This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6db0b0-0f4a-438a-88fc-504de02997a3.roa File: 3c6db0b0-0f4a-438a-88fc-504de02997a3.roa (raw, json) Hash identifier: KGEpo+/6BvUtohNxeIyA5EkUB+YzZkhY6BB4325LGKo= Subject key identifier: D7:DF:5A:FD:E6:84:C9:57:AB:54:42:FB:26:EC:DA:13:DC:23:BD:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03F0911306378C256460CB3BF77E820371BEF276 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6db0b0-0f4a-438a-88fc-504de02997a3.roa Signing time: Wed 12 Nov 2025 01:00:48 +0000 ROA not before: Wed 12 Nov 2025 01:00:48 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.240.0/20 maxlen: 20 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 03:f0:91:13:06:37:8c:25:64:60:cb:3b:f7:7e:82:03:71:be:f2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 01:00:48 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=4875bfd5c024bfae6c8e035ba20d7058de4b5bdc4ff43d511d721864fee9a756, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:3a:1c:06:2f:8e:6c:48:36:be:29:56:77: e2:20:6d:bc:9d:ac:c5:c5:13:56:18:c4:91:12:90: c6:3f:96:9f:af:ef:69:e2:40:d3:e1:ca:48:22:5a: 0b:c0:73:06:c5:13:81:d6:87:8c:5d:f3:54:1d:8d: de:ad:d6:cc:41:3e:8b:6b:90:5c:92:c8:e5:e9:6b: c1:7d:97:51:b9:0b:8a:22:bc:92:b2:e2:0c:77:e6: 9d:65:2e:bd:4a:bf:e9:56:f8:ad:dc:c7:41:f8:4a: 7b:14:09:3d:60:7a:d0:22:06:85:8a:36:67:16:6e: c0:3b:09:e8:7a:41:de:72:1c:30:75:95:fd:b3:83: 7d:4b:0f:ac:ef:22:51:bf:3a:9b:3b:12:07:7b:e9: 0f:99:5f:67:45:27:85:b8:51:b8:30:44:03:5f:13: 84:39:2b:54:a1:4a:49:28:84:88:91:9f:06:65:69: 4f:89:45:ab:30:d3:d5:0c:75:3f:8f:49:17:bf:dc: 79:67:8d:32:e8:5f:9b:34:b2:e3:70:1f:9d:74:0a: 91:4c:eb:e5:93:e4:62:7d:de:b5:19:cc:24:76:13: a5:30:ad:50:bd:3a:4c:0a:46:aa:a3:f2:fb:37:47: 52:15:70:50:38:99:ab:56:d0:ec:90:b8:79:71:11: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DF:5A:FD:E6:84:C9:57:AB:54:42:FB:26:EC:DA:13:DC:23:BD:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6db0b0-0f4a-438a-88fc-504de02997a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption 36:ee:5a:f7:dd:04:b9:00:2c:82:53:3e:f4:ce:72:80:4c:e0: c0:ee:44:71:14:e2:b6:d9:15:0b:84:d3:9c:62:14:62:38:44: 22:83:7a:9c:28:4c:1e:0c:8f:89:c7:9f:2c:1f:aa:96:11:77: 1b:52:91:4f:5b:a4:51:9a:af:6e:4a:71:44:7e:ea:5c:bd:cc: 6b:14:fc:9d:a8:c1:d2:89:ad:b8:a1:15:9b:e2:94:7e:35:ea: 24:b3:cb:f8:1e:6a:a8:34:49:fd:a3:5c:96:17:2c:71:4c:fd: 35:db:e4:05:3f:fe:dc:97:37:51:95:18:b3:18:8b:d6:0e:10: c7:b1:40:60:62:e3:2e:36:ed:10:f1:b2:16:58:8f:1e:42:bb: 57:43:43:f0:44:25:8c:b0:63:b8:7e:44:a5:52:ec:76:87:58: 4d:cf:14:51:8e:9c:81:2f:ea:31:8a:f9:16:42:33:59:d4:d7: b3:60:b4:b3:55:5a:c4:8f:5a:ca:a2:60:f5:9d:9d:5c:50:cc: fd:45:07:9a:3c:c1:d5:1f:bc:b6:4c:1e:8c:01:9c:5d:34:44: d6:e7:63:5f:ed:f4:31:0b:ab:56:ec:de:4c:0d:5d:ff:43:aa: 87:57:dc:ad:ac:e1:07:27:98:8c:0c:1c:35:b0:54:08:28:da: a4:93:b7:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/CREwY3jCVkYMs7936CA3G+8nYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDEwMDQ4WhcNMjUxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODc1YmZkNWMwMjRiZmFlNmM4ZTAzNWJhMjBkNzA1OGRl NGI1YmRjNGZmNDNkNTExZDcyMTg2NGZlZTlhNzU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhEDocBi+ObEg2vilWd+IgbbydrMXFE1YYxJESkMY/lp+v 72niQNPhykgiWgvAcwbFE4HWh4xd81Qdjd6t1sxBPotrkFySyOXpa8F9l1G5C4oi vJKy4gx35p1lLr1Kv+lW+K3cx0H4SnsUCT1getAiBoWKNmcWbsA7Ceh6Qd5yHDB1 lf2zg31LD6zvIlG/Ops7Egd76Q+ZX2dFJ4W4UbgwRANfE4Q5K1ShSkkohIiRnwZl aU+JRasw09UMdT+PSRe/3HlnjTLoX5s0suNwH510CpFM6+WT5GJ93rUZzCR2E6Uw rVC9OkwKRqqj8vs3R1IVcFA4matW0OyQuHlxEfMNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU199a/eaEyVerVEL7JuzaE9wjvd4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjNmRiMGIwLTBmNGEtNDM4YS04OGZjLTUwNGRlMDI5OTdhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7PAwDQYJKoZIhvcNAQELBQADggEBADbuWvfdBLkALIJTPvTOcoBM4MDu RHEU4rbZFQuE05xiFGI4RCKDepwoTB4Mj4nHnywfqpYRdxtSkU9bpFGar25KcUR+ 6ly9zGsU/J2owdKJrbihFZvilH416iSzy/geaqg0Sf2jXJYXLHFM/TXb5AU//tyX N1GVGLMYi9YOEMexQGBi4y427RDxshZYjx5Cu1dDQ/BEJYywY7h+RKVS7HaHWE3P FFGOnIEv6jGK+RZCM1nU17NgtLNVWsSPWsqiYPWdnVxQzP1FB5o8wdUfvLZMHowB nF00RNbnY1/t9DELq1bs3kwNXf9DqodX3K2s4QcnmIwMHDWwVAgo2qSTt7Q= -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:57 2025 by rpki-client