This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa File: 72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa (raw, json) Hash identifier: qbA7AdGB0+Gf0e3eN22RqRe01+PdWmdFeg89LzKLEGI= Subject key identifier: 1D:D4:B4:76:DC:65:E1:D3:F7:CE:65:CF:E5:11:A8:6A:90:81:2A:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6981D3D429561A6D4DA9543867564DA4ADDDCD8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa Signing time: Wed 26 Nov 2025 00:21:26 +0000 ROA not before: Wed 26 Nov 2025 00:21:26 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:81:d3:d4:29:56:1a:6d:4d:a9:54:38:67:56:4d:a4:ad:dd:cd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:21:26 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=d78467eb96109c898a2dbda317ca59d888dad86f37f02aff48b4f7a5a6f5be0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:4a:db:d0:97:92:4c:fc:1b:02:ef:b5:61: 63:b2:ec:6f:fa:a9:d8:b6:11:ed:29:b1:d9:2a:91: 4a:f8:cf:31:e5:82:27:02:63:31:af:cb:2f:ed:ee: 5b:e3:2f:3f:26:cc:e0:6f:9f:31:e4:b0:6c:aa:b2: 0b:2e:64:b8:7d:af:23:10:7b:6e:28:67:7b:f3:02: 8a:29:c4:2f:f2:26:d6:a9:82:84:36:ae:d8:2b:f5: 61:06:33:bb:91:61:1f:da:a2:85:58:20:04:8f:9b: d0:af:65:46:4f:8d:2a:4d:06:96:88:a3:90:52:28: 2a:c6:cd:98:f2:39:92:9c:b4:79:1a:c5:d7:cf:9b: f8:0b:a3:a4:1b:15:13:ca:ff:a2:42:39:95:a0:8d: c7:78:a8:68:36:f9:9d:aa:3b:9d:b6:a5:ec:6f:66: f7:be:62:43:28:4d:14:d5:36:96:31:7d:09:bd:1f: 8e:8b:d5:65:75:3d:f6:e3:e3:94:56:b2:7e:d7:ad: 3d:da:1f:e7:9e:ea:09:f3:f0:63:23:78:90:1c:0b: 73:d3:f9:75:69:f1:ce:31:2d:3d:4e:66:e1:1e:c5: 68:7a:ac:40:63:aa:77:84:ab:2b:bf:19:68:3e:cc: 25:aa:76:f4:64:36:93:3b:3e:07:79:a3:32:12:ba: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D4:B4:76:DC:65:E1:D3:F7:CE:65:CF:E5:11:A8:6A:90:81:2A:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8170::/48 Signature Algorithm: sha256WithRSAEncryption 42:a7:e4:22:d7:e0:10:44:34:ee:f3:2a:18:0e:e9:11:44:b2: e5:c9:cf:7e:8f:ed:4e:24:0a:d0:78:be:9c:77:7a:52:b0:c5: ae:ba:b9:1e:46:d7:cc:32:8a:99:b6:a4:01:44:b8:1d:ed:0e: 94:ca:83:a1:c2:16:36:06:0b:fc:df:e3:57:14:15:b0:fd:a5: 1a:2a:21:3d:d3:ae:12:af:c1:17:e6:af:d5:30:a8:cc:7a:ac: 15:77:0f:fe:73:7c:37:d7:c5:93:d4:a4:60:c4:07:94:8b:2b: cf:85:78:09:a9:0a:30:a9:15:69:0c:f7:31:c4:ed:60:96:4b: d1:a4:72:01:94:3e:dc:43:b9:1d:5a:d8:54:54:cd:9a:bc:d4: cb:0a:48:fe:76:56:06:ab:20:7c:ae:e5:05:1e:86:39:44:44: 25:3d:e9:b7:1f:e2:a9:0b:fb:ff:47:16:e9:93:19:72:35:72: a5:d0:97:d4:9d:31:1b:f9:ec:c0:16:fe:a3:fb:c0:40:cd:0b: 8f:af:57:a0:04:79:33:bc:fc:47:3e:d5:4b:02:d0:61:b0:94: e2:7c:6e:84:4c:c9:c7:2f:d9:ab:0f:a9:8b:3b:6e:c2:6e:31: d1:8f:a0:00:03:5c:0a:a3:a6:6d:61:c9:e9:6e:5a:de:82:6b: 71:07:db:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaYHT1ClWGm1NqVQ4Z1ZNpK3dzY8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDAyMTI2WhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzg0NjdlYjk2MTA5Yzg5OGEyZGJkYTMxN2NhNTlkODg4 ZGFkODZmMzdmMDJhZmY0OGI0ZjdhNWE2ZjViZTBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1UErb0JeSTPwbAu+1YWOy7G/6qdi2Ee0psdkqkUr4zzHl gicCYzGvyy/t7lvjLz8mzOBvnzHksGyqsgsuZLh9ryMQe24oZ3vzAoopxC/yJtap goQ2rtgr9WEGM7uRYR/aooVYIASPm9CvZUZPjSpNBpaIo5BSKCrGzZjyOZKctHka xdfPm/gLo6QbFRPK/6JCOZWgjcd4qGg2+Z2qO522pexvZve+YkMoTRTVNpYxfQm9 H46L1WV1Pfbj45RWsn7XrT3aH+ee6gnz8GMjeJAcC3PT+XVp8c4xLT1OZuEexWh6 rEBjqneEqyu/GWg+zCWqdvRkNpM7Pgd5ozISutHbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHdS0dtxl4dP3zmXP5RGoapCBKoowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyZjRjOGY1LTc2ZGUtNGI5Ny04ZDM0LWUyZGIxN2YzNWVlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgXAwDQYJKoZIhvcNAQELBQADggEBAEKn5CLX4BBENO7zKhgO6RFE suXJz36P7U4kCtB4vpx3elKwxa66uR5G18wyipm2pAFEuB3tDpTKg6HCFjYGC/zf 41cUFbD9pRoqIT3TrhKvwRfmr9UwqMx6rBV3D/5zfDfXxZPUpGDEB5SLK8+FeAmp CjCpFWkM9zHE7WCWS9GkcgGUPtxDuR1a2FRUzZq81MsKSP52VgarIHyu5QUehjlE RCU96bcf4qkL+/9HFumTGXI1cqXQl9SdMRv57MAW/qP7wEDNC4+vV6AEeTO8/Ec+ 1UsC0GGwlOJ8boRMyccv2asPqYs7bsJuMdGPoAADXAqjpm1hyeluWt6Ca3EH200= -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:21 2025 by rpki-client