This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa File: 4a057948-fd14-4f67-83ba-77013a7d02bd.roa (raw, json) Hash identifier: XyBuuiWGqyoRznhZdvWBR7FpsvQT6zAZH3Mgi8UOrNg= Subject key identifier: 57:F8:8A:E6:FE:C6:B4:9E:55:DD:EF:54:25:C4:89:28:2E:FD:B0:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 400F39890C8C53FA4C7884E02088D4A3654C0290 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa Signing time: Thu 11 Dec 2025 00:00:07 +0000 ROA not before: Thu 11 Dec 2025 00:00:07 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f68:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0f:39:89:0c:8c:53:fa:4c:78:84:e0:20:88:d4:a3:65:4c:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:00:07 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=9a47feaba6fee8442eb602fe0bd05d364f4f0aaf295266c8a4ccef7934147e10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:df:73:6c:59:f1:eb:7b:29:2c:6d:f5:4e: c9:43:a6:1e:5e:82:e4:aa:0b:11:55:92:6b:1e:2d: 24:dc:dd:f7:bf:15:c9:7d:26:8b:85:37:ac:c6:41: c1:c8:28:26:79:64:07:9c:da:a3:a7:87:dc:f5:a7: 59:ef:e0:6b:f5:f4:c2:c2:d4:f2:93:a3:77:d5:ab: 57:b5:d9:e4:b2:9a:ea:69:53:02:8b:e0:e9:c8:f1: 38:3e:eb:31:d0:b0:db:ea:0c:14:04:31:5e:5d:83: c4:0f:02:fc:82:9d:b5:e3:41:33:ae:dc:8d:73:5c: 5d:1a:0d:84:43:c3:1e:a8:54:3f:cf:41:d5:bf:c9: 03:6a:b2:a7:92:27:fe:a8:f1:5f:fe:39:62:29:9c: 6b:0f:11:75:3f:bf:95:9a:b1:a0:7d:38:6a:b8:ef: 50:b0:f1:93:3c:ce:4b:f2:e2:d3:22:a5:fa:3d:b6: e5:3c:8a:6a:d3:ed:ea:36:8e:35:e6:72:86:6e:e0: 26:3f:2d:e8:bc:a0:d1:b8:bc:b0:bc:fd:d6:47:0a: fe:9d:af:18:4e:6a:4b:db:94:09:78:24:a5:03:e3: 08:a8:ac:ee:bb:e8:6e:82:74:7f:01:a5:47:1d:1e: d3:32:c0:75:86:c7:ea:38:23:0f:54:bf:e1:87:f7: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:8A:E6:FE:C6:B4:9E:55:DD:EF:54:25:C4:89:28:2E:FD:B0:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a057948-fd14-4f67-83ba-77013a7d02bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:4020::/46 Signature Algorithm: sha256WithRSAEncryption 9a:b5:bc:70:63:ea:db:9f:ac:88:db:c3:a5:c3:9f:d9:35:20: d2:19:0d:f2:7f:cb:48:4e:9a:c2:a1:75:a0:bd:31:d9:62:09: ba:db:8d:4a:0a:2e:27:7f:85:7c:c5:4d:fd:03:aa:67:0f:b3: df:96:d6:8e:80:15:4a:49:01:0d:6d:79:f4:32:84:30:f5:6b: 71:c5:00:ff:3e:e8:15:7b:c8:62:90:56:49:a6:a3:d7:34:94: e4:eb:31:72:f9:81:de:94:4f:db:ab:ed:eb:97:e0:83:f4:56: 29:bb:85:db:fa:b0:fa:76:37:6f:93:12:8b:af:48:76:88:1b: 60:76:67:bb:7c:84:bd:ab:0c:21:40:af:e3:7e:3f:69:1c:21: 40:b1:dc:e2:5e:d2:28:d7:90:59:be:31:97:86:47:9c:8b:8f: 4a:85:47:7c:12:94:84:7c:f7:3b:4e:82:f8:da:6b:74:2e:11: 93:04:7c:64:0c:2d:ae:fd:0c:0c:9b:88:e6:ee:04:03:4a:7b: 5f:7d:c2:51:f6:70:e6:4e:ae:8f:c5:10:0b:bd:34:14:64:31: 3b:0c:7b:48:84:20:60:f4:fb:c1:58:16:13:ae:62:52:e4:d6: 56:93:21:d7:e5:ed:92:28:61:94:c5:4b:a7:8b:74:fc:50:7f: fc:86:f8:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQA85iQyMU/pMeITgIIjUo2VMApAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAwMDA3WhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTQ3ZmVhYmE2ZmVlODQ0MmViNjAyZmUwYmQwNWQzNjRm NGYwYWFmMjk1MjY2YzhhNGNjZWY3OTM0MTQ3ZTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4gt9zbFnx63spLG31TslDph5eguSqCxFVkmseLSTc3fe/ Fcl9JouFN6zGQcHIKCZ5ZAec2qOnh9z1p1nv4Gv19MLC1PKTo3fVq1e12eSymupp UwKL4OnI8Tg+6zHQsNvqDBQEMV5dg8QPAvyCnbXjQTOu3I1zXF0aDYRDwx6oVD/P QdW/yQNqsqeSJ/6o8V/+OWIpnGsPEXU/v5WasaB9OGq471Cw8ZM8zkvy4tMipfo9 tuU8imrT7eo2jjXmcoZu4CY/Lei8oNG4vLC8/dZHCv6drxhOakvblAl4JKUD4wio rO676G6CdH8BpUcdHtMywHWGx+o4Iw9Uv+GH96bZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV/iK5v7GtJ5V3e9UJcSJKC79sJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMDU3OTQ4LWZkMTQtNGY2Ny04M2JhLTc3MDEzYTdkMDJiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9oQCAwDQYJKoZIhvcNAQELBQADggEBAJq1vHBj6tufrIjbw6XDn9k1 INIZDfJ/y0hOmsKhdaC9MdliCbrbjUoKLid/hXzFTf0DqmcPs9+W1o6AFUpJAQ1t efQyhDD1a3HFAP8+6BV7yGKQVkmmo9c0lOTrMXL5gd6UT9ur7euX4IP0Vim7hdv6 sPp2N2+TEouvSHaIG2B2Z7t8hL2rDCFAr+N+P2kcIUCx3OJe0ijXkFm+MZeGR5yL j0qFR3wSlIR89ztOgvjaa3QuEZMEfGQMLa79DAybiObuBANKe199wlH2cOZOro/F EAu9NBRkMTsMe0iEIGD0+8FYFhOuYlLk1laTIdfl7ZIoYZTFS6eLdPxQf/yG+Ew= -----END CERTIFICATE-----Generated at Fri Jan 9 00:55:48 2026 by rpki-client