This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa File: 5f801a4f-8f39-41cb-9994-794acc617667.roa (raw, json) Hash identifier: IF8Z3VLbI1DRydREG0wMZ02ifHjIIPHXbXWS1x+GqOE= Subject key identifier: 3D:86:36:FB:1B:37:AB:65:91:89:BE:B1:B5:1D:65:BA:82:0C:91:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 330FECEE1EADB0E8B58408C63E98199290C9D768 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa Signing time: Wed 24 Dec 2025 12:51:47 +0000 ROA not before: Wed 24 Dec 2025 12:51:47 +0000 ROA not after: Tue 24 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 100.52.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0f:ec:ee:1e:ad:b0:e8:b5:84:08:c6:3e:98:19:92:90:c9:d7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 24 12:51:47 2025 GMT Not After : Mar 24 23:59:59 2026 GMT Subject: serialNumber=0e9dd86f0bd9ea9624a65837a3601845e3afd9cf03c44dc36c19c17b6bc55af8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:b5:88:ab:b0:4e:d5:ee:9c:a3:08:cd:28: df:fc:2e:f9:47:27:c0:0a:31:9a:31:e9:a2:44:45: 3e:e1:0e:31:48:d4:b7:32:39:06:f2:e3:15:3d:0b: 62:0b:24:d5:e5:ba:3f:99:e2:b2:a5:97:0e:f3:a2: 39:e0:10:51:bf:c3:da:7d:b2:8f:b6:17:6a:62:55: 4c:bc:d8:7a:aa:35:28:11:c4:69:4f:c3:e5:92:16: b1:b0:d6:1f:39:d6:b2:8f:8f:8d:74:81:cf:72:18: 8a:e8:3d:ec:b5:24:90:05:41:92:ae:66:3b:60:75: 44:a6:02:4a:7f:da:9d:27:3c:db:13:ed:e0:12:55: 91:d4:8a:a8:6e:4d:6f:fb:4a:34:29:bc:ca:e0:85: 8e:9c:38:9b:79:34:3b:25:f1:e8:a9:f0:f9:5a:98: 16:bc:27:56:03:ca:29:3f:0d:63:26:6e:2c:d3:ca: 9c:09:fa:20:d8:8e:9a:8f:1a:f3:2d:52:24:b7:89: 23:fd:69:2d:b7:12:ea:61:1e:2f:fb:68:e1:d5:ae: 28:bb:e5:b8:f7:e0:8b:4a:4f:ca:7b:38:52:84:9b: bd:af:9d:2f:51:f3:eb:3f:f0:66:42:90:a4:81:99: 58:5a:e6:44:48:d6:ac:32:14:be:3d:98:cb:27:f6: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:86:36:FB:1B:37:AB:65:91:89:BE:B1:B5:1D:65:BA:82:0C:91:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.52.164.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:c0:a5:e1:3b:17:3a:fa:15:ce:8f:dd:2b:5c:90:e9:85:e5: 09:61:ca:c0:1d:a1:06:85:c3:64:32:f8:26:45:0b:3a:67:20: 8a:47:02:f3:e7:cb:2a:87:93:80:09:b3:45:67:c6:13:d8:d8: c2:c5:86:15:d0:fd:6a:79:41:a7:ab:76:1b:7e:11:83:ef:71: 30:5a:e4:e9:e4:b0:17:4a:c0:82:14:1e:22:a1:f2:62:37:ff: ac:2b:77:03:27:c9:2e:d6:9e:bf:b6:ac:7b:4a:27:ad:e4:21: e1:b4:20:40:eb:f0:62:4f:80:6a:5c:d4:1e:9c:3a:df:d7:55: 11:65:59:45:f4:4c:1f:a9:76:83:4b:30:50:df:7e:d2:6e:31: 93:07:15:07:b3:a7:41:3b:8d:fc:f4:82:f0:ed:2d:43:11:01: 41:8e:6d:45:66:41:bf:f8:07:5e:e6:85:48:34:d8:64:c9:d4: 2f:5e:e8:28:55:06:1e:14:32:c5:a0:19:d6:20:84:04:2e:ae: b2:ba:96:35:73:33:a9:56:b6:0d:a0:ca:c4:34:df:54:3c:db: e6:8e:6b:ae:2a:b7:30:85:42:95:6b:12:41:54:ca:03:0a:14: 8f:4b:a9:52:08:5c:2a:75:b8:af:93:cd:7a:f5:5f:a8:30:8d: 93:b8:ad:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMw/s7h6tsOi1hAjGPpgZkpDJ12gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjI0MTI1MTQ3WhcNMjYwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTlkZDg2ZjBiZDllYTk2MjRhNjU4MzdhMzYwMTg0NWUz YWZkOWNmMDNjNDRkYzM2YzE5YzE3YjZiYzU1YWY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChOLWIq7BO1e6cowjNKN/8LvlHJ8AKMZox6aJERT7hDjFI 1LcyOQby4xU9C2ILJNXluj+Z4rKllw7zojngEFG/w9p9so+2F2piVUy82HqqNSgR xGlPw+WSFrGw1h851rKPj410gc9yGIroPey1JJAFQZKuZjtgdUSmAkp/2p0nPNsT 7eASVZHUiqhuTW/7SjQpvMrghY6cOJt5NDsl8eip8PlamBa8J1YDyik/DWMmbizT ypwJ+iDYjpqPGvMtUiS3iSP9aS23EuphHi/7aOHVrii75bj34ItKT8p7OFKEm72v nS9R8+s/8GZCkKSBmVha5kRI1qwyFL49mMsn9k41AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPYY2+xs3q2WRib6xtR1luoIMkTgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmODAxYTRmLThmMzktNDFjYi05OTk0LTc5NGFjYzYxNzY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFkNKQwDQYJKoZIhvcNAQELBQADggEBAD3ApeE7Fzr6Fc6P3StckOmF5Qlh ysAdoQaFw2Qy+CZFCzpnIIpHAvPnyyqHk4AJs0VnxhPY2MLFhhXQ/Wp5Qaerdht+ EYPvcTBa5OnksBdKwIIUHiKh8mI3/6wrdwMnyS7Wnr+2rHtKJ63kIeG0IEDr8GJP gGpc1B6cOt/XVRFlWUX0TB+pdoNLMFDfftJuMZMHFQezp0E7jfz0gvDtLUMRAUGO bUVmQb/4B17mhUg02GTJ1C9e6ChVBh4UMsWgGdYghAQurrK6ljVzM6lWtg2gysQ0 31Q82+aOa64qtzCFQpVrEkFUygMKFI9LqVIIXCp1uK+TzXr1X6gwjZO4rWU= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:58 2026 by rpki-client