This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa File: b8844564-4b0d-48d8-8eef-b90a033c9916.roa (raw, json) Hash identifier: DWl3vZesMsIzAL0pnGoHMTwX14+poG8l3UDMAVRZCvg= Subject key identifier: E7:84:32:AE:ED:51:51:75:B2:91:18:27:13:63:3A:A1:D1:EB:CE:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0590BB879E377C07CBDEBDCC0AE293B154507C39 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa Signing time: Fri 21 Nov 2025 16:36:41 +0000 ROA not before: Fri 21 Nov 2025 16:36:41 +0000 ROA not after: Thu 19 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.42.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:90:bb:87:9e:37:7c:07:cb:de:bd:cc:0a:e2:93:b1:54:50:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 21 16:36:41 2025 GMT Not After : Feb 19 23:59:59 2026 GMT Subject: serialNumber=4ab6fa2630ab1eb02cf8f169c63a967cbfbe67c81c791c55a357b63f33682e0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:19:ce:2e:1b:8d:7a:a9:7d:8c:bf:3d:92: af:42:b4:e9:91:5c:5f:d7:b7:fb:70:8e:9c:7a:3e: 3d:25:37:f4:71:75:2c:7f:4c:ce:c6:6a:5c:32:49: 64:59:b8:68:5f:3b:12:11:ae:9f:d8:f7:15:a4:60: 7e:40:cc:5d:da:3e:82:3d:10:30:da:41:ec:2a:ee: 44:d4:17:b8:29:34:ad:e2:07:17:a6:7b:ab:75:a2: 75:ef:ec:65:33:2d:83:ce:e8:40:ea:cf:5e:dd:24: 1e:03:e8:68:9f:8e:71:d4:82:36:87:d1:48:69:d6: 1c:8f:5b:ec:97:f7:70:30:4c:50:38:04:85:fb:76: a5:34:65:bc:b2:69:69:06:b9:31:85:13:d1:e6:09: cb:ed:0c:97:4d:c3:94:3d:d8:d3:10:04:30:ba:2a: 39:a7:ec:84:20:d6:83:b7:be:2e:9d:0b:ed:d3:df: 92:3c:c8:98:60:04:8a:d6:c3:c3:12:0f:01:ef:15: 86:4a:f0:c4:6a:f3:e8:e6:08:a2:40:eb:51:d3:78: 66:ad:cc:0c:dd:b8:d4:96:43:4d:f4:3b:e4:36:63: ab:d6:f2:a8:d6:74:ab:83:c4:fb:58:74:79:c7:78: 64:af:bb:5e:6a:a4:41:a4:f7:29:95:78:40:99:a1: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:84:32:AE:ED:51:51:75:B2:91:18:27:13:63:3A:A1:D1:EB:CE:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.42.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:02:3f:eb:fa:4f:3a:81:ab:2b:a1:ad:62:62:db:36:cc:7e: fe:c8:8f:6b:88:3b:8d:a0:f8:1d:4c:10:b5:08:07:19:09:c5: 41:72:35:fe:c7:7b:99:18:ac:02:27:f0:a0:c4:ca:fe:c7:21: 65:b1:4e:fb:97:25:93:56:4d:b3:c6:2b:30:fb:56:22:5e:77: fc:6a:a0:17:84:f9:e3:24:5f:65:83:aa:9b:9b:2b:62:77:03: 20:73:62:ee:3c:9a:7e:30:f9:96:79:26:89:30:e7:58:e1:4a: 12:b1:0f:07:92:8a:ae:73:d6:a6:da:5d:87:1c:2e:83:89:7d: 72:85:8d:6f:d9:50:bb:0b:2c:e7:b0:e8:c7:db:73:e6:25:44: 5b:a5:a3:6c:29:48:fa:0f:80:99:c6:15:37:b1:bb:ff:39:21: a4:7b:10:dd:64:93:2b:95:da:10:4c:57:ef:11:e2:39:63:67: 0a:5d:5c:20:14:bd:02:02:ba:be:72:d4:bd:3e:f3:da:a1:cf: 11:6f:f5:b2:d5:9f:e4:ef:f2:a8:53:d8:a3:33:66:50:52:b8: 93:0a:6c:b1:91:9c:50:95:1e:55:93:7f:a0:79:80:04:5f:45: 31:f7:14:78:a0:1b:72:08:a0:82:09:f8:65:c3:76:e1:90:85: a2:89:9f:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBZC7h543fAfL3r3MCuKTsVRQfDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIxMTYzNjQxWhcNMjYwMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWI2ZmEyNjMwYWIxZWIwMmNmOGYxNjljNjNhOTY3Y2Jm YmU2N2M4MWM3OTFjNTVhMzU3YjYzZjMzNjgyZTBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvPhnOLhuNeql9jL89kq9CtOmRXF/Xt/twjpx6Pj0lN/Rx dSx/TM7GalwySWRZuGhfOxIRrp/Y9xWkYH5AzF3aPoI9EDDaQewq7kTUF7gpNK3i Bxeme6t1onXv7GUzLYPO6EDqz17dJB4D6GifjnHUgjaH0Uhp1hyPW+yX93AwTFA4 BIX7dqU0ZbyyaWkGuTGFE9HmCcvtDJdNw5Q92NMQBDC6Kjmn7IQg1oO3vi6dC+3T 35I8yJhgBIrWw8MSDwHvFYZK8MRq8+jmCKJA61HTeGatzAzduNSWQ030O+Q2Y6vW 8qjWdKuDxPtYdHnHeGSvu15qpEGk9ymVeECZoVq7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU54Qyru1RUXWykRgnE2M6odHrzrowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ODQ0NTY0LTRiMGQtNDhkOC04ZWVmLWI5MGEwMzNjOTkxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjKoAwDQYJKoZIhvcNAQELBQADggEBAE0CP+v6TzqBqyuhrWJi2zbMfv7I j2uIO42g+B1MELUIBxkJxUFyNf7He5kYrAIn8KDEyv7HIWWxTvuXJZNWTbPGKzD7 ViJed/xqoBeE+eMkX2WDqpubK2J3AyBzYu48mn4w+ZZ5Jokw51jhShKxDweSiq5z 1qbaXYccLoOJfXKFjW/ZULsLLOew6Mfbc+YlRFulo2wpSPoPgJnGFTexu/85IaR7 EN1kkyuV2hBMV+8R4jljZwpdXCAUvQICur5y1L0+89qhzxFv9bLVn+Tv8qhT2KMz ZlBSuJMKbLGRnFCVHlWTf6B5gARfRTH3FHigG3IIoIIJ+GXDduGQhaKJnzA= -----END CERTIFICATE-----Generated at Tue Nov 25 17:36:03 2025 by rpki-client