This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa File: 8a7b1d2a-a694-4e2c-b292-4263660a9300.roa (raw, json) Hash identifier: uDqbRDg8rLoRrVdFMDY9fkluwfTABR7sGFQyRt7Mz4w= Subject key identifier: 14:E0:DA:2C:3E:81:D4:ED:9C:50:7A:70:B1:86:B6:31:48:08:E7:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1162A3B9306AD633603606529483AE4F880F5C2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa Signing time: Thu 11 Dec 2025 00:00:09 +0000 ROA not before: Thu 11 Dec 2025 00:00:09 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:62:a3:b9:30:6a:d6:33:60:36:06:52:94:83:ae:4f:88:0f:5c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:00:09 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=40ddc6bdf02729d3d032d1620a7027fae081771655d9a4a4ade140bf080783d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:e8:61:40:5d:47:81:aa:36:88:b3:d5:69: 4f:d1:13:1b:43:1d:86:f7:77:62:74:df:b8:47:56: 92:96:73:0d:8d:fa:01:0d:d2:3c:32:23:14:79:9f: 4d:a4:3f:c1:9f:8f:6d:b3:28:fe:fb:ab:ec:89:56: b0:39:dc:89:68:0e:1b:4c:1d:40:f8:b0:ca:94:90: d3:78:7a:17:5c:90:ee:bb:a0:f6:af:d1:70:a5:5d: f3:3d:f8:95:7b:16:6f:3c:a5:fd:d7:77:fe:93:ff: 59:e6:7e:d3:c0:62:02:a4:cc:0f:0c:20:f6:06:61: 66:02:02:49:92:dc:7d:9a:af:2e:ee:9f:35:98:72: 3a:e0:df:74:eb:86:24:e3:85:56:92:b5:e6:64:16: ee:a8:0f:76:d8:f4:e6:be:2f:83:1b:a1:09:ba:6f: 48:a9:84:16:1b:b1:ff:0e:8a:d8:fe:b0:6e:4b:54: 5e:7a:94:b3:99:42:2f:8f:8e:aa:da:be:00:6a:a7: 53:ca:f1:f8:6a:4c:ab:b3:e1:89:5a:e8:b7:2c:0d: 46:e9:d8:dd:45:d2:60:9f:31:01:50:69:10:5a:9e: 55:c9:80:85:1f:ae:12:c5:e4:d2:a6:dd:7a:00:e5: 5c:7b:ef:1c:60:4c:cd:0b:cb:49:39:a1:de:21:f7: 50:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E0:DA:2C:3E:81:D4:ED:9C:50:7A:70:B1:86:B6:31:48:08:E7:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption 39:84:1e:0b:ce:cc:25:5a:6c:97:d6:db:39:ff:53:41:00:e9: b3:dc:15:23:13:32:30:5e:94:1f:16:b9:4d:b8:b5:a8:e7:b8: 30:3a:d6:f4:0f:7e:7b:f5:4b:2e:35:74:6d:c8:18:f6:de:61: a8:64:f9:cf:91:48:1a:20:30:d2:ee:ff:1c:6b:ef:3d:97:ba: c7:7f:50:27:cb:b9:b9:5e:53:9e:56:21:cb:85:2c:99:6f:19: cc:c6:b6:07:69:e3:5f:b4:b4:7e:fe:ba:b9:75:58:6c:07:2a: 59:1f:7b:79:91:93:4b:78:2a:3d:0a:ca:8e:c6:1f:dd:27:68: 48:08:4c:42:6e:a1:18:af:67:7f:db:72:b5:6f:44:af:c3:b2: 2f:6f:38:88:07:58:cf:7b:82:ca:15:de:7e:0f:ee:23:82:e8: cf:89:40:2c:2e:8c:01:b0:16:96:68:40:b8:36:79:b4:5f:c5: b9:d8:bb:42:06:cc:a7:95:17:a6:c6:71:0e:1f:69:eb:cc:91: 9a:24:04:71:ad:e6:c9:5b:fa:e9:36:d5:88:c8:57:d9:d8:1b: 4c:40:d1:9a:45:ce:a5:91:e3:0d:4b:66:c2:37:f1:02:3c:6e: 5a:b9:8e:62:a2:83:22:cf:80:78:03:4f:13:60:52:7e:ef:7d: a0:38:66:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEWKjuTBq1jNgNgZSlIOuT4gPXCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAwMDA5WhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGRkYzZiZGYwMjcyOWQzZDAzMmQxNjIwYTcwMjdmYWUw ODE3NzE2NTVkOWE0YTRhZGUxNDBiZjA4MDc4M2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC65+hhQF1Hgao2iLPVaU/RExtDHYb3d2J037hHVpKWcw2N +gEN0jwyIxR5n02kP8Gfj22zKP77q+yJVrA53IloDhtMHUD4sMqUkNN4ehdckO67 oPav0XClXfM9+JV7Fm88pf3Xd/6T/1nmftPAYgKkzA8MIPYGYWYCAkmS3H2ary7u nzWYcjrg33TrhiTjhVaSteZkFu6oD3bY9Oa+L4MboQm6b0iphBYbsf8Oitj+sG5L VF56lLOZQi+PjqravgBqp1PK8fhqTKuz4Yla6LcsDUbp2N1F0mCfMQFQaRBanlXJ gIUfrhLF5NKm3XoA5Vx77xxgTM0Ly0k5od4h91BnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFODaLD6B1O2cUHpwsYa2MUgI59cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhN2IxZDJhLWE2OTQtNGUyYy1iMjkyLTQyNjM2NjBhOTMwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBADmEHgvOzCVabJfW2zn/U0EA6bPc FSMTMjBelB8WuU24tajnuDA61vQPfnv1Sy41dG3IGPbeYahk+c+RSBogMNLu/xxr 7z2Xusd/UCfLubleU55WIcuFLJlvGczGtgdp41+0tH7+url1WGwHKlkfe3mRk0t4 Kj0Kyo7GH90naEgITEJuoRivZ3/bcrVvRK/Dsi9vOIgHWM97gsoV3n4P7iOC6M+J QCwujAGwFpZoQLg2ebRfxbnYu0IGzKeVF6bGcQ4faevMkZokBHGt5slb+uk21YjI V9nYG0xA0ZpFzqWR4w1LZsI38QI8blq5jmKigyLPgHgDTxNgUn7vfaA4ZsE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:31:51 2026 by rpki-client