This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa File: dacd7120-216c-4fe9-b36c-04025c1e0df5.roa (raw, json) Hash identifier: ThGm9C9dqkLZOEIhp3AuSa9b+oxbiK7Zsd4QkFqe+dQ= Subject key identifier: 15:BD:41:10:93:1A:2F:D3:60:75:DF:D1:98:D5:32:B4:B8:E3:6B:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52E437FEB3AB27CF7CA05BFC1447D2B355A50EE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa Signing time: Tue 25 Nov 2025 01:21:18 +0000 ROA not before: Tue 25 Nov 2025 01:21:18 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:ec00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e4:37:fe:b3:ab:27:cf:7c:a0:5b:fc:14:47:d2:b3:55:a5:0e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 01:21:18 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=863286eb6483890cbf94817b70b82c2f010687e7e59ce727344833f0b6e73c8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:a2:7e:89:cc:2c:e0:8c:9c:ba:59:57:df: 60:e9:5b:a3:5e:5e:5a:42:93:9c:0e:c1:3e:12:64: 76:fd:a0:38:87:58:0a:c2:a5:ea:28:0d:ab:a5:a3: d3:21:16:7d:80:d4:77:25:77:f2:97:08:89:2f:71: 39:05:81:b2:37:3e:da:86:aa:95:0a:ef:31:04:c5: c2:9c:41:97:c7:ca:e3:85:89:f4:cc:7f:d9:47:a0: db:13:d2:f3:70:8f:0f:81:d3:08:28:83:2b:c2:6d: d8:29:a5:f0:3e:20:37:fe:7e:dd:87:89:ac:08:52: 14:31:d5:e4:8f:ff:bf:20:e1:90:87:4c:07:2e:c4: a8:21:07:b6:08:27:f4:a8:ac:25:03:2d:41:87:ac: b7:61:86:76:00:57:b7:4a:65:20:7f:3f:b5:09:44: 1e:00:9b:ea:98:60:6a:0f:4e:b7:90:c0:ef:b6:b0: 5d:af:3b:0f:f5:a4:2e:8d:aa:9c:77:ce:1d:fb:1e: a0:d4:c2:42:89:f1:a8:c3:03:ed:4d:c6:91:cb:00: e8:76:5b:db:5b:61:b1:b0:89:7b:2b:35:5a:df:0c: d8:fc:f1:53:d9:2d:07:5d:8e:e8:71:e6:d1:e2:a9: 2b:da:c8:c6:9d:a8:04:8c:b9:7a:ba:a5:bd:13:19: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:41:10:93:1A:2F:D3:60:75:DF:D1:98:D5:32:B4:B8:E3:6B:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 7e:47:35:c4:6f:f6:64:81:ca:29:a5:b5:70:c9:e1:92:3e:04: 3b:00:53:26:c9:a4:44:29:26:11:0c:ae:f0:ed:95:a8:7d:23: 94:ae:f7:05:51:0c:d3:b6:e2:90:8d:4a:21:67:55:c4:0c:4b: 9b:0e:75:15:c2:e0:f9:67:b7:34:e8:07:7c:d1:52:34:8a:31: 45:24:0a:8a:08:ef:2a:2e:61:28:bd:e4:49:22:fd:0d:9d:ff: 99:6b:fc:92:f1:a9:e9:a4:04:70:fc:11:ff:cc:1a:c6:7e:6d: 35:63:61:58:9b:eb:a1:58:eb:0d:98:28:1d:16:3f:79:17:d9: 96:ca:d3:38:be:a3:fc:63:4c:2e:5e:b6:a2:dd:b5:5b:20:a7: 2c:16:46:aa:ee:b5:4d:06:2b:f5:77:c5:70:f6:01:5c:50:00: 96:b5:8a:c6:49:30:45:4e:18:63:16:d3:1c:47:83:dc:8b:1e: 17:fa:3e:3d:80:7f:db:30:20:11:99:eb:fc:18:dc:33:31:9f: 21:25:5d:32:3b:42:0f:67:80:0c:8c:d5:11:36:18:b0:fd:0f: 7c:94:68:8e:e4:c5:a9:8f:31:77:d1:7c:75:7d:55:14:91:ba: b6:2c:ca:69:39:bd:8b:6e:61:21:d1:9e:d3:f5:22:b8:81:ca: d0:90:9f:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUuQ3/rOrJ898oFv8FEfSs1WlDuQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDEyMTE4WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjMyODZlYjY0ODM4OTBjYmY5NDgxN2I3MGI4MmMyZjAx MDY4N2U3ZTU5Y2U3MjczNDQ4MzNmMGI2ZTczYzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaq6J+icws4IycullX32DpW6NeXlpCk5wOwT4SZHb9oDiH WArCpeooDaulo9MhFn2A1Hcld/KXCIkvcTkFgbI3PtqGqpUK7zEExcKcQZfHyuOF ifTMf9lHoNsT0vNwjw+B0wgogyvCbdgppfA+IDf+ft2HiawIUhQx1eSP/78g4ZCH TAcuxKghB7YIJ/SorCUDLUGHrLdhhnYAV7dKZSB/P7UJRB4Am+qYYGoPTreQwO+2 sF2vOw/1pC6Nqpx3zh37HqDUwkKJ8ajDA+1NxpHLAOh2W9tbYbGwiXsrNVrfDNj8 8VPZLQddjuhx5tHiqSvayMadqASMuXq6pb0TGUfBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFb1BEJMaL9Ngdd/RmNUytLjjaxswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhY2Q3MTIwLTIxNmMtNGZlOS1iMzZjLTA0MDI1YzFlMGRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/47DANBgkqhkiG9w0BAQsFAAOCAQEAfkc1xG/2ZIHKKaW1cMnhkj4E OwBTJsmkRCkmEQyu8O2VqH0jlK73BVEM07bikI1KIWdVxAxLmw51FcLg+We3NOgH fNFSNIoxRSQKigjvKi5hKL3kSSL9DZ3/mWv8kvGp6aQEcPwR/8waxn5tNWNhWJvr oVjrDZgoHRY/eRfZlsrTOL6j/GNMLl62ot21WyCnLBZGqu61TQYr9XfFcPYBXFAA lrWKxkkwRU4YYxbTHEeD3IseF/o+PYB/2zAgEZnr/BjcMzGfISVdMjtCD2eADIzV ETYYsP0PfJRojuTFqY8xd9F8dX1VFJG6tizKaTm9i25hIdGe0/UiuIHK0JCfdw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:28 2025 by rpki-client