This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cbea954-9855-4d2b-8100-61d1800b75ba.roa File: 8cbea954-9855-4d2b-8100-61d1800b75ba.roa (raw, json) Hash identifier: wtCW41QV0GkH0kWULPkJ3uGIbMK4BqcmAg95YRSoi0M= Subject key identifier: F8:D7:83:51:0F:B4:FF:5D:05:E3:75:D0:DC:E1:31:18:A6:1F:45:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AFEB3574F3B992F7540FA2B52DC0649B5A61F52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cbea954-9855-4d2b-8100-61d1800b75ba.roa Signing time: Mon 08 Dec 2025 00:20:12 +0000 ROA not before: Mon 08 Dec 2025 00:20:12 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fed:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fe:b3:57:4f:3b:99:2f:75:40:fa:2b:52:dc:06:49:b5:a6:1f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 8 00:20:12 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=1db977e52c1b2801bd70fe2bb5ddb4ddc7a46c8e3aa864cf5b4666e8a968c895, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:05:d4:07:81:2c:3c:64:93:90:d1:46:c4: fc:de:43:92:d8:1b:07:7c:ac:e6:d2:23:6a:6f:08: cf:74:4e:18:d3:98:a1:4c:f3:ee:77:37:27:fe:f0: 24:fc:1b:27:ff:cf:7e:22:1c:d4:af:85:01:bd:13: 5b:e3:22:26:16:af:ed:9d:b2:a2:af:53:f7:9b:59: 0d:30:4a:25:e5:92:57:f0:14:db:16:5a:33:19:00: 93:f3:7d:c4:95:fa:ca:42:80:7c:05:71:dc:a9:dd: 74:8a:3b:0e:d7:aa:46:f8:68:07:de:4e:76:87:10: 53:64:e9:af:de:b0:55:ae:dc:c8:22:aa:20:4b:1d: 75:c9:69:f7:cb:49:e0:41:10:9a:91:86:28:85:ab: f2:3e:eb:3c:60:a2:de:5c:38:74:88:a1:a3:9b:69: da:3a:5d:e5:a0:67:f8:f1:bf:14:9b:f6:1f:17:a2: 00:43:85:45:50:07:50:4f:9e:de:5a:4b:43:25:5d: 50:bd:98:06:0d:3e:e1:6b:eb:26:d4:e1:b4:fa:83: b2:3b:d8:58:33:f1:e2:65:da:da:73:bc:f7:31:8c: 92:03:9f:cd:a0:ae:a2:9e:b5:10:b8:e8:6d:37:8b: 51:b0:67:1b:67:fd:62:b0:c2:92:59:44:84:f0:1b: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D7:83:51:0F:B4:FF:5D:05:E3:75:D0:DC:E1:31:18:A6:1F:45:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cbea954-9855-4d2b-8100-61d1800b75ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:7400::/40 Signature Algorithm: sha256WithRSAEncryption 89:f8:ac:67:70:f2:ae:5a:f8:ae:e2:e1:02:f7:07:90:1a:62: 03:a8:86:cd:09:25:d0:4a:54:ed:3f:2f:e4:b2:00:fb:11:09: 74:eb:a2:5c:cc:1a:6b:a8:e1:c8:03:a8:fc:9e:c9:82:a1:28: dc:bd:31:a4:65:06:f4:6b:ac:35:61:16:fd:59:1c:28:df:be: fd:3d:88:5e:cd:c3:4e:15:3d:17:ca:7d:30:ca:cf:91:c9:9c: 20:b4:ac:e8:73:21:e6:59:e7:20:ac:80:ca:75:9e:c6:f3:e4: 57:ca:78:26:ae:5b:c1:72:41:28:ae:db:03:7d:b4:e7:65:c7: 03:17:f3:cd:fb:eb:08:71:f4:26:97:cc:63:78:bf:1a:a7:f6: 5b:dc:3f:56:36:25:9c:e7:2d:2b:4a:86:de:95:a6:ca:02:db: ee:f0:cd:ba:cd:51:44:9d:b1:25:59:f3:b2:46:e2:c7:ed:ef: 81:68:0d:53:03:8c:f5:83:cb:93:3e:96:c2:f4:c3:68:f1:2e: c2:f7:7e:e9:f1:66:4b:c8:2b:15:5e:48:28:0e:48:ec:51:79: 73:dc:eb:db:b8:26:fa:fb:5b:ac:cf:be:37:7c:f1:04:b8:ac: 79:e5:12:9c:df:ae:69:27:38:d7:cf:b4:18:a7:0c:22:91:cb: c3:01:6f:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWv6zV087mS91QPorUtwGSbWmH1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAyMDEyWhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGI5NzdlNTJjMWIyODAxYmQ3MGZlMmJiNWRkYjRkZGM3 YTQ2YzhlM2FhODY0Y2Y1YjQ2NjZlOGE5NjhjODk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRewXUB4EsPGSTkNFGxPzeQ5LYGwd8rObSI2pvCM90ThjT mKFM8+53Nyf+8CT8Gyf/z34iHNSvhQG9E1vjIiYWr+2dsqKvU/ebWQ0wSiXlklfw FNsWWjMZAJPzfcSV+spCgHwFcdyp3XSKOw7Xqkb4aAfeTnaHEFNk6a/esFWu3Mgi qiBLHXXJaffLSeBBEJqRhiiFq/I+6zxgot5cOHSIoaObado6XeWgZ/jxvxSb9h8X ogBDhUVQB1BPnt5aS0MlXVC9mAYNPuFr6ybU4bT6g7I72Fgz8eJl2tpzvPcxjJID n82grqKetRC46G03i1GwZxtn/WKwwpJZRITwGwbNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+NeDUQ+0/10F43XQ3OExGKYfRY8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjYmVhOTU0LTk4NTUtNGQyYi04MTAwLTYxZDE4MDBiNzViYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/tdDANBgkqhkiG9w0BAQsFAAOCAQEAifisZ3Dyrlr4ruLhAvcHkBpi A6iGzQkl0EpU7T8v5LIA+xEJdOuiXMwaa6jhyAOo/J7JgqEo3L0xpGUG9GusNWEW /VkcKN++/T2IXs3DThU9F8p9MMrPkcmcILSs6HMh5lnnIKyAynWexvPkV8p4Jq5b wXJBKK7bA32052XHAxfzzfvrCHH0JpfMY3i/Gqf2W9w/VjYlnOctK0qG3pWmygLb 7vDNus1RRJ2xJVnzskbix+3vgWgNUwOM9YPLkz6WwvTDaPEuwvd+6fFmS8grFV5I KA5I7FF5c9zr27gm+vtbrM++N3zxBLiseeUSnN+uaSc418+0GKcMIpHLwwFv+g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:31:53 2025 by rpki-client