This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa File: 18aafe86-d89b-4759-996d-3d39fd786463.roa (raw, json) Hash identifier: baa3DehOFdz1XiAcx/ofCMSHbLZ9ydYHcLwVcfilHzQ= Subject key identifier: 39:91:CE:8C:0D:D8:8D:76:5F:69:0B:A3:76:D4:67:99:1C:96:29:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F0740746B433248CFBA20369A07B792278BF90B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa Signing time: Sat 06 Dec 2025 01:00:10 +0000 ROA not before: Sat 06 Dec 2025 01:00:10 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:07:40:74:6b:43:32:48:cf:ba:20:36:9a:07:b7:92:27:8b:f9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:00:10 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=b2fd525de159548b32234a5e91adf2a6611a08692494b00318a927d66bec0607, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:50:4c:6e:3f:68:44:c7:e6:e0:db:70:d3: 91:7a:42:6f:8b:8c:cd:a7:48:42:3d:11:78:75:44: 94:b4:fe:2c:ec:31:bc:27:b2:92:8b:fd:cb:f8:77: 9f:52:51:32:34:0c:3c:aa:bf:16:fe:ee:b8:4b:4d: 80:05:4f:87:97:e4:9f:52:d1:24:59:88:bb:3f:e9: f2:fb:13:b0:93:92:50:b1:83:3a:6b:53:b1:c9:5d: bb:f4:c2:0a:02:b4:df:c4:c9:dd:ac:cb:16:3a:63: 07:98:84:28:19:1c:91:d4:97:4c:63:26:88:95:5d: f1:17:f1:40:70:64:04:8d:ab:0b:a5:30:0a:be:6b: 0a:2f:67:e2:50:23:85:94:59:37:d2:1e:43:b4:0b: 66:5b:61:0d:f3:8c:92:79:12:d3:63:3d:45:01:52: 23:08:a5:7d:40:cd:1c:d7:94:fd:6e:ae:8b:79:01: c5:90:c7:51:0b:e4:6e:49:8f:21:1d:da:0d:1f:b6: 3c:c2:ca:72:05:a3:90:e7:5e:f0:55:a7:91:55:2a: 93:8a:9d:cc:20:81:a3:d7:24:48:85:9f:ad:5e:af: 7b:22:29:35:52:cd:2a:9c:56:b2:26:88:8a:db:7f: a7:13:f9:56:d8:0a:20:5e:f7:96:5b:2c:37:ab:1f: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:CE:8C:0D:D8:8D:76:5F:69:0B:A3:76:D4:67:99:1C:96:29:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1fff::/48 Signature Algorithm: sha256WithRSAEncryption 0f:5f:87:13:e9:81:66:b1:27:c4:68:d8:59:1b:e6:01:fc:53: 2e:8d:16:b4:00:45:a5:63:d9:44:e3:b0:54:69:8e:06:0a:49: 44:ec:c9:d6:fd:d5:e7:44:13:1a:ef:8e:2c:38:7f:ee:1b:50: e4:fc:d7:f7:0d:af:d5:18:37:69:1c:22:d8:65:eb:f1:f3:06: 4e:03:4e:e4:14:42:16:ac:5a:74:42:62:06:09:74:3e:cf:8e: 3f:ad:2f:d3:08:49:87:36:3f:af:6e:ea:db:d2:37:9e:cd:87: b4:91:df:c5:27:f2:c1:52:4e:0f:ac:10:a0:fe:c0:63:54:3e: a4:7b:f0:12:0c:b2:cd:4d:2c:64:84:1b:3e:9a:f9:43:9a:e3: f5:ec:dd:d1:a1:57:a3:26:c6:21:91:87:24:db:60:e1:36:36: 14:bd:ca:2d:5a:28:32:44:7c:39:fb:1c:7b:44:47:a7:6e:27: 18:89:34:c6:01:ef:90:26:0a:cf:ff:74:60:88:22:58:3d:cb: 64:38:a8:20:c7:48:0d:ac:9a:30:1c:09:62:c4:18:aa:2c:02: e0:1b:aa:53:90:fa:7c:85:1f:c5:c5:f0:07:8f:bb:67:79:a6: 19:c4:f6:0c:29:fa:1b:b1:ed:58:d7:23:1d:2b:5f:51:da:b4: 1a:19:4c:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbwdAdGtDMkjPuiA2mge3kieL+QswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDEwMDEwWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmZkNTI1ZGUxNTk1NDhiMzIyMzRhNWU5MWFkZjJhNjYx MWEwODY5MjQ5NGIwMDMxOGE5MjdkNjZiZWMwNjA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjtVBMbj9oRMfm4Ntw05F6Qm+LjM2nSEI9EXh1RJS0/izs MbwnspKL/cv4d59SUTI0DDyqvxb+7rhLTYAFT4eX5J9S0SRZiLs/6fL7E7CTklCx gzprU7HJXbv0wgoCtN/Eyd2syxY6YweYhCgZHJHUl0xjJoiVXfEX8UBwZASNqwul MAq+awovZ+JQI4WUWTfSHkO0C2ZbYQ3zjJJ5EtNjPUUBUiMIpX1AzRzXlP1urot5 AcWQx1EL5G5JjyEd2g0ftjzCynIFo5DnXvBVp5FVKpOKncwggaPXJEiFn61er3si KTVSzSqcVrImiIrbf6cT+VbYCiBe95ZbLDerH1uLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOZHOjA3YjXZfaQujdtRnmRyWKYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4YWFmZTg2LWQ4OWItNDc1OS05OTZkLTNkMzlmZDc4NjQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9H/8wDQYJKoZIhvcNAQELBQADggEBAA9fhxPpgWaxJ8Ro2Fkb5gH8 Uy6NFrQARaVj2UTjsFRpjgYKSUTsydb91edEExrvjiw4f+4bUOT81/cNr9UYN2kc Ithl6/HzBk4DTuQUQhasWnRCYgYJdD7Pjj+tL9MISYc2P69u6tvSN57Nh7SR38Un 8sFSTg+sEKD+wGNUPqR78BIMss1NLGSEGz6a+UOa4/Xs3dGhV6MmxiGRhyTbYOE2 NhS9yi1aKDJEfDn7HHtER6duJxiJNMYB75AmCs//dGCIIlg9y2Q4qCDHSA2smjAc CWLEGKosAuAbqlOQ+nyFH8XF8AePu2d5phnE9gwp+hux7VjXIx0rX1HatBoZTIM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:32 2025 by rpki-client