This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa File: 6c3a9442-11f5-4da8-849a-8e9085cd735c.roa (raw, json) Hash identifier: XU9YHI5FNEUemdDrA7tY/lDxkJFg6KaSI6gI+sRVY/M= Subject key identifier: 6E:27:E8:45:2D:F8:E5:A2:D4:59:A5:B4:F2:03:42:D7:EB:73:12:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60CC5740CC2060A779E7A9A702740195B3CDD4FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa Signing time: Sat 08 Nov 2025 00:50:11 +0000 ROA not before: Sat 08 Nov 2025 00:50:11 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:1800::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 60:cc:57:40:cc:20:60:a7:79:e7:a9:a7:02:74:01:95:b3:cd:d4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:50:11 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=0950a1d26e4f05da10763415f411d9472892dd7ce5d351c264d00ed08a0c5309, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:d7:3b:5b:f5:86:61:c8:ae:f4:5c:9f:08: ed:7c:26:0d:24:9a:8e:4a:3c:2f:a8:fd:d5:94:2d: 26:b9:5c:5e:7e:50:cd:72:fc:5a:90:ef:40:95:9d: 2f:72:08:f1:2e:64:df:59:0e:c9:4d:f4:4d:df:2f: 28:85:58:97:6a:7a:cc:46:ab:7f:a6:c0:d0:3e:87: 37:94:3b:34:35:13:8d:84:e3:71:d9:88:0b:72:19: 41:6a:19:b7:a5:0e:64:2b:01:ee:f7:1a:8c:96:6a: 6f:af:73:e1:3d:3c:ff:bc:54:97:b3:6a:b3:65:cd: e7:21:9e:34:ed:12:e8:4a:ba:9a:58:a7:24:e0:7a: 31:c3:e0:fb:72:6f:1b:a1:f7:48:c7:59:c8:38:b8: 71:d9:e0:80:c5:fc:03:88:22:16:2b:b6:b7:7c:4d: 1f:12:81:e0:d4:a9:fe:50:c3:c1:fe:be:24:49:28: 3f:fa:0c:75:c7:41:3b:a4:1f:ec:53:f8:ec:a7:ad: 5e:b7:38:0a:f6:9f:b0:fc:71:2c:d5:19:ef:3e:ed: 49:87:19:9d:17:3e:67:b2:3c:a0:6c:6f:55:1e:66: 71:2e:99:be:ef:20:72:56:83:1c:2f:3b:34:59:2c: f1:3f:8a:c0:6d:e0:d0:fc:0e:6c:c0:7c:0c:78:80: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:27:E8:45:2D:F8:E5:A2:D4:59:A5:B4:F2:03:42:D7:EB:73:12:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:1800::/48 Signature Algorithm: sha256WithRSAEncryption 7e:69:3f:eb:3e:ad:3f:43:0c:d4:8f:1b:4d:d3:b0:92:7c:75: e9:6b:06:9a:ed:5b:81:fa:38:08:5d:2f:2e:ba:16:9b:96:14: b0:a8:04:8b:ff:11:aa:bd:a5:03:92:17:cf:87:0d:85:62:a4: b2:94:7c:66:9b:ef:3d:2f:71:c2:14:d8:82:89:72:f3:67:af: 40:f9:d7:e2:8a:3e:09:1d:19:a0:f9:3c:37:f7:40:80:39:58: 6d:48:db:a6:50:0c:5f:91:9a:36:42:ee:66:a1:09:7f:dd:5f: 18:7e:d8:4c:f1:be:14:b1:07:f1:43:73:f9:2b:7b:b5:d5:c1: b4:46:96:c9:7d:e0:01:78:e0:97:d4:5d:b5:20:0f:94:c8:c2: 4d:0a:4c:51:a5:9d:b8:a3:dc:9a:6a:29:f5:69:15:ca:a2:84: 79:d5:2e:2e:20:e1:b4:18:71:4e:29:2f:9c:ca:b8:60:65:7e: 15:8c:2a:11:dc:74:42:fa:ef:fc:9f:0a:6e:9d:8d:a3:33:79: 72:05:b7:b4:ab:90:30:96:a8:ff:a8:e0:96:86:e8:31:e3:4c: b9:8b:7f:c4:d8:6a:cd:cf:c2:7d:12:97:89:e3:86:80:7f:1d: eb:37:58:4c:61:b6:92:33:ab:2e:d7:9e:5d:1f:57:5f:3d:3a: bc:b8:de:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYMxXQMwgYKd556mnAnQBlbPN1PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDA1MDExWhcNMjUxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTUwYTFkMjZlNGYwNWRhMTA3NjM0MTVmNDExZDk0NzI4 OTJkZDdjZTVkMzUxYzI2NGQwMGVkMDhhMGM1MzA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7p9c7W/WGYciu9FyfCO18Jg0kmo5KPC+o/dWULSa5XF5+ UM1y/FqQ70CVnS9yCPEuZN9ZDslN9E3fLyiFWJdqesxGq3+mwNA+hzeUOzQ1E42E 43HZiAtyGUFqGbelDmQrAe73GoyWam+vc+E9PP+8VJezarNlzechnjTtEuhKuppY pyTgejHD4Ptybxuh90jHWcg4uHHZ4IDF/AOIIhYrtrd8TR8SgeDUqf5Qw8H+viRJ KD/6DHXHQTukH+xT+OynrV63OAr2n7D8cSzVGe8+7UmHGZ0XPmeyPKBsb1UeZnEu mb7vIHJWgxwvOzRZLPE/isBt4ND8DmzAfAx4gFJ7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbifoRS345aLUWaW08gNC1+tzEjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjM2E5NDQyLTExZjUtNGRhOC04NDlhLThlOTA4NWNkNzM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sGAAwDQYJKoZIhvcNAQELBQADggEBAH5pP+s+rT9DDNSPG03TsJJ8 delrBprtW4H6OAhdLy66FpuWFLCoBIv/Eaq9pQOSF8+HDYVipLKUfGab7z0vccIU 2IKJcvNnr0D51+KKPgkdGaD5PDf3QIA5WG1I26ZQDF+RmjZC7mahCX/dXxh+2Ezx vhSxB/FDc/kre7XVwbRGlsl94AF44JfUXbUgD5TIwk0KTFGlnbij3JpqKfVpFcqi hHnVLi4g4bQYcU4pL5zKuGBlfhWMKhHcdEL67/yfCm6djaMzeXIFt7SrkDCWqP+o 4JaG6DHjTLmLf8TYas3Pwn0Sl4njhoB/Hes3WExhtpIzqy7Xnl0fV189Ory43vw= -----END CERTIFICATE-----Generated at Sat Nov 22 21:29:54 2025 by rpki-client