This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa File: 8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa (raw, json) Hash identifier: HjODAFkWdwdo8NipT1/IuyLL4iakCpIaqT86EImnB04= Subject key identifier: 7D:FC:CE:D8:DB:C7:53:EB:34:11:3C:1B:89:67:7C:54:09:34:35:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FB40DD41F46AA52A5A8B49C4D9A922C0AF8AA5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa Signing time: Sat 06 Dec 2025 01:31:18 +0000 ROA not before: Sat 06 Dec 2025 01:31:18 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:0d:d4:1f:46:aa:52:a5:a8:b4:9c:4d:9a:92:2c:0a:f8:aa:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:31:18 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=d8ea15dc7993c07633a1d416d97e0237513e4a7b70e151495bc766bfda5c0de3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:22:5d:9f:76:7b:5f:6e:a0:33:0f:29:df:1f: f7:cc:55:a0:91:32:66:08:95:56:af:1a:d7:3d:e9: 38:41:6f:cd:d6:0f:22:74:e1:45:e9:99:c6:5a:45: 92:35:0f:9b:71:2a:46:cf:91:db:fe:0e:43:1a:a7: 07:ed:11:8a:ef:0d:49:3b:3e:bd:db:45:f7:f5:6e: 46:00:05:74:16:d8:a2:6a:aa:6a:b6:6c:49:ce:0d: fe:ac:2b:5b:2d:68:ed:72:e5:b3:2b:49:65:00:17: 4c:a6:cf:a6:16:51:83:91:1c:70:88:96:29:80:a9: 1f:ab:d8:38:14:df:35:21:7e:9c:11:09:94:1e:f8: c5:e2:01:00:10:4e:d3:59:59:4d:65:a3:f3:21:20: 9a:e4:50:28:3c:4b:e1:52:cc:5c:9a:66:a3:c4:d3: f3:d1:4b:58:21:fe:5a:69:14:3d:92:f3:59:0d:5b: d5:9b:94:d6:95:e6:83:d6:96:fa:b9:12:eb:df:e7: 5a:69:2d:85:0a:0d:c7:ab:a3:75:a8:94:40:bf:6a: c1:7d:14:5c:49:90:df:88:09:a6:a0:63:85:77:29: 31:54:af:e0:7c:04:17:f5:21:a4:fb:17:09:34:ef: 8f:2d:09:c8:1f:8c:cf:2f:41:36:19:4c:ce:0b:30: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:CE:D8:DB:C7:53:EB:34:11:3C:1B:89:67:7C:54:09:34:35:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:4e:36:13:cf:fa:bc:a3:38:25:a7:c1:03:88:01:42:fb:2f: 49:89:37:7a:c1:63:db:27:c6:b1:ed:ff:d7:61:29:0d:64:bd: f0:c5:5a:b1:30:23:f5:b1:f8:4e:66:d0:4f:aa:c8:31:fb:a7: 2e:48:aa:a7:3f:9b:a0:79:1a:f4:08:c5:42:2e:0a:49:b4:38: b9:a6:6f:6b:64:30:cb:2b:8e:5c:d1:46:41:38:27:64:a1:c2: c6:8e:e7:3a:4c:35:fc:dc:d8:b9:3c:e8:48:93:e4:2d:13:ab: 1e:af:8b:a2:a4:43:0f:cd:d4:ef:55:cf:2e:9b:ac:e1:af:8b: 6d:fe:52:a4:98:07:53:36:83:05:13:db:8f:84:e1:d2:93:d0: d5:49:e4:26:e6:75:20:ce:bc:f9:cf:a8:8c:8d:3c:b3:f3:fb: a1:d7:9b:12:14:1f:01:f6:eb:54:25:11:c6:3d:2d:b4:08:1b: 44:d8:f9:46:d0:09:2e:17:36:80:f9:73:1a:a9:1e:3b:86:b7: 3f:f2:c2:a9:f6:46:b3:51:f1:b2:9e:58:47:1c:dd:25:c7:b4: ea:a1:c6:1b:19:2a:5d:9c:dd:ed:ab:5c:72:a0:cb:eb:4c:0c: 89:c7:b6:31:d5:82:a6:48:d1:23:0f:a2:b6:2c:29:84:af:2d: 17:ea:40:fe -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT7QN1B9GqlKlqLScTZqSLAr4ql8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDEzMTE4WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGVhMTVkYzc5OTNjMDc2MzNhMWQ0MTZkOTdlMDIzNzUx M2U0YTdiNzBlMTUxNDk1YmM3NjZiZmRhNWMwZGUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvIl2fdntfbqAzDynfH/fMVaCRMmYIlVavGtc96ThBb83W DyJ04UXpmcZaRZI1D5txKkbPkdv+DkMapwftEYrvDUk7Pr3bRff1bkYABXQW2KJq qmq2bEnODf6sK1staO1y5bMrSWUAF0ymz6YWUYORHHCIlimAqR+r2DgU3zUhfpwR CZQe+MXiAQAQTtNZWU1lo/MhIJrkUCg8S+FSzFyaZqPE0/PRS1gh/lppFD2S81kN W9WblNaV5oPWlvq5Euvf51ppLYUKDcero3WolEC/asF9FFxJkN+ICaagY4V3KTFU r+B8BBf1IaT7Fwk0748tCcgfjM8vQTYZTM4LMFMDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUffzO2NvHU+s0ETwbiWd8VAk0NYswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlYTJkZDk1LTg4MDgtNGQ0Zi05MjNkLTJmNmQ0Nzg2MmM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84UDANBgkqhkiG9w0BAQsFAAOCAQEAT042E8/6vKM4JafBA4gBQvsv SYk3esFj2yfGse3/12EpDWS98MVasTAj9bH4TmbQT6rIMfunLkiqpz+boHka9AjF Qi4KSbQ4uaZva2QwyyuOXNFGQTgnZKHCxo7nOkw1/NzYuTzoSJPkLROrHq+LoqRD D83U71XPLpus4a+Lbf5SpJgHUzaDBRPbj4Th0pPQ1UnkJuZ1IM68+c+ojI08s/P7 odebEhQfAfbrVCURxj0ttAgbRNj5RtAJLhc2gPlzGqkeO4a3P/LCqfZGs1Hxsp5Y RxzdJce06qHGGxkqXZzd7atccqDL60wMice2MdWCpkjRIw+itiwphK8tF+pA/g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:09 2025 by rpki-client