This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa File: b33937a9-2482-483c-ae0b-7f75fc542de0.roa (raw, json) Hash identifier: ADCna6viPZjJj91f2jVDOtp7r2OTL8H5iSQwY9by83I= Subject key identifier: 68:EB:62:00:70:93:6A:F3:00:CC:A4:52:24:45:6C:46:4C:BE:2A:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FEFA10B69BF6AA4914FC75E4DA41FA9749762BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa Signing time: Sat 06 Dec 2025 02:21:16 +0000 ROA not before: Sat 06 Dec 2025 02:21:16 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.22.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:a1:0b:69:bf:6a:a4:91:4f:c7:5e:4d:a4:1f:a9:74:97:62:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:21:16 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=57a0f35fddc4aa91d30bd71193d48f2e464960302e1e36935ce50e80648e4916, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:cd:5d:dd:65:cf:2a:b3:1b:90:e7:f5:1d: 41:46:04:21:1e:2b:f5:47:bc:53:2c:f8:ac:d5:8d: 2b:fe:0d:57:d8:b1:ec:6c:2e:9d:b9:01:81:4b:86: d3:82:13:25:27:62:ea:69:0a:cf:09:6f:bf:f2:00: a9:9f:ca:49:6b:20:17:f6:43:4b:41:36:25:7f:8d: f4:4c:a7:fc:8d:41:c7:3b:15:26:15:03:22:24:3f: 92:f5:d3:28:a0:a2:a3:e0:94:d8:c3:56:76:c2:8a: 44:e1:49:79:87:cc:2f:ca:bd:09:0c:25:5b:79:00: a2:0a:33:36:a0:2c:29:6f:19:41:f8:36:8f:fe:e2: 38:a2:33:46:28:0b:08:84:fb:41:28:cf:4f:8c:2e: e6:0d:9a:57:d1:36:0c:6d:b1:c4:fb:87:59:28:26: 2f:eb:db:c8:e1:38:a7:b5:ca:54:70:ee:b9:bd:81: 2b:0c:83:3e:f7:24:21:e3:d4:e5:28:a9:e2:d0:30: 68:8c:af:91:03:7f:1c:4f:be:38:67:e7:bc:ae:bd: de:40:93:b1:97:aa:fa:2a:7a:ec:7d:d1:ba:ab:d9: e4:7c:e7:be:54:1e:11:9b:f1:ac:1c:51:26:42:03: 05:30:d9:fa:56:5b:5b:09:d9:79:d6:2d:09:da:bc: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:62:00:70:93:6A:F3:00:CC:A4:52:24:45:6C:46:4C:BE:2A:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b33937a9-2482-483c-ae0b-7f75fc542de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/17 Signature Algorithm: sha256WithRSAEncryption 15:9a:23:44:b2:ff:af:ba:d5:2a:db:bc:f9:40:6b:50:a4:8e: 24:9f:fa:e9:2e:23:ed:06:25:50:07:41:60:40:12:e4:95:60: 9e:68:ae:29:5f:95:2a:e3:1a:eb:9c:23:04:43:d6:ab:7a:86: d6:55:28:9f:0d:09:2b:49:7c:ee:7c:17:47:3a:6c:4e:0c:46: ce:bc:05:4e:a0:2d:a6:54:e3:1f:34:0e:04:f3:30:7d:98:e6: d8:2a:be:3d:47:70:5a:3a:8b:b6:b9:33:9b:25:ca:4c:0d:a0: 26:3c:59:3a:97:01:12:9f:5b:b9:54:98:d2:f3:54:64:44:11: a1:83:89:a9:c6:48:2a:0d:b8:41:9c:53:4a:84:ed:cd:7f:50: 54:fa:9d:61:0c:d8:be:59:6f:55:53:c5:e5:e0:70:fa:72:88: 4f:a9:74:3a:c1:7b:85:0e:1c:35:b5:51:cd:a5:99:db:7f:1d: 39:2d:f6:9e:1e:7d:0a:f7:6a:84:2d:73:29:cd:de:9e:de:b1: f9:17:8c:a9:20:09:96:cb:e1:2b:6f:57:df:b5:dc:d2:0f:78: d8:e9:68:90:33:57:d7:ae:7e:29:34:1a:93:3f:e1:69:99:27: cb:f6:fd:3d:7c:96:38:6d:c8:81:71:7c:a2:4d:54:e5:9b:fd: 8d:5e:40:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD++hC2m/aqSRT8deTaQfqXSXYr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIyMTE2WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2EwZjM1ZmRkYzRhYTkxZDMwYmQ3MTE5M2Q0OGYyZTQ2 NDk2MDMwMmUxZTM2OTM1Y2U1MGU4MDY0OGU0OTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFUM1d3WXPKrMbkOf1HUFGBCEeK/VHvFMs+KzVjSv+DVfY sexsLp25AYFLhtOCEyUnYuppCs8Jb7/yAKmfyklrIBf2Q0tBNiV/jfRMp/yNQcc7 FSYVAyIkP5L10yigoqPglNjDVnbCikThSXmHzC/KvQkMJVt5AKIKMzagLClvGUH4 No/+4jiiM0YoCwiE+0Eoz0+MLuYNmlfRNgxtscT7h1koJi/r28jhOKe1ylRw7rm9 gSsMgz73JCHj1OUoqeLQMGiMr5EDfxxPvjhn57yuvd5Ak7GXqvoqeux90bqr2eR8 575UHhGb8awcUSZCAwUw2fpWW1sJ2XnWLQnavG6HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaOtiAHCTavMAzKRSJEVsRky+KgUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMzkzN2E5LTI0ODItNDgzYy1hZTBiLTdmNzVmYzU0MmRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFgAwDQYJKoZIhvcNAQELBQADggEBABWaI0Sy/6+61SrbvPlAa1CkjiSf +ukuI+0GJVAHQWBAEuSVYJ5orilflSrjGuucIwRD1qt6htZVKJ8NCStJfO58F0c6 bE4MRs68BU6gLaZU4x80DgTzMH2Y5tgqvj1HcFo6i7a5M5slykwNoCY8WTqXARKf W7lUmNLzVGREEaGDianGSCoNuEGcU0qE7c1/UFT6nWEM2L5Zb1VTxeXgcPpyiE+p dDrBe4UOHDW1Uc2lmdt/HTkt9p4efQr3aoQtcynN3p7esfkXjKkgCZbL4StvV9+1 3NIPeNjpaJAzV9eufik0GpM/4WmZJ8v2/T18ljhtyIFxfKJNVOWb/Y1eQOQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:22 2025 by rpki-client