This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa File: 6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa (raw, json) Hash identifier: EiDtjAi0swpBVOGbGMvJCoOtk4ErygY652foa2u9+Ng= Subject key identifier: A9:9D:80:01:E0:16:57:98:30:97:28:09:54:F5:E0:9D:6F:92:88:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D24CF9DC649AB0C95BEE93875CD52A94890DA47 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa Signing time: Sat 22 Nov 2025 00:30:08 +0000 ROA not before: Sat 22 Nov 2025 00:30:08 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:24:cf:9d:c6:49:ab:0c:95:be:e9:38:75:cd:52:a9:48:90:da:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:30:08 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=8601e4a340be7669d470f12f926663f7ebefa4f11d4d9b53c58742837ca112db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:8e:90:8e:f1:d5:08:f7:4b:4e:83:89:5f: 5f:0f:cf:a4:72:6e:68:8d:ba:01:77:b4:3a:47:fa: a0:89:10:1c:bd:c7:db:9f:e0:64:3f:ed:e7:c8:3a: 8d:21:25:0b:2c:f3:9b:be:24:24:de:cf:93:5f:a5: 50:da:bf:a3:dc:20:97:14:73:f2:ca:a4:36:e2:8e: 04:ce:61:45:53:61:4f:9f:10:ad:e8:dd:d8:20:ef: cb:aa:cb:4e:50:4a:81:f8:88:02:f3:f8:b3:5f:8e: 8a:2e:a5:a7:8a:6a:a8:2f:80:7e:d9:1c:5c:ce:f7: 28:80:74:f3:76:8f:07:b1:fa:78:85:75:62:1e:b0: e2:3d:46:2f:e7:d5:0b:12:53:a3:9b:ab:14:26:12: a6:74:1c:22:3f:da:38:01:49:77:c3:6c:ab:dd:e7: 69:ed:7c:fe:a8:59:11:b8:6c:9f:3f:51:d2:a9:ec: 8e:ca:ad:6c:22:57:2f:80:e5:da:a6:0c:da:8e:af: a4:28:35:95:e4:7e:72:f6:19:95:90:24:65:b7:d5: c3:b9:54:b3:ec:c5:c0:e1:a5:91:a9:fa:ab:84:34: 3e:45:5f:2e:3d:17:49:c4:3c:05:d6:e5:79:33:99: 12:83:0b:8f:de:a5:97:9b:75:9f:d9:63:51:c9:ee: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:80:01:E0:16:57:98:30:97:28:09:54:F5:E0:9D:6F:92:88:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:5000::/40 Signature Algorithm: sha256WithRSAEncryption 87:f5:51:03:75:cf:ff:ef:ab:03:20:b5:9f:ac:4b:5b:2d:f2: c0:31:a7:07:23:3c:fa:e7:c4:19:4a:1f:62:20:2b:28:ce:b4: 76:ab:a9:40:f1:d3:f8:e4:17:5e:a5:85:70:6d:e6:51:1a:a9: d9:9a:09:4c:0b:47:ca:d3:34:22:15:33:f7:1e:66:6d:43:8f: 20:ce:aa:a5:5e:47:53:ec:2a:31:12:a5:4d:b3:82:1b:55:9d: d8:56:7e:69:b6:57:52:7a:81:28:6d:a8:20:6c:d1:5e:f9:8b: 00:b2:ed:4c:c2:7e:c8:3c:0d:be:5b:4d:ee:a7:9d:67:b1:17: b3:41:70:6d:ed:49:68:10:95:2e:40:de:5d:c9:1e:e8:26:df: 13:b5:c5:36:c8:d8:b4:29:27:55:86:78:1d:f1:4d:8f:fd:6c: 6e:0a:28:0c:0a:10:0d:d4:83:64:a0:19:e0:d8:69:9d:83:b5: 16:b1:91:09:c1:db:5b:3a:09:13:52:31:ba:b7:a1:55:16:2e: b9:f3:19:61:0d:6a:83:a7:81:66:f6:6f:03:a1:89:ab:34:3a: f1:bc:70:0a:33:2f:99:ba:6b:01:37:0c:52:fd:85:80:97:fc: 32:16:de:59:24:23:3d:b2:68:18:fa:15:25:7f:34:5d:35:f5: 3f:c0:78:9f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbSTPncZJqwyVvuk4dc1SqUiQ2kcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAzMDA4WhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjAxZTRhMzQwYmU3NjY5ZDQ3MGYxMmY5MjY2NjNmN2Vi ZWZhNGYxMWQ0ZDliNTNjNTg3NDI4MzdjYTExMmRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSR46QjvHVCPdLToOJX18Pz6RybmiNugF3tDpH+qCJEBy9 x9uf4GQ/7efIOo0hJQss85u+JCTez5NfpVDav6PcIJcUc/LKpDbijgTOYUVTYU+f EK3o3dgg78uqy05QSoH4iALz+LNfjooupaeKaqgvgH7ZHFzO9yiAdPN2jwex+niF dWIesOI9Ri/n1QsSU6ObqxQmEqZ0HCI/2jgBSXfDbKvd52ntfP6oWRG4bJ8/UdKp 7I7KrWwiVy+A5dqmDNqOr6QoNZXkfnL2GZWQJGW31cO5VLPsxcDhpZGp+quEND5F Xy49F0nEPAXW5XkzmRKDC4/epZebdZ/ZY1HJ7nsbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqZ2AAeAWV5gwlygJVPXgnW+SiFQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhNGE0ZThmLWIzNjEtNGQ4MC05MDFkLTY3ZDNkZjZmYTQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+UDANBgkqhkiG9w0BAQsFAAOCAQEAh/VRA3XP/++rAyC1n6xLWy3y wDGnByM8+ufEGUofYiArKM60dqupQPHT+OQXXqWFcG3mURqp2ZoJTAtHytM0IhUz 9x5mbUOPIM6qpV5HU+wqMRKlTbOCG1Wd2FZ+abZXUnqBKG2oIGzRXvmLALLtTMJ+ yDwNvltN7qedZ7EXs0Fwbe1JaBCVLkDeXcke6CbfE7XFNsjYtCknVYZ4HfFNj/1s bgooDAoQDdSDZKAZ4NhpnYO1FrGRCcHbWzoJE1IxurehVRYuufMZYQ1qg6eBZvZv A6GJqzQ68bxwCjMvmbprATcMUv2FgJf8MhbeWSQjPbJoGPoVJX80XTX1P8B4nw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:10 2025 by rpki-client