This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa File: 708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa (raw, json) Hash identifier: ST27oYLuTpSR8LIoFu1YEAETD+o2iFEh63koagpdgIQ= Subject key identifier: 7F:37:46:24:7D:46:3E:87:3F:92:40:A4:2A:03:09:9E:17:AF:08:D2 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 1ED2E5F50341947098FB83887E87D71E26AA38C4 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa Signing time: Wed 10 Dec 2025 00:30:13 +0000 ROA not before: Wed 10 Dec 2025 00:30:13 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d2:e5:f5:03:41:94:70:98:fb:83:88:7e:87:d7:1e:26:aa:38:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Dec 10 00:30:13 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=b8a470fbd9afe425c8873389298d19ddaa5b3da96d82395090d2b8a8bbe70a61, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:66:2b:07:fa:20:cd:e3:48:37:72:e6:94: 51:77:e8:8a:56:00:06:86:6e:b9:88:cd:59:ba:01: 8a:02:c0:24:f5:e0:01:33:42:79:0c:a6:4c:5d:a9: b2:0e:ba:03:9d:5d:0c:9b:b9:dc:14:ce:26:ec:dc: e3:2e:fd:4f:9e:cc:de:bb:13:ff:6a:56:78:89:da: e0:62:7c:2b:2c:99:ce:db:5e:90:89:55:36:4d:9d: 72:8a:51:9c:36:68:c4:7c:e5:33:b3:27:76:85:30: 57:cb:77:85:f3:1e:b2:91:9f:30:9e:cd:f9:a5:58: 3f:a7:b0:70:1c:12:bb:e0:dd:f4:a2:d2:e5:35:59: 96:e8:46:3a:69:96:35:53:5e:84:f3:a8:c5:0b:67: af:64:12:64:e7:50:b2:19:9f:30:86:8c:d8:8d:e4: 58:fa:35:0e:17:24:c8:4c:c7:32:e1:75:86:35:ef: 0e:46:ce:20:02:cc:91:20:ec:f6:fc:0e:3c:3d:ae: 65:0f:7d:32:62:80:0a:b1:dc:a9:05:81:da:81:d8: 97:b0:66:e9:92:56:5c:65:72:ad:4c:dc:2c:f0:19: a6:57:7f:fe:01:21:5c:09:13:db:8f:43:17:cb:c0: 80:ac:ca:cd:90:39:31:8a:bd:04:a8:1f:af:06:52: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:37:46:24:7D:46:3E:87:3F:92:40:A4:2A:03:09:9E:17:AF:08:D2 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.80.0/21 Signature Algorithm: sha256WithRSAEncryption 46:b3:f4:db:9c:3e:ee:d0:93:9b:b8:1a:23:a8:04:b7:b3:40: be:c9:53:40:56:7b:55:66:e9:62:4c:54:98:98:53:8a:0b:b6: 2f:87:60:5b:91:20:e7:ed:6f:24:81:e2:05:85:d8:ea:45:e7: 32:97:04:25:0c:b3:2d:74:f3:e8:59:e8:69:f9:69:a7:17:c7: 1d:b4:69:67:8e:91:6b:dd:3a:4d:50:15:16:37:e1:a0:8c:98: 7b:7a:89:ee:5a:d2:ed:0f:39:33:65:db:27:24:7c:1d:a0:76: b0:c2:8b:a2:fd:0b:37:13:2f:d1:14:88:84:43:44:2a:f7:55: 6c:cb:06:db:b8:eb:a7:ec:29:c8:3c:77:50:75:8f:b2:72:26: 2f:de:00:82:b9:87:d3:89:6b:3b:d3:01:86:01:20:c7:c4:72: 7e:14:6f:6b:20:a4:7c:90:76:1d:e3:62:b9:7c:6e:e7:66:d1: 3c:89:2b:fe:97:7d:d6:b3:4f:be:e9:07:78:90:e8:e8:31:ce: d5:99:4a:34:c7:80:44:23:f5:ba:64:46:ba:1c:ea:92:b5:ce: 22:17:7a:3d:97:f6:a2:71:63:1d:b7:4f:13:d0:92:56:53:64: ad:f5:a1:a8:aa:4d:04:b2:26:2a:b9:62:d0:c8:97:25:cf:e1: e4:8f:12:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHtLl9QNBlHCY+4OIfofXHiaqOMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMjEwMDAzMDEzWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGE0NzBmYmQ5YWZlNDI1Yzg4NzMzODkyOThkMTlkZGFh NWIzZGE5NmQ4MjM5NTA5MGQyYjhhOGJiZTcwYTYxMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnb2YrB/ogzeNIN3LmlFF36IpWAAaGbrmIzVm6AYoCwCT1 4AEzQnkMpkxdqbIOugOdXQybudwUzibs3OMu/U+ezN67E/9qVniJ2uBifCssmc7b XpCJVTZNnXKKUZw2aMR85TOzJ3aFMFfLd4XzHrKRnzCezfmlWD+nsHAcErvg3fSi 0uU1WZboRjppljVTXoTzqMULZ69kEmTnULIZnzCGjNiN5Fj6NQ4XJMhMxzLhdYY1 7w5GziACzJEg7Pb8Djw9rmUPfTJigAqx3KkFgdqB2JewZumSVlxlcq1M3CzwGaZX f/4BIVwJE9uPQxfLwICsys2QOTGKvQSoH68GUpT5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfzdGJH1GPoc/kkCkKgMJnhevCNIwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzcwOGE4Y2JkLTZkNDQtNGQyZi1iNmU5LTQ1MTMxMzkxYmU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMycFAwDQYJKoZIhvcNAQELBQADggEBAEaz9NucPu7Qk5u4GiOoBLezQL7J U0BWe1Vm6WJMVJiYU4oLti+HYFuRIOftbySB4gWF2OpF5zKXBCUMsy108+hZ6Gn5 aacXxx20aWeOkWvdOk1QFRY34aCMmHt6ie5a0u0POTNl2yckfB2gdrDCi6L9CzcT L9EUiIRDRCr3VWzLBtu466fsKcg8d1B1j7JyJi/eAIK5h9OJazvTAYYBIMfEcn4U b2sgpHyQdh3jYrl8budm0TyJK/6XfdazT77pB3iQ6OgxztWZSjTHgEQj9bpkRroc 6pK1ziIXej2X9qJxYx23TxPQklZTZK31oaiqTQSyJiq5YtDIlyXP4eSPEh4= -----END CERTIFICATE-----Generated at Sun Dec 21 00:54:54 2025 by rpki-client