This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa File: b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa (raw, json) Hash identifier: Bv5RDFDbeDhjqb845fscb34oWHF3I2EwswaQSODr57A= Subject key identifier: 66:81:DE:1A:AE:8D:12:B1:75:2A:2A:D4:08:63:D4:99:CB:2B:72:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F53BE3813AD628196AF87C61F27850F39C20881 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa Signing time: Thu 13 Nov 2025 00:00:12 +0000 ROA not before: Thu 13 Nov 2025 00:00:12 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 75.2.128.0/19 maxlen: 19 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6f:53:be:38:13:ad:62:81:96:af:87:c6:1f:27:85:0f:39:c2:08:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 13 00:00:12 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=581481c825132c26fedb60c6c2734fb2e83b2fe2bd4e26504811e25b8eb8e33d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:28:d3:87:53:2b:e1:aa:0a:6e:44:2a:22: 4b:f8:9d:d8:af:a6:3f:69:4f:1a:44:a4:3d:fa:0e: 5a:7e:d7:2f:97:e3:71:43:6f:47:68:d9:f1:d2:86: 5c:58:e1:75:29:d8:5c:24:e3:bc:93:05:3f:fc:7e: b6:b6:57:08:6e:28:7a:9d:6a:a1:b0:b8:d5:11:2c: cb:6b:d2:2d:f2:43:d4:8c:1c:1e:1c:56:5f:92:56: 1a:9a:0e:e8:15:2c:9c:56:9a:9f:2b:d7:18:1a:c3: 78:d0:b9:bc:17:9f:4a:02:d3:33:9f:4c:45:de:f6: 3e:e5:96:c8:14:a0:da:a6:a2:63:1c:d6:6d:10:98: d1:06:8c:ee:60:09:20:95:7c:0b:e8:ee:c8:85:46: b9:3d:1a:e0:4b:9a:76:13:0c:d0:2c:14:50:9f:73: cb:bc:0b:54:a1:c0:56:25:5c:9f:e4:8a:5e:76:36: 70:ec:ab:20:64:f2:13:ce:94:8a:d9:2a:cb:f1:5c: b4:b6:8f:38:92:ac:0d:c9:58:f5:49:ab:ee:e0:01: 94:96:d3:6c:03:f2:36:f9:e8:73:50:9e:ac:95:26: 26:74:e0:e2:a3:af:71:f4:41:5f:1e:92:65:b9:f7: 89:2a:64:4a:57:fb:f2:66:21:07:67:2e:f7:8a:df: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:DE:1A:AE:8D:12:B1:75:2A:2A:D4:08:63:D4:99:CB:2B:72:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:83:94:23:02:c8:21:d0:ee:b5:76:01:d5:b5:0d:10:3e:67: 4a:31:51:94:df:4f:49:75:a2:a5:fc:d6:24:68:78:42:6b:a6: 7a:46:52:c7:66:03:05:65:0a:93:f0:e8:10:2a:8f:78:9f:af: b2:43:19:4f:f0:f5:58:a0:06:1d:44:82:a5:a3:44:51:0a:25: 90:1a:8b:f1:49:81:ba:5b:f4:e4:bf:ee:26:30:f5:41:51:fa: 7e:21:bf:c3:eb:b0:f8:82:43:ee:91:bf:43:99:0b:e0:a9:e3: a4:ff:ac:9f:94:0e:21:e5:cb:74:de:b0:b6:3b:fb:67:e3:29: ec:e7:09:53:73:cc:16:63:f3:2a:5f:c8:b7:36:f1:59:d6:e4: 24:1c:c7:d0:f0:90:6d:3e:a2:18:1f:07:2d:47:d3:91:6f:a4: f1:18:e4:5a:1d:98:ca:ff:b8:c2:7e:17:b6:d5:bf:29:1e:ca: 58:58:7c:ed:9d:ba:3b:b6:e6:c7:1b:8d:94:3a:a7:31:bc:5e: 17:61:3f:a2:74:b0:40:56:52:eb:de:9c:d4:af:e9:f3:b9:14: aa:dd:69:60:5c:83:b3:98:4a:65:f7:94:8d:42:f8:0f:04:86: 07:11:81:7b:39:82:23:4b:4b:40:9f:9e:6b:25:50:fc:38:1c: 6f:91:32:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb1O+OBOtYoGWr4fGHyeFDznCCIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAwMDEyWhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODE0ODFjODI1MTMyYzI2ZmVkYjYwYzZjMjczNGZiMmU4 M2IyZmUyYmQ0ZTI2NTA0ODExZTI1YjhlYjhlMzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo7SjTh1Mr4aoKbkQqIkv4ndivpj9pTxpEpD36Dlp+1y+X 43FDb0do2fHShlxY4XUp2Fwk47yTBT/8fra2VwhuKHqdaqGwuNURLMtr0i3yQ9SM HB4cVl+SVhqaDugVLJxWmp8r1xgaw3jQubwXn0oC0zOfTEXe9j7llsgUoNqmomMc 1m0QmNEGjO5gCSCVfAvo7siFRrk9GuBLmnYTDNAsFFCfc8u8C1ShwFYlXJ/kil52 NnDsqyBk8hPOlIrZKsvxXLS2jziSrA3JWPVJq+7gAZSW02wD8jb56HNQnqyVJiZ0 4OKjr3H0QV8ekmW594kqZEpX+/JmIQdnLveK39LdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZoHeGq6NErF1KirUCGPUmcsrcgUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZGEzMzBjLTBiZDctNDhkMi1hMzBmLTA2MzU0ZWViODdlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLAoAwDQYJKoZIhvcNAQELBQADggEBAAyDlCMCyCHQ7rV2AdW1DRA+Z0ox UZTfT0l1oqX81iRoeEJrpnpGUsdmAwVlCpPw6BAqj3ifr7JDGU/w9VigBh1EgqWj RFEKJZAai/FJgbpb9OS/7iYw9UFR+n4hv8PrsPiCQ+6Rv0OZC+Cp46T/rJ+UDiHl y3TesLY7+2fjKeznCVNzzBZj8ypfyLc28VnW5CQcx9DwkG0+ohgfBy1H05FvpPEY 5FodmMr/uMJ+F7bVvykeylhYfO2duju25scbjZQ6pzG8XhdhP6J0sEBWUuvenNSv 6fO5FKrdaWBcg7OYSmX3lI1C+A8EhgcRgXs5giNLS0CfnmslUPw4HG+RMuA= -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:59 2025 by rpki-client