This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa File: d6daca87-48c5-4a75-8da6-fb81094e9851.roa (raw, json) Hash identifier: KenzCMlJOtP4xYTg6VIDsfFO7+58YqXLgZSkQT6mlyc= Subject key identifier: E0:A1:55:7B:FB:D7:FC:77:29:C6:F5:43:72:56:76:C7:63:96:95:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40BD5C8FFB97114A91BF53C40672CE7EB7B3B90F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa Signing time: Wed 03 Dec 2025 01:30:47 +0000 ROA not before: Wed 03 Dec 2025 01:30:47 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff7:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bd:5c:8f:fb:97:11:4a:91:bf:53:c4:06:72:ce:7e:b7:b3:b9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:30:47 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=817570246783cc63fa47d1ab14f14a88e9b78ba4a21a235d4129a1e63c0456ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:42:e7:6d:70:75:9c:15:75:b5:dc:ba:40: 1e:1e:63:1d:fc:26:05:00:a4:9c:b1:bf:20:cc:fd: 4f:19:25:7a:8d:4a:bb:25:96:e9:32:38:24:06:61: fe:c8:dc:2e:fb:dc:c7:6c:8d:f1:04:c7:2d:11:07: 9c:10:1b:53:67:e6:87:a6:3a:f0:2d:7b:fa:07:5f: ff:12:0c:26:8b:af:41:37:3a:6b:1f:bf:2e:a3:49: 58:66:02:0e:b0:a2:2e:ec:5d:a3:f0:cd:ed:7c:41: 70:62:77:e4:42:00:23:3d:99:fc:83:28:40:ab:a9: 7b:17:00:4a:01:cf:45:7d:0d:73:d8:6c:3a:42:54: d3:13:a2:f2:74:be:dd:8c:a2:e3:45:ea:d7:49:a0: f2:8e:b7:37:48:fd:f8:47:6d:24:5e:b0:d3:c1:e3: 14:40:b5:2b:d0:f9:88:c7:6a:d9:8c:66:99:d1:44: e3:87:47:79:23:dd:98:f2:33:b0:dc:30:cb:c3:8c: 96:00:aa:33:7f:25:32:80:7f:52:2b:ae:e6:85:a5: be:99:51:16:e1:1b:5c:aa:91:2b:01:38:40:c3:df: 80:19:04:e1:dd:63:f3:ef:58:69:24:60:8a:81:06: 5d:67:d1:5c:a8:c6:86:3e:dc:27:af:9f:0d:a0:f1: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:55:7B:FB:D7:FC:77:29:C6:F5:43:72:56:76:C7:63:96:95:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8000::/39 Signature Algorithm: sha256WithRSAEncryption a9:d8:82:6f:9a:c6:03:2c:79:2a:50:ad:61:e8:92:71:41:0b: 3b:fb:38:0b:a3:23:8e:fb:4a:4b:5b:4d:95:af:92:d1:f2:84: 62:86:bc:ce:ab:24:56:d3:27:c8:70:30:b7:2f:e6:0b:76:94: 0e:43:2e:14:64:b8:62:0b:fa:10:9a:02:a4:c9:2a:ee:d1:63: 48:fe:a2:db:97:3a:b9:cb:b8:91:7d:ef:39:ac:02:d4:30:27: ca:1e:f7:74:55:da:62:7f:03:05:92:21:b5:03:26:68:e1:59: 60:af:d8:6a:b9:b0:89:1e:05:38:2f:e9:27:b1:bb:cd:d1:5c: 86:fe:c4:b5:3e:87:cc:29:45:8c:44:d2:61:4a:f9:ae:e5:34: 93:f8:a5:51:c4:c1:80:e5:06:f5:1b:1f:a0:c5:48:87:90:2f: 51:b1:c2:ba:8d:6b:78:5c:89:6f:aa:b6:24:3b:a0:24:87:e9: 12:87:65:c3:27:e8:52:1d:bc:8b:d3:7e:cd:15:5a:6b:97:9e: be:12:bf:7b:e6:7d:4e:a1:87:f8:92:49:a0:28:5e:ed:33:a1: 10:b0:ad:94:4f:f0:73:a0:88:94:4d:ce:57:3b:e0:af:46:8e: 62:12:a1:7d:3e:33:37:e7:5b:07:ad:de:fe:b1:1f:eb:b5:ff: f0:ed:d6:8a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQL1cj/uXEUqRv1PEBnLOfrezuQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEzMDQ3WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTc1NzAyNDY3ODNjYzYzZmE0N2QxYWIxNGYxNGE4OGU5 Yjc4YmE0YTIxYTIzNWQ0MTI5YTFlNjNjMDQ1NmFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn4kLnbXB1nBV1tdy6QB4eYx38JgUApJyxvyDM/U8ZJXqN SrsllukyOCQGYf7I3C773MdsjfEExy0RB5wQG1Nn5oemOvAte/oHX/8SDCaLr0E3 Omsfvy6jSVhmAg6woi7sXaPwze18QXBid+RCACM9mfyDKECrqXsXAEoBz0V9DXPY bDpCVNMTovJ0vt2MouNF6tdJoPKOtzdI/fhHbSResNPB4xRAtSvQ+YjHatmMZpnR ROOHR3kj3ZjyM7DcMMvDjJYAqjN/JTKAf1IrruaFpb6ZURbhG1yqkSsBOEDD34AZ BOHdY/PvWGkkYIqBBl1n0VyoxoY+3Cevnw2g8RSNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4KFVe/vX/HcpxvVDclZ2x2OWldcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2ZGFjYTg3LTQ4YzUtNGE3NS04ZGE2LWZiODEwOTRlOTg1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/3gDANBgkqhkiG9w0BAQsFAAOCAQEAqdiCb5rGAyx5KlCtYeiScUEL O/s4C6MjjvtKS1tNla+S0fKEYoa8zqskVtMnyHAwty/mC3aUDkMuFGS4Ygv6EJoC pMkq7tFjSP6i25c6ucu4kX3vOawC1DAnyh73dFXaYn8DBZIhtQMmaOFZYK/Yarmw iR4FOC/pJ7G7zdFchv7EtT6HzClFjETSYUr5ruU0k/ilUcTBgOUG9RsfoMVIh5Av UbHCuo1reFyJb6q2JDugJIfpEodlwyfoUh28i9N+zRVaa5eevhK/e+Z9TqGH+JJJ oChe7TOhELCtlE/wc6CIlE3OVzvgr0aOYhKhfT4zN+dbB63e/rEf67X/8O3Wig== -----END CERTIFICATE-----Generated at Sat Dec 6 15:15:05 2025 by rpki-client