This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa File: d39e187c-88a8-41ad-918d-6d6c9508c20e.roa (raw, json) Hash identifier: pAY8FmlAgzZzjPaKl4rxTu01JP/eLtS4liZDc0K5qo4= Subject key identifier: 58:5E:26:B5:F9:42:34:51:73:C6:2D:8E:57:21:7D:77:78:40:DE:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68FC0C6D750873A892B86CB6D0B4EB9E025661F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa Signing time: Sat 22 Nov 2025 00:00:46 +0000 ROA not before: Sat 22 Nov 2025 00:00:46 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.136.0/21 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 68:fc:0c:6d:75:08:73:a8:92:b8:6c:b6:d0:b4:eb:9e:02:56:61:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:46 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=dcade7f1c3b194d93a5af968a57902682d2eb5645824c94ebac209e31aebe863, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:b2:19:7e:e0:fc:e3:51:26:ee:8d:ee:e0: cf:36:ed:0a:4a:f8:ae:ef:13:cc:a5:7f:67:ee:aa: 58:8a:5f:5e:d4:3d:53:03:08:a5:43:be:cc:aa:59: 47:d5:40:cb:6c:ef:d8:ba:26:91:f4:b8:f0:e2:c4: ec:33:91:ab:81:3f:a5:25:08:23:36:a3:c3:7d:c1: 35:bb:c4:6a:80:fa:ed:8d:ae:17:67:84:8e:bb:b9: 53:18:98:20:6c:48:7a:c8:53:3e:e3:90:fc:70:83: fb:75:ca:a1:cb:42:d1:9f:25:b0:cb:34:40:c3:e1: bc:19:50:05:c1:be:62:c2:77:7a:8f:b0:31:fc:cd: 5c:6b:0b:e7:32:d9:8b:88:02:07:ae:a2:3a:6f:6d: e9:3c:60:92:00:4a:1f:34:6e:ae:c9:a6:43:96:e2: 81:f0:d2:88:38:9a:04:ca:1c:df:d4:9d:7e:a3:75: ff:80:ba:47:1f:7f:88:07:73:c9:e0:1a:c6:26:20: ba:39:c2:81:79:8b:1f:05:0d:6f:57:b7:33:9f:ad: 43:91:61:eb:23:9d:88:a6:4f:70:ef:ff:ea:cb:43: 56:f6:84:fb:4f:be:cf:b4:52:d1:b7:49:2a:72:5f: e4:b4:7b:80:3f:34:9b:1a:6c:1f:c4:a0:f0:31:05: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:26:B5:F9:42:34:51:73:C6:2D:8E:57:21:7D:77:78:40:DE:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.136.0/21 Signature Algorithm: sha256WithRSAEncryption a7:e1:60:b6:da:6f:95:b0:96:18:f7:96:83:31:d8:23:af:18: 65:b9:52:68:50:77:76:d3:2a:fa:c7:2a:b8:81:24:22:3d:4f: f5:3f:cb:a0:59:c8:02:de:99:bc:49:47:9e:1c:64:6a:33:2e: 12:e8:ed:f6:7d:cd:d0:f9:a2:2f:67:53:d9:f5:f4:0d:b0:b2: de:3a:0e:34:44:3a:f6:09:18:81:0a:1f:c0:a4:0e:a2:39:2e: 86:e6:fa:f0:bb:3b:30:75:08:fe:1c:31:74:3b:e6:45:d8:63: cb:e9:28:52:5d:76:47:26:a3:52:c3:b9:7d:62:89:ce:d0:fb: e9:d7:c2:c7:62:c0:fc:2c:2c:b9:08:da:04:a8:78:67:4e:ef: 75:cd:40:42:fd:01:26:93:cb:75:5d:49:cc:1b:47:50:ce:f4: 1d:f9:4d:2f:b2:5d:c0:05:07:8f:c2:8d:21:b1:4e:22:7e:5b: 43:e3:5a:59:15:42:2c:be:59:90:72:ef:a6:a2:80:3b:be:b2: 44:fc:1b:c6:bf:bb:48:97:8b:90:b7:93:39:c7:ee:ed:8d:2d: 11:78:95:c7:f3:8a:cf:a1:ac:40:eb:a3:61:c7:32:6c:3e:e9: f4:ea:42:02:5e:57:e8:0b:fd:67:dc:eb:b2:2b:1b:37:c5:b2: 7c:4f:e1:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaPwMbXUIc6iSuGy20LTrngJWYfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAwMDQ2WhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2FkZTdmMWMzYjE5NGQ5M2E1YWY5NjhhNTc5MDI2ODJk MmViNTY0NTgyNGM5NGViYWMyMDllMzFhZWJlODYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE3LIZfuD841Em7o3u4M827QpK+K7vE8ylf2fuqliKX17U PVMDCKVDvsyqWUfVQMts79i6JpH0uPDixOwzkauBP6UlCCM2o8N9wTW7xGqA+u2N rhdnhI67uVMYmCBsSHrIUz7jkPxwg/t1yqHLQtGfJbDLNEDD4bwZUAXBvmLCd3qP sDH8zVxrC+cy2YuIAgeuojpvbek8YJIASh80bq7JpkOW4oHw0og4mgTKHN/UnX6j df+Aukcff4gHc8ngGsYmILo5woF5ix8FDW9XtzOfrUORYesjnYimT3Dv/+rLQ1b2 hPtPvs+0UtG3SSpyX+S0e4A/NJsabB/EoPAxBUBzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWF4mtflCNFFzxi2OVyF9d3hA3jMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzOWUxODdjLTg4YTgtNDFhZC05MThkLTZkNmM5NTA4YzIwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM34gwDQYJKoZIhvcNAQELBQADggEBAKfhYLbab5Wwlhj3loMx2COvGGW5 UmhQd3bTKvrHKriBJCI9T/U/y6BZyALembxJR54cZGozLhLo7fZ9zdD5oi9nU9n1 9A2wst46DjREOvYJGIEKH8CkDqI5Lobm+vC7OzB1CP4cMXQ75kXYY8vpKFJddkcm o1LDuX1iic7Q++nXwsdiwPwsLLkI2gSoeGdO73XNQEL9ASaTy3VdScwbR1DO9B35 TS+yXcAFB4/CjSGxTiJ+W0PjWlkVQiy+WZBy76aigDu+skT8G8a/u0iXi5C3kznH 7u2NLRF4lcfzis+hrEDro2HHMmw+6fTqQgJeV+gL/Wfc67IrGzfFsnxP4d4= -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:17 2025 by rpki-client