This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ade7ee8-a885-406a-b8a3-96e4497c78eb.roa File: 9ade7ee8-a885-406a-b8a3-96e4497c78eb.roa (raw, json) Hash identifier: BGHgwTHr3xQseh3lErNNhqzDyham5GRc3BUEH7voNbE= Subject key identifier: A1:8F:22:5E:48:0B:D6:39:C8:83:F3:FC:B6:BF:75:1B:FF:1E:D7:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D3DCB7A19DE24AF79F9F621EB75C4D625F879E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ade7ee8-a885-406a-b8a3-96e4497c78eb.roa Signing time: Wed 10 Dec 2025 00:10:42 +0000 ROA not before: Wed 10 Dec 2025 00:10:42 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3d:cb:7a:19:de:24:af:79:f9:f6:21:eb:75:c4:d6:25:f8:79:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:10:42 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=244d28ea77bef3c46ce8e86fe64682b4a06678b3e798f88e46148b8b7a8094d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:d4:3d:17:bc:b3:0f:83:e2:c3:d2:7f:38: d2:2c:5a:d8:c5:c9:93:f4:d5:64:47:af:f9:97:a7: bd:09:22:d3:85:24:ea:44:98:75:f9:bc:07:98:3d: 53:16:77:24:cd:45:7d:6f:de:88:a7:8b:cf:85:1e: 8d:65:a7:88:fe:d4:cf:00:2e:66:01:0a:3a:07:45: 20:2b:35:0d:f6:04:55:cb:cc:40:b4:1b:f9:d8:e8: 03:6f:84:f8:5d:9f:90:cd:89:ad:0e:d7:d5:60:da: 5e:17:82:5b:2b:e3:cd:5f:f4:00:f0:a3:00:0a:e4: 6d:93:fe:13:3e:52:82:61:2e:ae:eb:0c:3e:c0:37: 27:ea:72:23:e7:81:4c:dd:9d:66:e7:e4:9e:20:2b: 40:52:af:21:d2:0c:7d:18:9e:25:69:eb:d6:3a:13: 46:4f:8a:a0:0a:0d:ff:8f:24:51:16:4e:ee:b9:18: 09:fd:21:c4:86:01:16:8d:95:ee:2f:94:18:7c:5f: 06:2e:c2:95:a3:f2:2c:de:ab:97:3f:c7:35:1e:fe: 67:5a:e8:21:d8:dc:6c:44:61:36:db:12:00:ce:39: 15:a0:28:70:52:39:a9:35:cd:3f:42:59:78:76:b2: b7:5b:39:8c:a2:86:e9:42:d2:63:73:1e:cb:b0:47: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:22:5E:48:0B:D6:39:C8:83:F3:FC:B6:BF:75:1B:FF:1E:D7:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ade7ee8-a885-406a-b8a3-96e4497c78eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:e5:f6:21:06:f6:9b:c7:b3:40:c9:35:17:cb:5b:c1:51:00: 3f:3f:ef:fb:9a:2d:5b:15:f8:af:d0:b0:ed:db:e9:f8:ed:95: cb:59:40:63:9d:2c:cb:d3:e4:08:4b:ad:1c:e2:cd:10:07:af: c2:4a:c6:99:94:c8:66:d4:7e:a3:5e:30:39:d1:91:20:ed:15: 46:f6:2f:31:95:e6:9b:c5:f9:92:c9:b1:98:cd:d9:69:21:34: 94:81:5a:01:38:5b:b9:37:67:64:93:d9:c5:08:62:94:9b:a0: da:5a:08:d7:b2:0b:57:b7:4a:33:86:65:28:82:2b:3c:26:26: e9:b7:d8:1f:42:07:02:15:c7:b2:74:b2:2c:7e:da:c6:be:4d: f9:52:11:f5:0a:d2:a3:2b:f2:03:06:1c:59:4f:de:18:8e:fd: 6b:f6:0f:55:48:08:34:c3:32:ce:b3:a6:da:14:4d:7f:ce:54: c1:d9:96:26:79:52:46:65:86:1d:77:15:ed:8f:b7:9e:3a:75: e4:6f:5f:a0:43:85:01:2d:b0:5b:fa:42:3f:80:1f:5f:6d:b3: f7:91:07:80:11:9e:b1:9b:6c:88:ea:49:58:f5:90:07:37:32: a3:c3:5e:ee:72:2e:30:63:f0:89:39:1e:a6:49:56:b1:22:86: 16:9c:18:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTT3LehneJK95+fYh63XE1iX4eeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAxMDQyWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDRkMjhlYTc3YmVmM2M0NmNlOGU4NmZlNjQ2ODJiNGEw NjY3OGIzZTc5OGY4OGU0NjE0OGI4YjdhODA5NGQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAAtQ9F7yzD4Piw9J/ONIsWtjFyZP01WRHr/mXp70JItOF JOpEmHX5vAeYPVMWdyTNRX1v3oini8+FHo1lp4j+1M8ALmYBCjoHRSArNQ32BFXL zEC0G/nY6ANvhPhdn5DNia0O19Vg2l4Xglsr481f9ADwowAK5G2T/hM+UoJhLq7r DD7ANyfqciPngUzdnWbn5J4gK0BSryHSDH0YniVp69Y6E0ZPiqAKDf+PJFEWTu65 GAn9IcSGARaNle4vlBh8XwYuwpWj8izeq5c/xzUe/mda6CHY3GxEYTbbEgDOORWg KHBSOak1zT9CWXh2srdbOYyihulC0mNzHsuwR6hFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoY8iXkgL1jnIg/P8tr91G/8e1y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhZGU3ZWU4LWE4ODUtNDA2YS1iOGEzLTk2ZTQ0OTdjNzhlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzgwDQYJKoZIhvcNAQELBQADggEBAEvl9iEG9pvHs0DJNRfLW8FRAD8/ 7/uaLVsV+K/QsO3b6fjtlctZQGOdLMvT5AhLrRzizRAHr8JKxpmUyGbUfqNeMDnR kSDtFUb2LzGV5pvF+ZLJsZjN2WkhNJSBWgE4W7k3Z2ST2cUIYpSboNpaCNeyC1e3 SjOGZSiCKzwmJum32B9CBwIVx7J0six+2sa+TflSEfUK0qMr8gMGHFlP3hiO/Wv2 D1VICDTDMs6zptoUTX/OVMHZliZ5UkZlhh13Fe2Pt546deRvX6BDhQEtsFv6Qj+A H19ts/eRB4ARnrGbbIjqSVj1kAc3MqPDXu5yLjBj8Ik5HqZJVrEihhacGHs= -----END CERTIFICATE-----Generated at Fri Jan 2 11:06:49 2026 by rpki-client