This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa File: 3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa (raw, json) Hash identifier: IGRnlmg1bxb41Jn2uKf54D88ztwYVeohPSL0z8aVNtM= Subject key identifier: 4C:8B:D4:86:9F:2F:5F:9C:D4:10:2B:76:C9:06:F0:BB:1D:57:D1:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 600A0A1E705D93B26C333D3BE3B07E7903058287 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa Signing time: Sat 06 Dec 2025 02:20:48 +0000 ROA not before: Sat 06 Dec 2025 02:20:48 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0a:0a:1e:70:5d:93:b2:6c:33:3d:3b:e3:b0:7e:79:03:05:82:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:20:48 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=fc2d10f9a0dbe7bacb7b00cf4bb4d7c4294a0863fd34438242ad428012e50b5d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:45:09:32:4e:fc:f3:95:02:4c:11:75:da: 5f:db:97:50:5f:ac:20:85:b8:fd:97:d9:54:1c:8b: 89:54:47:f7:9b:0c:bd:be:7c:81:29:e8:ef:69:35: e7:d2:38:90:dd:c3:65:7f:0b:b2:61:a1:5a:45:13: fd:d4:eb:e3:58:07:87:1c:e8:b0:62:cf:46:5f:9d: 02:2b:ed:fd:ec:eb:ac:7f:90:94:e9:83:ac:ea:22: f1:98:fa:4c:10:2e:0e:63:24:21:e4:14:01:22:4d: ef:a9:d0:0e:ce:d1:3d:09:3a:60:1d:2c:7c:6e:f8: 40:cc:4b:7c:4a:cd:97:07:2f:4a:0e:6f:ac:5d:ad: cb:2f:f7:d8:c3:37:e5:d4:94:8e:9d:80:38:e4:85: 3c:55:21:4f:b5:33:11:c5:d7:cb:ff:27:f4:cb:a1: 96:ef:25:dc:7d:9a:e4:53:4f:5a:9e:1c:c0:0e:15: be:3d:ae:5c:84:15:fe:b6:d4:90:09:83:c1:e7:86: 12:2c:f9:b4:d0:8b:1b:79:0b:4c:6e:3e:eb:f3:ef: 6e:de:17:a9:bd:30:77:86:0f:d2:9a:17:19:40:5e: c0:0e:1e:81:a4:01:b1:17:04:85:48:78:46:f7:3a: 47:6d:c4:6a:e7:aa:2b:bd:61:8b:43:bc:64:d4:b6: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:D4:86:9F:2F:5F:9C:D4:10:2B:76:C9:06:F0:BB:1D:57:D1:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8100::/48 Signature Algorithm: sha256WithRSAEncryption 79:9e:03:b3:36:0e:d8:9d:37:aa:a8:35:eb:ef:7a:a9:04:25: 6e:74:58:99:8b:83:ed:be:af:d4:3c:61:33:7e:68:13:75:03: 8b:d1:91:b4:2b:ad:67:a3:a0:50:7a:09:2d:01:9b:6e:ff:38: 1b:75:70:c4:2f:89:55:c6:91:39:3d:93:d5:2a:77:10:1e:8a: 3f:77:4c:a1:ec:a1:35:8c:dc:97:0b:23:b6:02:ef:74:86:03: 9c:06:f3:f3:03:55:46:a6:ed:0d:6e:3f:f5:2e:7b:09:ba:20: be:d2:a2:70:32:7a:a3:c8:84:7d:b7:a6:91:5e:f6:4f:b2:5b: a3:73:0b:9d:89:77:7e:96:5a:9a:d7:11:e4:dd:42:91:c1:87: b9:1a:85:e3:35:17:c1:84:0d:d9:e0:47:fe:73:a2:3f:64:51: 8e:b8:64:42:1f:05:ed:44:b9:d2:3d:3d:eb:f8:99:a0:f6:2a: 31:94:4a:69:66:22:af:95:3f:2e:37:f9:0c:3e:b6:06:c2:18: c2:c4:a0:fb:74:a0:e3:d9:c2:a7:77:05:0f:b7:9e:76:62:42: 17:be:0e:0e:89:6d:77:3c:26:03:27:af:10:46:45:5d:04:05: c0:7c:f5:41:12:52:9b:38:77:df:0e:b0:af:57:d3:b2:e8:2a: ad:f1:59:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYAoKHnBdk7JsMz0747B+eQMFgocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIyMDQ4WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzJkMTBmOWEwZGJlN2JhY2I3YjAwY2Y0YmI0ZDdjNDI5 NGEwODYzZmQzNDQzODI0MmFkNDI4MDEyZTUwYjVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhvEUJMk7885UCTBF12l/bl1BfrCCFuP2X2VQci4lUR/eb DL2+fIEp6O9pNefSOJDdw2V/C7JhoVpFE/3U6+NYB4cc6LBiz0ZfnQIr7f3s66x/ kJTpg6zqIvGY+kwQLg5jJCHkFAEiTe+p0A7O0T0JOmAdLHxu+EDMS3xKzZcHL0oO b6xdrcsv99jDN+XUlI6dgDjkhTxVIU+1MxHF18v/J/TLoZbvJdx9muRTT1qeHMAO Fb49rlyEFf621JAJg8HnhhIs+bTQixt5C0xuPuvz727eF6m9MHeGD9KaFxlAXsAO HoGkAbEXBIVIeEb3OkdtxGrnqiu9YYtDvGTUtnbHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTIvUhp8vX5zUECt2yQbwux1X0YYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNzA3ZGU5LTBmOGYtNGMzNS1iMWRkLWJkZDIxM2I2ODY4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gQAwDQYJKoZIhvcNAQELBQADggEBAHmeA7M2DtidN6qoNevveqkE JW50WJmLg+2+r9Q8YTN+aBN1A4vRkbQrrWejoFB6CS0Bm27/OBt1cMQviVXGkTk9 k9UqdxAeij93TKHsoTWM3JcLI7YC73SGA5wG8/MDVUam7Q1uP/Uuewm6IL7SonAy eqPIhH23ppFe9k+yW6NzC52Jd36WWprXEeTdQpHBh7kaheM1F8GEDdngR/5zoj9k UY64ZEIfBe1EudI9Pev4maD2KjGUSmlmIq+VPy43+Qw+tgbCGMLEoPt0oOPZwqd3 BQ+3nnZiQhe+Dg6JbXc8JgMnrxBGRV0EBcB89UESUps4d98OsK9X07LoKq3xWS4= -----END CERTIFICATE-----Generated at Sat Dec 6 12:00:43 2025 by rpki-client