This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa File: f82c1957-9091-4d53-8075-edcb55104e57.roa (raw, json) Hash identifier: WwOidWFhf+UqQVQinnv2kJkbb67NOMyzKS/tZ8+oRw4= Subject key identifier: A8:7A:24:AE:91:BC:D0:B9:1E:52:0C:92:13:84:51:F2:6B:1D:BF:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E8FC52A20A3F0CEF77003D659A02663599891B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa Signing time: Wed 10 Dec 2025 00:00:12 +0000 ROA not before: Wed 10 Dec 2025 00:00:12 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.141.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8f:c5:2a:20:a3:f0:ce:f7:70:03:d6:59:a0:26:63:59:98:91:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:00:12 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2857223b14a5f4d0624c11cc0f8f67598e00c26029262c96b546cef76fa347e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:df:42:9f:03:67:2c:6c:52:54:61:51:3a: b8:1b:03:82:4d:c2:50:98:f9:35:62:21:df:72:3c: 6d:4e:b2:6d:48:06:a7:96:79:79:25:74:cd:6f:34: 36:7a:16:a3:d4:1d:24:4b:5a:2e:36:6b:b0:39:28: 7a:b9:8f:e3:70:e8:6f:11:c8:b5:c3:73:83:db:8a: 2c:8b:01:1a:32:53:6f:06:d7:86:34:9c:57:15:d3: 80:aa:a4:e2:76:ab:e5:7a:c5:c9:67:2e:4a:06:31: d7:4c:71:11:49:8d:a1:12:c1:b1:2b:d9:3c:91:78: 29:d1:4c:ae:6f:44:31:46:7b:bd:f0:67:88:f3:ad: fd:b1:d7:86:52:4a:a4:2a:79:4c:04:6f:b4:ec:e2: bf:ab:e5:c2:44:2c:32:6a:7b:5e:39:83:1e:16:2e: e6:fd:b8:ba:2d:bc:dd:db:15:a6:2a:09:16:3b:cf: 46:c7:0e:38:a6:74:13:38:81:bd:f8:7e:5c:42:c3: f1:4b:8b:9b:6f:b0:a8:81:67:27:57:d4:be:19:27: a6:03:51:76:93:d1:ff:96:c1:8e:21:88:17:79:32: a4:bf:70:40:70:84:4b:75:a7:2e:8a:3e:14:e2:4b: 74:c5:cc:63:3e:e2:07:2b:23:13:2a:3c:db:97:88: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:24:AE:91:BC:D0:B9:1E:52:0C:92:13:84:51:F2:6B:1D:BF:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.141.0.0/17 Signature Algorithm: sha256WithRSAEncryption a2:5a:29:45:5b:89:68:e2:54:85:2c:f7:41:99:39:c3:bd:bd: bf:a9:3f:10:58:80:78:56:45:39:78:13:ef:1c:4a:6a:dd:71: ff:ba:e5:1b:42:0b:55:81:2c:ff:98:a0:70:f4:b7:28:aa:c7: 57:66:ed:91:fd:24:1f:29:de:b0:82:fa:70:36:db:b9:ac:12: 72:17:79:9b:9d:ae:31:cb:a9:15:1c:ed:d6:cd:a9:15:f9:57: a1:ea:c8:73:99:da:ea:95:c5:4d:40:e4:b9:44:d9:ce:75:26: ea:fc:cb:2d:af:a6:8c:ad:2a:f1:6a:dd:71:88:4e:1a:dc:63: 90:bb:6d:56:49:71:10:3c:de:1d:27:cb:42:1a:95:b5:fb:8b: a2:5f:01:8e:e5:cd:d0:eb:92:b4:2c:4c:75:b4:cb:8f:09:fb: dc:7e:8d:78:29:2b:dc:d3:c8:94:43:dd:33:90:a7:61:04:db: b8:1e:95:fb:e2:47:1e:28:65:20:c9:95:1a:2f:51:62:6d:b6: d9:99:8b:b4:b3:28:6a:ab:f3:7b:78:24:38:6b:3d:b2:09:7f: 82:e3:70:65:0e:62:93:45:b3:c2:af:d8:67:06:07:63:8d:8c: 13:63:d0:9e:b6:e7:c6:be:e3:53:14:56:a6:ff:e2:04:ee:c5: a6:9e:5e:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPo/FKiCj8M73cAPWWaAmY1mYkbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAwMDEyWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODU3MjIzYjE0YTVmNGQwNjI0YzExY2MwZjhmNjc1OThl MDBjMjYwMjkyNjJjOTZiNTQ2Y2VmNzZmYTM0N2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqMt9CnwNnLGxSVGFROrgbA4JNwlCY+TViId9yPG1Osm1I BqeWeXkldM1vNDZ6FqPUHSRLWi42a7A5KHq5j+Nw6G8RyLXDc4PbiiyLARoyU28G 14Y0nFcV04CqpOJ2q+V6xclnLkoGMddMcRFJjaESwbEr2TyReCnRTK5vRDFGe73w Z4jzrf2x14ZSSqQqeUwEb7Ts4r+r5cJELDJqe145gx4WLub9uLotvN3bFaYqCRY7 z0bHDjimdBM4gb34flxCw/FLi5tvsKiBZydX1L4ZJ6YDUXaT0f+WwY4hiBd5MqS/ cEBwhEt1py6KPhTiS3TFzGM+4gcrIxMqPNuXiCx3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqHokrpG80LkeUgySE4RR8msdvxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4MmMxOTU3LTkwOTEtNGQ1My04MDc1LWVkY2I1NTEwNGU1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjjQAwDQYJKoZIhvcNAQELBQADggEBAKJaKUVbiWjiVIUs90GZOcO9vb+p PxBYgHhWRTl4E+8cSmrdcf+65RtCC1WBLP+YoHD0tyiqx1dm7ZH9JB8p3rCC+nA2 27msEnIXeZudrjHLqRUc7dbNqRX5V6HqyHOZ2uqVxU1A5LlE2c51Jur8yy2vpoyt KvFq3XGIThrcY5C7bVZJcRA83h0ny0IalbX7i6JfAY7lzdDrkrQsTHW0y48J+9x+ jXgpK9zTyJRD3TOQp2EE27gelfviRx4oZSDJlRovUWJtttmZi7SzKGqr83t4JDhr PbIJf4LjcGUOYpNFs8Kv2GcGB2ONjBNj0J6258a+41MUVqb/4gTuxaaeXlM= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:28 2026 by rpki-client