This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa File: 1660d601-ea01-4749-afce-d123fc5f0dd7.roa (raw, json) Hash identifier: yHHoFxBIO7iiBqoyYTCouWIeqGcZ7S6GVCWu4FE9Maw= Subject key identifier: AE:2F:E0:85:06:4B:B3:20:10:A3:F2:B9:FC:9B:7F:F3:A7:08:24:52 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 69484C355F1F48ABE9E89A9FA4707D4035E52518 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa Signing time: Tue 18 Nov 2025 00:30:11 +0000 ROA not before: Tue 18 Nov 2025 00:30:11 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2606:8140:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:48:4c:35:5f:1f:48:ab:e9:e8:9a:9f:a4:70:7d:40:35:e5:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 18 00:30:11 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=a4929fcb9fc60cccfc1404d2f503b525481a04c161c44e5e197a46b7ef8082b1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:17:51:80:8c:48:b1:8e:b7:c4:18:af:b5: 1a:44:27:8f:95:4c:1c:e8:c9:91:72:6a:bd:6f:67: 01:d1:02:b1:e0:da:79:11:8d:01:f9:b8:3a:1a:a1: f0:11:bf:24:0a:3e:95:33:5b:ff:a6:c6:81:39:1c: b4:4f:9a:1c:50:89:50:85:e4:59:57:4b:0b:3d:91: 0a:01:9d:3c:ce:81:c1:c9:cf:a5:70:b1:5b:b4:fd: 93:a8:a0:2c:c7:91:c3:db:1f:3b:4c:98:36:79:89: 06:b1:dd:98:e5:fa:c8:c9:7f:9e:9b:00:14:88:3c: 09:c6:8d:7e:f2:ec:b2:73:57:a1:8a:23:03:e7:2e: e7:d1:2a:5c:b9:0f:b7:5c:15:66:17:4f:07:6e:da: d4:ad:66:68:d6:41:de:b8:42:c0:44:3d:5c:eb:37: ee:f1:f3:09:fd:1e:65:4a:6c:d8:85:ea:46:77:a3: 87:0c:f9:cb:69:2a:db:56:f4:e1:d5:71:29:aa:6d: 6e:1e:8d:bf:aa:06:2f:a7:4b:1f:83:23:e5:99:5e: 12:4b:c3:f0:e2:45:b6:7f:d8:d9:8c:9e:4a:a1:73: cd:da:aa:b2:f5:51:22:d4:f3:b4:29:22:7c:46:44: f8:85:83:e3:8d:6d:6d:71:f9:37:46:cc:09:3d:07: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:E0:85:06:4B:B3:20:10:A3:F2:B9:FC:9B:7F:F3:A7:08:24:52 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:200::/40 Signature Algorithm: sha256WithRSAEncryption 97:e2:06:0d:5d:d0:4b:8f:b5:ca:9c:16:1a:cf:dd:2e:6c:3c: 7c:88:32:c8:05:e0:e5:bb:bd:56:d0:5e:f8:c5:11:bf:98:95: 51:84:9c:25:91:c9:a5:44:e6:3b:0c:65:97:47:1e:8b:85:3f: 4c:0f:ad:fe:69:9c:b8:40:07:35:dc:14:49:5a:2a:58:79:10: 8a:ae:96:af:8e:71:0f:e2:66:9c:00:ab:02:19:db:40:eb:46: b9:38:d2:ea:52:d0:5c:c4:11:57:44:18:bc:f4:f0:0d:19:5c: 04:4d:54:c1:17:2a:05:10:75:f2:bc:56:aa:a8:ee:10:55:bb: 10:6a:11:b8:aa:15:09:b4:81:7b:f0:8a:52:cb:bc:87:60:56: fd:36:f5:7d:31:11:ab:85:34:1b:1c:ab:70:ee:e4:d8:f6:ab: 33:27:34:bd:d6:84:78:24:a9:17:92:c0:ad:fc:63:c1:2b:10: c9:8a:dd:bb:89:0e:cb:8a:ab:98:b4:82:c5:99:56:3c:f9:2d: 98:f2:64:4b:c1:c0:fc:e6:9d:d2:a5:d6:93:d1:09:96:0d:0c: fc:e2:03:59:81:e5:02:50:46:84:d8:b1:27:99:1a:69:e0:8f: fe:5c:3c:06:8b:ab:1d:e4:15:a6:dd:78:e1:f7:af:24:95:e8: cc:fd:0b:d5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaUhMNV8fSKvp6JqfpHB9QDXlJRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE4MDAzMDExWhcNMjYwMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDkyOWZjYjlmYzYwY2NjZmMxNDA0ZDJmNTAzYjUyNTQ4 MWEwNGMxNjFjNDRlNWUxOTdhNDZiN2VmODA4MmIxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwbRdRgIxIsY63xBivtRpEJ4+VTBzoyZFyar1vZwHRArHg 2nkRjQH5uDoaofARvyQKPpUzW/+mxoE5HLRPmhxQiVCF5FlXSws9kQoBnTzOgcHJ z6VwsVu0/ZOooCzHkcPbHztMmDZ5iQax3Zjl+sjJf56bABSIPAnGjX7y7LJzV6GK IwPnLufRKly5D7dcFWYXTwdu2tStZmjWQd64QsBEPVzrN+7x8wn9HmVKbNiF6kZ3 o4cM+ctpKttW9OHVcSmqbW4ejb+qBi+nSx+DI+WZXhJLw/DiRbZ/2NmMnkqhc83a qrL1USLU87QpInxGRPiFg+ONbW1x+TdGzAk9ByD3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUri/ghQZLsyAQo/K5/Jt/86cIJFIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzE2NjBkNjAxLWVhMDEtNDc0OS1hZmNlLWQxMjNmYzVmMGRkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFAAjANBgkqhkiG9w0BAQsFAAOCAQEAl+IGDV3QS4+1ypwWGs/dLmw8 fIgyyAXg5bu9VtBe+MURv5iVUYScJZHJpUTmOwxll0cei4U/TA+t/mmcuEAHNdwU SVoqWHkQiq6Wr45xD+JmnACrAhnbQOtGuTjS6lLQXMQRV0QYvPTwDRlcBE1UwRcq BRB18rxWqqjuEFW7EGoRuKoVCbSBe/CKUsu8h2BW/Tb1fTERq4U0GxyrcO7k2Par Myc0vdaEeCSpF5LArfxjwSsQyYrdu4kOy4qrmLSCxZlWPPktmPJkS8HA/Oad0qXW k9EJlg0M/OIDWYHlAlBGhNixJ5kaaeCP/lw8BourHeQVpt144fevJJXozP0L1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:05 2025 by rpki-client