This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa File: 7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa (raw, json) Hash identifier: XYp9XNk572g1djjuWuyFqU18PId3IDJHpMggbvETkrA= Subject key identifier: 10:B9:B4:0E:D0:A9:4A:13:09:A7:A6:91:4C:69:4B:6A:9A:6A:B1:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4542122A6EB0012F9E7E052AD19D654ED654CA8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa Signing time: Sat 08 Nov 2025 00:30:11 +0000 ROA not before: Sat 08 Nov 2025 00:30:11 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f69:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:12:2a:6e:b0:01:2f:9e:7e:05:2a:d1:9d:65:4e:d6:54:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:30:11 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=efe698deb50131d42cf5d4b68e038168dc91c669d7768a45a8bd9819ab431d51, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:56:0b:15:e1:dc:cb:95:fb:05:00:f9:7f: d1:81:b1:9c:34:5d:8e:bf:8d:0e:91:af:02:fd:66: 2b:38:fe:9d:fc:f5:b3:4f:98:d1:16:ff:b6:e8:b1: 46:18:66:83:2e:22:61:7c:8c:a7:bd:27:4c:e4:63: 75:3d:25:0e:9d:17:75:de:76:bb:7e:54:38:1f:31: 0c:7c:ee:1a:46:b9:09:57:5c:6b:eb:d2:a8:8f:74: e1:42:32:59:4d:9a:7b:5f:35:27:ae:c8:43:91:ad: 12:e7:e0:ba:9e:45:0a:8e:61:65:34:19:d1:82:3a: 59:8d:6b:b8:73:40:27:c6:e2:30:e4:56:cb:0c:31: 3c:e6:d9:29:aa:7b:5b:b4:e9:8b:4c:a5:d9:49:14: f8:87:c2:36:6b:21:68:0a:4c:f9:7d:9a:b1:5a:f8: f3:83:ac:56:46:94:71:6e:2f:74:e6:6d:dd:da:b9: bb:13:19:b0:8d:1e:98:ac:b5:7e:e7:03:00:f4:f2: a3:7b:f1:d5:60:ed:b3:d9:a8:44:94:94:bf:1b:45: 56:c8:d3:84:51:af:8c:46:86:3f:9b:f5:e3:cc:25: fc:34:a8:84:7a:1f:a8:76:08:b7:20:d1:87:a5:71: 39:ca:bb:8b:3b:c7:c3:7b:f5:2f:d7:12:0c:86:08: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:B4:0E:D0:A9:4A:13:09:A7:A6:91:4C:69:4B:6A:9A:6A:B1:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:5000::/40 Signature Algorithm: sha256WithRSAEncryption 57:87:9e:c2:ef:32:5b:12:a4:b8:a6:75:c4:7e:e9:4f:b5:8f: cb:86:0f:41:2c:41:e7:5e:97:19:20:0c:fc:f5:52:ac:2d:13: b5:c0:46:54:09:94:d1:c6:ec:39:22:1c:d5:35:eb:71:5b:b0: bd:b7:60:5c:9e:33:53:c6:91:cd:1d:19:1d:2d:76:90:b2:c7: 47:83:ba:36:bf:9f:03:c8:26:06:1e:03:61:d5:c5:79:20:24: a4:13:2a:c2:4d:b6:0e:8e:ef:f0:c9:72:55:10:c2:39:bc:c4: 86:67:69:6d:97:bb:c5:50:dd:e6:a8:4b:c6:d8:7a:88:9c:12: 84:a9:d5:9b:6a:64:36:22:8c:a5:7e:b6:fe:ca:c1:65:6f:55: ee:b0:09:74:0f:f5:a8:0c:50:d2:65:10:98:66:22:30:ad:1b: 0b:60:58:cd:11:ce:af:ca:2d:36:1a:83:e3:e0:1e:77:4d:d0: 24:2b:69:cb:1b:30:7d:7c:8d:b6:88:03:59:b1:3f:00:e2:e1: a6:08:28:27:1f:e4:e0:2b:33:d7:76:86:3d:39:36:bd:34:06: 91:7a:8b:9b:99:14:08:9f:b2:40:1d:02:25:49:8c:35:0c:30: d1:de:e4:f2:85:56:1e:d8:7e:5a:f9:2a:5c:39:0d:59:38:8f: bd:11:73:db -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURUISKm6wAS+efgUq0Z1lTtZUyo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDAzMDExWhcNMjUxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmU2OThkZWI1MDEzMWQ0MmNmNWQ0YjY4ZTAzODE2OGRj OTFjNjY5ZDc3NjhhNDVhOGJkOTgxOWFiNDMxZDUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLC1YLFeHcy5X7BQD5f9GBsZw0XY6/jQ6RrwL9Zis4/p38 9bNPmNEW/7bosUYYZoMuImF8jKe9J0zkY3U9JQ6dF3Xedrt+VDgfMQx87hpGuQlX XGvr0qiPdOFCMllNmntfNSeuyEORrRLn4LqeRQqOYWU0GdGCOlmNa7hzQCfG4jDk VssMMTzm2Smqe1u06YtMpdlJFPiHwjZrIWgKTPl9mrFa+PODrFZGlHFuL3Tmbd3a ubsTGbCNHpistX7nAwD08qN78dVg7bPZqESUlL8bRVbI04RRr4xGhj+b9ePMJfw0 qIR6H6h2CLcg0YelcTnKu4s7x8N79S/XEgyGCF7PAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUELm0DtCpShMJp6aRTGlLappqsXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmM2I2MjNmLWM2ODEtNGU2ZC05ZTYwLWY1MTFlMWViMjBjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pUDANBgkqhkiG9w0BAQsFAAOCAQEAV4eewu8yWxKkuKZ1xH7pT7WP y4YPQSxB516XGSAM/PVSrC0TtcBGVAmU0cbsOSIc1TXrcVuwvbdgXJ4zU8aRzR0Z HS12kLLHR4O6Nr+fA8gmBh4DYdXFeSAkpBMqwk22Do7v8MlyVRDCObzEhmdpbZe7 xVDd5qhLxth6iJwShKnVm2pkNiKMpX62/srBZW9V7rAJdA/1qAxQ0mUQmGYiMK0b C2BYzRHOr8otNhqD4+Aed03QJCtpyxswfXyNtogDWbE/AOLhpggoJx/k4Csz13aG PTk2vTQGkXqLm5kUCJ+yQB0CJUmMNQww0d7k8oVWHth+WvkqXDkNWTiPvRFz2w== -----END CERTIFICATE-----Generated at Tue Nov 25 17:34:40 2025 by rpki-client