:21:fb:b7:27:7f:fb:b8:60:e6:d9: 63:5d:75:f4:47:43:01:cf:43:9f:03:40:a3:44:0f:ac:8b:b5: 56:2c:6d:fc:a4:f3:92:ba:dd:61:c1:a1:51:03:4f:a8:bb:8c: b9:d7:a3:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKZRosnnjXFiAkgk/+tBkgHDOWkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDEwMDA3WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTNjNjM3ZjY5NWFjZGQ2MDk2Mzg0ZDU2M2RiNTVmMWYy OTU2MWZmMGU0NDNjNTNiMGNlMWJkMmFkNjZlMjg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNbErRhtgNMqIb9HVf1JKFlB8tdfIupFFHyvJkMeZ0iVqx TzCLdj6LPexWFfE1Qggcb3GwsKAccKawz7kcNVr5GuXBC3nDhthOkOlunXoa/KFg SXy0xq3ln3V0Fn5uYcLNlRqxyhIdlrhrku01r2CG00ClEKbGz2mjcy61NLCZ2iPc NzFDRTrw2qG8g3PDnCPrhBUB/Rb6PtNOy1f9fevk2lhkTAb+r3aWNkXXtBIVqe3a KSaXbfA51rR5ciPyN2+iumjcD5ELqG7GnVgiVO5uPuEjXbplCjKi9324TBj0l5nR +rt81pCxfIttbMQQUkS3Nafi3/26we4SrPT5eOCVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPtcQ8N7Rezkbq3pe7JhliA29mQIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwYTM0MjI2LTg5NTQtNDNlYy1hNWFhLTg0ODQwNzM2ZjUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEs+GQwDQYJKoZIhvcNAQELBQADggEBAH+FvZw7rEv+ExhYrMUAglMKSsYb giBq2O/0hFxIgEKYUo/36zkZ1vsvaZJkwWTgmobNWPnW51cYGkUl5S/R1L6R2w1T W5ehzdGalsCIXVFzIloa0ST/aW9FgicGhRhp0sn0c1VcjeJ7fOw07f8cMoAbjlH6 1N15pPAdULy3dPr2xcKusRsoLK+vgNdGH/feAfUpr2kZppeR6b3mFMZKkqIFc202 Tox3PzPvDNW9TFGvwNcj2F2PheLUG/adMkvtzyMJybiH/IIzLWy8KKxQIfu3J3/7 uGDm2WNddfRHQwHPQ58DQKNED6yLtVYsbfyk85K63WHBoVEDT6i7jLnXowY= -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:42 2025 by rpki-client