This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa File: 94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa (raw, json) Hash identifier: gd+5LBXIgOnOMaUELwTuW52N6k33XwdAq+d1Rk4Ix80= Subject key identifier: 1E:D1:FB:B4:D3:4F:58:9A:82:26:BD:E0:7E:CC:F2:64:EF:A1:86:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0217AB721938F786D49DB79E01C836B19A46E0CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa Signing time: Sun 07 Dec 2025 01:00:35 +0000 ROA not before: Sun 07 Dec 2025 01:00:35 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:ab:72:19:38:f7:86:d4:9d:b7:9e:01:c8:36:b1:9a:46:e0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 01:00:35 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=5a2e99cfa7e41d45160eaa35674bfb9fa7dc1feac87f9df10d0a53a023ebcab0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:a2:e5:5b:23:cd:66:55:5b:ce:74:0e:68: 15:61:0c:54:0f:4b:eb:6d:69:2a:dc:d8:14:ed:71: ec:0d:16:b7:2d:75:5d:68:64:65:b5:c7:b5:a8:6b: 18:ee:88:45:be:6d:c9:2f:ce:58:ec:11:43:64:92: 8e:46:90:8e:f4:fe:06:2a:d5:1c:48:7c:0d:3a:b4: 73:50:68:c6:2d:69:01:2f:34:41:19:80:9e:cf:7d: 9f:c4:8b:30:cd:50:56:26:c3:c8:ae:50:d1:0b:11: d1:e4:f9:1a:68:b1:b0:d5:a7:b0:f7:66:60:2d:ef: d2:95:5c:f5:bb:4c:6a:44:45:71:26:cc:d8:09:6e: 72:f4:52:d3:ff:14:5a:b7:e4:6b:04:fd:4f:ca:02: 9c:c5:c2:93:e8:dc:23:cc:86:3d:bd:18:30:6e:77: 49:ac:a0:78:48:f0:96:a2:ad:fb:d4:6f:04:eb:d5: 77:36:04:32:f8:71:b2:24:30:3a:d9:df:0e:7c:d1: 90:50:7a:83:13:e6:1f:cb:1f:9d:d1:f8:89:75:7e: 56:d3:ed:c3:a0:e8:53:40:85:eb:19:c4:9b:d6:08: 5e:a8:c4:64:d7:df:d5:02:91:f4:e4:bc:b5:28:6e: b2:18:c6:65:49:3e:ee:b4:7f:6e:1c:c8:10:63:9c: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D1:FB:B4:D3:4F:58:9A:82:26:BD:E0:7E:CC:F2:64:EF:A1:86:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4001::/48 Signature Algorithm: sha256WithRSAEncryption 17:aa:23:8d:80:24:e5:a4:53:49:f6:12:b8:0e:29:d6:bb:f4: 6f:e9:13:a1:a7:c6:9f:70:f9:df:5d:8c:4f:c2:35:76:f8:fa: d5:19:4a:4b:1f:2e:f9:5c:61:76:d6:47:06:c8:a8:ea:4e:86: 57:1c:98:83:59:26:fb:2a:4c:26:fd:79:fa:7e:f5:d5:b5:d3: c0:ac:31:33:26:24:2b:aa:c4:a4:c8:85:92:78:f8:27:1c:f3: 93:7d:ac:06:6b:73:f4:84:49:7e:cd:2b:94:83:4d:82:b7:fd: 68:17:cb:9c:51:88:ef:f9:bc:3e:04:f4:fa:de:fb:c6:48:70: 59:ef:07:2c:67:07:ec:01:da:78:8e:0d:2b:ec:60:b3:b6:5b: c5:76:af:6f:e0:33:8e:87:02:ac:c4:d6:a9:07:14:e2:2e:6a: 1b:2e:e9:9a:33:2e:c0:ad:ca:3c:a1:cf:6d:48:1b:35:46:40: 3e:13:ce:da:b9:b2:5d:38:0f:b2:f0:ea:78:1c:4f:44:7c:a6: bb:14:7b:4f:a7:bf:99:6f:ed:ef:2c:a7:d6:d4:26:56:1d:0f: cb:82:cb:4a:41:a1:a5:71:8d:05:b4:6a:2b:94:bb:45:dd:5a: 7b:bc:9a:74:ae:ea:51:e7:6a:07:ff:6a:79:4f:b5:67:29:28: 9a:7a:ad:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAherchk494bUnbeeAcg2sZpG4M8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDEwMDM1WhcNMjYwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTJlOTljZmE3ZTQxZDQ1MTYwZWFhMzU2NzRiZmI5ZmE3 ZGMxZmVhYzg3ZjlkZjEwZDBhNTNhMDIzZWJjYWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtQaLlWyPNZlVbznQOaBVhDFQPS+ttaSrc2BTtcewNFrct dV1oZGW1x7WoaxjuiEW+bckvzljsEUNkko5GkI70/gYq1RxIfA06tHNQaMYtaQEv NEEZgJ7PfZ/EizDNUFYmw8iuUNELEdHk+RposbDVp7D3ZmAt79KVXPW7TGpERXEm zNgJbnL0UtP/FFq35GsE/U/KApzFwpPo3CPMhj29GDBud0msoHhI8JairfvUbwTr 1Xc2BDL4cbIkMDrZ3w580ZBQeoMT5h/LH53R+Il1flbT7cOg6FNAhesZxJvWCF6o xGTX39UCkfTkvLUobrIYxmVJPu60f24cyBBjnHqZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHtH7tNNPWJqCJr3gfszyZO+hhuwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0ZDlkM2JiLWFmZDUtNGU3ZC1hYTAwLWZiM2JlNTYxYmVkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHQAEwDQYJKoZIhvcNAQELBQADggEBABeqI42AJOWkU0n2ErgOKda7 9G/pE6Gnxp9w+d9djE/CNXb4+tUZSksfLvlcYXbWRwbIqOpOhlccmINZJvsqTCb9 efp+9dW108CsMTMmJCuqxKTIhZJ4+Ccc85N9rAZrc/SESX7NK5SDTYK3/WgXy5xR iO/5vD4E9Pre+8ZIcFnvByxnB+wB2niODSvsYLO2W8V2r2/gM46HAqzE1qkHFOIu ahsu6ZozLsCtyjyhz21IGzVGQD4Tztq5sl04D7Lw6ngcT0R8prsUe0+nv5lv7e8s p9bUJlYdD8uCy0pBoaVxjQW0aiuUu0XdWnu8mnSu6lHnagf/anlPtWcpKJp6rdk= -----END CERTIFICATE-----Generated at Fri Jan 2 12:24:07 2026 by rpki-client