This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd36c21-6df3-4d8c-86a4-17ffd76eed2d.roa File: 0cd36c21-6df3-4d8c-86a4-17ffd76eed2d.roa (raw, json) Hash identifier: YbaLatGpK4+8uSMa5hL0eiuJqwYZMvwHQOGJPDkYgEM= Subject key identifier: FD:3F:F1:6E:93:E9:70:E1:BE:57:96:C4:8B:10:F4:AD:42:EC:0A:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AF9392C38605E738F444C44AC0F9B0DFAB50375 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd36c21-6df3-4d8c-86a4-17ffd76eed2d.roa Signing time: Sat 06 Dec 2025 01:01:32 +0000 ROA not before: Sat 06 Dec 2025 01:01:32 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:39:2c:38:60:5e:73:8f:44:4c:44:ac:0f:9b:0d:fa:b5:03:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=9724c034ef362d6211133af232f0ddfc0de5c8c62cc587c5e2fda6636ddb2dee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:0d:57:2b:28:d8:47:dc:58:e3:35:6a:89: eb:ae:0f:95:a5:2e:30:60:4d:3c:8e:df:11:32:8d: c4:a2:10:42:28:99:2d:6d:e7:6a:6f:56:65:8e:91: 96:5d:57:59:1c:1e:4a:a9:55:b3:c7:bf:d2:87:5b: 15:65:e0:92:62:b8:a1:b2:72:d4:49:dd:99:ec:3d: a7:b2:24:a5:8d:64:9a:ed:10:e4:33:54:ad:95:37: 1e:04:33:be:4a:21:0c:31:c2:d1:4c:e6:9b:40:d3: d0:5b:f1:ff:5e:5e:cf:75:62:7e:a0:cf:36:64:35: 6f:19:2b:63:11:c8:51:cd:59:89:d2:88:9c:58:5b: 5e:9f:18:db:da:3d:d0:0f:ae:67:27:8e:e0:fb:fe: f8:05:0b:43:15:94:75:76:d8:5f:66:41:24:07:df: 23:94:9a:3b:5c:2c:6e:3f:50:88:a7:00:64:11:33: 39:ef:79:8e:79:ed:af:58:77:72:b2:0d:e0:ca:14: 29:38:a3:19:b0:a2:82:69:85:63:ce:1e:b3:ab:2b: 1a:ef:42:e8:46:58:46:d5:20:34:3c:13:53:6b:14: 71:e6:a0:7f:98:45:ea:84:be:e8:da:a6:99:e1:a1: 5f:1f:dd:42:95:55:f2:ff:93:9d:ad:ae:0a:52:2d: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:F1:6E:93:E9:70:E1:BE:57:96:C4:8B:10:F4:AD:42:EC:0A:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd36c21-6df3-4d8c-86a4-17ffd76eed2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:c000::/36 Signature Algorithm: sha256WithRSAEncryption a6:75:4a:75:44:c6:42:5e:ed:f5:ff:88:f2:c7:24:8a:27:d6: 2b:66:42:6d:e5:0d:5a:37:ce:0b:f6:3d:c1:da:e4:17:59:a4: a2:d0:d5:bb:a0:b0:60:f2:e9:47:45:c6:6c:ce:bb:be:ee:dc: a0:c2:39:da:72:92:c8:ba:8a:5f:f2:f8:2d:6c:21:73:b4:a8: fc:65:ed:1d:b3:b1:66:8b:6b:e2:bf:f6:de:a3:38:09:24:a5: d9:3e:56:54:19:11:b7:24:a0:ed:a6:eb:5a:4d:5f:ab:42:33: b9:e5:e4:1d:d9:6a:3f:18:53:d3:bb:9b:c6:6b:d0:57:26:f7: 38:9f:48:c7:50:16:74:87:d5:57:76:20:ba:60:8d:43:43:a7: 38:6b:3c:09:c0:a8:07:48:ff:fa:85:46:d0:ed:3f:2f:a5:52: 26:0e:ee:a6:52:c7:cf:74:c7:d0:14:ed:24:b7:ad:fe:0a:b3: 71:41:e0:bb:fb:1d:de:0b:03:42:12:5c:5d:50:0a:af:2b:43: 7c:b3:9a:77:8d:99:3f:5c:f3:6f:1d:a1:d1:ed:50:a9:fe:e1: 3e:1e:28:39:f3:26:40:90:52:7a:55:f8:62:5c:36:a0:d6:7d: c3:fc:47:64:39:5d:ba:30:d7:76:d8:13:ef:28:49:3f:06:15: c1:91:ff:0a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKvk5LDhgXnOPRExErA+bDfq1A3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDEwMTMyWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzI0YzAzNGVmMzYyZDYyMTExMzNhZjIzMmYwZGRmYzBk ZTVjOGM2MmNjNTg3YzVlMmZkYTY2MzZkZGIyZGVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEGw1XKyjYR9xY4zVqieuuD5WlLjBgTTyO3xEyjcSiEEIo mS1t52pvVmWOkZZdV1kcHkqpVbPHv9KHWxVl4JJiuKGyctRJ3ZnsPaeyJKWNZJrt EOQzVK2VNx4EM75KIQwxwtFM5ptA09Bb8f9eXs91Yn6gzzZkNW8ZK2MRyFHNWYnS iJxYW16fGNvaPdAPrmcnjuD7/vgFC0MVlHV22F9mQSQH3yOUmjtcLG4/UIinAGQR MznveY557a9Yd3KyDeDKFCk4oxmwooJphWPOHrOrKxrvQuhGWEbVIDQ8E1NrFHHm oH+YReqEvujappnhoV8f3UKVVfL/k52trgpSLTgRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/T/xbpPpcOG+V5bEixD0rULsCpcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjZDM2YzIxLTZkZjMtNGQ4Yy04NmE0LTE3ZmZkNzZlZWQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hwDANBgkqhkiG9w0BAQsFAAOCAQEApnVKdUTGQl7t9f+I8sckiifW K2ZCbeUNWjfOC/Y9wdrkF1mkotDVu6CwYPLpR0XGbM67vu7coMI52nKSyLqKX/L4 LWwhc7So/GXtHbOxZotr4r/23qM4CSSl2T5WVBkRtySg7abrWk1fq0IzueXkHdlq PxhT07ubxmvQVyb3OJ9Ix1AWdIfVV3YgumCNQ0OnOGs8CcCoB0j/+oVG0O0/L6VS Jg7uplLHz3TH0BTtJLet/gqzcUHgu/sd3gsDQhJcXVAKrytDfLOad42ZP1zzbx2h 0e1Qqf7hPh4oOfMmQJBSelX4Ylw2oNZ9w/xHZDldujDXdtgT7yhJPwYVwZH/Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:32 2025 by rpki-client