This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa File: 00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa (raw, json) Hash identifier: +Fwpjua99yyrtNvS4nRulml93TR2OfaEKkZ5v8xm2Bw= Subject key identifier: 6F:B1:05:C9:2D:BE:03:25:42:81:EC:96:D9:EF:4B:2E:71:A4:6E:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 591B8544165E41CD9BBCEEF13534428EDEE0960D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa Signing time: Sat 06 Dec 2025 02:30:14 +0000 ROA not before: Sat 06 Dec 2025 02:30:14 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1b:85:44:16:5e:41:cd:9b:bc:ee:f1:35:34:42:8e:de:e0:96:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:30:14 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=41b139a09e91b05ec6b08db2041977401ca78dc2fe897621ba97025d4e36cf8b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:b7:e8:f3:91:c6:f9:ad:23:da:88:0c:b0: 50:03:2b:73:5b:15:3a:18:fc:50:2b:60:c0:85:47: 72:33:e2:e5:47:fe:03:d6:12:11:3d:0b:b7:07:13: 94:08:11:47:55:b0:02:7e:ea:32:a7:92:72:86:af: 80:08:95:a8:7b:75:91:2d:c1:72:23:90:15:18:7d: fc:7f:32:19:9a:1d:37:4e:ed:0d:a1:16:73:d3:65: 26:bd:ce:31:b7:5a:b2:23:dc:c4:2c:f0:e0:2d:e9: 29:ff:48:6e:72:b0:51:4a:d0:0c:7f:d3:25:84:a3: 2a:01:dc:14:e5:85:63:5b:f7:9f:82:53:72:a0:fa: d7:d1:ee:03:c5:38:26:40:bf:a9:15:ba:93:76:f9: 26:74:02:bb:df:e6:7e:02:c9:af:f7:a4:0e:7a:71: d2:7e:07:ce:67:31:66:64:a5:d0:a0:71:8e:96:2d: b3:13:06:61:12:1a:ba:06:f5:5d:e5:3d:cc:16:a1: 42:96:59:e6:af:27:08:1b:13:15:46:4b:cc:c8:e1: 40:da:06:4b:ac:83:f8:2c:42:de:dc:04:8f:68:bc: 54:52:56:93:54:5e:7e:60:80:83:c9:77:4b:6a:47: 79:cc:01:80:d5:12:25:ff:87:37:6b:00:ab:06:3d: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B1:05:C9:2D:BE:03:25:42:81:EC:96:D9:EF:4B:2E:71:A4:6E:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:c000::/37 Signature Algorithm: sha256WithRSAEncryption 17:ec:09:24:31:44:91:1d:05:bc:b3:f8:bb:02:87:a2:7d:23: 79:11:04:06:62:e1:55:3c:01:0e:db:6f:a1:7d:6c:90:19:05: 9b:6c:f2:13:b9:cc:7d:40:d1:7a:b9:8b:02:55:e0:c0:2d:10: cc:66:e0:fc:2e:eb:2a:22:c0:e7:30:16:09:f4:a7:f1:06:d0: 22:3e:6d:7a:e7:68:74:e4:ad:8b:13:28:cc:52:47:ca:43:f3: b7:fe:a6:3b:84:60:a9:e7:98:a1:1b:4c:f2:d4:d9:c0:1a:38: e4:1a:f9:17:2c:00:ea:61:36:85:7d:28:32:4b:9b:e2:08:c9: 4b:8f:cf:c3:87:ad:ba:68:4b:05:03:69:a0:77:a8:a9:20:29: a1:80:0b:51:3a:b8:b5:9c:97:08:14:6e:4f:d5:9c:14:f6:3a: e3:6b:7d:53:77:d4:24:ea:fe:bf:42:f2:6e:b0:06:6a:92:99: 5c:fb:e4:31:bf:e6:73:3e:79:16:2d:f8:8d:04:2e:33:af:78: f4:8a:7e:a4:6f:a5:cb:fe:23:2f:fe:df:63:cd:be:1a:4f:ad: f3:af:b4:ba:70:d4:d7:9f:07:a4:9b:2d:70:00:26:b5:98:89: 1a:3e:1b:0d:32:2f:ae:7b:fd:f3:dc:0e:3c:e9:03:c4:c8:0b: d6:ed:8d:da -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWRuFRBZeQc2bvO7xNTRCjt7glg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIzMDE0WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWIxMzlhMDllOTFiMDVlYzZiMDhkYjIwNDE5Nzc0MDFj YTc4ZGMyZmU4OTc2MjFiYTk3MDI1ZDRlMzZjZjhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfFbfo85HG+a0j2ogMsFADK3NbFToY/FArYMCFR3Iz4uVH /gPWEhE9C7cHE5QIEUdVsAJ+6jKnknKGr4AIlah7dZEtwXIjkBUYffx/MhmaHTdO 7Q2hFnPTZSa9zjG3WrIj3MQs8OAt6Sn/SG5ysFFK0Ax/0yWEoyoB3BTlhWNb95+C U3Kg+tfR7gPFOCZAv6kVupN2+SZ0Arvf5n4Cya/3pA56cdJ+B85nMWZkpdCgcY6W LbMTBmESGroG9V3lPcwWoUKWWeavJwgbExVGS8zI4UDaBkusg/gsQt7cBI9ovFRS VpNUXn5ggIPJd0tqR3nMAYDVEiX/hzdrAKsGPbi3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUb7EFyS2+AyVCgeyW2e9LLnGkbjYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwYjVhMDk1LWZlNGEtNGE5Ni1iNTEyLWQ4MDhhOTRhMmVhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8hwDANBgkqhkiG9w0BAQsFAAOCAQEAF+wJJDFEkR0FvLP4uwKHon0j eREEBmLhVTwBDttvoX1skBkFm2zyE7nMfUDRermLAlXgwC0QzGbg/C7rKiLA5zAW CfSn8QbQIj5teudodOStixMozFJHykPzt/6mO4RgqeeYoRtM8tTZwBo45Br5FywA 6mE2hX0oMkub4gjJS4/Pw4etumhLBQNpoHeoqSApoYALUTq4tZyXCBRuT9WcFPY6 42t9U3fUJOr+v0LybrAGapKZXPvkMb/mcz55Fi34jQQuM6949Ip+pG+ly/4jL/7f Y82+Gk+t86+0unDU158HpJstcAAmtZiJGj4bDTIvrnv989wOPOkDxMgL1u2N2g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:09 2025 by rpki-client