This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa File: 0432d89e-91f1-496c-bcef-63c4e038da59.roa (raw, json) Hash identifier: cRafeR9+LHULxnCe7MsXJVZMEQ/KpgGhEepQgwg+SOk= Subject key identifier: 5D:E4:79:FE:4C:DD:1D:13:FE:4A:FC:10:7D:EB:AE:32:F1:10:F1:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F31025E26EF3D7BEFACBAD9CAEEEC8104C98B90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa Signing time: Tue 11 Nov 2025 01:40:54 +0000 ROA not before: Tue 11 Nov 2025 01:40:54 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.128.64.0/18 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2f:31:02:5e:26:ef:3d:7b:ef:ac:ba:d9:ca:ee:ec:81:04:c9:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 11 01:40:54 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=0d071742833463f21e327f233e85cfca0d93056382dac2be297e7b34f4e37dae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:b7:7e:47:0e:a0:dc:f8:1a:4d:57:87:1e: 3f:e1:9c:a8:31:d2:ce:6d:aa:de:fc:a4:75:5c:c2: 29:e5:c6:70:85:0d:fe:3c:7d:dc:0b:df:52:8b:7c: 9c:cb:17:91:e7:ca:ab:17:0d:ce:ec:22:2b:d2:ea: a4:03:26:0b:8c:f1:5a:75:59:42:f2:86:cd:cf:dd: 8f:6d:15:2a:c7:f2:7c:84:e1:c8:c8:7d:9c:31:67: a0:a7:6e:3f:41:a1:87:50:f4:be:cf:65:20:ac:8d: ac:c0:28:c0:d5:43:a5:cc:d2:0a:aa:a5:f7:bb:7e: 5d:5d:36:20:53:6d:42:99:d7:d9:d7:73:7e:1c:7d: dc:66:cf:8c:64:74:4f:1a:d1:f1:e3:d2:51:da:8d: 0f:34:d0:8c:5d:d7:da:82:f3:79:cd:df:a3:1d:4e: 54:1d:ee:97:17:9c:ae:6b:73:4c:db:15:e8:25:2a: 25:d8:13:ce:f2:83:e3:bc:cc:c1:08:d3:26:62:aa: 9c:76:b6:5d:de:95:37:7b:18:15:49:a5:d0:aa:3d: bf:9a:32:a0:9e:15:ad:a7:ad:34:0b:30:07:34:03: d3:f5:e6:ba:f2:ad:4e:3d:30:02:ab:90:af:3c:34: e3:d3:78:e4:03:e1:76:f7:ad:6e:92:d6:b5:b2:d6: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:79:FE:4C:DD:1D:13:FE:4A:FC:10:7D:EB:AE:32:F1:10:F1:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption bf:7c:5d:03:ac:73:01:47:ea:0a:0b:c4:26:f2:c8:82:5a:37: 40:d0:7f:a1:bc:c4:6b:fe:ae:3b:b0:b9:d2:86:58:0c:58:7f: ca:23:6e:a4:2d:ae:49:67:8b:dd:d9:81:dd:31:ea:fb:bd:25: 7f:af:10:71:ed:0e:62:84:f8:8e:60:ff:24:45:f3:e6:0c:f4: 66:ab:35:bb:d8:df:ed:72:08:24:0a:02:74:e7:73:fa:20:19: b9:b7:8f:2f:4a:fc:2a:d0:4e:c7:a4:2a:6c:2e:47:ee:46:d2: ab:7e:cd:b6:4a:b7:3a:88:d9:91:52:71:ad:35:78:5a:15:ca: 14:ca:9a:e6:5c:66:a8:b8:4b:2e:60:9d:3f:4b:16:d9:61:99: 5b:65:d3:9e:64:50:82:d7:92:b0:94:3b:f2:99:e6:64:09:52: c1:a4:c2:cd:4d:af:7d:76:66:05:0a:99:cd:02:90:82:77:0a: 39:61:6a:96:8d:c1:42:38:58:f4:b3:97:1c:ac:f0:cb:2b:79: cb:fa:32:70:31:bf:b8:20:ed:71:5f:8a:2f:d8:81:0e:97:24: cc:41:e4:6b:30:0d:c2:24:94:30:53:5e:09:a5:44:82:f8:ab: e2:d8:36:0a:b7:84:10:ba:73:25:72:e5:a6:c9:74:31:9d:4d: 23:aa:9c:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULzECXibvPXvvrLrZyu7sgQTJi5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDE0MDU0WhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDA3MTc0MjgzMzQ2M2YyMWUzMjdmMjMzZTg1Y2ZjYTBk OTMwNTYzODJkYWMyYmUyOTdlN2IzNGY0ZTM3ZGFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2XLd+Rw6g3PgaTVeHHj/hnKgx0s5tqt78pHVcwinlxnCF Df48fdwL31KLfJzLF5HnyqsXDc7sIivS6qQDJguM8Vp1WULyhs3P3Y9tFSrH8nyE 4cjIfZwxZ6Cnbj9BoYdQ9L7PZSCsjazAKMDVQ6XM0gqqpfe7fl1dNiBTbUKZ19nX c34cfdxmz4xkdE8a0fHj0lHajQ800Ixd19qC83nN36MdTlQd7pcXnK5rc0zbFegl KiXYE87yg+O8zMEI0yZiqpx2tl3elTd7GBVJpdCqPb+aMqCeFa2nrTQLMAc0A9P1 5rryrU49MAKrkK88NOPTeOQD4Xb3rW6S1rWy1jmBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXeR5/kzdHRP+SvwQfeuuMvEQ8c8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MzJkODllLTkxZjEtNDk2Yy1iY2VmLTYzYzRlMDM4ZGE1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaVgEAwDQYJKoZIhvcNAQELBQADggEBAL98XQOscwFH6goLxCbyyIJaN0DQ f6G8xGv+rjuwudKGWAxYf8ojbqQtrklni93Zgd0x6vu9JX+vEHHtDmKE+I5g/yRF 8+YM9GarNbvY3+1yCCQKAnTnc/ogGbm3jy9K/CrQTsekKmwuR+5G0qt+zbZKtzqI 2ZFSca01eFoVyhTKmuZcZqi4Sy5gnT9LFtlhmVtl055kUILXkrCUO/KZ5mQJUsGk ws1Nr312ZgUKmc0CkIJ3CjlhapaNwUI4WPSzlxys8Msrecv6MnAxv7gg7XFfii/Y gQ6XJMxB5GswDcIklDBTXgmlRIL4q+LYNgq3hBC6cyVy5abJdDGdTSOqnJo= -----END CERTIFICATE-----Generated at Fri Dec 19 06:49:11 2025 by rpki-client