This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa File: 4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json) Hash identifier: WEbl9q+I0S8gyKRLhVo+Kag13QgeSI5+uhf/GkAP1Lg= Subject key identifier: 7F:C6:17:19:C7:E5:63:F1:F7:F1:DF:9C:49:C9:7F:3F:B1:D6:A5:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08B05BE3D1230B0D0A67E85046514157C30662A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa Signing time: Sun 07 Dec 2025 01:20:57 +0000 ROA not before: Sun 07 Dec 2025 01:20:57 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b0:5b:e3:d1:23:0b:0d:0a:67:e8:50:46:51:41:57:c3:06:62:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 01:20:57 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=108c6a78c60c12b5b09d7e1ca663ad5705795ce75bd1d06b401c8eeb8de29241, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:f8:60:16:f7:1b:f5:1e:52:84:ba:ff:f9: 83:3d:1c:79:a7:e2:1f:c4:62:51:9a:17:ab:75:88: 54:b0:78:14:13:17:dd:d3:42:5e:c9:8d:5f:95:8b: d1:a8:98:5c:ed:7c:7d:94:ce:fa:52:d2:71:70:d7: ff:87:20:ee:6c:d2:84:c4:2e:d4:bf:71:7e:6e:73: 7d:06:73:31:a6:e2:77:43:64:01:8a:7d:38:b0:97: de:4c:a1:51:73:73:11:d5:64:78:1b:b0:1b:73:1e: 48:92:35:2e:21:c0:24:d8:b3:7b:8d:6b:40:4f:13: cd:13:f3:cc:dc:c9:6d:c6:30:fd:65:01:ed:9c:94: 93:7b:2b:b3:e2:0e:db:38:23:1d:c7:dd:1f:cb:fd: 3b:5a:cf:74:ba:c1:4b:60:c0:40:a5:0d:14:e8:50: 50:ea:ac:b3:7d:4b:a3:63:d5:44:14:5b:fc:95:d5: 8a:6a:73:1b:1c:02:ca:3e:8a:e4:d8:93:f7:31:72: e2:f0:9a:84:90:2f:71:a6:50:50:d2:52:42:ef:8e: 4f:2f:61:83:89:b2:68:91:e6:25:4d:8c:5b:44:b9: 9a:90:33:6b:b6:15:f0:a4:fe:0f:39:d1:12:32:c9: 1c:f0:7b:bd:4a:af:17:d0:fb:4a:b7:78:55:58:dc: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:17:19:C7:E5:63:F1:F7:F1:DF:9C:49:C9:7F:3F:B1:D6:A5:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:4000::/36 Signature Algorithm: sha256WithRSAEncryption a7:f8:39:6f:c3:c3:f5:33:79:bb:ca:04:b8:5d:d7:24:62:b0: dc:38:46:01:18:18:9f:63:e5:67:52:44:59:5f:54:10:ac:db: b4:61:f8:9a:f6:d5:2c:59:2f:41:cc:06:e9:13:8d:61:08:06: f4:1f:03:ec:37:d7:d7:42:2d:96:30:bd:83:c3:88:99:9b:04: 8d:ba:cb:1a:e3:c9:08:f5:71:5f:9a:16:93:5a:e4:1a:f5:d7: d9:05:51:10:97:a1:83:67:66:c5:e5:1d:b6:5c:fc:50:f1:57: 07:27:cb:ca:fd:5e:7d:41:3c:8b:b9:e9:6c:27:85:1a:44:f6: eb:cc:88:d0:d9:8e:05:9a:14:f4:80:02:d6:01:e7:54:28:5f: fd:2c:36:60:04:33:52:94:c0:bb:ab:24:21:93:f0:5f:e4:84: 08:ed:88:a3:4f:5b:de:51:c3:14:2b:c3:e3:ea:aa:00:bc:59: 09:4a:1a:ab:4a:86:93:ff:fa:0a:0b:f9:6f:5c:06:3c:a5:f4: b2:b5:c3:b7:bc:d6:e1:1e:f0:27:6d:10:b7:b2:92:ff:6b:cd: 90:5d:3a:3c:e6:c1:48:81:eb:8a:63:97:46:0b:b6:99:80:b0: 4b:9e:2c:c0:34:a5:c6:2e:ea:4c:a8:f9:f2:c2:da:bd:dd:a8: ff:ce:10:10 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCLBb49EjCw0KZ+hQRlFBV8MGYqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDEyMDU3WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDhjNmE3OGM2MGMxMmI1YjA5ZDdlMWNhNjYzYWQ1NzA1 Nzk1Y2U3NWJkMWQwNmI0MDFjOGVlYjhkZTI5MjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1cvhgFvcb9R5ShLr/+YM9HHmn4h/EYlGaF6t1iFSweBQT F93TQl7JjV+Vi9GomFztfH2UzvpS0nFw1/+HIO5s0oTELtS/cX5uc30GczGm4ndD ZAGKfTiwl95MoVFzcxHVZHgbsBtzHkiSNS4hwCTYs3uNa0BPE80T88zcyW3GMP1l Ae2clJN7K7PiDts4Ix3H3R/L/Ttaz3S6wUtgwEClDRToUFDqrLN9S6Nj1UQUW/yV 1YpqcxscAso+iuTYk/cxcuLwmoSQL3GmUFDSUkLvjk8vYYOJsmiR5iVNjFtEuZqQ M2u2FfCk/g850RIyyRzwe71KrxfQ+0q3eFVY3Bm5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUf8YXGcflY/H38d+cScl/P7HWpYAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMjRkNzZmLWE5ODgtNDU0OC1hNjU0LTM3YTMwYWE4ZDMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cQDANBgkqhkiG9w0BAQsFAAOCAQEAp/g5b8PD9TN5u8oEuF3XJGKw 3DhGARgYn2PlZ1JEWV9UEKzbtGH4mvbVLFkvQcwG6RONYQgG9B8D7DfX10ItljC9 g8OImZsEjbrLGuPJCPVxX5oWk1rkGvXX2QVREJehg2dmxeUdtlz8UPFXByfLyv1e fUE8i7npbCeFGkT268yI0NmOBZoU9IAC1gHnVChf/Sw2YAQzUpTAu6skIZPwX+SE CO2Io09b3lHDFCvD4+qqALxZCUoaq0qGk//6Cgv5b1wGPKX0srXDt7zW4R7wJ20Q t7KS/2vNkF06PObBSIHrimOXRgu2mYCwS54swDSlxi7qTKj58sLavd2o/84QEA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:32:53 2026 by rpki-client