This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c97742d-1387-4572-97bb-4e73ac315b47.roa File: 3c97742d-1387-4572-97bb-4e73ac315b47.roa (raw, json) Hash identifier: HsXJknKBjKqZz0JuMooFm/owcFOt1gXy3PbqE8XRU1E= Subject key identifier: C3:8D:82:D9:2D:06:AD:31:60:12:9C:69:C7:67:EC:8D:9A:0A:0E:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 746772A61725FA21A4D2FC22AAA8A1A565AC42EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c97742d-1387-4572-97bb-4e73ac315b47.roa Signing time: Sat 06 Dec 2025 01:40:12 +0000 ROA not before: Sat 06 Dec 2025 01:40:12 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:67:72:a6:17:25:fa:21:a4:d2:fc:22:aa:a8:a1:a5:65:ac:42:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:40:12 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=4ac2606d92a3dc5d9924d4f2340f675fd427657e847b42bbd0babc228e1cb8eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:90:70:33:5d:7b:38:ff:c2:23:93:26:88: 2f:4f:80:33:79:3f:41:be:2d:ef:4d:69:84:01:da: 8f:14:43:5f:40:c9:dc:ab:f4:23:af:fc:23:95:fd: aa:fe:e3:c4:10:38:28:25:e5:8e:9a:61:25:77:2c: bd:09:58:b5:74:0c:1e:5c:f2:4c:a0:61:ef:16:61: f6:92:11:cb:c8:a2:c5:36:fa:72:ad:e5:42:a5:2a: 6b:96:e7:ad:65:83:22:c1:b6:3e:0b:ee:45:5f:f2: c2:d8:58:ee:a3:87:44:fe:5b:82:f8:fb:19:98:b7: 99:b0:11:8a:3a:a1:58:77:a0:ed:5c:d4:ee:37:56: 0a:e3:5e:3a:f4:fe:b5:72:43:d9:a7:fb:27:50:39: a6:47:1a:90:d1:b7:17:65:e2:64:34:61:ef:d8:4b: 2d:35:35:ed:4a:59:5d:57:1b:01:90:33:9b:97:bb: 70:07:54:05:25:9a:dc:d1:52:0f:0f:35:0a:51:29: 37:9b:3e:4e:3c:6b:57:b7:1d:c5:7d:f5:40:09:26: 07:13:1c:37:99:f8:06:2f:5f:e9:b6:84:db:0e:1e: d4:de:c2:56:c4:8a:81:0d:d7:f4:ee:97:32:1e:bc: 80:8b:6b:25:ca:ba:09:61:b4:17:2f:49:b9:15:d9: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:82:D9:2D:06:AD:31:60:12:9C:69:C7:67:EC:8D:9A:0A:0E:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c97742d-1387-4572-97bb-4e73ac315b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:2000::/40 Signature Algorithm: sha256WithRSAEncryption ba:ed:d3:63:0f:32:dc:9c:18:20:98:08:5a:f5:b1:5a:a7:94: 26:a3:15:e6:23:6f:9a:61:08:2f:00:bf:ba:7c:91:22:72:8b: 77:0e:a2:86:8d:e5:18:c8:47:d8:32:e2:a7:0c:da:0c:28:ff: b0:e9:a4:02:ef:80:cb:5b:31:e1:50:8e:42:a4:da:8c:1a:31: dc:e8:b5:c7:d0:4f:a7:e5:b5:72:cf:b1:40:bf:2f:e5:20:ec: 27:ae:79:ae:90:bc:05:68:04:38:00:97:f5:9e:7b:fe:6f:21: 88:af:34:5d:8e:41:5a:9c:89:cf:2a:34:f8:03:33:c1:ea:48: 9c:71:73:b4:9b:a1:3e:13:b5:e5:d7:fb:9e:88:28:dc:3c:c1: 3d:e7:2d:f1:50:c8:79:44:8f:9f:b1:20:ac:d2:17:90:b8:48: 96:d6:b4:3f:48:1c:64:c4:e1:3f:44:ef:89:b0:ff:16:3b:6b: 74:e2:0b:e5:50:9c:36:29:06:f2:62:0a:7b:12:72:ff:7a:ba: 8a:8b:2f:d0:50:b6:4c:0a:bd:4f:df:49:7e:28:d3:55:cf:ac: 5e:58:c6:36:ef:b9:a9:eb:ff:92:80:f6:44:e0:93:10:5c:25: 32:62:c5:aa:2e:5c:3b:f9:bb:8b:53:17:aa:87:d8:43:08:8a: 8f:aa:db:3c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdGdyphcl+iGk0vwiqqihpWWsQuswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDE0MDEyWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWMyNjA2ZDkyYTNkYzVkOTkyNGQ0ZjIzNDBmNjc1ZmQ0 Mjc2NTdlODQ3YjQyYmJkMGJhYmMyMjhlMWNiOGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7opBwM117OP/CI5MmiC9PgDN5P0G+Le9NaYQB2o8UQ19A ydyr9COv/COV/ar+48QQOCgl5Y6aYSV3LL0JWLV0DB5c8kygYe8WYfaSEcvIosU2 +nKt5UKlKmuW561lgyLBtj4L7kVf8sLYWO6jh0T+W4L4+xmYt5mwEYo6oVh3oO1c 1O43VgrjXjr0/rVyQ9mn+ydQOaZHGpDRtxdl4mQ0Ye/YSy01Ne1KWV1XGwGQM5uX u3AHVAUlmtzRUg8PNQpRKTebPk48a1e3HcV99UAJJgcTHDeZ+AYvX+m2hNsOHtTe wlbEioEN1/TulzIevICLayXKuglhtBcvSbkV2YHLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUw42C2S0GrTFgEpxpx2fsjZoKDowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjOTc3NDJkLTEzODctNDU3Mi05N2JiLTRlNzNhYzMxNWI0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84IDANBgkqhkiG9w0BAQsFAAOCAQEAuu3TYw8y3JwYIJgIWvWxWqeU JqMV5iNvmmEILwC/unyRInKLdw6iho3lGMhH2DLipwzaDCj/sOmkAu+Ay1sx4VCO QqTajBox3Oi1x9BPp+W1cs+xQL8v5SDsJ655rpC8BWgEOACX9Z57/m8hiK80XY5B WpyJzyo0+AMzwepInHFztJuhPhO15df7nogo3DzBPect8VDIeUSPn7EgrNIXkLhI lta0P0gcZMThP0TvibD/FjtrdOIL5VCcNikG8mIKexJy/3q6iosv0FC2TAq9T99J fijTVc+sXljGNu+5qev/koD2ROCTEFwlMmLFqi5cO/m7i1MXqofYQwiKj6rbPA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:02 2025 by rpki-client