This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa File: 87a321d9-94a4-41d4-9de7-5617146603fa.roa (raw, json) Hash identifier: sTNzPva4dnctT+Xt/MKethdOrhAvrQY7NYjxVyyAs7I= Subject key identifier: 98:04:71:16:60:52:4A:2B:08:45:A2:40:EC:80:83:8E:07:9F:14:13 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 411A77150F570653778FA6C92A31814953483FA7 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa Signing time: Wed 10 Dec 2025 00:30:14 +0000 ROA not before: Wed 10 Dec 2025 00:30:14 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:77:15:0f:57:06:53:77:8f:a6:c9:2a:31:81:49:53:48:3f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Dec 10 00:30:14 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=d2a6426c2503ce5a9dd46cee5c602efc8bfccdbda54d687bc66b896b7d86905a, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:21:b0:f1:a0:38:89:3b:4c:6e:47:f2:cb: 76:60:a0:ba:6e:d8:fd:38:e3:25:03:d1:bb:37:ad: d8:4c:07:87:cc:4e:9e:c2:3f:62:17:38:05:75:06: 83:ad:45:2f:a1:d4:bf:40:b5:4f:d8:92:41:9e:7a: b4:3a:eb:c4:45:c4:0b:5e:87:06:c0:ac:ae:23:aa: 3d:06:e2:57:80:a5:cd:69:39:7a:22:39:3c:bf:c0: 27:36:1c:39:11:8d:3d:9d:74:29:db:0e:a1:db:d2: 89:cf:b0:60:4d:bb:bf:d8:23:fe:92:29:d8:e4:bc: a2:6f:cb:45:5d:ed:13:66:6b:28:13:d2:c9:54:37: 72:e1:0f:2d:7a:ec:70:ab:0d:0b:e8:bb:70:25:57: 0b:4a:a5:5e:b3:0c:02:b4:41:76:db:7c:96:da:4a: 4a:b1:8c:6b:be:25:8a:51:85:e9:4a:88:1e:de:a1: e1:61:d3:4c:ec:f7:dc:2e:c8:dc:36:2a:f6:e8:0f: 8d:79:0d:df:23:df:84:d6:93:26:57:0c:8b:e9:5e: 62:ad:5f:56:6a:5c:8e:b6:cf:e5:af:a1:bd:79:6b: f8:53:00:91:d4:bc:b9:f7:dc:fb:10:71:3b:34:e1: 79:42:19:21:c2:6f:06:3b:96:e9:54:bc:a5:1a:ed: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:04:71:16:60:52:4A:2B:08:45:A2:40:EC:80:83:8E:07:9F:14:13 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/17 Signature Algorithm: sha256WithRSAEncryption 71:d7:67:c1:db:ee:9d:a0:52:89:0d:e1:ad:29:f6:0b:84:ee: aa:25:ab:13:e8:f0:08:a7:6b:4a:84:35:8b:fe:33:38:22:15: 62:f0:50:89:08:f8:b0:2a:84:e4:58:f8:ae:bb:d5:cb:d6:ea: 0d:1d:14:91:ac:cb:49:dd:76:a8:20:88:d5:2d:ef:e9:cc:1b: fb:32:57:b8:09:ae:21:ae:59:95:0e:c9:94:97:f0:32:87:c8: f7:4b:b2:13:da:48:5e:45:1b:39:ab:ce:69:fe:4e:a4:80:ee: 85:56:5e:c2:73:72:1f:9f:1e:c5:45:8f:71:de:f3:80:fc:24: b4:f5:67:b3:13:9b:96:0f:bb:ba:ff:fc:2d:57:40:a1:49:70: 7c:71:44:08:fe:a2:b8:50:27:a0:53:0a:1d:c0:3c:4e:a8:1b: 3d:90:19:34:2c:ca:22:ce:75:52:32:a2:e3:74:cb:49:8f:48: 2c:61:33:61:b1:a6:9d:da:9b:a7:82:03:80:b6:9d:2f:b1:22: 07:37:c3:0e:15:39:14:c4:9a:0e:88:8b:82:d7:9f:5d:da:d0: 4e:02:a1:94:3c:ad:0f:71:e5:c1:e6:38:a2:c0:b7:d6:8a:4f: e3:f0:24:3c:22:5e:7d:37:d7:cc:76:93:85:da:0a:0a:cd:8f: 64:85:70:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQRp3FQ9XBlN3j6bJKjGBSVNIP6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMjEwMDAzMDE0WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmE2NDI2YzI1MDNjZTVhOWRkNDZjZWU1YzYwMmVmYzhi ZmNjZGJkYTU0ZDY4N2JjNjZiODk2YjdkODY5MDVhMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCpCGw8aA4iTtMbkfyy3ZgoLpu2P044yUD0bs3rdhMB4fM Tp7CP2IXOAV1BoOtRS+h1L9AtU/YkkGeerQ668RFxAtehwbArK4jqj0G4leApc1p OXoiOTy/wCc2HDkRjT2ddCnbDqHb0onPsGBNu7/YI/6SKdjkvKJvy0Vd7RNmaygT 0slUN3LhDy167HCrDQvou3AlVwtKpV6zDAK0QXbbfJbaSkqxjGu+JYpRhelKiB7e oeFh00zs99wuyNw2KvboD415Dd8j34TWkyZXDIvpXmKtX1ZqXI62z+Wvob15a/hT AJHUvLn33PsQcTs04XlCGSHCbwY7lulUvKUa7SSTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmARxFmBSSisIRaJA7ICDjgefFBMwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5Lzg3YTMyMWQ5LTk0YTQtNDFkNC05ZGU3LTU2MTcxNDY2MDNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcycAAwDQYJKoZIhvcNAQELBQADggEBAHHXZ8Hb7p2gUokN4a0p9guE7qol qxPo8Aina0qENYv+MzgiFWLwUIkI+LAqhORY+K671cvW6g0dFJGsy0nddqggiNUt 7+nMG/syV7gJriGuWZUOyZSX8DKHyPdLshPaSF5FGzmrzmn+TqSA7oVWXsJzch+f HsVFj3He84D8JLT1Z7MTm5YPu7r//C1XQKFJcHxxRAj+orhQJ6BTCh3APE6oGz2Q GTQsyiLOdVIyouN0y0mPSCxhM2Gxpp3am6eCA4C2nS+xIgc3ww4VORTEmg6Ii4LX n13a0E4CoZQ8rQ9x5cHmOKLAt9aKT+PwJDwiXn0318x2k4XaCgrNj2SFcNY= -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:16 2025 by rpki-client