This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa File: c538b13e-0806-4990-a5f5-81b220e6ea95.roa (raw, json) Hash identifier: vFJk7tFrVIHwSorADi/PpJ6cta2SJFxQXsezKApeodU= Subject key identifier: AD:D0:ED:0D:E3:4E:AD:4A:28:2C:29:A0:A1:A4:28:BD:2E:B8:E5:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DE28867345158C4F7DAE19AFFF08AC1BF819649 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa Signing time: Wed 12 Nov 2025 00:30:35 +0000 ROA not before: Wed 12 Nov 2025 00:30:35 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e2:88:67:34:51:58:c4:f7:da:e1:9a:ff:f0:8a:c1:bf:81:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:30:35 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=b8ff44161bb98bb81d3a6e7e948f10280801e13830966f8493e293b73b1666db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:39:6d:3e:ad:07:50:13:db:a5:3b:fd:72: 6c:83:28:c8:1d:54:5e:9d:35:f9:a8:32:8f:14:e3: 4b:35:3f:60:23:40:68:a6:b1:90:89:21:bf:ef:58: 0e:a4:21:c4:3f:0a:7c:d4:eb:5f:1b:1e:81:ca:a8: ca:f7:96:4c:3c:7c:e6:47:ed:32:87:47:8b:71:20: b0:a2:01:11:cd:4e:1a:08:45:09:d8:81:01:e6:ea: 18:d9:a4:98:39:59:3b:c9:61:45:74:48:37:23:34: dd:c1:80:02:86:ba:2f:1b:fe:e8:52:a7:34:e0:bf: 05:ee:d4:ba:aa:71:06:e6:06:f9:33:47:ce:e9:be: a7:04:86:aa:8b:86:12:f7:0e:d8:9d:ca:07:c5:95: 4b:51:76:68:80:6d:99:dc:c3:8c:e0:5e:03:fe:50: 43:3e:26:8e:19:8e:4b:94:22:fb:9b:79:80:39:d9: 07:9a:17:06:3e:0c:b0:eb:67:fc:a7:d9:69:8e:58: 2d:47:30:45:bf:bb:0e:20:18:09:e5:9f:02:f2:1e: 97:b3:31:70:dc:31:02:13:1c:b1:34:bc:81:8a:f7: 07:a6:42:7d:b2:a3:40:ae:f7:94:cd:60:87:d4:76: c6:d0:ec:e2:eb:7d:5e:7d:51:48:82:a8:7b:26:bf: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:ED:0D:E3:4E:AD:4A:28:2C:29:A0:A1:A4:28:BD:2E:B8:E5:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 33:60:01:f6:cd:1f:89:17:30:59:5e:6f:3b:e2:ba:e7:95:07: be:88:df:d2:2b:73:f6:cd:8d:8a:26:38:1d:85:74:9b:96:fd: 44:dd:4e:34:a1:4e:9c:07:d6:9c:21:a5:f5:9e:7b:c9:a8:33: 92:4f:ec:ac:aa:11:d0:9a:00:6b:50:dc:08:0f:5b:dc:13:32: 5d:d5:b8:85:a9:6f:73:56:8b:f0:e2:12:a2:a2:63:f8:d6:f1: 3a:09:02:fa:07:3c:a3:6b:6f:73:7f:29:46:4b:94:d6:54:14: 34:fa:01:88:86:a2:86:e6:41:77:f9:7f:ec:aa:b2:32:01:74: b4:85:4f:3e:ac:e5:a7:ed:52:11:32:5c:bd:c5:25:d5:5e:f9: fd:52:bf:90:1a:a6:08:8e:32:70:96:e1:12:d7:fe:49:70:5f: 76:50:6d:8c:99:90:99:8a:31:af:33:b7:68:cb:f9:6a:38:45: 55:e7:7a:62:53:97:0d:5b:4c:68:f1:b2:db:76:d4:28:1d:b2: 86:83:36:61:1e:47:e5:25:d0:be:e0:6c:bd:2c:5c:12:13:d6: a7:7d:05:a5:af:e2:24:f0:c8:70:8e:53:dc:37:bd:6d:11:79: 2e:97:a2:39:b1:45:24:66:31:aa:3e:81:df:7e:dc:56:e9:e1: ca:26:6a:59 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULeKIZzRRWMT32uGa//CKwb+BlkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDAzMDM1WhcNMjUxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGZmNDQxNjFiYjk4YmI4MWQzYTZlN2U5NDhmMTAyODA4 MDFlMTM4MzA5NjZmODQ5M2UyOTNiNzNiMTY2NmRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6WDltPq0HUBPbpTv9cmyDKMgdVF6dNfmoMo8U40s1P2Aj QGimsZCJIb/vWA6kIcQ/CnzU618bHoHKqMr3lkw8fOZH7TKHR4txILCiARHNThoI RQnYgQHm6hjZpJg5WTvJYUV0SDcjNN3BgAKGui8b/uhSpzTgvwXu1LqqcQbmBvkz R87pvqcEhqqLhhL3DtidygfFlUtRdmiAbZncw4zgXgP+UEM+Jo4ZjkuUIvubeYA5 2QeaFwY+DLDrZ/yn2WmOWC1HMEW/uw4gGAnlnwLyHpezMXDcMQITHLE0vIGK9wem Qn2yo0Cu95TNYIfUdsbQ7OLrfV59UUiCqHsmv67/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrdDtDeNOrUooLCmgoaQovS645aYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1MzhiMTNlLTA4MDYtNDk5MC1hNWY1LTgxYjIyMGU2ZWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pYDANBgkqhkiG9w0BAQsFAAOCAQEAM2AB9s0fiRcwWV5vO+K655UH vojf0itz9s2NiiY4HYV0m5b9RN1ONKFOnAfWnCGl9Z57yagzkk/srKoR0JoAa1Dc CA9b3BMyXdW4halvc1aL8OISoqJj+NbxOgkC+gc8o2tvc38pRkuU1lQUNPoBiIai huZBd/l/7KqyMgF0tIVPPqzlp+1SETJcvcUl1V75/VK/kBqmCI4ycJbhEtf+SXBf dlBtjJmQmYoxrzO3aMv5ajhFVed6YlOXDVtMaPGy23bUKB2yhoM2YR5H5SXQvuBs vSxcEhPWp30Fpa/iJPDIcI5T3De9bRF5LpeiObFFJGYxqj6B337cVunhyiZqWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:54 2025 by rpki-client