This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json) Hash identifier: Zw4H6gUctu1cbm7bmlTwJWKcc+AowmckjDpOauXLIUY= Subject key identifier: 9F:C7:C2:69:07:D3:30:C0:33:14:27:68:E7:D5:0B:5C:83:9B:BB:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B2A03A446399CECA98F34E63000A090364B6B91 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa Signing time: Sat 06 Dec 2025 00:40:40 +0000 ROA not before: Sat 06 Dec 2025 00:40:40 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:03:a4:46:39:9c:ec:a9:8f:34:e6:30:00:a0:90:36:4b:6b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:40:40 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=1b3240050dbf52bc79726e58c44fb5fb537dd6f132fc45dfd64da11749a6dc13, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:60:16:50:a9:6d:84:df:43:84:a5:95:0e: 86:af:7a:3c:11:9b:55:cb:dd:02:a4:4c:1b:73:92: d7:90:88:33:d3:94:c1:86:56:86:2a:7e:ab:90:13: ae:18:f3:a1:10:02:d5:65:05:b7:32:20:12:d5:a7: 97:dc:ac:19:f5:36:a7:f6:04:0f:ff:cb:63:0e:a7: 6c:94:72:78:70:be:b0:7a:47:10:ed:ad:ce:52:ab: f0:a8:1b:ba:f5:cc:8d:12:e5:53:ee:a8:dd:50:e1: ef:45:59:0d:c4:d8:09:cb:04:7f:bc:15:35:0b:3e: cf:97:3a:a5:00:4c:7e:30:4b:bb:05:75:83:29:ba: 96:c0:a9:da:5a:81:ed:43:a3:69:4e:91:3f:33:e0: 03:21:17:e8:75:b1:bc:79:e0:4e:e4:f5:c2:8c:17: ba:d1:f7:27:8e:6e:15:3e:73:33:e1:97:03:fe:78: 59:ed:fe:df:fd:7e:d6:12:60:95:1a:fb:5e:76:ca: 91:11:18:96:cb:94:86:cf:08:b1:76:29:62:f8:0f: 5a:e0:fc:7f:06:35:13:9a:70:69:50:f7:ca:e0:e7: c5:e7:54:4f:75:b3:6b:19:52:8a:02:e7:80:82:a3: 56:6c:76:32:8d:b8:e1:42:fe:68:14:b3:f8:6a:6d: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C7:C2:69:07:D3:30:C0:33:14:27:68:E7:D5:0B:5C:83:9B:BB:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.136.0/21 Signature Algorithm: sha256WithRSAEncryption b7:9f:75:be:86:9c:5b:74:79:47:b8:df:7f:10:be:9f:61:20: 84:51:01:3f:62:7c:8a:42:70:99:3e:c7:3b:29:91:ef:03:3b: 02:6e:38:e4:05:38:68:7d:7e:fe:c8:4c:e7:c9:7b:9e:72:91: 35:2a:0b:93:61:d4:37:5a:9c:24:10:7f:d4:b5:74:9b:5c:02: 06:1b:8c:3a:41:89:09:e9:cc:6a:be:4f:b3:df:68:2a:ab:6d: d5:b9:da:67:0c:d2:7d:89:e9:a1:03:1f:fa:d4:56:06:db:5c: 2a:89:5f:fe:0c:44:94:99:de:ad:c3:74:89:4a:41:3b:8d:76: 15:4f:15:09:27:37:ad:e6:d0:67:7b:99:36:f1:55:7c:cf:ed: 2b:de:64:3b:9c:54:a0:5e:6b:55:fc:8c:29:db:0e:a4:a6:b8: b3:a9:19:6b:74:f2:ef:8e:7f:94:ef:61:ef:f1:83:eb:d8:d7: c1:03:5f:63:30:2e:fc:1f:94:b2:e0:63:4d:c3:64:c8:94:d0: 59:b2:f7:4d:92:59:cc:aa:34:ab:f2:81:2a:c9:a2:39:58:5e: 5a:cc:d9:10:44:92:9f:24:a9:6b:ef:30:49:c0:be:9a:70:65: 75:6b:67:11:87:b5:38:c5:a2:35:46:6c:23:25:a7:c5:9a:b5: 3e:72:72:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKyoDpEY5nOypjzTmMACgkDZLa5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDA0MDQwWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjMyNDAwNTBkYmY1MmJjNzk3MjZlNThjNDRmYjVmYjUz N2RkNmYxMzJmYzQ1ZGZkNjRkYTExNzQ5YTZkYzEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxRWAWUKlthN9DhKWVDoavejwRm1XL3QKkTBtzkteQiDPT lMGGVoYqfquQE64Y86EQAtVlBbcyIBLVp5fcrBn1Nqf2BA//y2MOp2yUcnhwvrB6 RxDtrc5Sq/CoG7r1zI0S5VPuqN1Q4e9FWQ3E2AnLBH+8FTULPs+XOqUATH4wS7sF dYMpupbAqdpage1Do2lOkT8z4AMhF+h1sbx54E7k9cKMF7rR9yeObhU+czPhlwP+ eFnt/t/9ftYSYJUa+152ypERGJbLlIbPCLF2KWL4D1rg/H8GNROacGlQ98rg58Xn VE91s2sZUooC54CCo1ZsdjKNuOFC/mgUs/hqbWwvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn8fCaQfTMMAzFCdo59ULXIObu8swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYTdiYjk4LWZjN2ItNDU0NC1hODhjLTJhNmQyMmY5MmZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFIgwDQYJKoZIhvcNAQELBQADggEBALefdb6GnFt0eUe4338Qvp9hIIRR AT9ifIpCcJk+xzspke8DOwJuOOQFOGh9fv7ITOfJe55ykTUqC5Nh1DdanCQQf9S1 dJtcAgYbjDpBiQnpzGq+T7PfaCqrbdW52mcM0n2J6aEDH/rUVgbbXCqJX/4MRJSZ 3q3DdIlKQTuNdhVPFQknN63m0Gd7mTbxVXzP7SveZDucVKBea1X8jCnbDqSmuLOp GWt08u+Of5TvYe/xg+vY18EDX2MwLvwflLLgY03DZMiU0Fmy902SWcyqNKvygSrJ ojlYXlrM2RBEkp8kqWvvMEnAvppwZXVrZxGHtTjFojVGbCMlp8WatT5ycrk= -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:58 2025 by rpki-client