This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/951f9152-d1f9-4c43-8e19-f0d6061eba42.roa File: 951f9152-d1f9-4c43-8e19-f0d6061eba42.roa (raw, json) Hash identifier: n37s8CPS38bH7CQBTr1jD99jfs9Fo5CEdQKkt0/LBg4= Subject key identifier: 8E:09:68:3A:08:E0:21:5A:BC:73:C1:0D:49:CF:A7:8F:76:6F:39:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40372BDE3BED435790D944FAFAD13692C134AA10 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/951f9152-d1f9-4c43-8e19-f0d6061eba42.roa Signing time: Tue 11 Nov 2025 03:51:40 +0000 ROA not before: Tue 11 Nov 2025 03:51:40 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:37:2b:de:3b:ed:43:57:90:d9:44:fa:fa:d1:36:92:c1:34:aa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 11 03:51:40 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=d34f480442ebf4407cb446204907ee846073679548c52e1bf12a3edf04efa9b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:1d:ee:ef:49:5b:ee:5b:52:ab:84:b8:1c: 13:b5:65:e4:7d:15:74:9e:08:84:de:b3:a6:30:ec: 3c:90:58:93:40:0b:6f:f1:d8:21:43:e9:76:12:ac: 2f:37:53:f3:61:1f:56:e6:88:d4:77:97:19:5c:60: 07:99:34:08:09:77:f5:78:49:52:99:c2:1d:1f:32: 7e:e3:84:a3:09:dd:71:d8:9f:87:ac:ee:f8:b1:e7: 22:01:19:62:a6:60:60:4b:c1:f1:f5:e1:a1:c0:a3: 32:35:11:b9:8c:1a:9b:43:cc:a1:db:4b:a8:30:f6: 38:ab:2c:e2:88:4a:06:b5:39:be:ad:03:b0:d8:22: 14:26:f0:98:12:13:1d:26:e3:f7:81:f2:25:72:0a: 1a:17:45:01:e2:1e:5e:ed:6d:6e:15:af:a0:aa:78: 6e:00:7d:45:49:f8:f9:37:73:99:c5:88:21:2d:e7: bb:93:fb:45:2c:7f:a7:8d:51:66:69:b5:38:b9:3c: 2d:72:75:a9:43:0f:3b:ac:26:ec:93:13:7a:b7:7f: fa:55:23:bd:bb:d5:93:e5:53:4f:de:49:4e:6e:1e: 37:db:94:f7:9b:ff:97:ab:5d:b0:1a:f5:ca:d5:0e: 47:bc:16:56:24:80:77:4f:1a:a8:5c:35:65:d8:5c: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:68:3A:08:E0:21:5A:BC:73:C1:0D:49:CF:A7:8F:76:6F:39:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/951f9152-d1f9-4c43-8e19-f0d6061eba42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.128.0/17 Signature Algorithm: sha256WithRSAEncryption ae:08:3c:d6:12:22:bc:4d:bb:7a:32:d5:44:62:15:dc:f8:07: ce:8c:40:ed:c7:ef:04:a1:73:26:1d:13:7f:26:21:1a:e7:7f: 1d:f7:cb:7f:23:c3:bb:8c:6f:f5:f6:98:c0:79:5f:53:df:ed: d1:bf:f2:aa:5f:67:40:d1:32:c4:e7:85:66:09:39:5b:c6:37: 38:60:37:5b:38:06:e2:e2:d9:59:c3:fa:00:68:0c:6a:18:52: f2:00:88:9a:9d:1f:e5:5b:94:f3:e8:1c:12:ca:ce:be:6b:30: 01:f4:e9:56:df:14:3e:2e:90:aa:ed:05:35:2d:ac:2e:85:a7: 12:8c:df:02:b6:22:d2:2f:df:06:e9:28:cb:12:13:b4:19:af: af:5f:c3:d9:93:6e:c8:bc:9d:1e:d1:b3:97:4e:7e:49:55:fa: c6:0b:a1:fd:48:37:c0:52:d7:49:b9:7f:f4:93:0a:89:7d:e9: 40:1e:4d:03:a4:39:fb:1c:39:54:2a:80:d6:34:60:91:1c:c0: e7:c6:c8:c9:8b:fe:33:83:8f:2a:2d:a1:f3:d5:c3:ac:eb:8a: 65:11:16:89:8b:00:7e:9f:c6:97:5a:3c:ec:13:b5:e8:31:17: a6:f3:d9:f0:60:d9:10:66:11:8c:12:b1:f9:62:b6:b7:a1:39: c6:c9:f8:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQDcr3jvtQ1eQ2UT6+tE2ksE0qhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTExMDM1MTQwWhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzRmNDgwNDQyZWJmNDQwN2NiNDQ2MjA0OTA3ZWU4NDYw NzM2Nzk1NDhjNTJlMWJmMTJhM2VkZjA0ZWZhOWIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAEx3u70lb7ltSq4S4HBO1ZeR9FXSeCITes6Yw7DyQWJNA C2/x2CFD6XYSrC83U/NhH1bmiNR3lxlcYAeZNAgJd/V4SVKZwh0fMn7jhKMJ3XHY n4es7vix5yIBGWKmYGBLwfH14aHAozI1EbmMGptDzKHbS6gw9jirLOKISga1Ob6t A7DYIhQm8JgSEx0m4/eB8iVyChoXRQHiHl7tbW4Vr6CqeG4AfUVJ+Pk3c5nFiCEt 57uT+0Usf6eNUWZptTi5PC1ydalDDzusJuyTE3q3f/pVI7271ZPlU0/eSU5uHjfb lPeb/5erXbAa9crVDke8FlYkgHdPGqhcNWXYXDibAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjgloOgjgIVq8c8ENSc+nj3ZvOWIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MWY5MTUyLWQxZjktNGM0My04ZTE5LWYwZDYwNjFlYmE0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2zoAwDQYJKoZIhvcNAQELBQADggEBAK4IPNYSIrxNu3oy1URiFdz4B86M QO3H7wShcyYdE38mIRrnfx33y38jw7uMb/X2mMB5X1Pf7dG/8qpfZ0DRMsTnhWYJ OVvGNzhgN1s4BuLi2VnD+gBoDGoYUvIAiJqdH+VblPPoHBLKzr5rMAH06VbfFD4u kKrtBTUtrC6FpxKM3wK2ItIv3wbpKMsSE7QZr69fw9mTbsi8nR7Rs5dOfklV+sYL of1IN8BS10m5f/STCol96UAeTQOkOfscOVQqgNY0YJEcwOfGyMmL/jODjyotofPV w6zrimURFomLAH6fxpdaPOwTtegxF6bz2fBg2RBmEYwSsflitrehOcbJ+Dw= -----END CERTIFICATE-----Generated at Wed Dec 3 18:00:59 2025 by rpki-client