This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa File: cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa (raw, json) Hash identifier: MpS0Y0EzoKrz6LU7xCQuEltnjay3F3c8ikxnG8AvN1Y= Subject key identifier: 30:7F:F1:42:05:32:E1:5D:62:E2:E2:4B:34:B1:1F:C6:9D:83:2B:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 422AAED9898A0EB8D222EE349933A520BFF11A76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa Signing time: Mon 08 Dec 2025 00:21:25 +0000 ROA not before: Mon 08 Dec 2025 00:21:25 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.8.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2a:ae:d9:89:8a:0e:b8:d2:22:ee:34:99:33:a5:20:bf:f1:1a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 8 00:21:25 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=5848a05b484790c47cf5c1030b61f88026f6bbc8e10656b553050fa8ea478978, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:c5:73:5f:74:9d:e6:9f:4b:59:c9:2d:50: 43:47:09:94:0e:d2:14:06:f8:1f:dd:1c:a2:8d:fa: 49:a4:35:5e:95:91:9e:c0:e8:0f:07:a7:06:4c:35: 1a:f6:4c:56:1b:77:3c:51:3c:45:db:ab:e1:98:fb: bf:f9:f9:9e:c7:08:9f:11:ae:93:a8:23:59:9a:bc: 42:ab:96:cf:cb:9d:3c:36:d2:02:2b:2a:d8:96:31: 3a:16:5a:9a:b4:c4:4c:37:72:05:e8:f9:78:b1:97: 7b:da:df:08:63:18:22:7b:d2:b5:f3:ff:ae:5a:d3: 8f:3a:3b:01:4f:2d:28:16:60:31:c3:4f:04:d9:66: 56:d6:e9:2e:2d:52:10:02:97:5a:ae:89:2a:92:08: ea:24:58:c7:5e:78:bf:98:53:db:0c:c8:21:65:73: be:83:2e:67:94:f1:de:fd:d9:83:6b:d4:42:1a:39: b3:7d:2a:01:14:f9:2c:fd:37:1d:1d:c5:f3:da:e5: 05:82:39:6b:80:77:46:49:9f:fd:04:7a:d3:d7:93: 62:d2:4a:f0:df:a3:c4:ca:83:c8:7c:d1:14:b9:2b: b2:90:69:9e:6b:4e:b4:60:88:b9:2e:e1:80:55:48: e8:33:e3:47:bd:01:6a:55:6a:74:ae:58:fe:4c:ee: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:F1:42:05:32:E1:5D:62:E2:E2:4B:34:B1:1F:C6:9D:83:2B:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfba1111-275c-4bb2-8e3f-5ad74cc65c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:25:92:5e:68:26:c6:9d:3e:db:a6:fc:9d:02:4d:e4:e3:85: c5:84:c5:47:ed:ec:04:6b:e7:e2:cf:32:41:68:9e:1a:4a:b6: 8e:16:e2:e3:6c:76:30:fa:de:33:e0:82:68:e1:b1:7d:35:1e: 0b:2c:e3:05:95:1b:a6:ec:6d:80:58:e9:20:4d:87:3b:10:73: 75:fa:6d:d6:9c:ff:fc:43:a3:55:6d:0d:7e:77:c0:0d:fa:e2: b2:5d:9e:4f:fa:0c:3d:1d:58:7a:71:59:38:35:99:8e:11:2c: 04:44:83:f8:bf:d8:76:a3:44:13:36:28:f9:e5:d4:57:e0:e8: 50:02:81:db:b6:79:cc:3a:75:9b:f3:40:df:da:69:3b:7a:0a: 9b:d7:e8:e8:d9:57:ac:b0:44:bb:12:a0:a3:e1:c7:b2:07:cb: c1:31:2e:40:66:61:0b:ac:92:21:46:51:69:11:85:0a:5a:1f: f2:44:e7:5d:44:a4:5e:52:a0:4a:3f:27:46:8b:1b:10:6f:9c: 0d:b8:9e:81:1f:f8:2a:88:3c:96:ae:c3:cc:e0:4b:77:ba:6f: e3:f3:78:03:3c:5a:63:71:f2:42:98:81:5c:8f:f0:cd:6b:a9: c6:ea:7a:d7:23:31:69:44:2e:69:86:68:72:67:1a:fe:79:61: 41:73:1a:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQiqu2YmKDrjSIu40mTOlIL/xGnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAyMTI1WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODQ4YTA1YjQ4NDc5MGM0N2NmNWMxMDMwYjYxZjg4MDI2 ZjZiYmM4ZTEwNjU2YjU1MzA1MGZhOGVhNDc4OTc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU0sVzX3Sd5p9LWcktUENHCZQO0hQG+B/dHKKN+kmkNV6V kZ7A6A8HpwZMNRr2TFYbdzxRPEXbq+GY+7/5+Z7HCJ8RrpOoI1mavEKrls/LnTw2 0gIrKtiWMToWWpq0xEw3cgXo+Xixl3va3whjGCJ70rXz/65a0486OwFPLSgWYDHD TwTZZlbW6S4tUhACl1quiSqSCOokWMdeeL+YU9sMyCFlc76DLmeU8d792YNr1EIa ObN9KgEU+Sz9Nx0dxfPa5QWCOWuAd0ZJn/0EetPXk2LSSvDfo8TKg8h80RS5K7KQ aZ5rTrRgiLku4YBVSOgz40e9AWpVanSuWP5M7rB5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMH/xQgUy4V1i4uJLNLEfxp2DK/4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYmExMTExLTI3NWMtNGJiMi04ZTNmLTVhZDc0Y2M2NWM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4CDANBgkqhkiG9w0BAQsFAAOCAQEACiWSXmgmxp0+26b8nQJN5OOFxYTF R+3sBGvn4s8yQWieGkq2jhbi42x2MPreM+CCaOGxfTUeCyzjBZUbpuxtgFjpIE2H OxBzdfpt1pz//EOjVW0NfnfADfrisl2eT/oMPR1YenFZODWZjhEsBESD+L/YdqNE EzYo+eXUV+DoUAKB27Z5zDp1m/NA39ppO3oKm9fo6NlXrLBEuxKgo+HHsgfLwTEu QGZhC6ySIUZRaRGFClof8kTnXUSkXlKgSj8nRosbEG+cDbiegR/4Kog8lq7DzOBL d7pv4/N4AzxaY3HyQpiBXI/wzWupxup61yMxaUQuaYZocmca/nlhQXMaMA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:47:37 2026 by rpki-client