This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a20ddd-dd3f-4259-b041-244eaf7ffe03.roa File: d8a20ddd-dd3f-4259-b041-244eaf7ffe03.roa (raw, json) Hash identifier: gvn5+su1eBR2hyIRGJmS7roSoxUPud+t0hrtyobJAE0= Subject key identifier: B7:57:2C:71:0B:6A:F4:16:02:FE:7B:79:E7:5E:AE:CF:5D:55:AF:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 045A3B3FCC44D0FFD256DFDA95118600391A51FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a20ddd-dd3f-4259-b041-244eaf7ffe03.roa Signing time: Sat 06 Dec 2025 01:41:15 +0000 ROA not before: Sat 06 Dec 2025 01:41:15 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5a:3b:3f:cc:44:d0:ff:d2:56:df:da:95:11:86:00:39:1a:51:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:41:15 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=3a5c93dbcbddc5603bb59d6f6f657250b2cf93be709c620ab8e1f4bc4fc67510, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f6:ff:9e:7a:30:b3:a3:59:a8:12:80:12:6e: ad:56:9a:79:0d:ed:d5:ac:ba:0f:2b:26:d7:1e:32: 99:e8:1e:43:09:70:fe:d5:57:40:89:d3:65:63:e2: 43:28:67:f4:5a:d4:f7:33:03:54:d1:cc:be:25:0d: 75:21:0a:bf:bf:2b:24:dc:da:fc:a2:05:87:bb:78: db:25:ed:38:b6:22:8a:11:c8:e1:90:6f:58:a8:4b: c7:9d:3f:04:79:98:c6:82:d6:3e:e1:8f:d1:ca:b9: 4e:b7:f1:78:f3:fe:bb:c7:6d:76:0b:bd:cc:80:1d: 08:20:d5:a7:08:47:14:8b:6a:a8:55:8d:23:63:92: d5:c8:03:9f:97:33:08:65:86:2d:16:30:67:e3:24: c4:0d:d1:60:e5:c9:c8:ce:35:fc:61:fa:e4:a9:79: 1e:8a:1c:14:4c:68:50:8b:18:35:d5:39:c3:30:ec: 19:3c:47:1b:1b:fb:00:b1:c1:29:84:d6:be:3d:e1: 46:a6:43:9e:ba:de:1a:27:d1:46:f2:87:43:14:2a: 3a:74:b2:93:a1:35:78:6d:f1:c3:bc:73:6c:6f:f5: a3:bf:d2:62:f1:86:da:5d:77:e8:50:50:12:3d:58: dd:45:8f:a0:07:6a:69:9e:e6:c3:ab:c7:00:3c:54: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:57:2C:71:0B:6A:F4:16:02:FE:7B:79:E7:5E:AE:CF:5D:55:AF:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a20ddd-dd3f-4259-b041-244eaf7ffe03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5000::/40 Signature Algorithm: sha256WithRSAEncryption 44:4b:85:4e:80:f2:78:da:b9:f0:27:de:aa:02:95:ea:5f:9b: e3:1c:84:9d:39:2c:99:b6:71:0c:bb:03:2d:a9:56:07:0c:73: 6e:5e:22:f1:07:89:31:26:af:21:72:f1:7d:78:8d:7b:31:e5: c4:ae:b4:97:92:10:7d:48:05:1e:10:0a:bf:35:f8:d5:fd:c5: 9f:09:ad:3c:d3:54:c1:8a:11:be:c2:e5:21:15:78:2e:c7:a5: 36:75:a3:c0:b1:f8:3c:6b:96:3f:dd:d0:d8:93:38:78:0e:3d: f0:bf:2e:f3:95:17:e5:60:c6:ec:c6:cb:c4:3a:be:4e:5d:fd: 7d:a2:a4:ca:0c:47:d7:ad:1f:cd:57:16:75:cd:2d:63:cf:d0: ce:20:ff:f7:4c:8d:25:10:c5:0d:6d:f5:e8:e0:45:08:c1:1e: 7f:b3:39:a7:d0:a2:01:d9:cf:1e:1a:63:10:42:5f:1a:03:94: 55:e7:9f:1b:fd:36:67:c4:1b:11:69:27:38:84:38:c2:c3:f3: 06:57:9b:4a:0f:84:2c:93:c3:ea:63:52:a4:b9:d4:32:63:0d: 98:ee:8a:8e:8e:a4:02:24:34:b9:2b:db:c5:be:d4:96:45:8d: 93:08:11:46:00:90:d8:a3:29:f7:55:f6:9c:b7:67:4f:5e:25: 42:4f:ec:e2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBFo7P8xE0P/SVt/alRGGADkaUfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDE0MTE1WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTVjOTNkYmNiZGRjNTYwM2JiNTlkNmY2ZjY1NzI1MGIy Y2Y5M2JlNzA5YzYyMGFiOGUxZjRiYzRmYzY3NTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq9v+eejCzo1moEoASbq1WmnkN7dWsug8rJtceMpnoHkMJ cP7VV0CJ02Vj4kMoZ/Ra1PczA1TRzL4lDXUhCr+/KyTc2vyiBYe7eNsl7Ti2IooR yOGQb1ioS8edPwR5mMaC1j7hj9HKuU638Xjz/rvHbXYLvcyAHQgg1acIRxSLaqhV jSNjktXIA5+XMwhlhi0WMGfjJMQN0WDlycjONfxh+uSpeR6KHBRMaFCLGDXVOcMw 7Bk8Rxsb+wCxwSmE1r494UamQ5663hon0Ubyh0MUKjp0spOhNXht8cO8c2xv9aO/ 0mLxhtpdd+hQUBI9WN1Fj6AHamme5sOrxwA8VGx/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUt1cscQtq9BYC/nt5516uz11Vr4wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4YTIwZGRkLWRkM2YtNDI1OS1iMDQxLTI0NGVhZjdmZmUwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yUDANBgkqhkiG9w0BAQsFAAOCAQEAREuFToDyeNq58CfeqgKV6l+b 4xyEnTksmbZxDLsDLalWBwxzbl4i8QeJMSavIXLxfXiNezHlxK60l5IQfUgFHhAK vzX41f3FnwmtPNNUwYoRvsLlIRV4LselNnWjwLH4PGuWP93Q2JM4eA498L8u85UX 5WDG7MbLxDq+Tl39faKkygxH160fzVcWdc0tY8/QziD/90yNJRDFDW316OBFCMEe f7M5p9CiAdnPHhpjEEJfGgOUVeefG/02Z8QbEWknOIQ4wsPzBlebSg+ELJPD6mNS pLnUMmMNmO6Kjo6kAiQ0uSvbxb7UlkWNkwgRRgCQ2KMp91X2nLdnT14lQk/s4g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:57 2025 by rpki-client