This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57189950-93c9-4214-a947-84029880b1e0.roa File: 57189950-93c9-4214-a947-84029880b1e0.roa (raw, json) Hash identifier: iIyx8BjnbO0L5WKWdcWP+vW4qOVojzugkY2EYhg30qM= Subject key identifier: BC:25:AA:F1:25:97:D0:74:97:03:8F:14:D1:38:7F:B0:8A:ED:79:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24D02809AD9101A9EE776921D1EC2A5925EC0C4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57189950-93c9-4214-a947-84029880b1e0.roa Signing time: Thu 11 Dec 2025 00:31:21 +0000 ROA not before: Thu 11 Dec 2025 00:31:21 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 203.86.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d0:28:09:ad:91:01:a9:ee:77:69:21:d1:ec:2a:59:25:ec:0c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:31:21 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=4650128eb4f89a309a28466ccc1da898d0f960ae75950b584193121e811ec89c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:0b:65:43:16:c7:29:2b:5b:21:be:76:1e: c5:b8:33:f7:e6:ab:08:59:59:13:b5:95:9d:85:b6: f1:2f:ae:b4:8a:67:8c:1a:b4:71:99:ec:bd:f6:66: 24:5f:4d:3a:1e:05:7a:e3:2f:90:85:8f:fa:ff:ac: ae:d2:34:26:2a:b1:f7:6a:30:3f:c2:94:5d:43:07: a9:03:2b:08:63:bf:8a:7d:8f:c3:84:50:d1:78:d3: ea:7b:17:56:10:37:32:ef:3a:6d:32:ef:48:bd:9c: 40:54:61:f0:6a:4d:17:24:d9:61:69:78:a8:05:ba: 16:93:d0:04:e9:3b:a3:d6:0b:bc:ba:e3:11:71:ad: 71:8b:f2:bc:fb:17:29:fd:4c:89:67:2a:62:95:42: 2e:e4:88:1f:79:68:84:31:e8:71:2a:12:bf:88:e2: 4d:2b:6a:12:5b:78:58:83:6a:b1:ed:4c:a3:8d:bb: 36:16:fb:fa:52:f1:8d:16:be:31:51:cb:02:6e:b6: 33:0d:8b:15:e7:9c:30:64:5c:58:b6:b7:50:0b:24: 0a:f4:1d:9e:9e:dd:ea:c0:e1:69:26:a2:12:35:cc: 52:5b:16:35:e6:2d:97:b4:81:dd:b8:0a:be:92:bd: 43:42:00:41:5a:16:22:49:74:d3:a1:18:05:06:57: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:AA:F1:25:97:D0:74:97:03:8F:14:D1:38:7F:B0:8A:ED:79:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57189950-93c9-4214-a947-84029880b1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.218.0/24 Signature Algorithm: sha256WithRSAEncryption b8:28:37:56:3c:dc:20:74:89:64:82:07:52:51:14:3b:9a:ae: be:cc:19:b4:4f:c7:aa:65:69:ae:71:ad:fe:f8:6d:5b:96:38: c5:a2:3d:94:9a:93:2a:52:c4:d7:41:5c:bf:f4:34:ae:4a:40: 5d:be:8a:31:88:21:71:66:47:db:03:7a:0c:45:9d:c6:a5:0e: 47:41:65:00:ad:82:df:81:95:c2:0e:9a:c7:99:62:fc:e1:14: 3a:1d:da:a1:70:7f:f2:c0:2a:08:0b:a2:d9:42:20:00:d6:64: 8c:6a:3c:23:fd:3b:7c:60:2b:7d:a5:9f:41:62:df:5a:5a:53: 97:a7:8b:7c:7d:15:af:39:c7:dd:a5:c3:80:d8:bc:c8:d3:af: 1c:27:bc:00:b9:96:f5:c6:f8:f5:a2:2c:ef:50:16:33:4e:94: f4:93:26:c6:3d:79:09:cd:7e:2d:f7:28:0b:53:4b:43:18:b3: 24:bd:43:08:4e:3a:72:39:47:3d:00:66:58:af:ec:92:75:a9: 45:54:11:3b:bf:ed:1b:aa:c7:c9:9f:bf:42:cd:75:b6:6e:af: e3:cd:92:ac:29:fb:20:c4:16:7c:7f:ce:a9:c6:34:77:a9:0a: d7:30:10:9c:3b:45:87:24:89:ac:53:33:9d:1b:f7:96:93:61: a8:2f:bd:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJNAoCa2RAanud2kh0ewqWSXsDEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAzMTIxWhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjUwMTI4ZWI0Zjg5YTMwOWEyODQ2NmNjYzFkYTg5OGQw Zjk2MGFlNzU5NTBiNTg0MTkzMTIxZTgxMWVjODljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxVAtlQxbHKStbIb52HsW4M/fmqwhZWRO1lZ2FtvEvrrSK Z4watHGZ7L32ZiRfTToeBXrjL5CFj/r/rK7SNCYqsfdqMD/ClF1DB6kDKwhjv4p9 j8OEUNF40+p7F1YQNzLvOm0y70i9nEBUYfBqTRck2WFpeKgFuhaT0ATpO6PWC7y6 4xFxrXGL8rz7Fyn9TIlnKmKVQi7kiB95aIQx6HEqEr+I4k0rahJbeFiDarHtTKON uzYW+/pS8Y0WvjFRywJutjMNixXnnDBkXFi2t1ALJAr0HZ6e3erA4WkmohI1zFJb FjXmLZe0gd24Cr6SvUNCAEFaFiJJdNOhGAUGV91RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvCWq8SWX0HSXA48U0Th/sIrtedAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3MTg5OTUwLTkzYzktNDIxNC1hOTQ3LTg0MDI5ODgwYjFlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLVtowDQYJKoZIhvcNAQELBQADggEBALgoN1Y83CB0iWSCB1JRFDuarr7M GbRPx6plaa5xrf74bVuWOMWiPZSakypSxNdBXL/0NK5KQF2+ijGIIXFmR9sDegxF ncalDkdBZQCtgt+BlcIOmseZYvzhFDod2qFwf/LAKggLotlCIADWZIxqPCP9O3xg K32ln0Fi31paU5eni3x9Fa85x92lw4DYvMjTrxwnvAC5lvXG+PWiLO9QFjNOlPST JsY9eQnNfi33KAtTS0MYsyS9QwhOOnI5Rz0AZliv7JJ1qUVUETu/7Ruqx8mfv0LN dbZur+PNkqwp+yDEFnx/zqnGNHepCtcwEJw7RYckiaxTM50b95aTYagvvfs= -----END CERTIFICATE-----Generated at Fri Jan 2 12:51:54 2026 by rpki-client