This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa File: 03003920-cbea-43f1-870c-84e084be150a.roa (raw, json) Hash identifier: CBxGy0kGtMR8RTvGCeSLdscJaR3DD34bdeUtPROIwDE= Subject key identifier: FE:7E:6B:3A:7F:0C:FE:13:62:24:17:3C:73:B2:BF:FE:74:A9:74:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D95EBC80121087213587FE56227403172C8F0E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa Signing time: Thu 11 Dec 2025 00:00:12 +0000 ROA not before: Thu 11 Dec 2025 00:00:12 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:eb:c8:01:21:08:72:13:58:7f:e5:62:27:40:31:72:c8:f0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:00:12 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=7b8375017f48cf996cf249ba38b9d69f45a163be9844d856840a1d1ac30c4e63, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:0c:65:c4:84:aa:33:14:91:2b:e0:db:e4: b4:dc:64:62:43:48:d6:38:24:97:62:0d:8c:45:89: 33:5c:71:27:fe:22:07:c9:58:62:bb:da:90:4a:f1: cf:33:dc:76:04:99:d8:7c:4a:49:e8:f5:b8:18:10: e6:93:d5:a2:dd:87:02:15:49:f3:20:8a:50:54:33: 56:02:ee:ee:28:a5:5a:14:d7:68:3a:82:d2:1b:73: 69:b1:ea:93:ff:50:0f:d5:63:8f:15:1a:71:e9:ad: a0:63:45:45:dc:20:c0:1b:47:e5:3f:e7:91:e2:4e: 56:ec:da:3a:27:b2:0f:2e:aa:45:0e:64:bd:db:bb: 7b:6f:e2:e7:76:3f:c4:bf:c6:91:84:49:49:90:96: c2:1e:e4:c8:3e:d8:b8:e3:78:a4:34:65:e6:eb:d4: 13:e7:bd:50:bf:33:ab:5b:46:1b:65:9a:8c:c7:de: 55:87:cb:23:8d:8c:0e:44:a0:4b:6d:08:56:7f:dc: cb:0b:f6:aa:89:55:ee:b1:f8:26:2f:c4:45:98:5d: 56:50:f0:9b:74:4f:f7:ea:9d:79:95:f9:37:15:c4: c7:a1:47:22:1b:28:d9:17:68:7f:21:04:de:68:53: af:80:4f:2b:19:d4:4c:d0:14:a2:b4:0e:73:fe:60: e3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7E:6B:3A:7F:0C:FE:13:62:24:17:3C:73:B2:BF:FE:74:A9:74:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.101.0/24 Signature Algorithm: sha256WithRSAEncryption ac:f9:fc:4e:27:23:c7:db:ba:68:0c:09:eb:34:ac:75:0c:bc: b0:c7:b7:22:76:63:ea:ee:9b:94:25:08:1b:f3:ce:66:5e:00: 8c:19:d1:17:2a:40:13:af:d5:02:fd:bc:12:31:7d:7f:36:ed: d1:c5:1c:ac:b8:65:de:5b:b8:9f:d4:18:ab:cc:92:62:42:33: ae:40:cf:42:10:27:49:ef:dd:4f:e9:cb:20:ef:1c:19:98:63: bb:74:5b:77:a8:14:1b:fb:1d:f0:f0:de:ff:c3:5f:f4:38:8f: ef:97:96:c6:25:ec:ad:21:83:ef:80:5c:e3:bc:9f:31:ce:b8: d8:6a:5d:fd:95:7c:74:59:06:40:64:04:20:aa:71:3c:26:b8: 02:e5:9d:f9:c4:af:ff:ba:a1:42:2e:82:0f:9b:01:c2:b5:75: 5e:da:a1:38:4c:12:dd:1c:7d:41:11:b8:27:92:1d:7a:ad:4d: 46:4e:3c:e2:2d:e3:22:3b:21:02:af:21:48:2e:7e:80:59:3e: 79:7e:89:21:f8:05:77:47:3a:14:72:22:cb:25:e3:ac:4e:b4: f2:e2:98:d0:43:92:5f:82:b7:c0:fc:57:59:aa:e7:1c:69:41: 6d:be:ce:9b:c9:7a:a1:90:79:b9:bc:a8:8b:1d:3e:d0:99:f4: cb:f9:09:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfZXryAEhCHITWH/lYidAMXLI8OQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAwMDEyWhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjgzNzUwMTdmNDhjZjk5NmNmMjQ5YmEzOGI5ZDY5ZjQ1 YTE2M2JlOTg0NGQ4NTY4NDBhMWQxYWMzMGM0ZTYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgsAxlxISqMxSRK+Db5LTcZGJDSNY4JJdiDYxFiTNccSf+ IgfJWGK72pBK8c8z3HYEmdh8Skno9bgYEOaT1aLdhwIVSfMgilBUM1YC7u4opVoU 12g6gtIbc2mx6pP/UA/VY48VGnHpraBjRUXcIMAbR+U/55HiTlbs2jonsg8uqkUO ZL3bu3tv4ud2P8S/xpGESUmQlsIe5Mg+2LjjeKQ0Zebr1BPnvVC/M6tbRhtlmozH 3lWHyyONjA5EoEttCFZ/3MsL9qqJVe6x+CYvxEWYXVZQ8Jt0T/fqnXmV+TcVxMeh RyIbKNkXaH8hBN5oU6+ATysZ1EzQFKK0DnP+YOMBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/n5rOn8M/hNiJBc8c7K//nSpdBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMDAzOTIwLWNiZWEtNDNmMS04NzBjLTg0ZTA4NGJlMTUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GUwDQYJKoZIhvcNAQELBQADggEBAKz5/E4nI8fbumgMCes0rHUMvLDH tyJ2Y+rum5QlCBvzzmZeAIwZ0RcqQBOv1QL9vBIxfX827dHFHKy4Zd5buJ/UGKvM kmJCM65Az0IQJ0nv3U/pyyDvHBmYY7t0W3eoFBv7HfDw3v/DX/Q4j++XlsYl7K0h g++AXOO8nzHOuNhqXf2VfHRZBkBkBCCqcTwmuALlnfnEr/+6oUIugg+bAcK1dV7a oThMEt0cfUERuCeSHXqtTUZOPOIt4yI7IQKvIUgufoBZPnl+iSH4BXdHOhRyIssl 46xOtPLimNBDkl+Ct8D8V1mq5xxpQW2+zpvJeqGQebm8qIsdPtCZ9Mv5CaY= -----END CERTIFICATE-----Generated at Fri Jan 2 14:27:00 2026 by rpki-client