This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa File: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (raw, json) Hash identifier: L9oJqbmD1vFZW/a2la5u//Rx8WPzUda4GOYT0MAf0rE= Subject key identifier: 39:90:9F:C5:B2:21:C8:F9:40:22:B1:34:9B:E4:5F:11:53:CD:1F:51 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 01E64D93372E0E673FE1B04BDFDB17B85059FDBD Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa Signing time: Sun 07 Dec 2025 00:10:06 +0000 ROA not before: Sun 07 Dec 2025 00:10:06 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e6:4d:93:37:2e:0e:67:3f:e1:b0:4b:df:db:17:b8:50:59:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Dec 7 00:10:06 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=bbf87c3777af357310d87f27e5412823482d689ed6bd88322ad80cbc40906eef, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:54:7a:94:3d:41:dc:b6:21:eb:a4:3d:a2: 97:48:fc:02:a0:b2:4e:49:31:e6:ca:8b:ba:69:7e: 12:56:bb:99:3c:1f:48:58:f4:ff:94:07:e9:b3:78: ca:15:af:66:b7:20:3c:ef:5f:7f:22:27:2f:0a:60: eb:05:d4:7e:e0:c3:d9:8a:af:6a:93:a8:4a:0c:72: 4b:44:06:57:73:bd:67:46:05:bd:fd:5e:64:64:3e: e3:89:a6:70:30:06:20:6a:be:99:93:71:ba:b4:43: 42:cd:6e:a1:ee:ce:e0:97:d2:b7:18:70:3c:aa:b4: 25:63:bc:59:8b:10:39:22:bd:86:a6:dd:14:bd:22: 47:74:f6:17:39:e6:b6:1c:d1:ef:bb:4f:64:7d:16: 01:b2:41:17:84:69:67:fc:51:dd:39:ce:32:7b:de: c3:3f:70:1c:cc:47:17:af:8f:69:24:1c:bb:94:8e: ad:18:13:88:2c:d6:85:60:5a:e5:d8:90:6f:49:6b: 7c:9d:3c:85:db:e4:11:e2:57:fa:75:55:8e:27:23: 57:d5:b1:d5:81:ea:27:49:58:aa:46:34:ae:b6:de: e3:b7:b0:7d:50:6b:81:73:23:06:9a:cc:d6:2e:41: bc:70:ed:80:de:a8:9e:98:99:d2:c0:0d:73:93:d5: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:90:9F:C5:B2:21:C8:F9:40:22:B1:34:9B:E4:5F:11:53:CD:1F:51 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:cb:ee:e7:56:97:22:5b:63:7b:0b:0f:6a:16:2b:4b:1a:46: 1b:1b:a6:c8:d0:85:e6:3d:f2:79:e8:8c:54:35:d5:58:74:b3: 95:12:fc:19:95:0a:58:48:62:cd:c6:89:18:26:91:3d:e8:6a: 67:62:20:fa:ec:df:7c:9d:f8:ff:77:0a:c9:e1:89:14:3f:dd: 9b:8f:88:c3:48:fa:9c:53:51:9e:fc:9f:c6:99:66:80:e7:a9: aa:d9:32:13:91:70:11:fb:a5:19:3d:f4:2f:09:e4:ca:ea:3d: 2e:51:b3:2d:6c:24:44:61:c7:dd:11:c9:da:56:ca:5c:d5:b9: 0c:37:1d:64:24:81:b1:2f:e3:e6:65:8e:1d:92:1b:86:c1:56: d5:c7:1a:db:c6:0c:ea:f6:01:11:97:bc:68:0d:3b:61:87:fe: 47:45:27:d9:f9:bb:29:40:42:d5:60:76:70:00:2b:bc:58:5e: 55:69:17:38:d0:a8:1c:c2:68:18:cb:cc:da:bf:e9:56:99:56: 3e:42:67:c2:3c:41:0c:61:7e:0f:18:a1:0a:d2:9a:8f:65:02: 5d:6a:cd:80:28:75:0a:d1:72:24:09:c1:d7:23:63:be:6d:41: 13:e7:86:1e:93:46:17:a3:a8:7e:b2:24:e0:16:dd:8c:63:b5: 07:5a:59:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAeZNkzcuDmc/4bBL39sXuFBZ/b0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMjA3MDAxMDA2WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmY4N2MzNzc3YWYzNTczMTBkODdmMjdlNTQxMjgyMzQ4 MmQ2ODllZDZiZDg4MzIyYWQ4MGNiYzQwOTA2ZWVmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3glR6lD1B3LYh66Q9opdI/AKgsk5JMebKi7ppfhJWu5k8 H0hY9P+UB+mzeMoVr2a3IDzvX38iJy8KYOsF1H7gw9mKr2qTqEoMcktEBldzvWdG Bb39XmRkPuOJpnAwBiBqvpmTcbq0Q0LNbqHuzuCX0rcYcDyqtCVjvFmLEDkivYam 3RS9Ikd09hc55rYc0e+7T2R9FgGyQReEaWf8Ud05zjJ73sM/cBzMRxevj2kkHLuU jq0YE4gs1oVgWuXYkG9Ja3ydPIXb5BHiV/p1VY4nI1fVsdWB6idJWKpGNK623uO3 sH1Qa4FzIwaazNYuQbxw7YDeqJ6YmdLADXOT1S7zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOZCfxbIhyPlAIrE0m+RfEVPNH1EwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzJkZGUzNmMwLTJmNjMtNDYwZS04MmMwLTY5Y2YyOTA4YTUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWMwDQYJKoZIhvcNAQELBQADggEBAE7L7udWlyJbY3sLD2oWK0saRhsb psjQheY98nnojFQ11Vh0s5US/BmVClhIYs3GiRgmkT3oamdiIPrs33yd+P93Csnh iRQ/3ZuPiMNI+pxTUZ78n8aZZoDnqarZMhORcBH7pRk99C8J5MrqPS5Rsy1sJERh x90RydpWylzVuQw3HWQkgbEv4+Zljh2SG4bBVtXHGtvGDOr2ARGXvGgNO2GH/kdF J9n5uylAQtVgdnAAK7xYXlVpFzjQqBzCaBjLzNq/6VaZVj5CZ8I8QQxhfg8YoQrS mo9lAl1qzYAodQrRciQJwdcjY75tQRPnhh6TRhejqH6yJOAW3YxjtQdaWUg= -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:32 2025 by rpki-client