This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfc681a-5fbd-441f-962b-c193303a4765.roa File: 7bfc681a-5fbd-441f-962b-c193303a4765.roa (raw, json) Hash identifier: cyhdud9wnXrPytZLzp6EOJexozvG/b96ly9Ttynljic= Subject key identifier: 5B:15:EB:DC:AB:80:A8:B5:5E:67:81:03:0C:81:91:35:7C:B3:B6:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F70E169E94757F8E2BFCCC9792C64E1E5139A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfc681a-5fbd-441f-962b-c193303a4765.roa Signing time: Sat 06 Dec 2025 00:20:42 +0000 ROA not before: Sat 06 Dec 2025 00:20:42 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:70:e1:69:e9:47:57:f8:e2:bf:cc:c9:79:2c:64:e1:e5:13:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:20:42 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=e815504af2cfd35679653b6a80c5ca8f5ca9abece6ddb3354b1f220ecec6683c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:d3:3d:74:19:ce:26:e5:86:4a:96:c1:3c: 87:35:cc:1f:a0:a9:57:3a:01:ed:24:b8:b3:a2:b4: 79:62:5c:b8:7f:10:43:7d:ae:02:86:97:d4:d4:e7: d4:11:c5:c9:21:41:d4:31:ff:20:13:f6:0f:eb:f3: cf:bd:80:c7:84:bc:76:6e:94:b3:9c:e3:d1:a5:4d: 99:91:ba:8a:8f:ff:ab:83:af:21:34:7f:3c:45:a4: 37:1f:fb:06:7d:70:1b:46:a0:42:cc:82:0f:4c:a2: 9a:ed:01:0c:e5:64:36:ff:15:7c:3e:15:a9:0c:06: 28:3b:2c:84:1e:b3:da:b2:07:51:6c:47:2a:5d:a5: e2:26:53:e4:18:39:cd:69:f8:8a:71:a2:bf:fd:e1: eb:d9:4b:2c:43:72:1d:32:88:6f:1b:cc:5d:fc:6e: 65:80:fa:7f:de:6d:05:f4:9d:aa:a5:51:c4:59:cc: c7:ea:85:58:0f:76:c2:31:bf:9a:5a:b7:e9:21:f1: ed:7f:88:d3:c2:2c:d2:df:6e:bd:75:59:b0:0a:00: 40:5d:83:da:44:ed:60:28:f9:a1:72:3e:98:2b:d2: e3:7a:e3:57:e1:74:19:0f:74:91:35:ab:3f:a4:06: 03:b4:41:23:ad:77:0a:d7:a0:1f:af:6d:b0:4a:18: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:EB:DC:AB:80:A8:B5:5E:67:81:03:0C:81:91:35:7C:B3:B6:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfc681a-5fbd-441f-962b-c193303a4765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:4d:a6:fa:1e:fc:07:9e:0b:39:81:80:79:96:78:17:60:24: bb:8f:6e:76:b5:b8:22:d4:38:98:00:86:ae:e1:f7:73:7b:10: da:44:16:8a:9a:07:34:ac:fb:f4:11:06:0d:0f:93:3b:f1:6a: 5c:ff:7f:2a:1d:55:2f:df:aa:8a:14:20:7c:c1:96:74:b1:86: a8:f8:ae:e7:66:7d:c3:c7:39:69:4e:62:5d:ab:68:5c:c3:ec: ae:6d:fd:d4:9c:01:27:53:4c:2f:b5:eb:71:dd:8e:b6:a0:33: d9:dc:65:ae:ca:db:e3:83:f7:94:9d:3c:b7:ee:8d:46:ad:e9: 5a:ee:96:23:31:79:01:aa:bb:11:a9:cc:fd:c8:b6:92:5b:5c: 1c:23:7a:a4:e7:ab:2b:ec:72:93:bf:cf:17:1b:58:99:8c:e5: 9c:e6:1e:4c:73:f7:c7:a4:4d:27:94:f1:78:05:28:fb:75:0d: 8e:30:e2:ed:ef:62:cb:67:fc:5a:55:14:7f:81:82:ec:df:9e: e2:ff:b2:70:b3:84:48:cd:c8:0e:a3:0b:ac:ec:0c:dd:6e:e9: 42:c9:75:12:c9:50:d3:16:7c:90:7e:d6:16:e6:fb:77:5b:ab: 37:00:82:11:56:50:5c:13:d7:4e:86:75:3c:4f:78:7b:81:12: d8:32:8b:28 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITb3DhaelHV/jiv8zJeSxk4eUTmjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEyMDYwMDIwNDJaFw0yNjAzMDYyMzU5NTla MHoxSTBHBgNVBAUTQGU4MTU1MDRhZjJjZmQzNTY3OTY1M2I2YTgwYzVjYThmNWNh OWFiZWNlNmRkYjMzNTRiMWYyMjBlY2VjNjY4M2MxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMjR0z10Gc4m5YZKlsE8hzXMH6CpVzoB7SS4s6K0eWJcuH8Q Q32uAoaX1NTn1BHFySFB1DH/IBP2D+vzz72Ax4S8dm6Us5zj0aVNmZG6io//q4Ov ITR/PEWkNx/7Bn1wG0agQsyCD0yimu0BDOVkNv8VfD4VqQwGKDsshB6z2rIHUWxH Kl2l4iZT5Bg5zWn4inGiv/3h69lLLENyHTKIbxvMXfxuZYD6f95tBfSdqqVRxFnM x+qFWA92wjG/mlq36SHx7X+I08Is0t9uvXVZsAoAQF2D2kTtYCj5oXI+mCvS43rj V+F0GQ90kTWrP6QGA7RBI613CtegH69tsEoY+qECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRbFevcq4CotV5ngQMMgZE1fLO2JjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvN2JmYzY4MWEtNWZiZC00NDFmLTk2MmItYzE5MzMwM2E0NzY1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB2sVgDANBgkqhkiG9w0BAQsFAAOCAQEATk2m+h78B54LOYGAeZZ4F2Aku49u drW4ItQ4mACGruH3c3sQ2kQWipoHNKz79BEGDQ+TO/FqXP9/Kh1VL9+qihQgfMGW dLGGqPiu52Z9w8c5aU5iXatoXMPsrm391JwBJ1NML7Xrcd2OtqAz2dxlrsrb44P3 lJ08t+6NRq3pWu6WIzF5Aaq7EanM/ci2kltcHCN6pOerK+xyk7/PFxtYmYzlnOYe THP3x6RNJ5TxeAUo+3UNjjDi7e9iy2f8WlUUf4GC7N+e4v+ycLOESM3IDqMLrOwM 3W7pQsl1EslQ0xZ8kH7WFub7d1urNwCCEVZQXBPXToZ1PE94e4ES2DKLKA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:56 2025 by rpki-client