This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa File: ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa (raw, json) Hash identifier: ATfd2bwvggUqqRTy52Qpmj3fvRsATiO8zPX/9Qoiwbs= Subject key identifier: DA:F0:D0:9A:E0:D7:41:CC:4A:BA:24:09:0F:02:E9:23:30:52:B6:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FC9A4A92D9E35333FC59C325BF4E87B82AF6DEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa Signing time: Sat 06 Dec 2025 01:41:16 +0000 ROA not before: Sat 06 Dec 2025 01:41:16 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c9:a4:a9:2d:9e:35:33:3f:c5:9c:32:5b:f4:e8:7b:82:af:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 01:41:16 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=23b0ffe93c61aeb285828120be84973de7a7b8790405e2a6aa0dab4f4581ffbb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:0a:c3:c8:a9:a3:6b:e9:ef:bd:80:1d:4e: 0c:30:3b:8b:a3:be:32:77:f1:70:7f:dd:59:d4:f6: dc:b2:75:9a:1e:b1:b0:64:25:08:37:5b:7b:94:9a: f2:63:dc:ca:bf:30:6e:df:3b:85:74:05:c4:43:c6: 55:b6:09:40:a6:a6:91:37:9c:ab:80:9b:46:41:af: dc:73:59:5f:23:a3:03:e1:a0:58:ed:01:c1:2a:a1: 26:99:6e:aa:43:71:e3:fe:b7:1b:4c:ba:32:93:83: 75:46:9b:80:df:2f:cc:14:6a:2d:93:aa:09:0a:b6: c4:08:1e:c9:76:fb:12:70:eb:97:3d:3a:52:2f:46: 13:36:f0:2a:8a:4f:4e:1e:8c:02:5e:8e:14:41:c5: f1:91:e3:2a:d1:48:70:b4:84:71:df:ec:e7:23:ce: ff:ef:97:c5:67:74:22:83:1f:bb:49:1a:8b:ec:28: 38:01:b4:62:ba:da:41:41:3d:cf:16:4a:54:0b:54: c4:f6:01:a1:36:b9:15:10:d9:4e:f9:d2:03:8b:26: 32:80:74:f2:9b:bc:63:98:ca:9d:8d:dc:fe:12:4b: a0:e0:c1:63:8d:d4:9e:10:e2:d9:3e:97:6c:ac:d0: 9f:ce:9b:ce:c6:8f:4d:5f:25:cc:29:10:c9:4d:93: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F0:D0:9A:E0:D7:41:CC:4A:BA:24:09:0F:02:E9:23:30:52:B6:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5000::/40 Signature Algorithm: sha256WithRSAEncryption 42:2f:58:5c:8e:19:b1:df:cc:a0:5c:3d:37:2f:ad:7a:c0:73: b1:5d:63:ae:5a:83:93:3d:c1:76:06:ec:cf:07:a0:8d:b3:bb: 29:c7:c2:49:c5:1b:46:c0:7b:0d:36:ba:d8:5e:a0:ac:50:da: 39:94:a9:10:c1:da:77:c6:3b:36:a2:2d:c5:89:73:2f:52:73: 89:7d:c3:c6:df:93:d7:15:34:5f:6d:15:c2:4d:50:6f:a0:45: 8d:67:e6:ea:f9:db:18:55:f3:eb:76:0f:35:81:29:d7:47:4c: 1c:28:f5:2b:06:2a:3b:29:9e:d3:20:6b:04:42:5c:c8:fa:3e: 49:2f:2c:59:66:4c:27:91:36:35:63:1c:7e:9d:75:b9:27:01: 24:29:2b:80:5b:03:98:18:66:17:99:22:86:e8:7d:47:a7:80: 87:22:0c:36:84:2b:8f:df:70:73:ff:ca:4a:f8:59:3d:67:68: be:66:33:b9:06:7c:16:17:5a:4b:c3:08:c5:65:8d:e9:b1:36: 1e:88:e8:77:90:6b:2d:2c:a5:0a:98:bf:29:fe:29:45:ac:87: 16:86:a0:91:79:5d:bb:3c:01:e6:c4:b5:e5:51:b3:65:06:a4: 4d:db:b0:b3:21:d3:18:67:d2:2e:bb:60:3e:97:97:c4:0f:27: 4d:39:5a:a5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT8mkqS2eNTM/xZwyW/Toe4KvbewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDE0MTE2WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2IwZmZlOTNjNjFhZWIyODU4MjgxMjBiZTg0OTczZGU3 YTdiODc5MDQwNWUyYTZhYTBkYWI0ZjQ1ODFmZmJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC30QrDyKmja+nvvYAdTgwwO4ujvjJ38XB/3VnU9tyydZoe sbBkJQg3W3uUmvJj3Mq/MG7fO4V0BcRDxlW2CUCmppE3nKuAm0ZBr9xzWV8jowPh oFjtAcEqoSaZbqpDceP+txtMujKTg3VGm4DfL8wUai2TqgkKtsQIHsl2+xJw65c9 OlIvRhM28CqKT04ejAJejhRBxfGR4yrRSHC0hHHf7Ocjzv/vl8VndCKDH7tJGovs KDgBtGK62kFBPc8WSlQLVMT2AaE2uRUQ2U750gOLJjKAdPKbvGOYyp2N3P4SS6Dg wWON1J4Q4tk+l2ys0J/Om87Gj01fJcwpEMlNkypbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2vDQmuDXQcxKuiQJDwLpIzBStrkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjNzY4ZjU3LTVjYzQtNDRiNy1iN2YzLThkYTRhYzRlZjNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yUDANBgkqhkiG9w0BAQsFAAOCAQEAQi9YXI4Zsd/MoFw9Ny+tesBz sV1jrlqDkz3BdgbszwegjbO7KcfCScUbRsB7DTa62F6grFDaOZSpEMHad8Y7NqIt xYlzL1JziX3Dxt+T1xU0X20Vwk1Qb6BFjWfm6vnbGFXz63YPNYEp10dMHCj1KwYq Oyme0yBrBEJcyPo+SS8sWWZMJ5E2NWMcfp11uScBJCkrgFsDmBhmF5kihuh9R6eA hyIMNoQrj99wc//KSvhZPWdovmYzuQZ8FhdaS8MIxWWN6bE2Hojod5BrLSylCpi/ Kf4pRayHFoagkXlduzwB5sS15VGzZQakTduwsyHTGGfSLrtgPpeXxA8nTTlapQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:28 2025 by rpki-client