This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa File: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (raw, json) Hash identifier: XuIHLultJ/pKJ84YawLuReZUVIQsGCaLAVii+AG3agw= Subject key identifier: B0:B0:BC:B8:4B:6E:44:00:82:74:A9:F5:25:BD:BE:34:20:A4:D1:75 Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 599C4D3585DA1E89FF7837210037EC0093EAC660 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa Signing time: Tue 04 Nov 2025 00:10:06 +0000 ROA not before: Tue 04 Nov 2025 00:10:06 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9c:4d:35:85:da:1e:89:ff:78:37:21:00:37:ec:00:93:ea:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Nov 4 00:10:06 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=10f14845e0eecdaff3f68fbbe62d5dc8f48e2e16fd85f89a0b3fa7c8c69ed92e, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:24:56:40:65:df:9f:c1:86:de:85:ca:a5: 4a:cb:37:0e:af:a4:8b:a1:35:2b:70:1d:03:ed:52: ec:f8:a3:28:e7:3b:dd:6c:c8:a3:d4:56:8b:a6:fc: 52:60:2d:ff:22:ac:20:df:f6:71:d5:bf:49:d3:37: c0:ba:b7:db:bb:27:2a:a8:52:f1:2d:27:1a:29:f9: c6:eb:f2:ff:e6:84:43:c7:f0:72:bd:c1:f6:b3:e1: f3:2b:a0:6e:86:8f:2b:75:b1:6a:14:86:05:c7:b0: e1:65:a1:35:a8:ef:be:2d:06:13:d2:62:bb:7c:eb: b2:7f:b5:f0:be:38:fc:29:bb:8e:eb:d3:f6:87:3a: 2c:28:1b:30:0a:83:d8:a3:b6:e1:ac:09:ce:9c:29: 61:69:39:00:d2:0a:fb:f9:48:c8:94:96:4b:fa:88: cf:b4:ca:96:94:98:f5:18:5f:79:b2:ac:37:f0:c5: e8:a6:93:fb:99:34:1a:44:55:59:bc:aa:3c:8a:25: 9f:d4:f1:6c:44:3d:54:89:23:d9:1c:2a:86:a1:35: ac:06:8d:a9:7f:f9:4c:9d:c5:1b:d9:13:cb:39:d7: e5:27:53:24:69:90:46:4f:d4:fd:49:43:ab:f7:ca: c7:55:77:0f:dd:a3:3e:2d:c5:73:d4:41:83:2b:25: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B0:BC:B8:4B:6E:44:00:82:74:A9:F5:25:BD:BE:34:20:A4:D1:75 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.96.0/20 Signature Algorithm: sha256WithRSAEncryption 45:10:fb:d4:3e:90:37:3c:16:8c:e7:ce:75:fe:24:91:92:dd: 13:09:17:ae:12:ec:84:f0:f5:bc:0e:d5:78:a0:2b:3a:da:83: 9a:94:5c:ed:af:c1:3c:9d:c0:8d:21:2e:4f:52:48:47:96:cd: b5:d8:d7:89:9d:7c:8d:b9:fb:48:0e:6f:58:15:1d:d4:b1:75: 91:8f:e2:3f:73:3d:d1:90:e3:5e:dd:45:10:63:67:c2:01:5c: 8a:d6:54:7c:8d:0b:f7:43:d6:2e:3e:5a:cd:4e:ed:c6:e4:85: c8:12:e0:3b:43:23:51:e0:ce:74:e6:f5:bc:bf:95:8a:dd:25: f5:81:4d:4a:64:4d:41:50:31:18:72:8d:2b:78:45:12:07:b2: ee:4a:8c:70:d1:62:f1:6d:3b:ec:f2:33:5c:d7:0d:f6:c2:d9: 28:b1:bd:0e:ce:2f:e3:f2:4f:70:a2:70:0d:bc:db:d3:7d:c7: 6d:7e:a8:8b:ce:77:aa:35:fe:98:c9:08:82:c7:d6:27:49:fc: a0:09:b8:19:fe:f7:7b:99:b2:eb:16:e7:2c:e9:8f:c4:10:b5: c1:4d:0d:d7:95:dd:d1:bb:a6:8e:96:3f:86:b7:83:e4:db:dc: 92:5e:88:6e:74:4e:82:b7:51:85:cc:c8:9a:83:e3:29:74:c7: 07:69:96:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWZxNNYXaHon/eDchADfsAJPqxmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMTA0MDAxMDA2WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGYxNDg0NWUwZWVjZGFmZjNmNjhmYmJlNjJkNWRjOGY0 OGUyZTE2ZmQ4NWY4OWEwYjNmYTdjOGM2OWVkOTJlMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVKSRWQGXfn8GG3oXKpUrLNw6vpIuhNStwHQPtUuz4oyjn O91syKPUVoum/FJgLf8irCDf9nHVv0nTN8C6t9u7JyqoUvEtJxop+cbr8v/mhEPH 8HK9wfaz4fMroG6Gjyt1sWoUhgXHsOFloTWo774tBhPSYrt867J/tfC+OPwpu47r 0/aHOiwoGzAKg9ijtuGsCc6cKWFpOQDSCvv5SMiUlkv6iM+0ypaUmPUYX3myrDfw xeimk/uZNBpEVVm8qjyKJZ/U8WxEPVSJI9kcKoahNawGjal/+UydxRvZE8s51+Un UyRpkEZP1P1JQ6v3ysdVdw/doz4txXPUQYMrJfu9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsLC8uEtuRACCdKn1Jb2+NCCk0XUwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4L2RiMGIyMjdmLTk5NTgtNGViYi05ZjIzLTY1Y2MyNGM1Yzc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASsYGAwDQYJKoZIhvcNAQELBQADggEBAEUQ+9Q+kDc8FoznznX+JJGS3RMJ F64S7ITw9bwO1XigKzrag5qUXO2vwTydwI0hLk9SSEeWzbXY14mdfI25+0gOb1gV HdSxdZGP4j9zPdGQ417dRRBjZ8IBXIrWVHyNC/dD1i4+Ws1O7cbkhcgS4DtDI1Hg znTm9by/lYrdJfWBTUpkTUFQMRhyjSt4RRIHsu5KjHDRYvFtO+zyM1zXDfbC2Six vQ7OL+PyT3CicA2829N9x21+qIvOd6o1/pjJCILH1idJ/KAJuBn+93uZsusW5yzp j8QQtcFNDdeV3dG7po6WP4a3g+Tb3JJeiG50ToK3UYXMyJqD4yl0xwdpluA= -----END CERTIFICATE-----Generated at Tue Nov 18 12:09:08 2025 by rpki-client