This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa File: 8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa (raw, json) Hash identifier: YXByrClGY5qoR4FtJl5mmtd2lMXx6mKWT2G0atuZgC8= Subject key identifier: 9B:D2:65:C8:F4:7B:16:38:8A:C9:9E:34:5F:D2:F6:26:F3:9D:59:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E74AF7BB4497F2496A05FD7F3413616916C8995 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa Signing time: Tue 25 Nov 2025 00:20:41 +0000 ROA not before: Tue 25 Nov 2025 00:20:41 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f12:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:74:af:7b:b4:49:7f:24:96:a0:5f:d7:f3:41:36:16:91:6c:89:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:20:41 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=1773d069e9ee74df31efc5306406ddd263f151e223c65ac86833ca0ea8ed7404, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:06:4a:4e:af:04:7e:a1:6c:12:2b:0d:3e: e6:69:bf:f5:b3:ac:33:92:6b:08:d0:51:23:1b:5a: 38:0d:8a:01:4c:d0:25:db:3b:9f:b2:34:73:61:65: b0:38:31:54:c4:6a:b5:37:1b:7e:04:1e:e8:2f:82: cd:cf:bf:27:f8:a6:20:2a:89:58:7a:05:b4:8b:b0: 2b:58:f9:be:15:d0:c6:4a:6c:c7:83:61:70:7e:e1: 18:77:af:37:31:51:62:26:68:87:90:4c:eb:d5:b2: 41:b5:8b:ee:11:50:07:74:84:6c:d7:91:14:74:b5: cc:df:dd:44:56:85:ad:c8:dc:8d:10:a9:1e:9e:7c: 57:97:84:22:67:97:3d:9c:99:88:0e:7e:ed:99:15: c7:d9:07:ae:b8:34:ac:89:5b:8a:7b:ba:75:12:f3: e3:04:5f:76:15:8c:95:45:c3:f1:c0:e8:2b:04:aa: fc:71:52:e6:5a:b6:bc:2e:25:ec:27:93:91:20:09: fb:fa:43:dc:0a:3f:33:2b:ff:e3:02:b5:5a:07:7e: eb:99:eb:31:ac:02:d4:09:f5:bc:95:e4:14:6b:6b: 7a:22:be:44:0a:63:91:49:38:6a:45:3d:53:36:bf: 01:7c:22:93:08:4a:51:af:a5:15:e5:85:1c:12:60: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:65:C8:F4:7B:16:38:8A:C9:9E:34:5F:D2:F6:26:F3:9D:59:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:c000::/36 Signature Algorithm: sha256WithRSAEncryption 69:6d:8d:2c:b1:ef:fd:08:4b:91:9d:29:8a:4f:46:e0:31:81: b2:19:b0:42:55:69:a2:f5:14:4f:c1:92:16:29:00:cb:7c:d1: 91:0f:f0:65:c0:10:8d:31:07:4b:ff:ff:fb:16:3b:b4:8e:67: ef:b1:08:72:57:ae:1b:51:06:0a:35:1a:97:9e:30:54:6d:d7: a6:f0:17:02:8b:62:6d:2f:71:e0:9f:f9:14:9a:96:15:75:ce: 79:67:8c:d1:75:0d:95:32:ec:c5:7b:76:8a:6e:eb:3e:b5:12: d8:2d:17:1d:47:88:e4:28:90:fb:9f:6f:0b:8e:43:31:07:a2: 45:6a:c1:2b:92:4d:30:9c:43:e6:8a:41:07:b7:d2:6c:d7:c3: a2:26:09:e4:91:2f:55:59:46:ee:eb:11:cc:7b:e2:46:57:a1: f7:33:7c:a4:fc:b9:a2:49:62:e1:70:26:ff:e2:50:1d:c9:59: ca:49:87:2e:c1:3c:4c:01:f2:51:ab:5d:eb:7f:c8:2d:46:1b: 75:c1:bc:7e:6e:b1:ce:e2:8c:86:ce:67:58:0e:90:da:73:60: 77:75:e1:56:06:fb:bb:2c:87:e4:b5:48:4a:24:bd:fe:7c:12: e0:b2:2c:fa:05:06:72:71:ac:dc:a5:8e:70:51:19:2a:00:f2: 23:13:98:c2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfnSve7RJfySWoF/X80E2FpFsiZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAyMDQxWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzczZDA2OWU5ZWU3NGRmMzFlZmM1MzA2NDA2ZGRkMjYz ZjE1MWUyMjNjNjVhYzg2ODMzY2EwZWE4ZWQ3NDA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtagZKTq8EfqFsEisNPuZpv/WzrDOSawjQUSMbWjgNigFM 0CXbO5+yNHNhZbA4MVTEarU3G34EHugvgs3Pvyf4piAqiVh6BbSLsCtY+b4V0MZK bMeDYXB+4Rh3rzcxUWImaIeQTOvVskG1i+4RUAd0hGzXkRR0tczf3URWha3I3I0Q qR6efFeXhCJnlz2cmYgOfu2ZFcfZB664NKyJW4p7unUS8+MEX3YVjJVFw/HA6CsE qvxxUuZatrwuJewnk5EgCfv6Q9wKPzMr/+MCtVoHfuuZ6zGsAtQJ9byV5BRra3oi vkQKY5FJOGpFPVM2vwF8IpMISlGvpRXlhRwSYJtLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm9JlyPR7FjiKyZ40X9L2JvOdWUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNjU3ZDRlLTUyZmMtNGY0MC04MTE2LTNhYzIxNGI1ZWMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SwDANBgkqhkiG9w0BAQsFAAOCAQEAaW2NLLHv/QhLkZ0pik9G4DGB shmwQlVpovUUT8GSFikAy3zRkQ/wZcAQjTEHS///+xY7tI5n77EIcleuG1EGCjUa l54wVG3XpvAXAotibS9x4J/5FJqWFXXOeWeM0XUNlTLsxXt2im7rPrUS2C0XHUeI 5CiQ+59vC45DMQeiRWrBK5JNMJxD5opBB7fSbNfDoiYJ5JEvVVlG7usRzHviRleh 9zN8pPy5okli4XAm/+JQHclZykmHLsE8TAHyUatd63/ILUYbdcG8fm6xzuKMhs5n WA6Q2nNgd3XhVgb7uyyH5LVISiS9/nwS4LIs+gUGcnGs3KWOcFEZKgDyIxOYwg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:57 2025 by rpki-client