This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39a30ec-f343-4806-8feb-ff612b81e87c.roa File: b39a30ec-f343-4806-8feb-ff612b81e87c.roa (raw, json) Hash identifier: CKFu1QeHGFJqKUSlxlc0SdTl7S6vinykF99T4FaQO24= Subject key identifier: 20:E0:39:5D:5E:2A:DF:C8:F0:F0:60:95:6D:C3:E3:0F:D7:41:97:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31EDA8244E90C108E86DDACE909C7F26DA2321D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39a30ec-f343-4806-8feb-ff612b81e87c.roa Signing time: Sun 23 Nov 2025 00:30:09 +0000 ROA not before: Sun 23 Nov 2025 00:30:09 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ed:a8:24:4e:90:c1:08:e8:6d:da:ce:90:9c:7f:26:da:23:21:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 00:30:09 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=901c884d4d7db8d29b59260112cb3c19e3151799608f6185c33798f8300c7d9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:d4:48:cb:cf:a2:a4:09:fb:9c:16:ee:35: 1c:a6:4d:8b:c2:c7:92:36:96:d0:cc:04:7a:9f:8c: 36:ff:58:7c:2f:f5:76:89:da:b4:c4:c0:eb:28:34: e1:78:83:70:2c:20:43:2e:40:4f:9d:33:03:28:ac: 70:9e:b6:6c:d5:fa:4d:fc:54:7d:b3:d8:bd:5a:94: b1:a0:ff:87:74:e8:f7:8f:53:55:f3:07:d4:fe:49: 20:83:44:2d:29:da:12:bc:ca:01:95:34:c2:16:dd: 68:7a:75:aa:6a:60:8e:43:0e:e8:2c:0d:98:ca:81: bd:4f:45:ea:56:78:ea:45:e8:f0:a8:9b:72:87:fc: 74:6b:d5:04:5d:d4:e9:28:9b:e7:c0:bc:fa:f8:cd: 12:7c:a9:89:8c:3b:a9:5d:d1:63:b1:b7:0b:9a:02: 24:e5:96:0a:45:18:02:6d:bf:2e:a5:72:ae:8d:c2: d4:44:2c:a7:e7:33:ae:97:6f:5d:54:e1:60:25:8d: 22:52:07:5e:99:83:ef:41:a3:48:ba:95:40:dc:ee: d6:17:fc:0c:f7:ec:b6:18:fd:ea:bd:1d:28:ea:d7: 74:06:35:e0:eb:89:a0:d5:a2:f0:83:a6:ae:cf:23: 3a:08:9f:af:58:ce:9b:d0:5d:25:99:55:18:ff:48: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E0:39:5D:5E:2A:DF:C8:F0:F0:60:95:6D:C3:E3:0F:D7:41:97:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b39a30ec-f343-4806-8feb-ff612b81e87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:6080::/48 Signature Algorithm: sha256WithRSAEncryption 97:f3:80:6c:5e:43:cd:51:06:01:ac:00:cf:4d:5c:4c:70:ae: 4e:06:74:12:4f:ac:52:82:4c:d3:7a:b2:bd:f3:e0:26:11:c7: e3:98:ac:1e:a2:1c:c5:02:51:05:c5:db:16:7b:f4:cd:cc:06: 1b:27:e8:e0:43:71:33:39:12:33:05:bf:b0:77:01:39:c8:1a: 92:69:e5:86:da:30:40:16:d5:8e:5f:46:8a:12:84:d0:b5:27: d8:64:59:c4:1b:40:9f:66:14:b3:7b:fc:95:b7:15:bf:e7:e6: a5:72:d0:4b:fd:4f:46:4d:38:67:97:51:08:23:f6:6e:5b:8e: c8:df:fa:0d:66:74:14:be:1f:5f:ca:d7:d7:bd:e0:44:52:89: 22:28:07:63:f5:fa:b5:47:a1:84:b0:56:58:1c:86:b2:76:56: 09:89:c5:fd:a6:22:6c:ea:46:29:8f:14:c6:fd:01:3c:63:7c: f6:e6:69:68:3c:6a:87:5e:28:b3:4c:76:05:c4:bf:48:55:39: b5:bc:11:df:7b:01:aa:e9:b2:63:7f:9c:7e:1e:1c:87:81:8f: 92:59:b0:59:93:db:0a:6e:16:49:30:a1:29:fd:f8:0b:c7:67: e6:bd:91:cd:be:d2:be:46:dc:a7:c6:54:ad:53:fb:e5:0a:d4: fc:76:58:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMe2oJE6QwQjobdrOkJx/JtojIdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDAzMDA5WhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDFjODg0ZDRkN2RiOGQyOWI1OTI2MDExMmNiM2MxOWUz MTUxNzk5NjA4ZjYxODVjMzM3OThmODMwMGM3ZDljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZKdRIy8+ipAn7nBbuNRymTYvCx5I2ltDMBHqfjDb/WHwv 9XaJ2rTEwOsoNOF4g3AsIEMuQE+dMwMorHCetmzV+k38VH2z2L1alLGg/4d06PeP U1XzB9T+SSCDRC0p2hK8ygGVNMIW3Wh6dapqYI5DDugsDZjKgb1PRepWeOpF6PCo m3KH/HRr1QRd1Okom+fAvPr4zRJ8qYmMO6ld0WOxtwuaAiTllgpFGAJtvy6lcq6N wtRELKfnM66Xb11U4WAljSJSB16Zg+9Bo0i6lUDc7tYX/Az37LYY/eq9HSjq13QG NeDriaDVovCDpq7PIzoIn69YzpvQXSWZVRj/SHmdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIOA5XV4q38jw8GCVbcPjD9dBl50wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzOWEzMGVjLWYzNDMtNDgwNi04ZmViLWZmNjEyYjgxZTg3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qYIAwDQYJKoZIhvcNAQELBQADggEBAJfzgGxeQ81RBgGsAM9NXExw rk4GdBJPrFKCTNN6sr3z4CYRx+OYrB6iHMUCUQXF2xZ79M3MBhsn6OBDcTM5EjMF v7B3ATnIGpJp5YbaMEAW1Y5fRooShNC1J9hkWcQbQJ9mFLN7/JW3Fb/n5qVy0Ev9 T0ZNOGeXUQgj9m5bjsjf+g1mdBS+H1/K19e94ERSiSIoB2P1+rVHoYSwVlgchrJ2 VgmJxf2mImzqRimPFMb9ATxjfPbmaWg8aodeKLNMdgXEv0hVObW8Ed97AarpsmN/ nH4eHIeBj5JZsFmT2wpuFkkwoSn9+AvHZ+a9kc2+0r5G3KfGVK1T++UK1Px2WMY= -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:22 2025 by rpki-client