This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2db35f5-25fe-4e42-adc2-42e4f7482824.roa File: c2db35f5-25fe-4e42-adc2-42e4f7482824.roa (raw, json) Hash identifier: wudu+p2hEg6j4USgfHoWQklk2DuY7ed1sOs7wlJLkIQ= Subject key identifier: 72:BD:05:11:EC:DB:E9:1C:D5:2D:CA:93:6C:DA:71:91:CA:99:AC:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B9983B8EAD5B65255213C555687B5AD868BA8B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2db35f5-25fe-4e42-adc2-42e4f7482824.roa Signing time: Wed 10 Dec 2025 00:00:16 +0000 ROA not before: Wed 10 Dec 2025 00:00:16 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:99:83:b8:ea:d5:b6:52:55:21:3c:55:56:87:b5:ad:86:8b:a8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 10 00:00:16 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=7c4b6a7f2335f681ef919789fb86c8e5abc4834142e52730528c0930aab8bbdc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:3d:30:98:16:8b:90:14:a4:2d:e6:7d:33: fd:1f:79:ae:6a:1d:25:8b:c7:cb:c4:8d:6d:36:75: d1:76:1e:8f:ed:1e:97:3c:0f:62:fa:08:15:a6:c0: b8:31:df:38:17:75:db:61:96:51:bb:be:e0:21:52: d8:5b:59:04:e5:23:3a:0c:b2:e9:1d:76:49:8c:27: 9d:f4:36:1f:cd:9f:32:6c:1f:6b:b3:cf:30:4a:9c: a0:a7:ab:23:b6:c9:99:43:38:e4:4c:ba:b6:84:f5: 40:b4:92:fa:09:5b:0e:0e:90:5a:ec:a9:b0:8d:ba: a9:0f:61:17:9f:01:5d:59:25:06:79:56:d2:62:10: f8:24:2f:cb:a0:64:33:a0:ae:e3:0d:20:fb:91:fe: 58:74:57:21:5b:6b:96:74:db:2d:eb:05:99:ff:e5: 04:20:9a:0a:51:4b:80:2a:d3:da:36:59:24:be:e3: 9b:7a:55:1e:91:26:00:27:d7:1d:f9:01:bb:fb:1d: cc:a0:e9:91:4e:df:a7:b4:38:c0:c0:5c:7b:31:02: 89:2a:d5:69:2d:cf:26:a9:88:e5:f9:72:20:bb:c8: cd:0d:4f:d9:bb:56:f6:36:ff:ea:61:78:67:5f:96: 96:e4:29:c9:6b:1e:2b:d6:e0:6f:2c:87:49:da:34: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:05:11:EC:DB:E9:1C:D5:2D:CA:93:6C:DA:71:91:CA:99:AC:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2db35f5-25fe-4e42-adc2-42e4f7482824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:6b:b4:eb:ef:38:4f:d3:95:3f:c9:ea:04:13:67:65:12:19: 11:e8:00:e2:ce:fe:ef:d0:91:11:d2:af:5a:19:3d:02:0c:14: a7:56:f4:f8:6b:f3:e9:4f:8b:4f:f2:fc:9c:83:96:8b:66:5a: 13:e6:b8:72:ae:f2:a4:c0:ef:d0:61:52:11:b8:15:40:e7:73: 92:b8:c4:3f:a6:02:3e:35:81:84:b2:8d:31:5d:41:4a:59:0e: 50:7c:b1:f8:52:31:23:88:d2:5a:77:47:e1:5d:4d:16:f9:10: e2:21:48:d0:8e:4c:98:f9:33:5e:09:d2:59:e2:a1:6f:08:74: 56:7f:f3:9f:30:06:d2:31:87:fd:ce:d5:13:ae:48:15:e3:6f: e2:c9:c2:e4:49:e0:53:4c:db:f6:23:ca:d8:a7:a8:64:6e:e6: 51:42:bd:fe:98:b9:0e:17:b4:77:5c:ff:3e:cd:27:5f:51:85: 74:3a:53:b9:98:70:ee:f0:c9:24:cc:b9:f5:00:da:23:c0:96: 00:c6:7a:5a:59:89:82:4f:e5:eb:93:3f:cc:76:93:18:79:c0: b3:71:90:29:e6:f2:1d:ea:f0:cb:8c:c7:bc:0b:c5:70:13:97: a7:7c:f5:f1:4c:a5:ba:c9:95:85:05:5a:33:d6:81:c1:9d:7d: 57:13:69:2a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUO5mDuOrVtlJVITxVVoe1rYaLqLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAwMDE2WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzRiNmE3ZjIzMzVmNjgxZWY5MTk3ODlmYjg2YzhlNWFi YzQ4MzQxNDJlNTI3MzA1MjhjMDkzMGFhYjhiYmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoAz0wmBaLkBSkLeZ9M/0fea5qHSWLx8vEjW02ddF2Ho/t Hpc8D2L6CBWmwLgx3zgXddthllG7vuAhUthbWQTlIzoMsukddkmMJ530Nh/NnzJs H2uzzzBKnKCnqyO2yZlDOORMuraE9UC0kvoJWw4OkFrsqbCNuqkPYRefAV1ZJQZ5 VtJiEPgkL8ugZDOgruMNIPuR/lh0VyFba5Z02y3rBZn/5QQgmgpRS4Aq09o2WSS+ 45t6VR6RJgAn1x35Abv7Hcyg6ZFO36e0OMDAXHsxAokq1WktzyapiOX5ciC7yM0N T9m7VvY2/+pheGdflpbkKclrHivW4G8sh0naNP0tAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcr0FEezb6RzVLcqTbNpxkcqZrN8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyZGIzNWY1LTI1ZmUtNGU0Mi1hZGMyLTQyZTRmNzQ4MjgyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vYDANBgkqhkiG9w0BAQsFAAOCAQEAW2u06+84T9OVP8nqBBNnZRIZ EegA4s7+79CREdKvWhk9AgwUp1b0+Gvz6U+LT/L8nIOWi2ZaE+a4cq7ypMDv0GFS EbgVQOdzkrjEP6YCPjWBhLKNMV1BSlkOUHyx+FIxI4jSWndH4V1NFvkQ4iFI0I5M mPkzXgnSWeKhbwh0Vn/znzAG0jGH/c7VE65IFeNv4snC5EngU0zb9iPK2KeoZG7m UUK9/pi5Dhe0d1z/Ps0nX1GFdDpTuZhw7vDJJMy59QDaI8CWAMZ6WlmJgk/l65M/ zHaTGHnAs3GQKebyHerwy4zHvAvFcBOXp3z18UylusmVhQVaM9aBwZ19VxNpKg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:51 2025 by rpki-client