This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa File: 424f8ace-0502-433d-b305-08ed3d55c9f5.roa (raw, json) Hash identifier: HI8mb30EfZoHRdFeYRMSSFCelgiObTMAMmzZzOVQLws= Subject key identifier: 44:C7:E9:08:74:76:C7:18:B9:45:57:9C:88:DF:EA:E3:87:26:03:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4766AB4D65CF55C247427959B30120D4C05B9B5D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa Signing time: Mon 08 Dec 2025 00:31:34 +0000 ROA not before: Mon 08 Dec 2025 00:31:34 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:66:ab:4d:65:cf:55:c2:47:42:79:59:b3:01:20:d4:c0:5b:9b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 8 00:31:34 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=73b86550dbca1eff7cecc3df54b91ae2e1ac3b9b0799d93bd5b13053cb03a74b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:d2:e3:b0:22:5e:8f:d7:7f:61:71:ea:a7: 36:d4:91:68:6a:10:e8:fc:e6:b6:5a:ee:e6:cb:48: 5e:c4:a1:74:48:60:d5:60:05:14:1e:5f:4a:c7:76: f8:ee:03:98:ee:cd:35:ef:92:3b:97:e5:62:04:eb: 36:18:75:7a:f5:1a:b3:e4:df:c0:47:3a:bd:16:39: 5d:b6:e0:94:71:87:0e:d0:32:78:ce:ed:db:28:ef: b3:6a:b3:4e:f7:5c:c6:4d:33:1b:0b:54:7b:ef:ee: 6d:00:7c:3a:06:35:c4:fc:05:cb:7f:c6:62:3a:c2: 5b:e5:6c:a4:f4:46:e9:51:eb:12:3d:e7:99:75:a5: 30:f0:8a:f9:dc:7c:77:53:7f:3f:04:6f:18:f0:19: 73:c2:cc:04:ba:fa:f9:cf:88:ce:49:24:63:af:01: 28:60:8e:eb:0b:c0:f0:4a:f8:93:b7:ca:38:67:d4: 81:3c:cc:2d:4c:a7:c5:0d:5a:12:68:ea:f9:5c:21: ab:7c:4b:07:95:60:b6:b6:11:17:28:df:42:36:74: ed:02:63:d0:58:29:7e:b9:13:1e:76:67:23:11:74: 2f:25:a4:5c:41:e9:f3:0d:9e:9a:e2:cd:1b:72:9b: 62:1e:27:b7:a0:6f:53:67:d2:09:87:e3:c6:a3:66: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C7:E9:08:74:76:C7:18:B9:45:57:9C:88:DF:EA:E3:87:26:03:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.204.0/24 Signature Algorithm: sha256WithRSAEncryption 00:61:dc:89:13:28:cb:59:f4:2b:4d:70:1a:7f:04:ef:cc:92: 83:a3:72:d8:16:a1:49:45:70:cf:41:0c:b6:a1:78:c5:5a:d1: a4:c2:df:2d:ac:4b:6f:fc:61:c2:19:74:17:53:0b:2b:15:96: 6b:0d:78:45:b5:15:2e:60:6e:74:0b:83:63:87:1b:24:ed:33: 62:d2:ef:32:9c:52:50:61:a2:94:1f:c0:58:69:b7:c9:7a:88: b3:bb:55:cc:23:3b:7f:c9:16:2b:4f:e2:06:0f:48:22:51:e6: c6:93:77:bb:19:85:5f:44:16:27:c8:02:7c:1a:a5:d0:b8:72: 66:da:8d:1b:e0:b7:37:5b:2d:91:71:52:8e:13:fe:8a:52:9d: 5f:e7:6b:d4:2e:00:88:ee:82:19:8c:60:ef:95:85:f1:3e:52: 56:29:6b:91:17:38:87:66:d0:44:dc:f1:bc:34:7e:b8:14:39: cd:cc:2d:f4:f2:30:63:28:91:5f:f9:dc:80:bd:7d:ea:fc:37: fd:6b:53:15:58:ef:ec:25:f6:93:d6:cc:7b:90:aa:92:e0:48: 63:66:34:f6:d9:71:b0:af:5d:e8:7f:ea:6f:d6:0f:a6:35:00: 77:5a:b6:1f:8f:35:7b:d4:06:60:2f:99:6d:6a:dc:f1:90:c8: a5:64:ed:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR2arTWXPVcJHQnlZswEg1MBbm10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAzMTM0WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2I4NjU1MGRiY2ExZWZmN2NlY2MzZGY1NGI5MWFlMmUx YWMzYjliMDc5OWQ5M2JkNWIxMzA1M2NiMDNhNzRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi+NLjsCJej9d/YXHqpzbUkWhqEOj85rZa7ubLSF7EoXRI YNVgBRQeX0rHdvjuA5juzTXvkjuX5WIE6zYYdXr1GrPk38BHOr0WOV224JRxhw7Q MnjO7dso77Nqs073XMZNMxsLVHvv7m0AfDoGNcT8Bct/xmI6wlvlbKT0RulR6xI9 55l1pTDwivncfHdTfz8EbxjwGXPCzAS6+vnPiM5JJGOvAShgjusLwPBK+JO3yjhn 1IE8zC1Mp8UNWhJo6vlcIat8SweVYLa2ERco30I2dO0CY9BYKX65Ex52ZyMRdC8l pFxB6fMNnprizRtym2IeJ7egb1Nn0gmH48ajZqsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURMfpCHR2xxi5RVeciN/q44cmAwAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNGY4YWNlLTA1MDItNDMzZC1iMzA1LTA4ZWQzZDU1YzlmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFcwwDQYJKoZIhvcNAQELBQADggEBAABh3IkTKMtZ9CtNcBp/BO/MkoOj ctgWoUlFcM9BDLaheMVa0aTC3y2sS2/8YcIZdBdTCysVlmsNeEW1FS5gbnQLg2OH GyTtM2LS7zKcUlBhopQfwFhpt8l6iLO7VcwjO3/JFitP4gYPSCJR5saTd7sZhV9E FifIAnwapdC4cmbajRvgtzdbLZFxUo4T/opSnV/na9QuAIjughmMYO+VhfE+UlYp a5EXOIdm0ETc8bw0frgUOc3MLfTyMGMokV/53IC9fer8N/1rUxVY7+wl9pPWzHuQ qpLgSGNmNPbZcbCvXeh/6m/WD6Y1AHdath+PNXvUBmAvmW1q3PGQyKVk7V0= -----END CERTIFICATE-----Generated at Fri Jan 2 09:35:41 2026 by rpki-client