This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42f513de-6ca0-4617-80f9-fc93a1810309.roa File: 42f513de-6ca0-4617-80f9-fc93a1810309.roa (raw, json) Hash identifier: 8ZIZcSadKTbWflcY6ExaZFL6WTcoAW2kGqk3L9YMNcc= Subject key identifier: 6D:7C:17:FF:FC:1B:B9:EB:0A:1C:76:7C:B1:04:0F:35:3E:EB:86:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64276373F378AF62EB014593333ACA899A0DBB2D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42f513de-6ca0-4617-80f9-fc93a1810309.roa Signing time: Tue 25 Nov 2025 00:20:45 +0000 ROA not before: Tue 25 Nov 2025 00:20:45 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:27:63:73:f3:78:af:62:eb:01:45:93:33:3a:ca:89:9a:0d:bb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:20:45 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=786bc3eee62676e4480adb9873427686f683ded3efea55764338779140c31906, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:b9:b4:8f:d4:60:18:1f:93:f8:01:0f:08: 59:87:7c:f4:c4:7f:cb:af:10:f2:14:d4:02:4b:0b: 09:a0:6f:c6:e1:53:c6:91:6f:ad:8a:89:28:16:a7: 99:2d:0f:ce:87:7d:7d:90:09:2d:c1:f0:95:48:52: 56:f1:ba:d4:98:ff:7a:8f:12:f4:49:a7:42:f9:c6: 88:fd:2f:80:36:05:27:b7:d4:94:96:67:1b:f8:11: 49:62:0b:8a:c9:35:05:0a:72:9d:34:6f:71:ac:8e: f5:fa:87:ef:f8:b6:cd:44:11:20:c0:a0:12:79:b2: 0a:a1:49:b5:43:b8:b5:d8:63:33:25:56:ea:5a:8f: 7c:9e:c4:f0:d7:63:68:55:53:c2:6d:2a:b9:dd:56: 2d:eb:44:8e:c6:1b:b9:d0:16:b7:26:2e:48:32:50: 1c:5d:3d:9d:25:d6:ac:60:d4:dd:59:cb:6a:8e:49: 67:df:b7:c9:47:9a:0c:57:ae:00:3b:fa:d9:3a:cf: fc:c5:18:a1:68:5a:2a:45:37:34:06:3a:84:41:e4: ee:bc:6d:01:29:f4:a4:13:a8:4a:25:26:e0:97:53: b1:1a:28:7f:cb:e8:aa:62:45:d6:74:1a:a5:05:be: 8a:1b:86:c7:33:38:73:13:fe:b6:21:98:2c:eb:f5: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7C:17:FF:FC:1B:B9:EB:0A:1C:76:7C:B1:04:0F:35:3E:EB:86:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42f513de-6ca0-4617-80f9-fc93a1810309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.16.0/20 Signature Algorithm: sha256WithRSAEncryption a0:85:32:cd:d2:09:01:2c:73:49:12:8a:63:07:5c:25:4c:20: 65:22:50:9a:2e:38:01:f0:84:0d:4f:ac:5b:36:25:d0:ac:e7: 95:e9:de:63:73:3e:cf:f2:6b:f0:8a:7c:c7:51:be:8c:45:fe: 5e:90:cf:eb:f6:4f:7d:fc:5c:4e:7c:f4:08:23:46:83:7b:8f: ee:72:0d:30:89:71:89:3b:b2:39:bf:66:9b:70:51:6e:7a:35: 9e:fd:1c:0c:c5:98:61:e5:a6:60:c9:5e:35:f6:c8:5f:e7:3f: 72:e0:eb:85:58:26:6f:61:cf:a6:ca:72:b7:b9:07:1d:f7:5f: 96:39:dd:b7:99:07:bb:cc:df:c8:f2:10:4f:15:67:41:e1:b6: b1:34:5d:43:12:a0:37:12:b4:54:d5:a0:b5:1c:fa:f6:5a:81: 16:c1:9c:7e:dd:ff:1e:f1:6e:d9:39:0f:35:74:ec:ba:f2:a1: 01:2d:f9:c9:67:bd:3f:a2:69:01:9f:aa:d6:ca:37:0e:a5:77: 5c:58:64:b4:f5:15:f6:f7:f2:45:ed:e7:a1:8f:52:a7:2c:18: 45:a3:fb:70:fa:69:0b:fd:e3:33:14:cd:49:73:eb:ba:8b:f6: 04:74:2f:a0:8e:2f:4a:cc:31:28:38:78:f3:50:df:8c:34:27: 1f:c5:83:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZCdjc/N4r2LrAUWTMzrKiZoNuy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAyMDQ1WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODZiYzNlZWU2MjY3NmU0NDgwYWRiOTg3MzQyNzY4NmY2 ODNkZWQzZWZlYTU1NzY0MzM4Nzc5MTQwYzMxOTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGlbm0j9RgGB+T+AEPCFmHfPTEf8uvEPIU1AJLCwmgb8bh U8aRb62KiSgWp5ktD86HfX2QCS3B8JVIUlbxutSY/3qPEvRJp0L5xoj9L4A2BSe3 1JSWZxv4EUliC4rJNQUKcp00b3GsjvX6h+/4ts1EESDAoBJ5sgqhSbVDuLXYYzMl Vupaj3yexPDXY2hVU8JtKrndVi3rRI7GG7nQFrcmLkgyUBxdPZ0l1qxg1N1Zy2qO SWfft8lHmgxXrgA7+tk6z/zFGKFoWipFNzQGOoRB5O68bQEp9KQTqEolJuCXU7Ea KH/L6KpiRdZ0GqUFvoobhsczOHMT/rYhmCzr9Wd5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbXwX//wbuesKHHZ8sQQPNT7rhv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZjUxM2RlLTZjYTAtNDYxNy04MGY5LWZjOTNhMTgxMDMwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgBAwDQYJKoZIhvcNAQELBQADggEBAKCFMs3SCQEsc0kSimMHXCVMIGUi UJouOAHwhA1PrFs2JdCs55Xp3mNzPs/ya/CKfMdRvoxF/l6Qz+v2T338XE589Agj RoN7j+5yDTCJcYk7sjm/ZptwUW56NZ79HAzFmGHlpmDJXjX2yF/nP3Lg64VYJm9h z6bKcre5Bx33X5Y53beZB7vM38jyEE8VZ0HhtrE0XUMSoDcStFTVoLUc+vZagRbB nH7d/x7xbtk5DzV07LryoQEt+clnvT+iaQGfqtbKNw6ld1xYZLT1Ffb38kXt56GP UqcsGEWj+3D6aQv94zMUzUlz67qL9gR0L6COL0rMMSg4ePNQ34w0Jx/Fg0E= -----END CERTIFICATE-----Generated at Tue Nov 25 17:34:37 2025 by rpki-client