This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705854ad-c3dd-4f3e-9c57-8c55d95941e3.roa File: 705854ad-c3dd-4f3e-9c57-8c55d95941e3.roa (raw, json) Hash identifier: CKNh2I8DCxm71fhXOWLsBkJKzMZYQfFEoPaU/A9TNdU= Subject key identifier: 39:5F:2A:9E:56:12:23:42:19:0A:5B:6F:D2:99:5C:22:3E:4C:48:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A0982C9D420C694BE4B0EAFDA3767D2D6CCC5C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705854ad-c3dd-4f3e-9c57-8c55d95941e3.roa Signing time: Sun 23 Nov 2025 00:40:41 +0000 ROA not before: Sun 23 Nov 2025 00:40:41 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff3:5040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:09:82:c9:d4:20:c6:94:be:4b:0e:af:da:37:67:d2:d6:cc:c5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 00:40:41 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=50720c0389c92f68ba1723d5c000143a769b72fcf8c253e15cd59bb63d348018, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:2b:89:4c:6d:c3:0e:c4:d3:75:0a:29:5a: ef:82:7f:19:59:74:d1:eb:4b:fa:b9:0a:42:73:db: 39:5a:02:99:35:22:ef:e0:75:cb:04:12:b6:01:d3: 02:6a:40:8f:d2:ce:60:b3:26:4d:43:7c:76:8e:59: 17:46:34:7f:35:da:12:e3:39:84:47:e8:9f:11:88: 8c:b8:32:92:09:ab:e3:70:b3:54:d0:15:7b:5a:1d: 5f:bf:f4:42:06:b9:9e:f4:56:99:5d:98:2c:34:44: 09:82:ed:e6:5e:a1:95:ae:f5:2d:28:42:84:03:39: 12:ba:22:08:cd:68:19:ef:d9:43:60:96:4d:10:63: 3a:aa:b1:f5:3e:9a:01:6a:42:0c:a6:46:a3:10:a6: f0:1b:4d:15:f1:ea:40:87:9a:f7:e9:80:ce:f3:55: 14:03:67:06:72:29:dc:0c:e4:ac:2b:a1:7f:81:ff: 28:a8:b1:cf:8b:4f:0e:ee:b9:bc:0f:bb:ba:11:3a: 75:5a:eb:98:a4:69:fc:1b:66:0b:79:4b:94:d4:e8: 2f:dc:75:07:e9:1f:88:1c:be:b2:5f:c0:38:9e:ee: d6:26:7a:5f:dc:00:69:55:ce:02:74:78:3c:f8:e8: 09:ac:68:d4:08:58:92:a9:a2:40:32:c4:dd:ed:b6: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:2A:9E:56:12:23:42:19:0A:5B:6F:D2:99:5C:22:3E:4C:48:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705854ad-c3dd-4f3e-9c57-8c55d95941e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:5040::/46 Signature Algorithm: sha256WithRSAEncryption c3:2b:0e:e2:37:13:14:8e:1b:91:f3:96:74:dd:7b:0b:12:5f: 12:8d:81:74:c1:52:2b:c6:89:f7:fe:bb:9a:af:1b:e5:5d:63: 2d:95:94:d0:fb:4c:1d:44:37:da:c2:2d:d5:3c:ed:f7:9c:75: c4:40:14:cc:fd:bd:54:c7:f8:d0:58:2a:ac:05:20:49:0a:3e: e8:4e:da:49:fd:3f:af:6c:e9:29:28:a7:d3:45:d2:6a:b1:ce: 48:21:f6:d7:99:b0:92:0f:d6:92:68:91:6d:d2:06:4a:5b:47: 5a:1b:d6:6a:42:cf:d6:3d:c9:ff:2a:40:99:73:16:cb:30:c5: b7:25:a3:37:24:5d:a7:cf:3f:8c:1d:0f:d1:f0:78:16:b6:61: 14:52:34:83:73:7e:a6:bd:39:ff:75:00:77:c2:cd:b8:55:2d: 2b:fc:c4:a6:37:d0:ce:3d:e9:8f:98:0b:c2:81:f6:ca:2f:3d: e0:00:0f:80:bb:15:cf:f2:7d:63:60:06:74:9e:43:a7:e8:e0: d8:ee:e7:0c:69:2f:84:7f:11:2f:f0:da:ee:85:b4:0c:3c:79: fc:be:75:97:97:37:c3:fc:cd:7c:36:5c:60:15:f3:b5:ca:21: ad:50:84:5f:7b:b0:41:41:4b:e8:0d:60:64:2d:12:89:98:42: 27:e8:e1:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSgmCydQgxpS+Sw6v2jdn0tbMxcMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDA0MDQxWhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDcyMGMwMzg5YzkyZjY4YmExNzIzZDVjMDAwMTQzYTc2 OWI3MmZjZjhjMjUzZTE1Y2Q1OWJiNjNkMzQ4MDE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChfSuJTG3DDsTTdQopWu+CfxlZdNHrS/q5CkJz2zlaApk1 Iu/gdcsEErYB0wJqQI/SzmCzJk1DfHaOWRdGNH812hLjOYRH6J8RiIy4MpIJq+Nw s1TQFXtaHV+/9EIGuZ70VpldmCw0RAmC7eZeoZWu9S0oQoQDORK6IgjNaBnv2UNg lk0QYzqqsfU+mgFqQgymRqMQpvAbTRXx6kCHmvfpgM7zVRQDZwZyKdwM5KwroX+B /yiosc+LTw7uubwPu7oROnVa65ikafwbZgt5S5TU6C/cdQfpH4gcvrJfwDie7tYm el/cAGlVzgJ0eDz46AmsaNQIWJKpokAyxN3tttXhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOV8qnlYSI0IZCltv0plcIj5MSFkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNTg1NGFkLWMzZGQtNGYzZS05YzU3LThjNTVkOTU5NDFlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zUEAwDQYJKoZIhvcNAQELBQADggEBAMMrDuI3ExSOG5HzlnTdewsS XxKNgXTBUivGiff+u5qvG+VdYy2VlND7TB1EN9rCLdU87fecdcRAFMz9vVTH+NBY KqwFIEkKPuhO2kn9P69s6Skop9NF0mqxzkgh9teZsJIP1pJokW3SBkpbR1ob1mpC z9Y9yf8qQJlzFsswxbclozckXafPP4wdD9HweBa2YRRSNINzfqa9Of91AHfCzbhV LSv8xKY30M496Y+YC8KB9sovPeAAD4C7Fc/yfWNgBnSeQ6fo4Nju5wxpL4R/ES/w 2u6FtAw8efy+dZeXN8P8zXw2XGAV87XKIa1QhF97sEFBS+gNYGQtEomYQifo4V4= -----END CERTIFICATE-----Generated at Tue Nov 25 17:33:42 2025 by rpki-client