This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa File: 9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa (raw, json) Hash identifier: zCvHxGp6zyNLBKhvTCtBBjVic0RV9xCqKl7tFg6bUKs= Subject key identifier: 09:57:8C:F4:F6:71:DE:EC:B9:4D:84:6E:A1:A7:E1:EF:91:5E:4B:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F3FC460618A38E46D0196490756AF894A3BB9DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa Signing time: Mon 08 Dec 2025 00:10:36 +0000 ROA not before: Mon 08 Dec 2025 00:10:36 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 75.101.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3f:c4:60:61:8a:38:e4:6d:01:96:49:07:56:af:89:4a:3b:b9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 8 00:10:36 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=88440cff635a48f845e382608e448dbc39e89aae7b18e1abbbaec08e4c032140, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:ed:e8:38:72:12:2c:25:ad:29:b9:12:4a: 14:e7:e5:30:a2:a7:d0:80:fa:8f:9a:97:c0:ea:dd: e7:13:1f:4b:d9:1f:28:04:5b:7f:49:7d:b1:08:cb: 92:22:5b:07:7b:6b:f8:fe:2f:5a:6c:67:4d:ed:ad: f9:d1:48:05:ab:c3:89:3a:15:78:21:55:6c:0b:59: 5b:7f:bb:e5:c7:7d:96:b9:51:4f:76:18:51:5a:cc: 6c:8f:d2:92:86:6d:8c:a8:54:f2:3d:98:9c:26:58: 34:05:14:ef:4e:5c:28:eb:73:2a:37:25:6e:91:6e: 37:ff:6d:47:a9:2e:13:02:1e:83:fa:d4:cb:c4:bd: 1a:28:d4:20:50:7a:34:e0:ef:db:14:26:bc:b1:ab: 21:b2:c0:99:f5:b7:66:db:a5:96:a4:66:4b:bb:5a: 46:26:9d:5f:4f:ac:ea:54:1c:90:b9:cf:3c:97:cb: 79:d6:5c:45:58:96:86:fc:e5:ad:ec:af:56:95:a4: e5:fa:c2:38:61:0c:8a:9c:f2:7c:97:20:cc:19:ed: 0b:be:c1:5e:03:08:46:45:1e:17:1d:4d:ca:b6:40: 48:2c:1e:a6:43:88:9d:fa:fc:76:75:7d:9e:58:25: a9:40:0b:a9:c0:42:95:94:d6:43:b3:7d:5c:8b:79: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:8C:F4:F6:71:DE:EC:B9:4D:84:6E:A1:A7:E1:EF:91:5E:4B:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d8e268a-9617-4a50-b1f2-4c35d6322e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.101.176.0/20 Signature Algorithm: sha256WithRSAEncryption 34:e2:10:ea:f8:ff:37:7d:16:4f:64:15:c3:f4:96:c3:57:d7: e6:da:d3:54:b7:df:fa:75:4a:5b:5b:34:86:4c:4f:56:07:e6: 31:3b:21:09:7d:c0:2a:d8:97:ca:fb:a8:06:33:d0:9c:0c:c3: 57:7e:d1:3d:51:3e:6c:89:bf:12:86:be:51:d5:ea:a3:80:f2: 14:31:de:c3:7b:6d:1b:ad:c4:81:ca:bb:d7:39:c1:1f:bb:b0: 08:17:b7:7e:ce:b8:68:8a:13:be:fd:dc:14:38:4a:b5:01:43: 92:2f:6a:76:37:43:90:5f:48:ce:3a:74:67:ef:0a:1c:e2:ee: 0d:ac:e7:06:5f:b8:5f:d6:ce:56:8e:bc:6f:d3:09:33:0d:46: f4:29:f5:38:5e:72:b6:c3:13:89:de:04:fa:cc:09:5b:67:b2: 3c:85:70:98:f5:cc:aa:81:6f:63:8a:7e:e4:1d:9e:1a:f1:6a: cd:d5:2f:dd:5b:19:0c:32:1c:97:06:88:bd:81:0b:f2:f1:bc: de:bc:ee:11:a3:a7:7d:d1:0b:ca:ea:3d:01:be:70:54:bb:71: e7:9c:55:e7:3d:69:27:4d:7e:31:4c:e8:b0:d5:09:06:95:e1: a5:90:9f:24:09:87:12:bf:97:32:be:fb:89:74:78:7c:9c:cf: 85:23:a4:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXz/EYGGKOORtAZZJB1aviUo7ud4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAxMDM2WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODQ0MGNmZjYzNWE0OGY4NDVlMzgyNjA4ZTQ0OGRiYzM5 ZTg5YWFlN2IxOGUxYWJiYmFlYzA4ZTRjMDMyMTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvpe3oOHISLCWtKbkSShTn5TCip9CA+o+al8Dq3ecTH0vZ HygEW39JfbEIy5IiWwd7a/j+L1psZ03trfnRSAWrw4k6FXghVWwLWVt/u+XHfZa5 UU92GFFazGyP0pKGbYyoVPI9mJwmWDQFFO9OXCjrcyo3JW6Rbjf/bUepLhMCHoP6 1MvEvRoo1CBQejTg79sUJryxqyGywJn1t2bbpZakZku7WkYmnV9PrOpUHJC5zzyX y3nWXEVYlob85a3sr1aVpOX6wjhhDIqc8nyXIMwZ7Qu+wV4DCEZFHhcdTcq2QEgs HqZDiJ36/HZ1fZ5YJalAC6nAQpWU1kOzfVyLeYHdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCVeM9PZx3uy5TYRuoafh75FeSy4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkOGUyNjhhLTk2MTctNGE1MC1iMWYyLTRjMzVkNjMyMmU0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARLZbAwDQYJKoZIhvcNAQELBQADggEBADTiEOr4/zd9Fk9kFcP0lsNX1+ba 01S33/p1SltbNIZMT1YH5jE7IQl9wCrYl8r7qAYz0JwMw1d+0T1RPmyJvxKGvlHV 6qOA8hQx3sN7bRutxIHKu9c5wR+7sAgXt37OuGiKE7793BQ4SrUBQ5IvanY3Q5Bf SM46dGfvChzi7g2s5wZfuF/WzlaOvG/TCTMNRvQp9ThecrbDE4neBPrMCVtnsjyF cJj1zKqBb2OKfuQdnhrxas3VL91bGQwyHJcGiL2BC/LxvN687hGjp33RC8rqPQG+ cFS7ceecVec9aSdNfjFM6LDVCQaV4aWQnyQJhxK/lzK++4l0eHycz4UjpKI= -----END CERTIFICATE-----Generated at Sat Dec 20 11:28:44 2025 by rpki-client