This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa File: 4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa (raw, json) Hash identifier: oI2CorwGqYo8yDIyQhKNXz8bGVercvyGbLe8sTSG+tY= Subject key identifier: 71:83:09:64:D8:79:D9:C6:59:98:D2:98:7B:71:F5:3E:6C:87:50:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78DE65302B7DE0C1F245A5E9BA93CA27EF0D8102 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa Signing time: Sat 06 Dec 2025 02:21:15 +0000 ROA not before: Sat 06 Dec 2025 02:21:15 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:de:65:30:2b:7d:e0:c1:f2:45:a5:e9:ba:93:ca:27:ef:0d:81:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:21:15 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=1e0970224031d2c5945f54ca55727538a6f7e82e57be350785ff5cb1f07a9d83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:e7:ed:2b:21:87:2d:ed:38:79:5a:8a:c1: 1a:3c:45:2d:da:fe:cb:c8:e3:3c:62:31:ea:dc:d0: 07:c0:e4:2c:46:7a:d1:bb:b7:37:51:31:aa:49:99: f3:84:42:a0:2e:d2:17:3c:86:9d:23:4b:0f:cc:3c: 36:6a:61:36:b2:fa:37:1a:5b:2d:f5:9b:cf:5f:da: 45:f6:59:ff:12:d4:76:34:f9:b2:2a:22:a5:ce:13: 07:30:80:9e:b1:f8:01:84:4a:3f:d0:70:4e:d6:bf: 35:7b:3c:87:ac:8b:43:4a:39:dc:9f:e0:dd:11:91: ae:8b:46:24:b1:87:58:e2:ad:1b:5b:2d:89:6a:1b: db:4c:10:1f:df:54:78:95:95:7c:10:bb:11:c8:95: ae:79:60:79:b8:50:e6:ec:89:de:7a:22:d4:33:04: f5:8d:24:f3:48:49:24:5e:4d:c8:9f:69:76:b4:30: bf:b1:d3:06:61:e4:6c:51:29:c7:51:0a:6a:33:d2: 6e:7a:83:04:2b:3e:a3:60:86:dc:95:46:f5:0a:10: 79:61:42:b5:c8:70:42:64:a5:bb:17:6f:34:15:b4: af:f4:94:be:29:94:b1:ef:f3:43:02:a6:34:38:92: b3:79:08:ab:86:c2:8e:b2:1b:80:60:4c:da:7f:cf: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:83:09:64:D8:79:D9:C6:59:98:D2:98:7B:71:F5:3E:6C:87:50:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:c800::/37 Signature Algorithm: sha256WithRSAEncryption 98:8b:dc:9d:cd:80:3b:b6:a0:cf:bd:9c:33:45:3a:c3:11:ea: a6:3d:21:08:f5:78:65:62:40:f9:11:8b:62:ed:2a:f7:38:68: e7:25:fc:89:16:cb:36:21:dd:7d:25:e1:5d:78:46:37:ac:44: d5:78:0b:5b:78:f6:d5:14:5e:42:39:e5:6a:84:01:e6:65:a2: 5f:83:59:07:3f:d3:2e:dc:cf:37:ac:93:ec:8f:ab:6f:ce:f2: 50:66:15:ae:cb:5e:a0:67:38:fc:43:ce:c7:d5:16:26:33:56: 12:d3:38:49:8b:dd:1c:ec:41:fa:4d:02:12:2a:31:09:ca:c1: 5c:86:dc:05:0f:30:a9:c3:db:39:c8:52:ae:d7:7f:79:e4:ce: c1:44:e2:33:fd:8c:db:0c:63:78:96:a8:fd:7b:00:58:af:de: e3:75:0f:12:6c:3d:0e:24:91:fc:96:7e:99:1a:52:95:66:5f: 58:0b:36:91:73:93:b3:4a:ed:8b:58:50:4b:37:da:f2:8f:0b: 6d:f2:85:89:7c:b3:92:a0:54:9f:88:94:96:da:c1:c9:81:af: 10:a4:09:04:a1:61:3c:a6:28:e6:d1:a5:7a:44:ca:ce:34:f5: 96:f1:7c:f9:4a:e3:39:3b:8f:fe:63:20:ae:37:6e:3e:ce:3f: 3a:9b:40:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeN5lMCt94MHyRaXpupPKJ+8NgQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIyMTE1WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTA5NzAyMjQwMzFkMmM1OTQ1ZjU0Y2E1NTcyNzUzOGE2 ZjdlODJlNTdiZTM1MDc4NWZmNWNiMWYwN2E5ZDgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbguftKyGHLe04eVqKwRo8RS3a/svI4zxiMerc0AfA5CxG etG7tzdRMapJmfOEQqAu0hc8hp0jSw/MPDZqYTay+jcaWy31m89f2kX2Wf8S1HY0 +bIqIqXOEwcwgJ6x+AGESj/QcE7WvzV7PIesi0NKOdyf4N0Rka6LRiSxh1jirRtb LYlqG9tMEB/fVHiVlXwQuxHIla55YHm4UObsid56ItQzBPWNJPNISSReTcifaXa0 ML+x0wZh5GxRKcdRCmoz0m56gwQrPqNghtyVRvUKEHlhQrXIcEJkpbsXbzQVtK/0 lL4plLHv80MCpjQ4krN5CKuGwo6yG4BgTNp/z3nnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcYMJZNh52cZZmNKYe3H1PmyHUDMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkYmQ0MjRhLTc5OGEtNGZhNy05NjEwLWNlYmU2ZDM2NzBhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8hyDANBgkqhkiG9w0BAQsFAAOCAQEAmIvcnc2AO7agz72cM0U6wxHq pj0hCPV4ZWJA+RGLYu0q9zho5yX8iRbLNiHdfSXhXXhGN6xE1XgLW3j21RReQjnl aoQB5mWiX4NZBz/TLtzPN6yT7I+rb87yUGYVrsteoGc4/EPOx9UWJjNWEtM4SYvd HOxB+k0CEioxCcrBXIbcBQ8wqcPbOchSrtd/eeTOwUTiM/2M2wxjeJao/XsAWK/e 43UPEmw9DiSR/JZ+mRpSlWZfWAs2kXOTs0rti1hQSzfa8o8LbfKFiXyzkqBUn4iU ltrByYGvEKQJBKFhPKYo5tGlekTKzjT1lvF8+UrjOTuP/mMgrjduPs4/OptAxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:06 2025 by rpki-client