This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e483227a-dad7-4171-8c9e-a348aabcb8dc.roa File: e483227a-dad7-4171-8c9e-a348aabcb8dc.roa (raw, json) Hash identifier: 5/IZjntbfpgJQZ1pIHLSqfuA7l1KXK5vozFTSnLsYJY= Subject key identifier: 91:15:6E:77:13:99:AB:74:64:F6:48:5F:3C:58:83:B7:03:78:FB:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39F0DEEC225A50DBDDA7C88D3051A3F3CF210800 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e483227a-dad7-4171-8c9e-a348aabcb8dc.roa Signing time: Sun 23 Nov 2025 01:11:05 +0000 ROA not before: Sun 23 Nov 2025 01:11:05 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f0:de:ec:22:5a:50:db:dd:a7:c8:8d:30:51:a3:f3:cf:21:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 01:11:05 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=339c63996c3fe53b8809226bd311b0f92f9ce8d3da5c82600747f362ac64481d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:e3:6b:d6:80:b9:12:83:cb:24:b7:d7:06: 14:65:f3:dd:7a:23:7e:18:c2:80:a3:39:59:b0:ff: 4d:06:95:f5:5b:1f:f4:12:80:89:90:56:e6:2d:2b: 68:32:1b:81:2d:14:c5:ec:ee:b2:36:39:3c:23:f8: 21:3d:81:2a:fe:87:47:80:d1:b5:72:3d:0e:88:16: b6:f3:20:f0:f6:bc:2c:90:fd:2f:58:67:60:ad:c5: 0e:64:37:eb:cc:81:bb:db:9f:99:81:5b:31:1a:ea: 58:41:17:3a:0d:55:d0:af:a7:05:62:23:f7:99:35: 3a:ce:04:aa:16:ab:fe:f3:03:f8:39:d1:69:54:c6: c6:02:8a:21:7d:d5:4d:e6:95:81:90:13:f7:a0:88: 64:ae:6f:2e:a0:9d:1d:8d:84:ad:21:a2:07:2f:c8: f6:01:53:25:25:d9:16:76:11:6d:a5:2c:0a:ac:ae: 34:3e:40:e9:b5:1a:9c:d5:8e:d3:96:60:e2:6a:ae: 82:e5:f2:0b:be:b7:c2:e0:67:ee:c1:8a:56:5e:c5: ff:6c:06:2e:41:97:2d:1c:a5:07:e5:ca:f5:6c:0a: da:21:65:10:54:a2:99:ac:dd:42:64:16:d6:49:2a: b1:e7:39:77:31:97:83:95:24:0b:7b:92:ca:33:80: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:15:6E:77:13:99:AB:74:64:F6:48:5F:3C:58:83:B7:03:78:FB:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e483227a-dad7-4171-8c9e-a348aabcb8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:8010::/48 Signature Algorithm: sha256WithRSAEncryption 14:dd:cd:23:1b:ca:91:4e:33:cf:e2:f7:d2:ed:e2:da:62:6e: ca:82:8c:45:19:c6:ba:cb:c9:f0:a7:17:a4:08:80:1b:37:30: d5:2b:03:e0:69:5f:74:f2:3b:9e:d9:77:55:6b:96:ae:3b:f1: 9a:a3:9b:20:0f:56:4b:80:86:a3:70:c3:09:8d:4b:2b:81:d7: ec:90:89:f7:27:79:fc:2b:e9:d2:44:b3:41:cf:49:62:4a:74: 2b:76:e3:65:cb:c4:3e:a5:26:46:76:e1:03:72:fa:f3:1c:96: f8:fb:b3:ba:4f:71:88:86:fa:30:9a:3c:df:81:02:17:f5:51: 4a:ef:7c:7e:c9:bf:e2:c9:e5:74:bc:c0:20:16:17:c8:3f:5f: fd:e3:e0:82:77:1e:41:97:1c:ef:5b:fd:9b:0e:39:0f:ab:b7: d1:a5:36:f2:40:4b:b0:20:23:b2:01:7d:5c:53:d0:72:61:7e: 3d:26:8b:6c:0a:f1:5b:f6:c2:cc:cf:41:10:34:ba:a9:5e:c6: c5:71:f0:d6:90:4e:0d:a5:c6:12:c1:df:bb:09:16:8d:d9:1b: 28:c2:cb:9f:af:9a:80:75:84:4c:1a:b2:bb:01:d2:0b:51:a5: 25:48:b5:80:a8:6e:7f:90:35:e1:2d:9f:9a:89:ac:55:0f:c8: ac:a0:5d:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOfDe7CJaUNvdp8iNMFGj888hCAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDExMTA1WhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzljNjM5OTZjM2ZlNTNiODgwOTIyNmJkMzExYjBmOTJm OWNlOGQzZGE1YzgyNjAwNzQ3ZjM2MmFjNjQ0ODFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy6eNr1oC5EoPLJLfXBhRl8916I34YwoCjOVmw/00GlfVb H/QSgImQVuYtK2gyG4EtFMXs7rI2OTwj+CE9gSr+h0eA0bVyPQ6IFrbzIPD2vCyQ /S9YZ2CtxQ5kN+vMgbvbn5mBWzEa6lhBFzoNVdCvpwViI/eZNTrOBKoWq/7zA/g5 0WlUxsYCiiF91U3mlYGQE/egiGSuby6gnR2NhK0hogcvyPYBUyUl2RZ2EW2lLAqs rjQ+QOm1GpzVjtOWYOJqroLl8gu+t8LgZ+7BilZexf9sBi5Bly0cpQflyvVsCtoh ZRBUopms3UJkFtZJKrHnOXcxl4OVJAt7ksozgDVzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkRVudxOZq3Rk9khfPFiDtwN4+0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0ODMyMjdhLWRhZDctNDE3MS04YzllLWEzNDhhYWJjYjhkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qgBAwDQYJKoZIhvcNAQELBQADggEBABTdzSMbypFOM8/i99Lt4tpi bsqCjEUZxrrLyfCnF6QIgBs3MNUrA+BpX3TyO57Zd1Vrlq478ZqjmyAPVkuAhqNw wwmNSyuB1+yQifcnefwr6dJEs0HPSWJKdCt242XLxD6lJkZ24QNy+vMclvj7s7pP cYiG+jCaPN+BAhf1UUrvfH7Jv+LJ5XS8wCAWF8g/X/3j4IJ3HkGXHO9b/ZsOOQ+r t9GlNvJAS7AgI7IBfVxT0HJhfj0mi2wK8Vv2wszPQRA0uqlexsVx8NaQTg2lxhLB 37sJFo3ZGyjCy5+vmoB1hEwasrsB0gtRpSVItYCobn+QNeEtn5qJrFUPyKygXQk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:59 2025 by rpki-client