This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa File: ae8bbe60-fea7-42d1-a045-90021977a902.roa (raw, json) Hash identifier: tizn0cAeQwyS9r6ueJ7R0T6jBsT0N9iIBtVTXeC+8JY= Subject key identifier: 81:C3:3E:CD:07:C7:B2:70:D2:F2:37:92:AA:97:AC:5A:FB:3C:31:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E210735D5161D2587D4EE3C20EC77D943EEDF76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa Signing time: Sat 06 Dec 2025 00:20:03 +0000 ROA not before: Sat 06 Dec 2025 00:20:03 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:21:07:35:d5:16:1d:25:87:d4:ee:3c:20:ec:77:d9:43:ee:df:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:20:03 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=33fd51b7670c56b9f397c5de76a54c877a1e5f1c3fbeed493964c48bc2305f30, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:50:4e:cd:e5:1a:ee:62:de:ee:eb:58:d4:31: a3:17:01:41:06:1e:d9:10:18:00:06:6a:41:be:b5: 6b:42:0e:f5:df:37:66:7c:c7:f1:4b:6a:14:39:44: 3f:b8:c6:d9:07:b0:3d:7b:3a:3e:73:66:e1:d6:97: dc:2a:97:fa:48:cb:fb:b7:99:12:32:06:40:6b:8a: d4:18:ba:de:de:eb:2e:74:8c:67:7d:99:59:6e:f0: b7:e3:7c:5d:4f:12:06:6d:52:57:fd:6e:af:34:eb: 3c:5b:b8:4a:55:3d:b5:5b:a1:d3:49:49:b9:f7:d4: 6c:6e:98:50:a3:01:56:73:df:a2:9d:ee:42:6e:b4: d0:6d:9c:79:7c:dc:94:9f:38:88:55:00:b6:34:75: fd:7f:a4:8b:fa:92:1a:51:3d:52:8a:9c:7c:36:db: b1:71:1e:78:33:0c:ce:c4:1c:e4:5e:da:5d:60:2b: c2:00:61:54:41:64:1d:e6:e8:87:30:c1:83:f3:2a: 78:cb:ea:7b:14:d9:a4:30:ab:aa:ed:1c:a1:37:e3: bf:7b:17:d1:59:c7:9d:00:f6:91:45:37:7c:dc:2c: 35:d2:94:12:a8:c4:8a:d3:3b:47:bd:a1:85:95:ee: bd:12:3d:c2:9a:2d:fe:5a:f9:0d:34:14:75:54:f4: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C3:3E:CD:07:C7:B2:70:D2:F2:37:92:AA:97:AC:5A:FB:3C:31:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.0.0/18 Signature Algorithm: sha256WithRSAEncryption 44:02:65:24:1c:26:34:d5:f3:10:b0:98:aa:38:6d:d2:a4:f8: 03:02:9d:c4:a0:98:23:42:f7:65:94:7b:20:f0:69:d5:73:85: f6:7a:37:80:ca:c2:f1:9d:ec:27:72:2f:40:65:bf:e0:3b:ba: a4:d1:fb:34:aa:df:94:88:fc:bb:eb:9b:11:b0:72:90:30:83: 5b:67:16:42:0c:e9:bc:81:2c:f1:80:87:ef:9b:e4:c8:90:82: f2:60:0d:a2:16:8d:e5:79:b9:37:ac:4a:af:e3:d6:a4:3a:90: b6:25:d9:00:2c:c1:30:e1:3a:59:fa:fa:0e:43:13:38:20:c2: 4b:a2:38:3a:1a:ab:00:26:c4:63:52:f4:61:b7:3d:9a:60:cc: 69:e8:df:43:a3:50:ad:45:08:e6:94:47:21:f4:b4:2f:09:c1: af:ef:6b:cd:7d:24:b2:ff:08:cc:be:8b:7f:dc:4d:b5:a4:9e: f7:bf:cb:61:65:6e:0e:cd:45:c8:10:43:be:c4:e3:e5:7f:02: 3a:4b:fa:9a:8c:5e:00:59:f0:b7:c0:a4:6d:55:df:08:60:1b: 72:f7:18:58:40:5f:0d:4c:01:3e:39:f1:5b:51:ed:75:1b:dc: 17:d5:fc:76:62:68:86:ca:ab:99:e9:9c:a8:95:ec:51:44:7b: 1b:a1:db:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULiEHNdUWHSWH1O48IOx32UPu33YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDAyMDAzWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2ZkNTFiNzY3MGM1NmI5ZjM5N2M1ZGU3NmE1NGM4Nzdh MWU1ZjFjM2ZiZWVkNDkzOTY0YzQ4YmMyMzA1ZjMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVUE7N5RruYt7u61jUMaMXAUEGHtkQGAAGakG+tWtCDvXf N2Z8x/FLahQ5RD+4xtkHsD17Oj5zZuHWl9wql/pIy/u3mRIyBkBritQYut7e6y50 jGd9mVlu8LfjfF1PEgZtUlf9bq806zxbuEpVPbVbodNJSbn31GxumFCjAVZz36Kd 7kJutNBtnHl83JSfOIhVALY0df1/pIv6khpRPVKKnHw227FxHngzDM7EHORe2l1g K8IAYVRBZB3m6IcwwYPzKnjL6nsU2aQwq6rtHKE34797F9FZx50A9pFFN3zcLDXS lBKoxIrTO0e9oYWV7r0SPcKaLf5a+Q00FHVU9AuZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgcM+zQfHsnDS8jeSqpesWvs8MSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlOGJiZTYwLWZlYTctNDJkMS1hMDQ1LTkwMDIxOTc3YTkwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFQAwDQYJKoZIhvcNAQELBQADggEBAEQCZSQcJjTV8xCwmKo4bdKk+AMC ncSgmCNC92WUeyDwadVzhfZ6N4DKwvGd7CdyL0Blv+A7uqTR+zSq35SI/LvrmxGw cpAwg1tnFkIM6byBLPGAh++b5MiQgvJgDaIWjeV5uTesSq/j1qQ6kLYl2QAswTDh Oln6+g5DEzggwkuiODoaqwAmxGNS9GG3PZpgzGno30OjUK1FCOaURyH0tC8Jwa/v a819JLL/CMy+i3/cTbWknve/y2Flbg7NRcgQQ77E4+V/AjpL+pqMXgBZ8LfApG1V 3whgG3L3GFhAXw1MAT458VtR7XUb3BfV/HZiaIbKq5npnKiV7FFEexuh28g= -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:52 2025 by rpki-client