This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa File: e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa (raw, json) Hash identifier: PTkTg4LGmWxtCG/8LMC7EZU9q8qQRh+Sb6iE4rxyo7g= Subject key identifier: B3:3B:89:89:D2:A5:59:83:A3:E5:B3:B4:43:81:A3:7A:60:45:47:81 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3342CD8ADADBE01BFA9AE9443EF36FBFD0873A9D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa Signing time: Tue 18 Nov 2025 00:30:10 +0000 ROA not before: Tue 18 Nov 2025 00:30:10 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:42:cd:8a:da:db:e0:1b:fa:9a:e9:44:3e:f3:6f:bf:d0:87:3a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 18 00:30:10 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=16bfde1a312e55038626b6b830b4a1220e4dbc42d0bf9ecbbb377f80da3dbb68, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:a1:6f:e2:7c:e7:0f:a7:c3:06:1b:17:d1: d3:bc:85:ff:6c:66:6a:a1:e9:d2:20:ed:6a:a9:8b: ca:9d:43:a6:b4:b1:2b:16:d7:4b:4f:40:a4:6b:44: 68:ea:df:fa:67:2e:c7:1d:3d:25:2d:84:5c:8b:71: 4b:80:5e:41:9a:6f:87:bd:32:99:c7:46:69:60:55: 72:42:f4:c0:5b:49:47:6a:b8:bb:d5:82:89:55:cd: 75:a4:f6:3d:01:c0:0b:6f:67:e8:3c:5b:45:6b:5b: 55:e8:27:ed:fe:58:e6:67:cd:28:76:f7:b9:b9:97: ba:92:d1:59:21:76:4c:d5:51:91:33:72:fc:68:39: 43:21:d5:59:48:81:b0:1a:10:4b:d8:e6:ad:63:4d: 6f:64:75:1c:e6:ce:c6:11:e5:26:e9:7b:13:b5:c3: b5:89:17:8c:ac:17:4c:15:7d:ad:bd:90:a1:94:00: 9e:33:84:a3:06:52:b9:79:36:b3:68:bb:af:f6:38: be:bb:31:d1:26:15:79:91:a2:f0:4b:11:05:4d:d0: fe:ad:c8:53:e0:47:2e:f5:5c:35:87:0c:5a:e3:01: 20:91:e7:f6:56:15:d0:0d:29:50:f9:6e:87:26:fd: 1c:10:46:90:80:09:c8:4b:15:d2:f8:3c:a3:7a:67: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:89:89:D2:A5:59:83:A3:E5:B3:B4:43:81:A3:7A:60:45:47:81 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:200::/40 Signature Algorithm: sha256WithRSAEncryption 0b:67:a8:8d:fd:d3:7e:92:f4:f5:5a:ac:1b:de:4f:7e:3d:92: dc:7b:b3:6f:a8:7e:4e:7a:fd:c0:b8:58:6f:59:79:3a:12:eb: 5d:17:64:c6:c5:55:17:6e:2b:30:a2:8e:a9:af:70:1f:a0:54: 56:9c:30:46:82:02:f3:1b:0e:d7:44:69:8c:9c:44:9b:0c:1e: f5:5f:9c:8a:ac:06:97:c9:a7:35:47:9e:ab:3d:28:6e:dc:f4: 79:34:40:54:27:cb:8e:ac:5a:51:5a:1b:bb:b0:af:c4:44:02: 91:aa:19:c8:9c:1a:c4:07:a3:db:5f:8f:3a:81:28:0d:0f:73: a0:98:c7:7d:16:71:b1:1e:f1:c2:0f:b2:b5:0f:13:8e:16:15: 73:02:47:89:cf:97:0d:8f:74:74:01:3b:27:36:7e:3c:2b:83: cc:ec:ac:63:23:cf:d3:54:26:e3:4a:07:6c:3e:ce:ba:7c:94: 40:96:03:bb:54:28:c2:14:85:98:24:f7:10:c6:2e:82:47:e3: 3b:e4:1b:86:12:80:dd:a3:05:36:67:b3:60:c9:c2:9a:d8:a0: 75:71:83:e9:27:e7:51:7e:97:7a:15:4a:89:d9:85:c9:33:6c: d6:72:19:40:5e:ee:b3:90:6e:ac:7b:57:d5:38:c5:71:fb:a7: 32:9b:ed:1c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUM0LNitrb4Bv6mulEPvNvv9CHOp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE4MDAzMDEwWhcNMjYwMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmJmZGUxYTMxMmU1NTAzODYyNmI2YjgzMGI0YTEyMjBl NGRiYzQyZDBiZjllY2JiYjM3N2Y4MGRhM2RiYjY4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC81aFv4nznD6fDBhsX0dO8hf9sZmqh6dIg7Wqpi8qdQ6a0 sSsW10tPQKRrRGjq3/pnLscdPSUthFyLcUuAXkGab4e9MpnHRmlgVXJC9MBbSUdq uLvVgolVzXWk9j0BwAtvZ+g8W0VrW1XoJ+3+WOZnzSh297m5l7qS0VkhdkzVUZEz cvxoOUMh1VlIgbAaEEvY5q1jTW9kdRzmzsYR5SbpexO1w7WJF4ysF0wVfa29kKGU AJ4zhKMGUrl5NrNou6/2OL67MdEmFXmRovBLEQVN0P6tyFPgRy71XDWHDFrjASCR 5/ZWFdANKVD5bocm/RwQRpCACchLFdL4PKN6Z/gbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUszuJidKlWYOj5bO0Q4GjemBFR4EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UzNThlN2YyLWM1MGYtNDIxMC05NmMzLTZkYTZhMGQyMjQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFAAjANBgkqhkiG9w0BAQsFAAOCAQEAC2eojf3TfpL09VqsG95Pfj2S 3Huzb6h+Tnr9wLhYb1l5OhLrXRdkxsVVF24rMKKOqa9wH6BUVpwwRoIC8xsO10Rp jJxEmwwe9V+ciqwGl8mnNUeeqz0obtz0eTRAVCfLjqxaUVobu7CvxEQCkaoZyJwa xAej21+POoEoDQ9zoJjHfRZxsR7xwg+ytQ8TjhYVcwJHic+XDY90dAE7JzZ+PCuD zOysYyPP01Qm40oHbD7OunyUQJYDu1QowhSFmCT3EMYugkfjO+QbhhKA3aMFNmez YMnCmtigdXGD6SfnUX6XehVKidmFyTNs1nIZQF7us5BurHtX1TjFcfunMpvtHA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:35 2025 by rpki-client