This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c808c9a-d055-42d3-bd94-1f592e72aa30.roa File: 8c808c9a-d055-42d3-bd94-1f592e72aa30.roa (raw, json) Hash identifier: zXPLKQ00/WttFz4u9o5pFZEtI3uZCEYuGpq0JvsaTL0= Subject key identifier: C9:32:D5:00:5D:6D:D5:50:84:9B:7F:33:31:28:BD:7B:E6:F8:E9:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FE064D9CD04D78622FAC73FFEF21C70DA8B11C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c808c9a-d055-42d3-bd94-1f592e72aa30.roa Signing time: Tue 09 Dec 2025 00:10:45 +0000 ROA not before: Tue 09 Dec 2025 00:10:45 +0000 ROA not after: Mon 09 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e0:64:d9:cd:04:d7:86:22:fa:c7:3f:fe:f2:1c:70:da:8b:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 9 00:10:45 2025 GMT Not After : Mar 9 23:59:59 2026 GMT Subject: serialNumber=753a47f945b38c73b3391168fae687a0c970e035bf6b6df6f969601439f1c810, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:aa:c7:42:ca:c3:81:e6:b9:d6:f1:d8:8a: 72:f2:48:93:2a:55:bc:e4:a3:fa:70:b6:7c:6a:47: c8:ad:a7:63:b0:7f:5f:51:2f:34:12:67:27:f9:45: 15:a5:35:f9:10:69:fe:85:45:71:93:61:95:da:71: 62:d9:c9:02:b0:22:54:a8:54:ef:74:e4:18:ef:c8: 76:24:c8:fd:75:cb:55:f0:3a:8a:f1:c6:43:37:f4: 1e:02:45:f8:17:af:46:35:84:3e:d1:54:3d:a6:4e: 93:fb:df:a4:14:ea:04:6b:9f:60:37:62:9f:62:58: 5a:d4:29:86:eb:c3:ee:97:fa:5f:e7:1d:58:53:96: 72:bf:45:85:b9:66:95:85:1d:c0:8f:e6:30:b3:a6: 97:90:16:8e:be:0c:05:21:73:16:9e:0f:08:81:84: 49:0c:e4:4a:2b:b6:30:9c:96:2f:97:07:da:33:df: 2f:f5:6e:9b:47:f5:57:96:55:c4:80:2d:db:55:56: dc:02:fb:99:ec:06:a2:54:e3:4c:23:00:18:e6:c8: fb:3a:89:c4:3b:a7:72:bc:6b:a0:31:f2:e3:c1:b3: f7:f8:32:a8:9e:f7:f6:e2:c7:8a:72:23:1f:38:05: e4:e0:e3:a9:9d:95:60:4b:bc:fb:e0:bd:0d:fb:79: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:D5:00:5D:6D:D5:50:84:9B:7F:33:31:28:BD:7B:E6:F8:E9:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c808c9a-d055-42d3-bd94-1f592e72aa30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.242.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:9d:79:03:22:c3:61:80:b0:89:3f:7a:ef:d8:91:30:bb:6e: 0b:b4:69:23:40:94:ad:39:85:29:99:44:bc:7b:d0:be:05:39: 1c:d7:c7:a6:d0:98:60:5b:9a:b3:8e:01:37:89:b5:5f:33:5d: 51:d8:48:b2:13:59:d7:b4:32:c1:e6:c4:49:d8:7f:af:f7:32: 53:9d:7a:08:88:fb:de:6d:f6:da:a8:e8:78:2c:d0:89:9e:c4: ba:39:df:e7:1a:7a:7d:73:1e:a6:63:d0:b9:1c:c6:5d:4a:8e: e1:69:67:0c:d8:6d:e9:1e:6a:cc:41:8b:b8:db:b8:2b:f9:cb: 47:58:13:ae:98:51:08:5b:ef:cd:fd:f4:56:40:3a:b3:ef:4d: 72:dd:af:c6:40:8d:fe:f5:9c:cd:2c:74:95:8e:a7:a6:23:b5: 86:0e:ea:fb:c9:36:fa:5a:fb:73:98:ff:a2:63:6e:54:2b:2c: b6:c0:58:5a:da:a6:cf:d3:e2:a8:b9:0f:c3:f0:74:cb:0a:90: a9:2f:be:36:48:95:14:c9:8d:dc:f5:a1:5e:9b:3e:69:0b:1d: 92:95:a6:b9:89:0d:20:75:7f:d5:ab:e7:58:e1:c0:99:19:79: a0:75:9c:56:38:1b:d2:63:33:db:8e:f3:89:d1:07:98:58:1f: c0:1a:11:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb+Bk2c0E14Yi+sc//vIccNqLEcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA5MDAxMDQ1WhcNMjYwMzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTNhNDdmOTQ1YjM4YzczYjMzOTExNjhmYWU2ODdhMGM5 NzBlMDM1YmY2YjZkZjZmOTY5NjAxNDM5ZjFjODEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvr6rHQsrDgea51vHYinLySJMqVbzko/pwtnxqR8itp2Ow f19RLzQSZyf5RRWlNfkQaf6FRXGTYZXacWLZyQKwIlSoVO905BjvyHYkyP11y1Xw OorxxkM39B4CRfgXr0Y1hD7RVD2mTpP736QU6gRrn2A3Yp9iWFrUKYbrw+6X+l/n HVhTlnK/RYW5ZpWFHcCP5jCzppeQFo6+DAUhcxaeDwiBhEkM5EortjCcli+XB9oz 3y/1bptH9VeWVcSALdtVVtwC+5nsBqJU40wjABjmyPs6icQ7p3K8a6Ax8uPBs/f4 Mqie9/bix4pyIx84BeTg46mdlWBLvPvgvQ37eU4BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyTLVAF1t1VCEm38zMSi9e+b46RAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjODA4YzlhLWQwNTUtNDJkMy1iZDk0LTFmNTkyZTcyYWEzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq/IwDQYJKoZIhvcNAQELBQADggEBAB+deQMiw2GAsIk/eu/YkTC7bgu0 aSNAlK05hSmZRLx70L4FORzXx6bQmGBbmrOOATeJtV8zXVHYSLITWde0MsHmxEnY f6/3MlOdegiI+95t9tqo6Hgs0ImexLo53+caen1zHqZj0Lkcxl1KjuFpZwzYbeke asxBi7jbuCv5y0dYE66YUQhb78399FZAOrPvTXLdr8ZAjf71nM0sdJWOp6YjtYYO 6vvJNvpa+3OY/6JjblQrLLbAWFraps/T4qi5D8PwdMsKkKkvvjZIlRTJjdz1oV6b PmkLHZKVprmJDSB1f9Wr51jhwJkZeaB1nFY4G9JjM9uO84nRB5hYH8AaER4= -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:22 2025 by rpki-client