This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa File: 20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa (raw, json) Hash identifier: egSClqeF8pq7Bx603tVMJz67o5Xbk9bWxIvi9Ix/0u4= Subject key identifier: 37:02:AE:2F:1F:AF:E4:C6:3C:C0:1C:DB:C3:ED:52:00:19:B6:79:07 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 54CE16FD0CACEA90D1A6069F90E277BB15ED5410 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa Signing time: Wed 10 Dec 2025 00:50:11 +0000 ROA not before: Wed 10 Dec 2025 00:50:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ce:16:fd:0c:ac:ea:90:d1:a6:06:9f:90:e2:77:bb:15:ed:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Dec 10 00:50:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=4e7b233aed7db562021793c3ccf518cdaa1ccb391f12edb0aa3e677820358f15, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:b2:0c:eb:13:2d:70:21:1a:65:02:9b:bf: da:a8:89:e5:b3:76:ac:20:a2:8e:cb:f6:3f:be:d9: 32:fc:82:87:12:16:60:9e:df:a3:42:61:a6:ea:12: a5:e1:b8:4c:b7:7b:86:ff:cf:7c:fa:16:99:70:00: 56:1d:ea:48:01:d6:fb:4c:7a:bd:42:71:ed:0f:a0: 7f:f9:22:63:a9:55:70:70:fa:35:f1:ef:cc:4b:aa: 72:97:f1:97:a7:6c:25:e5:79:d5:9a:f0:71:c1:3e: 49:1d:b1:8c:8e:48:39:33:31:65:cb:3a:6b:17:f1: 96:df:93:50:0a:32:b5:da:9e:6a:87:25:97:eb:6a: 66:c0:e0:a8:84:3e:38:a3:6d:be:88:f5:75:dd:97: 83:a1:b2:96:30:bd:bc:59:a9:7a:37:85:18:47:9b: 26:03:5b:8e:5e:2c:58:5a:9f:91:69:04:33:61:93: a2:55:fd:d8:ea:50:18:74:6f:ba:02:30:d5:e0:08: 0b:50:a9:3c:fb:c3:3d:90:44:23:19:a3:f1:80:e9: a9:e9:58:4a:9b:6e:de:96:a9:ef:c5:fd:57:0c:6e: 32:37:d7:19:bb:ee:de:59:1a:ae:b6:d7:03:6d:e5: 31:4d:5c:74:b4:5c:75:c7:07:8d:85:1a:fc:c1:82: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:02:AE:2F:1F:AF:E4:C6:3C:C0:1C:DB:C3:ED:52:00:19:B6:79:07 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 71:91:b8:86:eb:b1:10:57:2a:4d:96:8c:0c:fc:ec:71:3e:da: 13:58:7d:2a:73:6d:90:29:a7:5e:73:88:cf:a9:d2:1d:3e:76: d2:9f:7a:67:04:de:e4:6c:6e:08:2c:8c:f7:d6:ba:74:10:12: 56:32:48:c4:f0:49:5c:e0:7d:60:be:f5:83:c9:19:d3:01:15: cf:4c:20:ba:dc:a9:33:89:83:24:b5:6e:65:06:86:d2:3a:61: 22:a6:d4:0a:a5:57:1c:89:e9:ec:bd:ed:a3:6a:08:a9:cd:7b: a4:9a:9e:da:0a:25:34:63:1a:51:79:3e:05:37:52:fa:74:d0: 25:42:59:bc:7e:b0:f4:7d:71:ce:41:6f:e7:de:fc:06:a8:ce: 45:6a:dc:2a:2e:eb:6b:f8:72:08:5a:62:35:39:a2:a7:f4:bd: b4:6e:2e:89:7d:89:35:c2:a0:15:66:47:32:67:d1:d3:da:d4: 18:9e:a2:9d:61:59:2c:79:21:d6:2d:30:bc:af:bb:61:e6:24: b7:3b:4e:e1:42:e9:4c:25:17:40:0b:e0:5a:69:ce:c5:4c:21: 5f:52:06:78:61:60:86:3a:dd:f5:10:07:2c:03:fb:4f:74:a2: f0:6b:c5:65:86:69:d5:14:5a:7f:ad:13:85:e9:40:2f:02:35: f0:f0:7d:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVM4W/Qys6pDRpgafkOJ3uxXtVBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMjEwMDA1MDExWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTdiMjMzYWVkN2RiNTYyMDIxNzkzYzNjY2Y1MThjZGFh MWNjYjM5MWYxMmVkYjBhYTNlNjc3ODIwMzU4ZjE1MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk/7IM6xMtcCEaZQKbv9qoieWzdqwgoo7L9j++2TL8gocS FmCe36NCYabqEqXhuEy3e4b/z3z6FplwAFYd6kgB1vtMer1Cce0PoH/5ImOpVXBw +jXx78xLqnKX8ZenbCXledWa8HHBPkkdsYyOSDkzMWXLOmsX8Zbfk1AKMrXanmqH JZframbA4KiEPjijbb6I9XXdl4OhspYwvbxZqXo3hRhHmyYDW45eLFhan5FpBDNh k6JV/djqUBh0b7oCMNXgCAtQqTz7wz2QRCMZo/GA6anpWEqbbt6Wqe/F/VcMbjI3 1xm77t5ZGq621wNt5TFNXHS0XHXHB42FGvzBgnnhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNwKuLx+v5MY8wBzbw+1SABm2eQcwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzIwY2RlNGRjLTgxZWQtNGQ5Ni1hOGU1LTE1OWE2Y2RjMDc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAHGRuIbrsRBXKk2WjAz87HE+2hNY fSpzbZApp15ziM+p0h0+dtKfemcE3uRsbggsjPfWunQQElYySMTwSVzgfWC+9YPJ GdMBFc9MILrcqTOJgyS1bmUGhtI6YSKm1AqlVxyJ6ey97aNqCKnNe6SantoKJTRj GlF5PgU3Uvp00CVCWbx+sPR9cc5Bb+fe/AaozkVq3Cou62v4cghaYjU5oqf0vbRu Lol9iTXCoBVmRzJn0dPa1Bieop1hWSx5IdYtMLyvu2HmJLc7TuFC6UwlF0AL4Fpp zsVMIV9SBnhhYIY63fUQBywD+090ovBrxWWGadUUWn+tE4XpQC8CNfDwfZ0= -----END CERTIFICATE-----Generated at Thu Dec 11 17:52:16 2025 by rpki-client