This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa File: b5838a01-e498-4db5-99d7-b8519767f3f3.roa (raw, json) Hash identifier: xirz7wmnArWnquXAB0Dg36NLRZhJlB2dpFbERlJhnbc= Subject key identifier: 2E:7A:26:29:8F:60:C7:74:C9:55:86:6C:1F:1B:60:07:DC:09:71:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D3EBC9D62E3ABDC0DAFFC107F6CAE7490CE0C0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa Signing time: Wed 03 Dec 2025 00:51:08 +0000 ROA not before: Wed 03 Dec 2025 00:51:08 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3e:bc:9d:62:e3:ab:dc:0d:af:fc:10:7f:6c:ae:74:90:ce:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:51:08 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=8e6353de07666789b160e51a6d155e6f1491766d7a108e1eec6d85c362c3cbb8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:e5:5e:58:23:28:e9:d6:da:c3:f7:d0:32: df:3a:96:5d:3a:cd:79:e3:15:2d:3a:fa:b8:f9:cb: ef:87:07:49:50:21:95:cf:e6:96:69:8f:34:8d:dd: 43:be:64:b1:13:5b:a3:0a:6e:50:34:14:f8:bc:2e: a4:bf:54:c6:87:66:8c:a6:f5:08:bc:ce:41:a1:f2: f9:5d:c3:a4:24:5b:5f:8b:a4:93:61:15:68:b6:d9: fc:db:eb:03:7f:89:15:05:d5:20:94:6e:06:7d:dc: ff:b2:dc:39:91:bf:ee:69:ec:64:1f:20:98:37:83: 92:63:84:64:75:10:45:21:82:fa:50:3d:a0:6a:b6: cb:d7:af:d5:de:32:f1:4a:20:7b:e6:a9:d3:14:e6: 17:12:f0:26:34:cb:89:7d:16:c7:aa:84:21:99:67: 3c:c8:71:39:d4:ae:41:12:ec:52:ad:95:cc:fa:52: 99:87:ed:29:19:6b:b1:fd:58:d6:e2:6f:a3:80:8a: 53:72:6f:55:de:6c:64:2a:1e:2d:5b:fc:6b:ca:fb: a3:4d:28:16:1f:0f:e5:a1:8e:15:6e:f8:07:f3:94: ea:1b:d1:78:3d:0b:fd:0a:2d:d6:a0:81:3b:fc:81: 13:08:df:55:a5:95:51:4c:ae:cb:5e:ae:24:39:e7: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:26:29:8F:60:C7:74:C9:55:86:6C:1F:1B:60:07:DC:09:71:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:4000::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b9:56:67:5f:e6:6f:05:38:42:bb:7e:7b:27:55:03:c4:8f: 80:80:09:dc:e7:54:c9:1e:a7:b8:84:4c:ce:f1:85:35:c0:d8: 0d:6c:c0:e6:a1:16:64:41:fc:a3:fe:7b:bd:b0:93:d3:f8:38: ba:32:c9:52:52:8c:5a:19:ff:eb:62:ed:30:8f:f4:db:41:dc: cd:44:65:8b:48:3f:99:c0:72:e9:1c:bf:e9:4f:95:90:22:3b: 17:b2:2f:75:5b:8f:98:75:03:1d:19:30:7e:f4:b5:07:3f:f5: d5:b7:e3:53:6e:c7:0c:97:58:2d:2d:bf:63:c2:e7:63:8f:66: b2:c6:e3:a2:96:ea:3c:5a:46:aa:8d:0b:8d:2a:80:57:a7:44: b3:cd:ac:75:58:8b:68:72:fe:32:96:a8:c9:f7:b5:ec:f7:c1: 85:ea:ab:bc:6f:aa:8e:09:08:75:25:11:73:78:37:09:6a:34: 8d:58:6b:d4:ee:3f:3f:92:89:1f:4d:6b:68:73:91:5c:1d:94: c3:64:37:49:eb:5b:45:1a:81:b8:c9:cb:fa:ba:a6:5b:80:e0: 20:58:fe:2b:e2:6d:ea:bd:f2:b8:1b:c9:32:fc:8d:aa:bd:3a: 79:04:b9:db:cf:cd:43:a4:47:27:fa:fb:ae:f2:c2:85:76:b8: e5:92:b4:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULT68nWLjq9wNr/wQf2yudJDODAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDA1MTA4WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTYzNTNkZTA3NjY2Nzg5YjE2MGU1MWE2ZDE1NWU2ZjE0 OTE3NjZkN2ExMDhlMWVlYzZkODVjMzYyYzNjYmI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbhuVeWCMo6dbaw/fQMt86ll06zXnjFS06+rj5y++HB0lQ IZXP5pZpjzSN3UO+ZLETW6MKblA0FPi8LqS/VMaHZoym9Qi8zkGh8vldw6QkW1+L pJNhFWi22fzb6wN/iRUF1SCUbgZ93P+y3DmRv+5p7GQfIJg3g5JjhGR1EEUhgvpQ PaBqtsvXr9XeMvFKIHvmqdMU5hcS8CY0y4l9FseqhCGZZzzIcTnUrkES7FKtlcz6 UpmH7SkZa7H9WNbib6OAilNyb1XebGQqHi1b/GvK+6NNKBYfD+WhjhVu+AfzlOob 0Xg9C/0KLdaggTv8gRMI31WllVFMrsteriQ551J/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULnomKY9gx3TJVYZsHxtgB9wJceEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1ODM4YTAxLWU0OTgtNGRiNS05OWQ3LWI4NTE5NzY3ZjNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sQAAwDQYJKoZIhvcNAQELBQADggEBAA25Vmdf5m8FOEK7fnsnVQPE j4CACdznVMkep7iETM7xhTXA2A1swOahFmRB/KP+e72wk9P4OLoyyVJSjFoZ/+ti 7TCP9NtB3M1EZYtIP5nAcukcv+lPlZAiOxeyL3Vbj5h1Ax0ZMH70tQc/9dW341Nu xwyXWC0tv2PC52OPZrLG46KW6jxaRqqNC40qgFenRLPNrHVYi2hy/jKWqMn3tez3 wYXqq7xvqo4JCHUlEXN4NwlqNI1Ya9TuPz+SiR9Na2hzkVwdlMNkN0nrW0UagbjJ y/q6pluA4CBY/ivibeq98rgbyTL8jaq9OnkEudvPzUOkRyf6+67ywoV2uOWStAM= -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:14 2025 by rpki-client