This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa File: bde42f65-0ec0-46f5-ba64-f838927269dc.roa (raw, json) Hash identifier: ub4DQQwC+iY0Th0VpFv4TgeSvs6rOezvKg7mq3ujLr8= Subject key identifier: 4A:49:62:AD:99:6F:46:AB:38:F5:7A:93:F5:FB:F4:50:7A:5A:C7:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16EA01EF9B2686EFA6642441F01645786298EA6F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa Signing time: Sat 06 Dec 2025 02:01:52 +0000 ROA not before: Sat 06 Dec 2025 02:01:52 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:01:ef:9b:26:86:ef:a6:64:24:41:f0:16:45:78:62:98:ea:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:01:52 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=b33a241dfb587d51c4b75302bc5fb6402fc7025309ee4f0d5c09c5d54b09a7ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:c5:65:5b:4b:12:f9:e0:60:0d:55:3f:2f: 2b:f0:17:7b:5e:a6:84:aa:aa:8f:60:3c:ca:4c:99: b6:3b:2b:54:c3:b3:cd:a4:50:5f:71:44:6d:55:01: 73:ca:10:87:13:4a:4b:a0:4d:21:89:45:1a:65:09: b5:10:a1:1f:33:1c:f7:8d:de:68:3a:95:54:7f:41: 5d:6f:c7:e3:2c:a1:25:5d:57:00:45:d5:f3:b5:89: 11:27:b8:cd:45:f4:4a:89:57:dd:30:d4:b5:a0:28: 94:04:56:01:ed:03:6e:ea:e9:7e:38:a8:7e:5b:c5: a3:02:8a:5c:fd:9a:68:af:04:2f:e5:21:c4:6f:b1: 6f:89:20:73:5c:09:44:e8:ac:4c:cd:37:01:22:dd: 15:57:88:8c:00:bd:98:e5:95:c5:d3:5b:c1:1e:04: 6e:f1:e2:3e:40:60:43:e1:20:31:c6:bf:0f:50:ca: b1:1d:84:ca:16:6a:10:b8:50:ad:8a:b9:e8:bc:d0: f3:95:eb:99:25:e9:b0:3f:3c:ad:4c:72:35:aa:00: 58:06:c4:3d:ab:b0:fe:c2:b1:0d:39:31:cf:12:2c: a6:22:ba:40:5f:2c:34:5e:eb:0c:26:0a:7c:4c:fd: a0:80:82:62:50:0a:84:58:a6:6f:69:9d:36:70:b4: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:62:AD:99:6F:46:AB:38:F5:7A:93:F5:FB:F4:50:7A:5A:C7:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8040::/48 Signature Algorithm: sha256WithRSAEncryption 63:32:d0:be:a3:00:9a:53:35:93:c3:0a:21:39:24:68:c4:a6: 2c:30:72:98:e7:08:ba:06:a6:ed:e2:57:d6:ac:a9:c3:32:03: e4:b6:97:b8:61:0c:fa:86:12:43:77:0d:62:52:8a:0b:60:0f: 1a:4a:9e:26:54:76:c5:7b:41:cd:65:ee:c6:44:73:ca:2b:b4: 18:93:13:1e:2a:3b:34:24:b3:bd:9e:55:c3:da:eb:ce:e9:3e: 30:33:10:fa:4a:37:71:54:8d:61:09:a3:85:17:aa:25:3c:ef: 0f:be:78:41:d2:75:7f:df:89:1b:b3:9e:60:69:4c:af:1b:15: 2d:89:48:64:b1:12:31:49:47:d3:2a:52:0c:75:2b:63:e6:26: 48:dd:de:7c:bc:c3:16:05:3c:53:59:39:10:ae:67:ef:11:e7: 40:5b:cd:43:2a:58:b9:2f:bf:4b:78:df:93:05:30:f4:4d:4f: 84:b5:8f:78:73:3b:d0:cc:b0:b8:a6:de:58:c1:87:5b:c3:8a: 9f:d3:50:d5:2a:89:b5:52:b9:ca:f6:74:3a:23:d1:2e:1a:be: 8c:83:80:93:a7:cd:4c:2e:5c:8f:f3:28:f4:5b:7f:ea:6a:26: fe:4e:41:8d:f5:d3:5a:83:9d:59:b7:e9:33:8a:72:24:05:a1: f0:bb:dd:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFuoB75smhu+mZCRB8BZFeGKY6m8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIwMTUyWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzNhMjQxZGZiNTg3ZDUxYzRiNzUzMDJiYzVmYjY0MDJm YzcwMjUzMDllZTRmMGQ1YzA5YzVkNTRiMDlhN2FiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyhMVlW0sS+eBgDVU/LyvwF3tepoSqqo9gPMpMmbY7K1TD s82kUF9xRG1VAXPKEIcTSkugTSGJRRplCbUQoR8zHPeN3mg6lVR/QV1vx+MsoSVd VwBF1fO1iREnuM1F9EqJV90w1LWgKJQEVgHtA27q6X44qH5bxaMCilz9mmivBC/l IcRvsW+JIHNcCUTorEzNNwEi3RVXiIwAvZjllcXTW8EeBG7x4j5AYEPhIDHGvw9Q yrEdhMoWahC4UK2Kuei80POV65kl6bA/PK1McjWqAFgGxD2rsP7CsQ05Mc8SLKYi ukBfLDRe6wwmCnxM/aCAgmJQCoRYpm9pnTZwtPoBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSklirZlvRqs49XqT9fv0UHpax0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQyZjY1LTBlYzAtNDZmNS1iYTY0LWY4Mzg5MjcyNjlkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hgEAwDQYJKoZIhvcNAQELBQADggEBAGMy0L6jAJpTNZPDCiE5JGjE piwwcpjnCLoGpu3iV9asqcMyA+S2l7hhDPqGEkN3DWJSigtgDxpKniZUdsV7Qc1l 7sZEc8ortBiTEx4qOzQks72eVcPa687pPjAzEPpKN3FUjWEJo4UXqiU87w++eEHS dX/fiRuznmBpTK8bFS2JSGSxEjFJR9MqUgx1K2PmJkjd3ny8wxYFPFNZORCuZ+8R 50BbzUMqWLkvv0t435MFMPRNT4S1j3hzO9DMsLim3ljBh1vDip/TUNUqibVSucr2 dDoj0S4avoyDgJOnzUwuXI/zKPRbf+pqJv5OQY3101qDnVm36TOKciQFofC73WM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:28 2025 by rpki-client