This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa File: e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa (raw, json) Hash identifier: nVrZ4WDiWi+/oQEO66ioYcMTpnqLOyg8An/2wYdTNO0= Subject key identifier: F2:AB:90:3C:6E:E6:FD:78:C2:8D:39:26:4F:0D:A5:67:9D:D8:81:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70BDDEB2AD791A2C7AE13B22274F1B8396D4B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa Signing time: Wed 10 Dec 2025 00:40:06 +0000 ROA not before: Wed 10 Dec 2025 00:40:06 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bd:de:b2:ad:79:1a:2c:7a:e1:3b:22:27:4f:1b:83:96:d4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:40:06 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=99dc7e921513251d9ea5aee9f380b79edf60fd123d669036adbe018b28eeee72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:7c:c4:b1:8f:5c:d3:16:0d:a9:4a:c2:a7: 6d:44:63:ca:ee:64:28:82:8e:f6:be:5e:d5:4a:17: 3f:fe:ec:ec:7b:16:b4:21:72:92:69:63:5a:5d:12: 67:75:5f:a1:92:07:68:a0:cc:63:c1:c6:36:ad:eb: 53:29:14:67:be:da:be:61:e5:46:a0:16:d0:a5:d3: e3:4f:01:93:39:b7:47:28:b0:bf:a7:da:bb:f1:01: 6f:cb:cd:ec:fc:8b:d6:ee:fd:43:02:b3:0d:d1:94: 10:55:b8:8e:21:e4:cb:8c:04:39:ca:7c:e2:0e:68: b7:3e:48:d2:dd:23:11:01:e6:64:4c:f2:6e:dc:85: df:24:24:f0:a3:f7:6d:9a:3a:c4:52:54:d0:34:73: d4:e5:72:8f:03:fb:18:aa:64:bf:95:3b:c2:cb:25: ba:70:ca:e7:2b:b3:25:a6:17:dd:04:ca:e3:62:71: 2e:a0:b0:a1:c7:bf:0b:02:4c:f4:4c:54:60:5c:f2: 2b:7b:12:9b:92:1e:f4:95:c3:8b:be:d4:e4:12:97: 6e:ac:ec:20:7b:48:af:a4:8a:8c:d5:03:b8:be:87: 5d:38:f5:a2:fb:b9:8d:88:eb:59:b4:ae:10:51:47: 0e:70:be:e5:c0:a7:84:09:a5:28:74:f7:19:7a:5e: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AB:90:3C:6E:E6:FD:78:C2:8D:39:26:4F:0D:A5:67:9D:D8:81:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.170.0/23 Signature Algorithm: sha256WithRSAEncryption be:e5:71:c1:e8:f1:63:d5:bd:22:cb:a6:b0:aa:b8:64:d5:d6: e5:12:ed:80:25:61:64:0e:1a:da:1e:0e:88:29:fa:76:ac:80: b8:12:01:bf:69:d9:96:d4:1c:a3:ad:e3:11:98:91:46:26:68: c9:6f:27:9b:d2:37:82:df:01:ba:ae:69:08:0d:79:16:df:ee: 7b:2f:55:e6:11:ad:c1:7b:b3:ec:e7:c6:21:0d:cb:2d:6e:bc: bd:e8:8b:ee:56:7a:a2:5a:df:9b:7c:88:0f:c0:e9:4c:b2:09: 7d:64:24:a5:11:74:85:95:dd:7c:95:46:02:e5:e7:b0:e9:dc: 54:12:c3:f4:f8:2f:d0:6c:be:94:9a:7c:37:3c:4e:e7:e5:62: a7:91:ac:ce:5d:62:db:58:42:75:20:a6:cd:1d:8c:27:49:06: b0:d1:6e:27:ab:1f:91:ec:0b:14:c7:db:61:b1:34:cf:69:96: 00:0e:24:a2:53:03:4c:bf:5f:c8:69:39:75:c5:a4:3b:d9:fa: 31:11:ab:c8:eb:a4:a2:b7:86:21:18:00:0f:8b:13:6b:e0:11: 49:69:27:a2:f0:6b:67:cd:15:df:6e:76:eb:00:d3:c8:f7:cd: 3d:7a:c6:1e:1f:e9:26:93:bb:b9:35:fa:c6:f3:a6:d9:ca:96: 91:4c:3d:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITcL3esq15Gix64TsiJ08bg5bUsTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEyMTAwMDQwMDZaFw0yNjAzMTAyMzU5NTla MHoxSTBHBgNVBAUTQDk5ZGM3ZTkyMTUxMzI1MWQ5ZWE1YWVlOWYzODBiNzllZGY2 MGZkMTIzZDY2OTAzNmFkYmUwMThiMjhlZWVlNzIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJcefMSxj1zTFg2pSsKnbURjyu5kKIKO9r5e1UoXP/7s7HsW tCFykmljWl0SZ3VfoZIHaKDMY8HGNq3rUykUZ77avmHlRqAW0KXT408Bkzm3Ryiw v6fau/EBb8vN7PyL1u79QwKzDdGUEFW4jiHky4wEOcp84g5otz5I0t0jEQHmZEzy btyF3yQk8KP3bZo6xFJU0DRz1OVyjwP7GKpkv5U7wsslunDK5yuzJaYX3QTK42Jx LqCwoce/CwJM9ExUYFzyK3sSm5Ie9JXDi77U5BKXbqzsIHtIr6SKjNUDuL6HXTj1 ovu5jYjrWbSuEFFHDnC+5cCnhAmlKHT3GXpexacCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTyq5A8bub9eMKNOSZPDaVnndiBmDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZTZjMGI2ZTAtMDMzMS00NzI5LWJhY2UtYWFhNTJkNmQxOGMzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcoFqjANBgkqhkiG9w0BAQsFAAOCAQEAvuVxwejxY9W9IsumsKq4ZNXW5RLt gCVhZA4a2h4OiCn6dqyAuBIBv2nZltQco63jEZiRRiZoyW8nm9I3gt8Buq5pCA15 Ft/uey9V5hGtwXuz7OfGIQ3LLW68veiL7lZ6olrfm3yID8DpTLIJfWQkpRF0hZXd fJVGAuXnsOncVBLD9Pgv0Gy+lJp8NzxO5+Vip5Gszl1i21hCdSCmzR2MJ0kGsNFu J6sfkewLFMfbYbE0z2mWAA4kolMDTL9fyGk5dcWkO9n6MRGryOukoreGIRgAD4sT a+ARSWknovBrZ80V32526wDTyPfNPXrGHh/pJpO7uTX6xvOm2cqWkUw9QA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:00:12 2026 by rpki-client