This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa File: b329dcd2-1949-46fc-8852-9e7592d53c17.roa (raw, json) Hash identifier: rkAXeT98F4w+pjZBVQ2jOkhXKraxdLrWv1eGJ1jKNLM= Subject key identifier: 39:B2:6E:97:BD:48:58:1C:7B:EE:AA:36:4A:3C:71:C0:B0:C7:DC:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BA00C4DB5E2B1A6996EA20BAEA23B874D11C555 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa Signing time: Wed 10 Dec 2025 00:31:18 +0000 ROA not before: Wed 10 Dec 2025 00:31:18 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:0c:4d:b5:e2:b1:a6:99:6e:a2:0b:ae:a2:3b:87:4d:11:c5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:31:18 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a9535440d421fb80977ce84ef1b21846f750c64fc5f3e6e9616e7afa503c4007, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:e0:bb:6b:dd:df:90:2c:08:6c:5b:2d:b7: 35:b1:b6:07:05:0c:34:a5:04:93:5c:10:15:98:e9: 40:13:11:20:64:b0:c0:fd:e2:d5:c3:eb:7e:cc:09: e3:0a:27:06:ee:ac:ac:eb:d1:d1:63:99:21:1a:fd: cc:61:40:10:dd:8a:af:c1:ff:41:27:2d:80:59:9f: 8e:2f:a5:e7:11:16:0b:7e:3b:06:db:c8:8b:24:71: 7d:67:81:9a:29:02:8a:f2:7d:69:f5:11:cd:ae:27: 83:0e:5f:3d:b7:02:f0:df:1d:58:c5:d4:45:aa:d3: 3a:47:23:f9:97:e8:66:c6:6c:ec:53:a9:dc:3a:97: 56:99:ca:85:f2:7b:9a:28:64:bf:ec:6e:ac:81:85: a3:ee:61:41:bf:72:2a:f1:73:b7:e7:0c:37:49:97: 13:79:cc:6a:e7:8d:02:1c:c2:49:9a:68:93:34:75: 6e:32:b5:fc:82:63:fb:ea:b5:65:47:8e:2c:ca:a9: 37:12:e1:d1:92:ba:fd:ce:61:f3:1e:67:1c:63:78: 7f:bd:9d:ec:54:47:8b:8b:00:bd:ed:3e:f9:55:7d: 1e:52:7c:10:10:0f:a9:67:3b:5c:cc:14:e3:54:8f: ca:c4:0c:23:e9:ae:74:52:69:9c:0f:f7:6e:28:8c: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B2:6E:97:BD:48:58:1C:7B:EE:AA:36:4A:3C:71:C0:B0:C7:DC:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.154.0/23 Signature Algorithm: sha256WithRSAEncryption a9:c0:81:f6:1d:06:2d:fb:1e:ab:dc:3b:36:ad:e7:bd:7c:97: d4:3c:36:f5:88:fb:e0:4d:6d:1f:c9:0b:c6:06:7d:d3:a6:0c: 81:64:29:9b:9a:52:b8:78:68:ac:ee:48:6a:d2:33:86:eb:1b: 87:58:f5:31:9c:97:19:cb:5d:d8:6e:a3:a0:76:ff:f9:6d:0e: 54:f9:d0:07:ce:84:20:03:34:6e:1d:84:e7:56:d0:06:31:b8: 17:07:09:be:6e:24:8a:b1:63:51:82:6f:31:d4:24:89:6c:15: a8:d6:4e:02:4a:a4:cd:48:43:de:20:bc:17:e9:e5:72:ed:12: fe:28:27:d6:51:1e:3a:f3:63:5a:9d:e3:b7:dd:bc:5a:84:0e: 0e:f5:2d:f5:07:02:46:fa:79:1e:46:ec:81:fe:d9:e4:ac:a1: 1c:6d:5f:10:b4:0e:32:9b:61:e2:67:4f:ed:d5:d0:5c:08:e2: 6b:e6:f8:a3:f3:85:7d:c5:ed:c0:f4:90:30:88:de:a1:60:e7: e5:70:d8:7d:76:78:1e:d3:ae:0d:ed:b1:9a:e7:4d:f6:e1:ce: 43:f4:12:d9:17:3d:05:0a:dd:22:55:0b:37:15:7b:e9:a3:10: 2f:b6:74:e7:1b:19:c9:16:23:20:94:2b:2a:4d:e4:8d:6f:74: 01:f0:df:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6AMTbXisaaZbqILrqI7h00RxVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAzMTE4WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTUzNTQ0MGQ0MjFmYjgwOTc3Y2U4NGVmMWIyMTg0NmY3 NTBjNjRmYzVmM2U2ZTk2MTZlN2FmYTUwM2M0MDA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV7eC7a93fkCwIbFsttzWxtgcFDDSlBJNcEBWY6UATESBk sMD94tXD637MCeMKJwburKzr0dFjmSEa/cxhQBDdiq/B/0EnLYBZn44vpecRFgt+ OwbbyIskcX1ngZopAoryfWn1Ec2uJ4MOXz23AvDfHVjF1EWq0zpHI/mX6GbGbOxT qdw6l1aZyoXye5ooZL/sbqyBhaPuYUG/cirxc7fnDDdJlxN5zGrnjQIcwkmaaJM0 dW4ytfyCY/vqtWVHjizKqTcS4dGSuv3OYfMeZxxjeH+9nexUR4uLAL3tPvlVfR5S fBAQD6lnO1zMFONUj8rEDCPprnRSaZwP924ojMYTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUObJul71IWBx77qo2SjxxwLDH3L8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMjlkY2QyLTE5NDktNDZmYy04ODUyLTllNzU5MmQ1M2MxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpowDQYJKoZIhvcNAQELBQADggEBAKnAgfYdBi37HqvcOzat5718l9Q8 NvWI++BNbR/JC8YGfdOmDIFkKZuaUrh4aKzuSGrSM4brG4dY9TGclxnLXdhuo6B2 //ltDlT50AfOhCADNG4dhOdW0AYxuBcHCb5uJIqxY1GCbzHUJIlsFajWTgJKpM1I Q94gvBfp5XLtEv4oJ9ZRHjrzY1qd47fdvFqEDg71LfUHAkb6eR5G7IH+2eSsoRxt XxC0DjKbYeJnT+3V0FwI4mvm+KPzhX3F7cD0kDCI3qFg5+Vw2H12eB7Trg3tsZrn TfbhzkP0EtkXPQUK3SJVCzcVe+mjEC+2dOcbGckWIyCUKypN5I1vdAHw3yM= -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:48 2026 by rpki-client