This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa File: 4df343be-0016-484d-b1b8-90282c66c533.roa (raw, json) Hash identifier: ohtnzqYn4avcqkdaKxUgChmaGHe2jURRX21S4LdqKwQ= Subject key identifier: 05:0D:05:6D:CA:78:F3:DB:EA:85:C8:DF:A7:B8:BB:43:7D:B1:B3:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 601F80A0BD172B3C2914D006818C7A3ED145CC45 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa Signing time: Tue 27 Jan 2026 01:53:33 +0000 ROA not before: Tue 27 Jan 2026 01:53:33 +0000 ROA not after: Mon 27 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.107.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1f:80:a0:bd:17:2b:3c:29:14:d0:06:81:8c:7a:3e:d1:45:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 27 01:53:33 2026 GMT Not After : Apr 27 23:59:59 2026 GMT Subject: serialNumber=9e373defe3f3f4612cfa425823676bcb6845613c329494a95ff2829fd3b9b0aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:0f:5d:71:fe:b8:1e:f7:e8:ae:37:0a:53: fd:40:56:52:2c:f8:3b:16:b5:2e:b7:04:4e:6d:c8: 05:8c:41:ca:e1:80:0f:c1:68:91:bd:80:7f:c5:e0: a7:01:b5:d9:ed:22:0e:5f:76:36:79:80:c0:b5:b9: 2a:9b:99:d8:fa:7a:5b:e5:a3:88:c2:0a:4e:52:d0: 27:ba:9e:d1:db:64:a9:ef:06:b4:c9:e5:ad:b5:3d: 3f:aa:5b:39:bc:bc:6e:a8:e0:b9:04:53:84:cb:ee: 4b:11:fe:e9:38:98:3c:6a:a7:55:f7:38:46:7a:c5: db:85:82:ba:e9:96:70:3b:ce:58:a4:e5:87:db:a1: 53:32:ba:7f:90:d0:35:c2:8c:4b:3e:e4:33:ec:71: 4d:a7:44:ca:69:c6:4d:38:d5:13:5b:0f:5d:c4:3c: 7c:18:f9:11:0e:9b:75:61:94:2c:60:56:b9:aa:ca: 56:7e:1e:c7:8c:ba:5f:0b:ae:b9:a3:3f:7a:7a:75: c0:6b:e4:59:77:87:c4:20:8a:e4:98:34:5d:43:5f: f1:37:4b:ea:6b:69:6e:f1:70:14:77:11:dc:f6:3e: 2f:1c:9c:e1:cf:a5:05:7a:e8:a9:d8:da:61:b9:e9: 65:c5:c9:82:2e:16:05:ef:b2:f0:f6:e8:6b:61:1f: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:05:6D:CA:78:F3:DB:EA:85:C8:DF:A7:B8:BB:43:7D:B1:B3:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4df343be-0016-484d-b1b8-90282c66c533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.107.205.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:be:8a:68:41:a1:e3:ad:67:cc:8d:1c:2f:8d:f9:9c:28:33: 77:20:63:da:8a:a7:ad:70:08:be:be:37:95:41:4d:df:22:4d: 9c:ba:a5:aa:1c:c6:64:03:d4:55:b2:c3:7e:c8:d7:a5:65:e5: b1:77:49:c6:c5:73:f3:83:0d:cd:1d:5e:13:81:2a:2e:5d:09: 0b:16:92:c1:aa:ec:9b:5c:4e:63:54:0a:24:93:81:5f:df:08: f5:0c:33:f9:58:e9:2b:70:fa:6a:c8:94:96:d9:2c:4c:2a:e4: 6e:b5:84:0d:48:28:4c:98:e1:15:49:7d:2a:a4:0e:0a:65:65: de:91:ce:4b:4d:c7:7a:af:f1:29:ca:c7:af:25:63:93:65:cb: 11:b8:8f:83:19:fc:28:31:0c:5a:c1:bf:ac:e3:b4:52:e0:37: 9a:d7:23:41:ad:42:01:3f:af:cf:cd:cb:7c:e6:9a:0b:c1:6f: 20:57:65:56:c3:27:d7:72:45:1c:d2:36:2a:ea:58:d2:96:89: 3a:49:de:82:4b:47:c0:90:34:20:25:70:6d:b2:45:e1:d6:d3: 7b:31:e5:9b:a0:07:95:4c:9c:84:b3:c8:7e:1b:bd:d4:ed:44: ce:29:1d:6d:5b:be:ed:12:fc:7c:32:25:72:8e:f1:2e:79:04: dc:56:0a:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYB+AoL0XKzwpFNAGgYx6PtFFzEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTI3MDE1MzMzWhcNMjYwNDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTM3M2RlZmUzZjNmNDYxMmNmYTQyNTgyMzY3NmJjYjY4 NDU2MTNjMzI5NDk0YTk1ZmYyODI5ZmQzYjliMGFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCgg9dcf64HvforjcKU/1AVlIs+DsWtS63BE5tyAWMQcrh gA/BaJG9gH/F4KcBtdntIg5fdjZ5gMC1uSqbmdj6elvlo4jCCk5S0Ce6ntHbZKnv BrTJ5a21PT+qWzm8vG6o4LkEU4TL7ksR/uk4mDxqp1X3OEZ6xduFgrrplnA7zlik 5YfboVMyun+Q0DXCjEs+5DPscU2nRMppxk041RNbD13EPHwY+REOm3VhlCxgVrmq ylZ+HseMul8LrrmjP3p6dcBr5Fl3h8QgiuSYNF1DX/E3S+praW7xcBR3Edz2Pi8c nOHPpQV66KnY2mG56WXFyYIuFgXvsvD26GthH5xPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBQ0Fbcp489vqhcjfp7i7Q32xs5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkZjM0M2JlLTAwMTYtNDg0ZC1iMWI4LTkwMjgyYzY2YzUzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADRa80wDQYJKoZIhvcNAQELBQADggEBABq+imhBoeOtZ8yNHC+N+ZwoM3cg Y9qKp61wCL6+N5VBTd8iTZy6paocxmQD1FWyw37I16Vl5bF3ScbFc/ODDc0dXhOB Ki5dCQsWksGq7JtcTmNUCiSTgV/fCPUMM/lY6Stw+mrIlJbZLEwq5G61hA1IKEyY 4RVJfSqkDgplZd6RzktNx3qv8SnKx68lY5NlyxG4j4MZ/CgxDFrBv6zjtFLgN5rX I0GtQgE/r8/Ny3zmmgvBbyBXZVbDJ9dyRRzSNirqWNKWiTpJ3oJLR8CQNCAlcG2y ReHW03sx5ZugB5VMnISzyH4bvdTtRM4pHW1bvu0S/HwyJXKO8S55BNxWCn8= -----END CERTIFICATE-----Generated at Tue Feb 3 15:12:47 2026 by rpki-client