This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa File: a8532f83-3dde-406f-8419-338d61f9d18a.roa (raw, json) Hash identifier: BJ8SA1e1kVIiUxBK5P9zhtg/F2rwhHAfMj6riWUMl9U= Subject key identifier: A0:44:26:DF:77:51:66:2B:57:6A:C1:0E:10:5C:1F:43:08:79:E5:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 357A095CAEE7E62058738913046AEEBAD5320901 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa Signing time: Wed 24 Dec 2025 12:51:47 +0000 ROA not before: Wed 24 Dec 2025 12:51:47 +0000 ROA not after: Tue 24 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 100.52.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7a:09:5c:ae:e7:e6:20:58:73:89:13:04:6a:ee:ba:d5:32:09:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 24 12:51:47 2025 GMT Not After : Mar 24 23:59:59 2026 GMT Subject: serialNumber=79c1fe0b480249f87075b8a8067162fa9d74e1075d6bfacafb2ebe0bd7f72119, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:8f:fc:5d:f9:a3:a9:ee:c2:ac:ce:64:c3: 55:1b:b0:68:de:8c:ca:98:b4:28:a7:1a:0c:99:53: 2a:0b:b4:76:75:f9:49:7e:97:c7:76:09:53:71:15: 75:01:01:86:61:5b:0e:66:a2:34:03:f0:64:01:bf: da:7c:d1:8b:77:a6:ee:df:48:9d:55:4b:cd:2e:2a: 4b:c2:66:eb:dc:52:67:bf:96:44:6c:c6:e2:b6:77: 74:ac:ad:aa:b3:64:64:47:5b:1f:21:a2:82:96:2b: c0:bc:bc:ee:c1:f6:5c:66:38:83:dc:fb:0c:f9:63: 17:b2:49:63:a6:47:d6:ad:ee:ef:73:2a:14:22:ac: da:06:40:3d:96:c0:1b:e2:e1:5a:75:0f:dd:c1:57: 18:75:56:fb:ee:6b:37:7e:96:00:b0:47:b9:f0:48: fe:dc:b7:1e:d5:de:15:7c:a0:ee:46:ea:cd:5d:d4: ca:b1:98:bc:bf:16:86:da:14:18:58:77:46:1d:4b: fe:bb:38:0b:f1:a5:8e:e5:b5:df:08:91:25:69:b8: 40:ae:4f:5e:3c:cf:0e:3a:05:e4:b2:a1:d8:55:f5: 3a:a8:65:48:ba:72:6d:27:6c:8a:40:99:83:3a:5d: d8:ea:84:73:f1:b0:61:5f:ec:6b:ad:5c:ae:8c:19: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:44:26:DF:77:51:66:2B:57:6A:C1:0E:10:5C:1F:43:08:79:E5:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8532f83-3dde-406f-8419-338d61f9d18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.52.164.0/23 Signature Algorithm: sha256WithRSAEncryption 04:27:22:e7:f5:79:4b:5a:cb:e3:61:3f:49:97:1f:02:55:ef: b7:5d:59:ae:1a:6e:58:49:0d:62:8a:a1:4f:2e:99:19:c0:e6: 2c:fc:9c:d5:2f:50:3c:9f:97:f1:75:f6:72:33:4b:a9:75:ad: 77:65:fc:7d:7a:47:50:4a:1e:c5:7c:40:c2:fe:d0:db:14:46: 73:14:ec:2e:b9:69:ae:dc:5b:a0:9e:db:0b:aa:75:13:60:80: a0:e6:a6:bb:c5:ba:64:1d:b5:a9:f2:12:ed:5f:6d:f3:9f:3c: fa:90:82:bf:6c:4c:1f:c3:d4:9c:17:d2:3b:cf:9c:1d:5d:89: 9e:d4:02:9c:98:f4:e4:ed:e7:04:62:ec:29:2f:c6:ce:4f:e3: 24:75:1c:57:8c:6c:c5:ad:60:7f:16:4b:88:89:fe:9b:10:6e: 29:07:03:00:70:f3:ad:a6:3a:3a:33:8c:87:44:fb:a4:b3:c8: 98:80:31:05:08:ac:fa:9f:2c:f0:cb:bd:85:a6:bd:60:db:f7: ed:6c:33:7f:b0:ca:a1:60:2a:61:91:04:62:5a:1a:22:0d:f9: 7d:d2:c3:33:2d:99:ac:24:df:98:1a:a8:66:4b:d4:06:c1:6a: a6:e7:75:75:5e:e0:68:c8:a6:eb:ff:66:b0:3f:47:e4:28:47: 8a:01:3d:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNXoJXK7n5iBYc4kTBGruutUyCQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjI0MTI1MTQ3WhcNMjYwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWMxZmUwYjQ4MDI0OWY4NzA3NWI4YTgwNjcxNjJmYTlk NzRlMTA3NWQ2YmZhY2FmYjJlYmUwYmQ3ZjcyMTE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXDo/8Xfmjqe7CrM5kw1UbsGjejMqYtCinGgyZUyoLtHZ1 +Ul+l8d2CVNxFXUBAYZhWw5mojQD8GQBv9p80Yt3pu7fSJ1VS80uKkvCZuvcUme/ lkRsxuK2d3SsraqzZGRHWx8hooKWK8C8vO7B9lxmOIPc+wz5YxeySWOmR9at7u9z KhQirNoGQD2WwBvi4Vp1D93BVxh1Vvvuazd+lgCwR7nwSP7ctx7V3hV8oO5G6s1d 1MqxmLy/FobaFBhYd0YdS/67OAvxpY7ltd8IkSVpuECuT148zw46BeSyodhV9Tqo ZUi6cm0nbIpAmYM6XdjqhHPxsGFf7GutXK6MGXv5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoEQm33dRZitXasEOEFwfQwh55dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NTMyZjgzLTNkZGUtNDA2Zi04NDE5LTMzOGQ2MWY5ZDE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFkNKQwDQYJKoZIhvcNAQELBQADggEBAAQnIuf1eUtay+NhP0mXHwJV77dd Wa4ablhJDWKKoU8umRnA5iz8nNUvUDyfl/F19nIzS6l1rXdl/H16R1BKHsV8QML+ 0NsURnMU7C65aa7cW6Ce2wuqdRNggKDmprvFumQdtanyEu1fbfOfPPqQgr9sTB/D 1JwX0jvPnB1diZ7UApyY9OTt5wRi7Ckvxs5P4yR1HFeMbMWtYH8WS4iJ/psQbikH AwBw862mOjozjIdE+6SzyJiAMQUIrPqfLPDLvYWmvWDb9+1sM3+wyqFgKmGRBGJa GiIN+X3SwzMtmawk35gaqGZL1AbBaqbndXVe4GjIpuv/ZrA/R+QoR4oBPV0= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client