This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa File: 4f822f75-fc14-46c1-a803-e47f23928368.roa (raw, json) Hash identifier: SEgYoMaZMge6Vy7kbZwNEbLsQDVoGft2sTUGHY8BVPo= Subject key identifier: B0:15:58:81:C8:4E:78:3D:2F:95:D6:AD:7D:1F:6B:D2:FB:5E:6F:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5631A6DBC31C87993376B1277C5EEA67E6B76EE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa Signing time: Wed 10 Dec 2025 00:21:03 +0000 ROA not before: Wed 10 Dec 2025 00:21:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:31:a6:db:c3:1c:87:99:33:76:b1:27:7c:5e:ea:67:e6:b7:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:21:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a15a1df934b703d57773fbe4c23919502ac7a6eb977601123a9ba1c7f9e43e93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:a3:17:dc:e1:a2:f5:54:fa:23:f3:8d:7e: 2a:f3:0b:6c:b4:db:d1:d5:d2:48:d7:95:72:52:55: 21:a1:e0:56:ef:ac:f6:7e:1f:74:90:5d:38:77:7e: e8:77:57:84:84:e5:a0:f1:0f:ca:a0:c7:f2:47:f3: 5d:0f:51:8d:39:a7:70:53:1e:54:85:88:d0:0e:4e: 46:9a:58:0e:23:4e:3e:e4:b0:9d:03:a3:00:d0:11: 51:db:1f:c1:1c:56:07:6a:71:8a:db:8f:fa:93:68: 8d:a4:13:1f:92:a0:ce:e8:93:dd:d7:4d:6f:70:7f: dc:7b:33:f4:18:7d:f5:df:fd:98:a8:f6:be:44:5c: d0:02:de:53:a2:e6:0c:d4:18:80:e5:f1:ee:e6:1c: f7:49:d7:cd:68:81:09:2c:41:11:76:9a:c4:26:84: 5e:4a:32:7a:be:75:9c:e5:3b:9d:b5:1b:a1:9a:af: f1:93:79:64:eb:86:09:6b:29:c9:a5:e9:0a:a7:53: 0f:11:d4:a7:70:00:75:a2:cc:e5:56:3d:2a:2d:57: 83:c9:6f:bc:dc:d9:7d:95:b4:af:16:af:52:aa:e2: 59:95:99:0f:5e:15:0a:f9:c7:89:c5:c4:2f:72:cf: 20:c0:eb:e3:3f:de:53:95:f9:93:6a:6c:92:99:3b: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:58:81:C8:4E:78:3D:2F:95:D6:AD:7D:1F:6B:D2:FB:5E:6F:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.131.0/24 Signature Algorithm: sha256WithRSAEncryption ac:c8:9e:a8:7d:7c:f2:58:f0:b8:ae:ac:a3:d3:2b:17:ae:7e: d4:13:f9:90:3a:29:8c:30:9a:d8:4c:65:fc:c8:69:2e:b9:4a: e7:8e:a7:21:06:d0:6b:42:00:f0:aa:44:de:6e:f3:ae:79:37: f7:16:34:d2:d6:dc:86:55:e2:ab:9a:33:da:42:f5:15:fb:67: 96:bc:ff:b8:3e:85:65:9f:10:ce:5a:e8:e6:90:01:7e:ca:14: be:c1:f3:0a:72:93:f4:37:08:b8:89:8f:c4:ec:6e:f0:c5:58: bf:40:de:f4:14:d2:c2:14:07:68:75:dc:6e:7c:35:bb:be:88: 40:bb:22:76:ce:30:5c:39:46:17:ac:76:82:57:93:9a:d1:64: 93:af:99:f8:4a:6a:42:95:7f:02:0e:e3:ed:28:8b:e4:fb:49: b2:b5:be:0e:36:52:ad:2b:45:9b:1c:fa:da:bf:be:9d:ec:bd: 45:93:1c:9f:00:ac:f4:1e:2d:f5:ae:f8:47:ca:08:87:f7:31: 54:3c:1d:21:2b:ce:87:f8:3b:af:21:47:61:79:08:3a:c2:30: b5:de:0a:96:e6:10:8c:0b:2f:dd:59:62:7c:aa:82:5d:c6:5e: b6:92:11:f9:ae:65:8c:41:57:1c:cb:f7:79:aa:df:8c:90:1d: e0:c4:b2:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVjGm28Mch5kzdrEnfF7qZ+a3buAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMTAzWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTVhMWRmOTM0YjcwM2Q1Nzc3M2ZiZTRjMjM5MTk1MDJh YzdhNmViOTc3NjAxMTIzYTliYTFjN2Y5ZTQzZTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5hKMX3OGi9VT6I/ONfirzC2y029HV0kjXlXJSVSGh4Fbv rPZ+H3SQXTh3fuh3V4SE5aDxD8qgx/JH810PUY05p3BTHlSFiNAOTkaaWA4jTj7k sJ0DowDQEVHbH8EcVgdqcYrbj/qTaI2kEx+SoM7ok93XTW9wf9x7M/QYffXf/Zio 9r5EXNAC3lOi5gzUGIDl8e7mHPdJ181ogQksQRF2msQmhF5KMnq+dZzlO521G6Ga r/GTeWTrhglrKcml6QqnUw8R1KdwAHWizOVWPSotV4PJb7zc2X2VtK8Wr1Kq4lmV mQ9eFQr5x4nFxC9yzyDA6+M/3lOV+ZNqbJKZOyWhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsBVYgchOeD0vldatfR9r0vteb50wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmODIyZjc1LWZjMTQtNDZjMS1hODAzLWU0N2YyMzkyODM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroMwDQYJKoZIhvcNAQELBQADggEBAKzInqh9fPJY8LiurKPTKxeuftQT +ZA6KYwwmthMZfzIaS65SueOpyEG0GtCAPCqRN5u8655N/cWNNLW3IZV4quaM9pC 9RX7Z5a8/7g+hWWfEM5a6OaQAX7KFL7B8wpyk/Q3CLiJj8TsbvDFWL9A3vQU0sIU B2h13G58Nbu+iEC7InbOMFw5RhesdoJXk5rRZJOvmfhKakKVfwIO4+0oi+T7SbK1 vg42Uq0rRZsc+tq/vp3svUWTHJ8ArPQeLfWu+EfKCIf3MVQ8HSErzof4O68hR2F5 CDrCMLXeCpbmEIwLL91ZYnyqgl3GXraSEfmuZYxBVxzL93mq34yQHeDEskY= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:34 2026 by rpki-client