This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa File: 5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa (raw, json) Hash identifier: 3uP/N16qj8w3Z+IIQMSIof5IKouFFjIaw+mt55+9AHE= Subject key identifier: 02:10:FE:5C:C3:02:28:34:35:C2:22:78:23:0D:FF:94:B5:F0:CF:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24E8CF975FB1F754FF72116EB6D3EE0ADE6A7B8E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa Signing time: Tue 09 Dec 2025 00:00:06 +0000 ROA not before: Tue 09 Dec 2025 00:00:06 +0000 ROA not after: Mon 09 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e8:cf:97:5f:b1:f7:54:ff:72:11:6e:b6:d3:ee:0a:de:6a:7b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 9 00:00:06 2025 GMT Not After : Mar 9 23:59:59 2026 GMT Subject: serialNumber=bb7dd2a9675b9925c72d0e131d5a06c1ef679e4dc352de39739ec7897f5572c5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:b5:6a:42:84:4d:56:af:cc:65:cf:07:ab: 67:7f:c9:e1:ff:1c:a8:bc:ad:7d:ad:b2:8b:84:93: b4:6e:fa:ec:94:52:0c:13:bf:20:5e:53:b0:1f:cc: b4:a3:1e:41:c8:85:d1:3b:90:f2:d2:b0:80:bc:4a: 7d:99:b5:6c:c2:41:66:d5:a6:28:09:f4:5e:ff:ad: 15:e6:87:38:41:ee:b2:38:57:52:ea:41:a0:c8:55: 0c:d1:aa:b7:a3:7d:0a:44:5a:be:f1:b5:af:92:50: f8:3d:3c:9f:88:3b:43:dd:0a:da:30:e2:8b:90:06: 6c:12:81:8d:0c:53:3d:e4:1e:b6:9a:af:b9:55:fd: 20:26:b1:95:04:33:ce:fd:93:5e:a0:be:06:ba:01: 81:0b:24:3c:fc:90:a8:1e:9d:19:35:82:b4:b7:7b: ae:66:46:8c:a5:ac:c1:b7:41:88:3e:55:90:00:4a: f3:87:e6:80:a9:3c:b3:a6:0e:36:d6:a4:3b:b8:c4: a2:e6:32:93:c1:fc:ec:fa:dd:7f:65:6d:b5:1b:5c: 54:38:49:27:08:0a:00:19:1e:74:75:76:04:43:7b: 87:bb:04:e3:79:7f:ac:bb:fd:b9:1e:3f:7a:ee:96: 87:7e:96:49:96:26:91:cb:19:9c:4e:cf:f9:e6:b3: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:10:FE:5C:C3:02:28:34:35:C2:22:78:23:0D:FF:94:B5:F0:CF:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:3e:0e:5d:20:09:18:9e:13:1e:99:d7:70:0e:4a:e6:f2:02: be:1c:cd:d6:8f:3c:9e:72:31:db:c7:96:c9:71:82:53:95:e4: 55:c6:48:f8:de:d5:08:58:c4:e6:b2:f9:ca:29:9a:a9:b3:57: 62:bb:de:fa:b8:eb:a9:b4:68:a9:1d:80:b0:96:a9:01:91:91: 1f:1e:b1:f8:78:66:74:1e:0d:5c:de:1a:8c:80:37:1b:cb:99: 6b:72:a0:48:92:f5:da:c5:a8:07:ce:fa:9c:cf:e1:9e:38:53: ac:a6:08:18:fe:70:f1:16:6e:5e:3e:ee:14:47:68:2e:e8:65: 1b:f7:09:2e:44:66:88:05:34:26:8b:cc:42:41:f2:60:b9:0d: ed:5b:27:31:5c:bb:02:8a:b9:28:8f:04:2d:41:57:34:5c:de: d6:df:79:c2:6e:b4:4a:5f:18:1e:a3:9f:2a:f7:0d:bc:75:5c: 2b:9f:be:41:b5:c6:d9:6e:b3:38:1c:b8:96:dc:5a:ef:cb:c7: d1:59:a6:6c:3b:06:d3:dc:a2:fd:77:93:cc:3e:42:f4:33:8b: 8f:14:f3:5f:3d:d4:45:fd:43:b3:48:0f:67:27:8b:16:f3:ce: 54:a7:c9:8c:cc:ec:dd:94:5c:fa:88:97:f4:65:17:15:17:ec: 40:6c:6a:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJOjPl1+x91T/chFuttPuCt5qe44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA5MDAwMDA2WhcNMjYwMzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjdkZDJhOTY3NWI5OTI1YzcyZDBlMTMxZDVhMDZjMWVm Njc5ZTRkYzM1MmRlMzk3MzllYzc4OTdmNTU3MmM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb4rVqQoRNVq/MZc8Hq2d/yeH/HKi8rX2tsouEk7Ru+uyU UgwTvyBeU7AfzLSjHkHIhdE7kPLSsIC8Sn2ZtWzCQWbVpigJ9F7/rRXmhzhB7rI4 V1LqQaDIVQzRqrejfQpEWr7xta+SUPg9PJ+IO0PdCtow4ouQBmwSgY0MUz3kHraa r7lV/SAmsZUEM879k16gvga6AYELJDz8kKgenRk1grS3e65mRoylrMG3QYg+VZAA SvOH5oCpPLOmDjbWpDu4xKLmMpPB/Oz63X9lbbUbXFQ4SScICgAZHnR1dgRDe4e7 BON5f6y7/bkeP3rulod+lkmWJpHLGZxOz/nms7MlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAhD+XMMCKDQ1wiJ4Iw3/lLXwz0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhMTkyMWNhLWFiOWMtNDM4ZS1iMzhmLWM1N2VkZTMwZTFkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDHrjANBgkqhkiG9w0BAQsFAAOCAQEAMz4OXSAJGJ4THpnXcA5K5vICvhzN 1o88nnIx28eWyXGCU5XkVcZI+N7VCFjE5rL5yimaqbNXYrve+rjrqbRoqR2AsJap AZGRHx6x+HhmdB4NXN4ajIA3G8uZa3KgSJL12sWoB876nM/hnjhTrKYIGP5w8RZu Xj7uFEdoLuhlG/cJLkRmiAU0JovMQkHyYLkN7VsnMVy7Aoq5KI8ELUFXNFze1t95 wm60Sl8YHqOfKvcNvHVcK5++QbXG2W6zOBy4ltxa78vH0VmmbDsG09yi/XeTzD5C 9DOLjxTzXz3URf1Ds0gPZyeLFvPOVKfJjMzs3ZRc+oiX9GUXFRfsQGxqFA== -----END CERTIFICATE-----Generated at Sat Jan 17 06:49:29 2026 by rpki-client