This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3752046-a798-4d10-b8d3-3d1e02babd41.roa File: d3752046-a798-4d10-b8d3-3d1e02babd41.roa (raw, json) Hash identifier: 3u3drQHUujmTJTNjqDdf+N4+TZZsxpVz1BjwPeZ9DB4= Subject key identifier: 4C:82:4A:8D:93:5D:EA:86:5F:2D:10:A7:47:26:F2:1B:F9:C6:0D:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0531EFF8AE037ABC387A0F24574BEE6968049011 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3752046-a798-4d10-b8d3-3d1e02babd41.roa Signing time: Wed 03 Dec 2025 00:51:47 +0000 ROA not before: Wed 03 Dec 2025 00:51:47 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:31:ef:f8:ae:03:7a:bc:38:7a:0f:24:57:4b:ee:69:68:04:90:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:51:47 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=6245f05c700283916975b6189bca14bab29de828f840c0c1234e61eabdf1dcb0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:ed:d5:40:b1:58:9a:07:3f:65:1a:81:37: 54:e0:67:4d:94:59:74:7d:3b:be:94:8e:77:2d:3c: 78:d1:4c:41:bf:19:d4:04:34:ed:c3:86:bd:33:f6: a9:c1:67:bd:e6:8e:58:ec:52:dc:e7:4e:42:3a:62: b8:d1:e1:ec:63:a8:3c:6e:7d:12:3a:8c:76:eb:81: eb:e3:08:1f:00:6d:f0:5c:04:f2:75:d6:60:3a:58: a2:8b:c1:33:c2:0f:e5:4c:35:0b:c9:e1:dd:c2:ba: ac:80:82:ed:fe:b4:12:b0:a0:0a:c4:ac:0c:2e:c0: 2b:5b:75:86:af:e7:d2:20:2f:f3:ac:cb:ed:78:df: 18:d0:fa:eb:f9:8d:52:7c:3b:87:25:53:08:4d:71: 73:68:ea:b8:dc:b3:d4:fd:52:23:71:19:40:27:6e: c9:b3:f8:23:4a:36:6b:64:36:91:74:e8:44:c8:76: 26:1d:1e:6a:b6:dc:1a:ab:1c:2d:31:7a:6a:c8:f8: 91:8f:fc:78:8a:d3:9e:3a:21:9f:63:82:30:2a:de: 53:54:33:78:24:9f:e1:48:2d:a9:c3:17:53:e4:f9: bb:7a:1f:c0:e4:4d:61:70:af:73:50:f3:3f:cf:49: 36:53:f1:63:82:be:bb:41:c6:24:3f:5b:84:2a:de: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:4A:8D:93:5D:EA:86:5F:2D:10:A7:47:26:F2:1B:F9:C6:0D:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3752046-a798-4d10-b8d3-3d1e02babd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:c000::/48 Signature Algorithm: sha256WithRSAEncryption 58:8a:4d:9b:75:de:16:04:e0:58:87:cc:26:f1:45:3b:b9:56: b6:7e:a9:5f:9f:e2:59:92:da:93:57:e6:85:aa:64:a6:93:aa: 0b:f5:62:29:4f:66:77:0b:14:d4:95:8f:e8:65:44:bb:a4:6c: b2:50:e8:46:a2:9a:69:84:72:64:01:10:30:df:bc:39:bb:2c: 63:ec:7d:c1:d6:b5:72:69:e9:a0:05:61:fa:b5:f1:f3:27:91: ec:2f:db:ee:de:f4:70:9a:10:dd:15:72:59:ed:d7:13:5e:6c: b8:ed:6c:8c:a8:1d:d6:e2:e4:74:10:16:17:dd:68:23:dc:9c: 56:9c:9e:ce:e1:05:d1:e0:a3:01:ae:0d:8b:be:2f:36:94:70: a8:1e:05:0a:ef:30:af:f6:39:86:8a:61:1b:ff:0f:6f:ec:95: e9:95:8c:f5:64:53:ca:02:67:d4:90:58:1d:12:ef:66:cc:af: 03:07:29:4b:2e:68:b6:d9:71:6d:f5:5a:59:33:db:88:14:d5: 21:ea:22:f9:dc:3f:64:8a:ed:07:e6:a4:ec:e4:86:f7:d1:4b: f8:e4:be:02:21:32:d1:c4:07:6f:f5:ae:ba:cf:ce:d8:09:f3: 42:7d:18:e4:06:ac:54:e4:15:0e:15:d4:8a:4f:67:3e:c5:55: 74:53:47:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBTHv+K4Derw4eg8kV0vuaWgEkBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDA1MTQ3WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjQ1ZjA1YzcwMDI4MzkxNjk3NWI2MTg5YmNhMTRiYWIy OWRlODI4Zjg0MGMwYzEyMzRlNjFlYWJkZjFkY2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKg+3VQLFYmgc/ZRqBN1TgZ02UWXR9O76UjnctPHjRTEG/ GdQENO3Dhr0z9qnBZ73mjljsUtznTkI6YrjR4exjqDxufRI6jHbrgevjCB8AbfBc BPJ11mA6WKKLwTPCD+VMNQvJ4d3CuqyAgu3+tBKwoArErAwuwCtbdYav59IgL/Os y+143xjQ+uv5jVJ8O4clUwhNcXNo6rjcs9T9UiNxGUAnbsmz+CNKNmtkNpF06ETI diYdHmq23BqrHC0xemrI+JGP/HiK0546IZ9jgjAq3lNUM3gkn+FILanDF1Pk+bt6 H8DkTWFwr3NQ8z/PSTZT8WOCvrtBxiQ/W4Qq3rTzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTIJKjZNd6oZfLRCnRybyG/nGDQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNzUyMDQ2LWE3OTgtNGQxMC1iOGQzLTNkMWUwMmJhYmQ0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/swAAwDQYJKoZIhvcNAQELBQADggEBAFiKTZt13hYE4FiHzCbxRTu5 VrZ+qV+f4lmS2pNX5oWqZKaTqgv1YilPZncLFNSVj+hlRLukbLJQ6EaimmmEcmQB EDDfvDm7LGPsfcHWtXJp6aAFYfq18fMnkewv2+7e9HCaEN0Vclnt1xNebLjtbIyo Hdbi5HQQFhfdaCPcnFacns7hBdHgowGuDYu+LzaUcKgeBQrvMK/2OYaKYRv/D2/s lemVjPVkU8oCZ9SQWB0S72bMrwMHKUsuaLbZcW31Wlkz24gU1SHqIvncP2SK7Qfm pOzkhvfRS/jkvgIhMtHEB2/1rrrPztgJ80J9GOQGrFTkFQ4V1IpPZz7FVXRTRxs= -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:27 2025 by rpki-client