This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfd33fd3-1002-4a97-a196-c5a4bf918290.roa File: cfd33fd3-1002-4a97-a196-c5a4bf918290.roa (raw, json) Hash identifier: 5miODeS7tH45KQEJYOCoi2xvDC0xgk3ChNeBrb4ALXQ= Subject key identifier: 47:D8:FC:82:42:04:37:79:BF:FF:3E:97:8E:BE:42:99:7D:80:FA:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 322BAD8A9937F2BEDFFE879A01977BFE33AD6006 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfd33fd3-1002-4a97-a196-c5a4bf918290.roa Signing time: Tue 09 Dec 2025 00:11:46 +0000 ROA not before: Tue 09 Dec 2025 00:11:46 +0000 ROA not after: Mon 09 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:ad:8a:99:37:f2:be:df:fe:87:9a:01:97:7b:fe:33:ad:60:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 9 00:11:46 2025 GMT Not After : Mar 9 23:59:59 2026 GMT Subject: serialNumber=8cb2e2f9ad008c463dc0a4136f8def66c19eb6c038ed3282b533a9f4204acb3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:ab:c4:26:ae:fb:9d:59:ae:bb:36:36:49: f9:6b:d1:24:eb:9e:1e:38:9d:b4:94:dd:89:d3:95: 62:fc:a7:02:83:78:4c:7f:f5:e1:3e:1b:4b:53:f4: 58:60:06:06:bf:2e:9e:a6:44:57:7e:59:8f:9a:d4: 46:50:d4:2a:05:b1:16:f8:1b:29:73:ca:19:51:d9: 16:20:b8:25:70:7d:4f:a6:ab:bb:49:14:39:dd:90: d7:f8:55:23:c1:45:ac:b0:43:5a:e6:fe:e0:c3:cb: 4f:ce:c8:a6:bb:9e:30:72:b1:80:6a:a7:67:7f:06: b1:ce:e9:5e:04:9d:aa:cb:fc:e3:3d:a2:9f:d9:47: 06:c2:52:97:89:78:28:6b:6d:5a:30:81:60:30:cd: f1:c4:29:ce:a6:50:5a:eb:7d:0b:98:3b:78:26:2a: 6d:79:f2:d7:9b:18:6d:20:29:c3:d9:97:7d:d7:c1: ba:8c:66:1e:2f:3a:06:d0:87:67:25:68:6d:22:1b: 8e:40:4b:be:eb:2c:44:14:e4:12:a0:08:69:02:81: 07:d5:ca:1b:6f:57:33:a6:66:0b:8b:cf:0f:a7:8f: 7a:81:a7:0e:0e:ea:86:08:f1:46:40:b1:a5:ce:d3: 1a:61:7e:67:ea:43:21:59:30:6e:9e:20:75:31:6d: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:FC:82:42:04:37:79:BF:FF:3E:97:8E:BE:42:99:7D:80:FA:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfd33fd3-1002-4a97-a196-c5a4bf918290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.156.0/23 Signature Algorithm: sha256WithRSAEncryption af:47:4b:44:20:ca:ee:15:2d:63:1c:24:24:e4:80:8f:f8:2a: d0:bc:d6:52:ab:f9:f9:25:de:9d:8f:f2:36:8d:5a:d0:cb:ab: eb:10:28:55:05:88:4b:7e:65:98:3a:ba:ad:55:75:a4:6b:e4: 1e:ee:7b:a8:95:1c:a5:d6:c0:3f:96:cb:f4:44:28:24:dd:d3: c4:5d:5f:10:27:d1:35:11:91:b8:8b:3b:07:5d:06:2b:15:62: 9b:19:8c:bf:dd:20:02:60:88:b9:2f:84:51:cf:7a:bb:b6:3f: 0b:6c:eb:a1:31:d5:2d:38:5c:16:20:76:7d:ea:d5:94:e6:98: 63:f9:83:2e:44:e6:7d:7e:f5:26:92:85:83:25:9e:5f:b4:d0: 11:2c:4e:ed:ac:6f:7f:04:ef:92:99:8a:4c:de:93:74:86:04: 30:1d:86:fc:12:d1:d9:d0:84:fa:ca:1c:5a:a4:02:a3:a2:95: 82:57:27:d0:da:5c:94:2a:9a:e9:f5:64:b7:f2:ff:47:ad:50: fd:58:28:35:3d:3e:12:de:30:7d:08:6c:76:3e:94:66:f2:81: 17:2f:24:ff:96:e5:8b:42:55:57:0c:d7:3c:87:d5:9a:2b:dc: 49:ad:f3:bb:1f:d1:5e:bf:e0:1f:b7:0d:26:df:19:3c:56:37: 35:f6:b8:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMiutipk38r7f/oeaAZd7/jOtYAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA5MDAxMTQ2WhcNMjYwMzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2IyZTJmOWFkMDA4YzQ2M2RjMGE0MTM2ZjhkZWY2NmMx OWViNmMwMzhlZDMyODJiNTMzYTlmNDIwNGFjYjNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVSavEJq77nVmuuzY2Sflr0STrnh44nbSU3YnTlWL8pwKD eEx/9eE+G0tT9FhgBga/Lp6mRFd+WY+a1EZQ1CoFsRb4GylzyhlR2RYguCVwfU+m q7tJFDndkNf4VSPBRaywQ1rm/uDDy0/OyKa7njBysYBqp2d/BrHO6V4EnarL/OM9 op/ZRwbCUpeJeChrbVowgWAwzfHEKc6mUFrrfQuYO3gmKm158tebGG0gKcPZl33X wbqMZh4vOgbQh2claG0iG45AS77rLEQU5BKgCGkCgQfVyhtvVzOmZguLzw+nj3qB pw4O6oYI8UZAsaXO0xphfmfqQyFZMG6eIHUxbRAFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR9j8gkIEN3m//z6Xjr5CmX2A+gowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmZDMzZmQzLTEwMDItNGE5Ny1hMTk2LWM1YTRiZjkxODI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrpwwDQYJKoZIhvcNAQELBQADggEBAK9HS0Qgyu4VLWMcJCTkgI/4KtC8 1lKr+fkl3p2P8jaNWtDLq+sQKFUFiEt+ZZg6uq1VdaRr5B7ue6iVHKXWwD+Wy/RE KCTd08RdXxAn0TURkbiLOwddBisVYpsZjL/dIAJgiLkvhFHPeru2Pwts66Ex1S04 XBYgdn3q1ZTmmGP5gy5E5n1+9SaShYMlnl+00BEsTu2sb38E75KZikzek3SGBDAd hvwS0dnQhPrKHFqkAqOilYJXJ9DaXJQqmun1ZLfy/0etUP1YKDU9PhLeMH0IbHY+ lGbygRcvJP+W5YtCVVcM1zyH1Zor3Emt87sf0V6/4B+3DSbfGTxWNzX2uAU= -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:27 2025 by rpki-client