This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa File: 84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa (raw, json) Hash identifier: ymMbVTU5Fo9n9JYN8grDUJjHex2caP1xc+uZOY2H33s= Subject key identifier: 4E:F5:58:B5:C7:74:48:27:26:20:85:38:54:8E:85:0D:15:59:82:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3972FED6DBCACE45D6DCA642EFBC843142B43977 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa Signing time: Sat 06 Dec 2025 01:51:33 +0000 ROA not before: Sat 06 Dec 2025 01:51:33 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:72:fe:d6:db:ca:ce:45:d6:dc:a6:42:ef:bc:84:31:42:b4:39:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:51:33 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=ee08dbb978248d415f416a82d07a67c9af95c79a85b0edd080b470f56805bed4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:95:94:11:7d:7d:f2:93:b0:1d:06:d9:3c: ae:e6:a5:ee:82:b5:d0:2b:56:45:20:95:0d:d2:41: 5b:78:7e:a1:33:e9:1b:81:19:0a:50:ae:32:64:0a: 3e:fb:91:08:ea:77:87:9b:42:29:1c:b6:8c:76:73: d2:15:bf:3d:93:dd:12:84:9a:db:3e:1f:74:c2:38: 28:a2:ce:99:ed:f4:5e:5b:f5:50:b7:38:f3:c9:35: da:cb:88:00:33:d7:b3:23:40:3b:19:29:a2:86:0f: 6a:e9:16:73:2b:d5:dd:7a:3d:0f:63:e7:a6:eb:41: 3e:01:a5:1e:7e:d0:44:50:a0:60:13:a7:42:5b:29: f8:f7:1d:c5:99:92:ae:b5:31:9f:ef:c9:7b:fb:27: 7e:79:41:44:54:6a:a1:6b:19:2c:bb:98:94:09:7c: 70:b2:d0:83:3c:60:89:c7:38:a4:a2:1f:0c:11:d6: 5c:82:c9:ae:0f:55:17:fd:e5:3f:18:da:25:54:8a: 0e:48:e5:41:16:71:87:1a:1e:7a:a0:5b:02:a5:58: 3a:0f:5c:d8:ac:04:ea:6d:1a:15:f4:0b:6b:a5:9e: 0d:02:3b:a6:ea:b1:6f:27:e7:1b:9b:40:33:d9:05: ba:45:ed:a4:d7:f6:51:8d:0c:53:82:4a:ae:9e:af: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F5:58:B5:C7:74:48:27:26:20:85:38:54:8E:85:0D:15:59:82:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.208.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:ce:75:42:cf:be:77:59:f6:1d:d8:22:f1:04:af:5a:a8:97: 4b:28:01:80:d7:04:04:5e:72:ed:25:f2:67:cc:4a:bb:a8:4f: 0a:39:a3:8b:b4:20:1a:7a:12:e7:f6:94:4d:12:9d:fc:d7:e6: 02:df:42:d9:e0:a0:dc:56:bd:94:22:60:a8:f9:63:7c:a0:b3: 37:cb:6a:54:da:fd:be:8a:80:ad:01:65:f7:07:1f:93:55:9a: a3:8c:2d:67:8c:73:1f:9f:f6:9a:c1:21:54:6d:67:9b:60:a1: 27:15:88:3e:3b:5c:52:c7:a2:34:17:26:ae:1c:84:e0:63:c7: 81:c6:16:74:f5:e2:ba:2f:32:78:ea:ee:41:b1:64:59:88:9a: 00:13:e4:e4:e0:44:18:c8:59:4d:6b:97:2e:3b:be:e7:b0:81: 6e:f7:de:93:24:37:a3:1a:b4:0a:a2:14:04:53:ea:43:0b:59: 25:0d:6b:d2:7a:60:01:03:81:3e:a1:35:e4:c8:7e:d6:8a:6a: 6d:22:da:38:e1:85:b1:d0:d8:a2:4e:b9:16:b6:ff:48:bd:d6: 93:93:1e:bd:16:06:76:e5:d5:c2:40:c5:55:43:49:15:4c:d7: a0:0e:81:da:07:3e:ee:08:76:8c:81:23:88:16:d3:b4:9f:1d: 20:c3:47:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOXL+1tvKzkXW3KZC77yEMUK0OXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDE1MTMzWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTA4ZGJiOTc4MjQ4ZDQxNWY0MTZhODJkMDdhNjdjOWFm OTVjNzlhODViMGVkZDA4MGI0NzBmNTY4MDViZWQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3DpWUEX198pOwHQbZPK7mpe6CtdArVkUglQ3SQVt4fqEz 6RuBGQpQrjJkCj77kQjqd4ebQikctox2c9IVvz2T3RKEmts+H3TCOCiizpnt9F5b 9VC3OPPJNdrLiAAz17MjQDsZKaKGD2rpFnMr1d16PQ9j56brQT4BpR5+0ERQoGAT p0JbKfj3HcWZkq61MZ/vyXv7J355QURUaqFrGSy7mJQJfHCy0IM8YInHOKSiHwwR 1lyCya4PVRf95T8Y2iVUig5I5UEWcYcaHnqgWwKlWDoPXNisBOptGhX0C2ulng0C O6bqsW8n5xubQDPZBbpF7aTX9lGNDFOCSq6er9SNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTvVYtcd0SCcmIIU4VI6FDRVZgnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0ZGM2NGFkLTFiOWUtNDQxOS05NWZhLWU2OGEyZTUzZmRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFdAwDQYJKoZIhvcNAQELBQADggEBAHzOdULPvndZ9h3YIvEEr1qol0so AYDXBARecu0l8mfMSruoTwo5o4u0IBp6Euf2lE0SnfzX5gLfQtngoNxWvZQiYKj5 Y3ygszfLalTa/b6KgK0BZfcHH5NVmqOMLWeMcx+f9prBIVRtZ5tgoScViD47XFLH ojQXJq4chOBjx4HGFnT14rovMnjq7kGxZFmImgAT5OTgRBjIWU1rly47vuewgW73 3pMkN6MatAqiFART6kMLWSUNa9J6YAEDgT6hNeTIftaKam0i2jjhhbHQ2KJOuRa2 /0i91pOTHr0WBnbl1cJAxVVDSRVM16AOgdoHPu4IdoyBI4gW07SfHSDDR7I= -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:38 2025 by rpki-client