This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa File: 02a87590-1b18-4e21-bef6-533a9b6eb087.roa (raw, json) Hash identifier: i9VO/z5u4GJaBSZfnJbPW8CByrsyJ95rlZazGyWI0z8= Subject key identifier: 57:F1:EB:9B:D8:55:69:EF:64:A6:CC:7E:02:70:45:D7:BE:FF:4C:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FD41E1158450D674EFB52EEEC46385EDE489164 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa Signing time: Tue 25 Nov 2025 00:30:21 +0000 ROA not before: Tue 25 Nov 2025 00:30:21 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d4:1e:11:58:45:0d:67:4e:fb:52:ee:ec:46:38:5e:de:48:91:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:30:21 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=41f4f60297f7c764aee951b03cb384b9c021eed9a39b2ba89474a5b06ca4a4be, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:aa:9d:94:b2:49:96:d2:01:5e:73:c1:06: d6:5d:6e:e9:63:b1:a9:76:a2:0e:8f:8c:ae:23:28: 5c:ac:9e:f5:a7:09:7e:53:8c:5b:91:94:cf:cd:21: f5:6c:28:72:ad:15:62:b4:51:68:89:e2:c8:76:58: d7:9c:8d:0f:41:ca:1c:f5:0b:13:27:f5:7a:10:cc: b1:8c:a7:c6:5a:e2:22:6e:c4:d2:7a:43:0b:23:6c: d4:7f:4f:ab:32:a7:c7:14:b7:a7:48:71:35:a1:18: 52:f5:4e:f5:b5:5c:f6:4f:16:0c:4d:df:58:31:41: a2:6e:27:c6:3b:40:9e:0c:a1:4b:27:e8:92:d3:4b: 4e:26:db:dd:41:48:6f:62:38:3a:64:9b:1d:98:7e: fa:a7:e5:46:11:30:df:f9:2e:81:bc:5d:f4:fc:df: 77:0d:4d:c1:fb:53:06:d2:02:dc:a1:c6:7d:f7:40: 65:71:a9:f1:b2:98:3b:2f:72:27:8f:e8:54:b1:21: d5:c1:28:b3:6e:08:88:2c:58:3f:6c:a1:76:f6:6f: 7d:24:57:23:aa:49:09:9f:38:e6:f3:2a:50:1a:47: 08:aa:c4:38:21:cc:fb:a8:a3:09:97:1e:44:fc:e6: 8a:64:69:50:72:ad:a0:ae:e1:8f:98:1b:d8:f9:69: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F1:EB:9B:D8:55:69:EF:64:A6:CC:7E:02:70:45:D7:BE:FF:4C:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd::/32 Signature Algorithm: sha256WithRSAEncryption cf:52:16:6c:ea:09:47:5d:d7:90:22:05:b1:2e:f2:56:19:9e: ee:e8:5d:f2:3d:c7:b1:25:16:cb:43:33:be:ae:ac:48:f5:5b: 2e:6d:b1:5f:15:01:11:8a:67:ad:a7:e3:bb:bf:5a:78:f5:ac: e9:6f:c8:83:2d:f6:f5:ea:d4:5c:45:c2:a2:95:a9:22:63:c4: 60:7f:65:d7:11:50:f1:f1:d0:3f:01:bd:72:b4:ef:d7:d6:70: f2:8a:e7:80:74:25:14:ca:e7:e2:4a:57:ae:0b:5c:9e:32:7b: 91:ce:f2:62:64:e6:e3:2b:1d:b0:f3:b0:dc:e4:fd:f7:09:24: a4:ee:8f:eb:83:70:72:5b:e2:6a:c8:e4:64:df:2a:3f:e9:7b: 8b:14:c9:d9:b1:82:0e:14:a9:80:ff:bb:9c:6b:96:39:83:37: 9a:d7:5b:37:a5:45:8f:c7:85:f7:e1:9e:34:5f:82:80:b8:4d: fc:36:30:08:2a:eb:d5:64:95:6c:d4:cb:24:e2:90:bf:56:e5: 4f:9a:67:e5:5a:d5:18:6c:77:45:32:da:2a:d7:94:32:d2:43: 4a:ce:aa:0e:70:99:ca:0e:9b:d3:7d:58:11:f7:3a:ce:2d:a8: 3d:ac:da:c6:20:e2:ef:8d:42:b4:d9:b3:5a:7d:6b:17:36:5a: d1:9e:23:1f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUf9QeEVhFDWdO+1Lu7EY4Xt5IkWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAzMDIxWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWY0ZjYwMjk3ZjdjNzY0YWVlOTUxYjAzY2IzODRiOWMw MjFlZWQ5YTM5YjJiYTg5NDc0YTViMDZjYTRhNGJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+aKqdlLJJltIBXnPBBtZdbuljsal2og6PjK4jKFysnvWn CX5TjFuRlM/NIfVsKHKtFWK0UWiJ4sh2WNecjQ9Byhz1CxMn9XoQzLGMp8Za4iJu xNJ6QwsjbNR/T6syp8cUt6dIcTWhGFL1TvW1XPZPFgxN31gxQaJuJ8Y7QJ4MoUsn 6JLTS04m291BSG9iODpkmx2Yfvqn5UYRMN/5LoG8XfT833cNTcH7UwbSAtyhxn33 QGVxqfGymDsvcieP6FSxIdXBKLNuCIgsWD9soXb2b30kVyOqSQmfOObzKlAaRwiq xDghzPuoowmXHkT85opkaVByraCu4Y+YG9j5aZplAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUV/Hrm9hVae9kpsx+AnBF177/TMowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyYTg3NTkwLTFiMTgtNGUyMS1iZWY2LTUzM2E5YjZlYjA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/9MA0GCSqGSIb3DQEBCwUAA4IBAQDPUhZs6glHXdeQIgWxLvJWGZ7u 6F3yPcexJRbLQzO+rqxI9VsubbFfFQERimetp+O7v1p49azpb8iDLfb16tRcRcKi lakiY8Rgf2XXEVDx8dA/Ab1ytO/X1nDyiueAdCUUyufiSleuC1yeMnuRzvJiZObj Kx2w87Dc5P33CSSk7o/rg3ByW+JqyORk3yo/6XuLFMnZsYIOFKmA/7uca5Y5gzea 11s3pUWPx4X34Z40X4KAuE38NjAIKuvVZJVs1Msk4pC/VuVPmmflWtUYbHdFMtoq 15Qy0kNKzqoOcJnKDpvTfVgR9zrOLag9rNrGIOLvjUK02bNafWsXNlrRniMf -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:16 2025 by rpki-client