This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa File: fa0cdf03-f696-40a7-847d-f9de13932c95.roa (raw, json) Hash identifier: ktpaM2xqn44nK7JcwtU9bj6dTvKj1bSeMkGQ30MIh5o= Subject key identifier: 33:0E:DD:8B:4D:53:4E:87:9E:98:F6:54:3C:F3:C5:57:91:6A:56:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BD0E966B1BC1A1B0B26449C1139DC0157634BEB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa Signing time: Sat 06 Dec 2025 00:31:27 +0000 ROA not before: Sat 06 Dec 2025 00:31:27 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d0:e9:66:b1:bc:1a:1b:0b:26:44:9c:11:39:dc:01:57:63:4b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:31:27 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=3e25f2fd67277ae79a90b5e8f6699ebfdfbb6e2352ad8ae373f8d84d27ca7cfd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:1f:48:a8:c5:bf:f5:5c:cc:1b:f7:91:e5: 07:88:bf:02:03:fe:9a:6e:88:07:57:04:c8:43:02: 3f:84:70:8f:af:88:07:e5:d9:24:72:54:88:ee:4e: 53:b5:7c:06:50:65:44:a2:e4:e4:f5:07:06:8c:66: a4:a9:cd:21:bc:aa:3c:80:11:62:48:a5:fe:bc:a5: 24:2c:df:72:a0:72:7f:00:b7:03:e8:81:4f:6d:77: 84:af:1e:c2:41:61:39:ed:2f:71:33:2e:85:c5:d1: 22:ee:bb:1f:e2:e2:a4:72:1b:e3:cc:b3:d9:93:ab: 51:25:bc:0f:41:ac:29:b8:ae:0b:4e:e4:8f:bb:f8: bd:57:6e:cb:59:0b:67:c7:a9:06:b6:42:dd:fc:5b: bd:d0:46:69:73:f5:86:e6:e6:25:c8:fd:0c:3b:77: 5c:ba:46:14:33:92:7e:86:9b:cd:88:ac:e5:53:32: 22:5e:5b:76:45:78:12:a1:43:21:c7:2b:20:ad:03: 16:c6:2e:24:ad:f1:81:ec:b2:de:44:3a:68:6c:93: c6:c0:18:d7:92:9e:52:51:b0:a5:2a:ac:be:9c:4b: 24:02:03:1e:66:ce:cf:32:fb:89:18:b2:f0:7f:35: 88:5d:e6:72:5a:6d:c7:6d:1c:05:f2:c9:57:49:75: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0E:DD:8B:4D:53:4E:87:9E:98:F6:54:3C:F3:C5:57:91:6A:56:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8120::/48 Signature Algorithm: sha256WithRSAEncryption 26:c1:49:ac:9e:74:01:1d:c8:f9:f8:98:17:c8:b4:56:90:9c: a9:7b:63:58:dc:19:21:ec:36:df:36:b2:8e:91:c4:ae:5a:a4: 36:43:2f:7c:4b:d5:b5:92:fa:1c:76:38:01:3e:23:84:3c:9b: a6:d9:fd:c0:b9:37:9b:63:b3:ca:b8:59:eb:e7:a2:12:bc:6f: 35:3e:5b:d9:56:88:eb:1d:29:2b:8e:2e:78:4b:25:43:37:8f: 9b:ac:f4:78:ff:11:40:01:36:3f:44:91:9a:21:73:4e:0d:05: 78:20:6a:51:be:c2:5f:bd:0e:05:4e:bc:28:ba:c6:aa:28:60: d3:d7:a0:11:ca:c5:7c:a2:37:d0:41:4d:96:eb:e7:aa:60:04: ff:ca:5a:82:b7:20:01:cf:a7:b6:c6:d4:e1:a1:ae:26:35:b1: 5f:b2:cf:56:b6:9f:54:b6:bf:8a:1a:17:f4:d3:4c:59:28:42: f3:62:a8:34:83:f7:af:ec:bb:a2:c3:d8:f3:61:4e:a7:90:d2: 5f:05:67:00:12:89:4c:15:7a:95:00:0c:ec:85:b9:e1:3d:19: 62:f9:46:25:3b:24:31:fd:71:4f:5b:a1:7b:bb:ae:e1:b6:48: 8d:8c:17:aa:b9:29:1b:62:cb:35:a7:d9:10:c0:d0:da:8b:6b: 60:76:4b:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe9DpZrG8GhsLJkScETncAVdjS+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDAzMTI3WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTI1ZjJmZDY3Mjc3YWU3OWE5MGI1ZThmNjY5OWViZmRm YmI2ZTIzNTJhZDhhZTM3M2Y4ZDg0ZDI3Y2E3Y2ZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjRR9IqMW/9VzMG/eR5QeIvwID/ppuiAdXBMhDAj+EcI+v iAfl2SRyVIjuTlO1fAZQZUSi5OT1BwaMZqSpzSG8qjyAEWJIpf68pSQs33Kgcn8A twPogU9td4SvHsJBYTntL3EzLoXF0SLuux/i4qRyG+PMs9mTq1ElvA9BrCm4rgtO 5I+7+L1XbstZC2fHqQa2Qt38W73QRmlz9Ybm5iXI/Qw7d1y6RhQzkn6Gm82IrOVT MiJeW3ZFeBKhQyHHKyCtAxbGLiSt8YHsst5EOmhsk8bAGNeSnlJRsKUqrL6cSyQC Ax5mzs8y+4kYsvB/NYhd5nJabcdtHAXyyVdJdQYZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMw7di01TToeemPZUPPPFV5FqVogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhMGNkZjAzLWY2OTYtNDBhNy04NDdkLWY5ZGUxMzkzMmM5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gSAwDQYJKoZIhvcNAQELBQADggEBACbBSayedAEdyPn4mBfItFaQ nKl7Y1jcGSHsNt82so6RxK5apDZDL3xL1bWS+hx2OAE+I4Q8m6bZ/cC5N5tjs8q4 WevnohK8bzU+W9lWiOsdKSuOLnhLJUM3j5us9Hj/EUABNj9EkZohc04NBXggalG+ wl+9DgVOvCi6xqooYNPXoBHKxXyiN9BBTZbr56pgBP/KWoK3IAHPp7bG1OGhriY1 sV+yz1a2n1S2v4oaF/TTTFkoQvNiqDSD96/su6LD2PNhTqeQ0l8FZwASiUwVepUA DOyFueE9GWL5RiU7JDH9cU9boXu7ruG2SI2MF6q5KRtiyzWn2RDA0NqLa2B2S6w= -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:19 2025 by rpki-client