This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa File: 94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa (raw, json) Hash identifier: NtLzMAsfc/nfXcQsBsdBZJUWe2Sov7qp1cOD3lLCFc8= Subject key identifier: CE:11:38:29:A8:40:1B:0E:5A:D2:52:94:4F:04:69:8A:73:71:90:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43DEEB3AE8309D3382A181DE600B60D26855D799 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa Signing time: Sun 23 Nov 2025 01:10:07 +0000 ROA not before: Sun 23 Nov 2025 01:10:07 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff3:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:de:eb:3a:e8:30:9d:33:82:a1:81:de:60:0b:60:d2:68:55:d7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 01:10:07 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=25aa4b044ba852a452b383644c582ff341f2882141c3b93213cdf6edbfc58530, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:15:e2:d0:7d:b6:6b:42:64:a3:8b:34:04: 63:43:1b:9e:b4:0e:44:56:37:42:13:13:8e:8b:1a: c8:f1:a6:9b:d3:d2:be:3f:77:3c:0b:4b:9e:65:0f: 84:e3:23:8f:3a:c2:48:08:b4:45:cb:40:9e:26:0a: e7:6e:99:84:9a:67:ba:c4:01:3d:a4:8b:13:65:2f: 7a:59:e6:cf:ac:7e:15:08:d7:f3:19:88:db:ef:ae: 40:6a:18:e2:01:fa:72:67:a5:30:c8:06:0b:e5:81: df:ff:32:73:10:e2:a9:3b:45:56:c4:76:79:1c:1c: 6d:79:1a:7a:e4:74:71:ac:e2:5d:64:82:a1:f3:81: cd:d7:4d:e7:5c:27:57:4a:92:54:8f:7a:e8:f4:6b: 0e:49:c6:93:2d:11:27:8a:5b:1e:a7:ad:6a:1a:af: 1e:b2:bc:ae:39:03:80:d9:9c:dd:42:5e:18:b5:28: 07:71:9a:27:06:cd:6d:33:46:5e:76:31:de:ff:69: 1e:5f:c5:70:be:6c:36:34:d6:e8:f5:6b:9b:ed:77: fe:5f:e8:fb:90:0a:71:49:a2:80:7a:25:f8:b6:8b: a5:97:6b:b5:42:b6:59:df:0c:9f:81:4e:5d:0c:2b: 02:15:2f:f7:b8:98:be:f2:21:78:65:40:49:b8:32: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:38:29:A8:40:1B:0E:5A:D2:52:94:4F:04:69:8A:73:71:90:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:5000::/40 Signature Algorithm: sha256WithRSAEncryption 52:a0:d1:7e:c9:5e:ba:1e:3b:dd:f6:d7:49:c6:b2:fe:94:f6: 71:08:25:74:85:39:a0:ec:d3:0b:57:34:1f:67:26:53:c1:05: 27:3d:11:f0:26:0b:75:6c:38:45:72:5c:5d:a2:28:12:59:37: 8a:a8:ed:ed:54:b5:61:93:f0:92:e9:51:92:ad:cc:ea:76:da: 2a:cd:04:64:44:4c:75:e2:07:61:13:ac:94:11:8f:9c:75:e5: 50:b3:de:3c:53:7d:80:c0:5b:73:fd:fb:64:ac:a4:49:29:3a: 84:cf:de:7a:f7:c5:d3:e6:77:dc:dd:f9:71:90:e4:0c:55:67: 9f:34:cb:f7:dd:d2:54:2f:ae:93:2f:4d:23:39:a5:04:24:46: 44:2a:cd:ab:5e:73:9d:59:0e:99:4e:e7:2b:2d:c2:13:b0:9d: ae:49:bc:7e:34:34:32:a8:43:04:8a:c4:ac:b1:03:7a:f9:8a: 64:d7:12:f1:26:8d:34:29:f3:c2:56:89:51:79:19:5b:c0:34: ca:4d:cf:75:0c:45:d1:f6:6b:76:2b:c3:ba:48:bd:ad:41:2c: 66:32:c0:f3:80:84:55:4e:c7:f0:c5:49:2e:ce:e5:88:e9:b8: fb:ec:f9:8a:0d:e0:1e:2c:5a:ea:a2:b2:52:b3:8f:94:a8:df: 5b:98:f3:ee -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ97rOugwnTOCoYHeYAtg0mhV15kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDExMDA3WhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWFhNGIwNDRiYTg1MmE0NTJiMzgzNjQ0YzU4MmZmMzQx ZjI4ODIxNDFjM2I5MzIxM2NkZjZlZGJmYzU4NTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5ORXi0H22a0Jko4s0BGNDG560DkRWN0ITE46LGsjxppvT 0r4/dzwLS55lD4TjI486wkgItEXLQJ4mCudumYSaZ7rEAT2kixNlL3pZ5s+sfhUI 1/MZiNvvrkBqGOIB+nJnpTDIBgvlgd//MnMQ4qk7RVbEdnkcHG15GnrkdHGs4l1k gqHzgc3XTedcJ1dKklSPeuj0aw5JxpMtESeKWx6nrWoarx6yvK45A4DZnN1CXhi1 KAdxmicGzW0zRl52Md7/aR5fxXC+bDY01uj1a5vtd/5f6PuQCnFJooB6Jfi2i6WX a7VCtlnfDJ+BTl0MKwIVL/e4mL7yIXhlQEm4MkgJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzhE4KahAGw5a0lKUTwRpinNxkNQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0ZWEzMzM2LTJiYTMtNGVjYi05NGU1LTc1NmE4YmJiY2FlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/zUDANBgkqhkiG9w0BAQsFAAOCAQEAUqDRfsleuh473fbXScay/pT2 cQgldIU5oOzTC1c0H2cmU8EFJz0R8CYLdWw4RXJcXaIoElk3iqjt7VS1YZPwkulR kq3M6nbaKs0EZERMdeIHYROslBGPnHXlULPePFN9gMBbc/37ZKykSSk6hM/eevfF 0+Z33N35cZDkDFVnnzTL993SVC+uky9NIzmlBCRGRCrNq15znVkOmU7nKy3CE7Cd rkm8fjQ0MqhDBIrErLEDevmKZNcS8SaNNCnzwlaJUXkZW8A0yk3PdQxF0fZrdivD uki9rUEsZjLA84CEVU7H8MVJLs7liOm4++z5ig3gHixa6qKyUrOPlKjfW5jz7g== -----END CERTIFICATE-----Generated at Tue Nov 25 17:33:08 2025 by rpki-client