This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ca66f17-2e0a-478c-ae43-f107fbf9c20e.roa File: 2ca66f17-2e0a-478c-ae43-f107fbf9c20e.roa (raw, json) Hash identifier: sCFaLZbMDTSGiwcNNXNY/ZFakOrRD2z97BQyDJG72o4= Subject key identifier: AF:A1:7A:CA:C2:44:41:9A:4A:01:09:3B:76:5E:2E:A5:83:A3:C2:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34C4D3A6357492D4A29030B908CB5537578498A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ca66f17-2e0a-478c-ae43-f107fbf9c20e.roa Signing time: Thu 20 Nov 2025 17:36:51 +0000 ROA not before: Thu 20 Nov 2025 17:36:51 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.148.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c4:d3:a6:35:74:92:d4:a2:90:30:b9:08:cb:55:37:57:84:98:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 20 17:36:51 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=9b53f8a13b20e918edfa771c021fec6149487c2323df2e9e9866db8cacf7ae48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:6d:0b:f0:46:f3:d2:c8:5f:d9:75:01:af: 58:e5:e1:38:7a:84:6c:d0:bd:b4:0c:1c:dc:53:05: 67:ae:79:49:e8:9a:fd:18:02:04:f8:91:a0:20:be: f6:89:9e:63:a6:06:28:c6:bf:b6:c4:c3:d4:c0:42: 7b:65:7b:f9:c2:0a:0c:89:c8:58:68:49:45:f6:62: 34:d6:5f:e3:31:0c:0c:46:b3:fe:43:0f:81:52:6f: 14:30:74:b8:15:90:3d:97:30:c8:a4:d6:02:a9:9e: e9:be:d1:31:da:59:26:25:75:97:5d:14:65:27:3f: 4a:14:48:99:dc:34:08:bd:44:d8:8f:cd:b6:1d:2f: ed:52:7b:86:fc:56:80:3e:53:b7:b3:eb:8c:00:97: fa:d7:a6:f5:ad:c4:2f:a0:48:6b:95:7f:d6:50:f5: 21:fb:0c:51:2a:24:c3:eb:17:57:fb:54:93:a7:71: c6:77:6b:cb:39:23:79:98:2f:2b:13:aa:0d:9b:a5: 49:d5:21:ae:f5:94:d6:80:c7:19:83:3a:0e:24:9c: c8:0b:6d:ff:59:b7:e6:fa:70:33:90:5c:4c:18:aa: 18:b0:fb:58:86:cb:8f:f1:61:a1:60:7d:68:87:45: 4a:eb:0d:fe:36:23:a0:5b:ed:15:c5:83:54:33:f4: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:7A:CA:C2:44:41:9A:4A:01:09:3B:76:5E:2E:A5:83:A3:C2:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ca66f17-2e0a-478c-ae43-f107fbf9c20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.148.0.0/17 Signature Algorithm: sha256WithRSAEncryption bf:ef:5c:3b:1f:ea:c0:0b:9c:74:50:96:e8:69:4f:4d:35:0d: 86:da:47:59:0e:f6:86:16:14:5e:8d:7f:db:0f:1e:09:80:86: 91:de:19:62:9d:63:9c:65:55:7b:00:b3:f7:e2:87:35:9a:2f: 67:55:8d:1a:df:a6:24:b5:6e:96:78:06:6e:4b:e9:42:ce:d3: 02:f9:43:e0:a9:43:75:cd:f2:9b:74:9f:da:ad:c1:6d:e5:2d: 36:38:4b:93:ef:da:cf:3c:35:39:e2:39:5f:01:3c:4a:99:8a: ed:c2:6f:5e:e3:73:42:11:d5:11:5d:e7:dc:9a:6f:a8:54:2d: 01:8a:cc:af:46:aa:6e:7b:76:eb:aa:4a:8e:36:e3:02:13:2d: 28:e4:98:24:d1:67:c5:6e:6a:4d:48:43:49:f4:5a:8b:de:d1: 3d:ff:e4:7a:62:20:4c:ea:3e:31:dd:21:43:d1:a6:7d:f1:68: 2c:97:1d:d3:42:94:c8:8e:bf:29:8c:81:cb:c7:de:bf:cf:27: cc:b1:d7:21:47:3e:6b:d8:28:0f:c7:da:b4:ea:0a:fc:f2:d5: 95:4f:3f:24:7c:f3:1d:96:c5:0d:28:c0:1c:cf:0f:b2:cb:4b: 48:0c:83:f2:78:b7:fe:47:54:3b:c4:6e:ab:a3:e0:e5:9d:77: 7c:11:ad:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNMTTpjV0ktSikDC5CMtVN1eEmKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMTczNjUxWhcNMjYwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjUzZjhhMTNiMjBlOTE4ZWRmYTc3MWMwMjFmZWM2MTQ5 NDg3YzIzMjNkZjJlOWU5ODY2ZGI4Y2FjZjdhZTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSnm0L8Ebz0shf2XUBr1jl4Th6hGzQvbQMHNxTBWeueUno mv0YAgT4kaAgvvaJnmOmBijGv7bEw9TAQntle/nCCgyJyFhoSUX2YjTWX+MxDAxG s/5DD4FSbxQwdLgVkD2XMMik1gKpnum+0THaWSYldZddFGUnP0oUSJncNAi9RNiP zbYdL+1Se4b8VoA+U7ez64wAl/rXpvWtxC+gSGuVf9ZQ9SH7DFEqJMPrF1f7VJOn ccZ3a8s5I3mYLysTqg2bpUnVIa71lNaAxxmDOg4knMgLbf9Zt+b6cDOQXEwYqhiw +1iGy4/xYaFgfWiHRUrrDf42I6Bb7RXFg1Qz9GGVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr6F6ysJEQZpKAQk7dl4upYOjwhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjYTY2ZjE3LTJlMGEtNDc4Yy1hZTQzLWYxMDdmYmY5YzIwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQlAAwDQYJKoZIhvcNAQELBQADggEBAL/vXDsf6sALnHRQluhpT001DYba R1kO9oYWFF6Nf9sPHgmAhpHeGWKdY5xlVXsAs/fihzWaL2dVjRrfpiS1bpZ4Bm5L 6ULO0wL5Q+CpQ3XN8pt0n9qtwW3lLTY4S5Pv2s88NTniOV8BPEqZiu3Cb17jc0IR 1RFd59yab6hULQGKzK9Gqm57duuqSo424wITLSjkmCTRZ8Vuak1IQ0n0Wove0T3/ 5HpiIEzqPjHdIUPRpn3xaCyXHdNClMiOvymMgcvH3r/PJ8yx1yFHPmvYKA/H2rTq Cvzy1ZVPPyR88x2WxQ0owBzPD7LLS0gMg/J4t/5HVDvEbquj4OWdd3wRrbs= -----END CERTIFICATE-----Generated at Tue Nov 25 17:36:04 2025 by rpki-client