This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa File: aed50b42-bf94-40d7-9054-a87b81e66319.roa (raw, json) Hash identifier: 4VS6it18M0UlWcYauEWjBn3bzt7HwVdbgt01QSWDQrI= Subject key identifier: 0E:1E:F9:CA:E8:75:58:A4:54:1C:D6:E5:46:80:9A:13:E6:FD:B6:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12C15FE67A260DB7E8E37DC5B212C6DF080BDB12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa Signing time: Thu 13 Nov 2025 00:20:11 +0000 ROA not before: Thu 13 Nov 2025 00:20:11 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb8:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c1:5f:e6:7a:26:0d:b7:e8:e3:7d:c5:b2:12:c6:df:08:0b:db:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 13 00:20:11 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=c7807c534cefa8e428b12cfa7cf99505c94851edbda06e6cfc1e11f983e2d1ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:c0:c2:a8:39:09:7e:2f:3f:2e:a7:0e:1a: b9:ae:73:88:ab:c6:26:d4:da:10:92:5b:88:3c:a9: 01:64:25:52:9f:e3:ab:56:39:26:06:07:08:34:34: a1:cf:cb:bc:e6:fa:5f:54:69:a6:7f:87:0c:45:28: 86:94:09:a0:42:4a:f6:cb:bd:89:d7:77:20:3c:fb: da:33:aa:ed:95:2e:3a:e4:3d:cc:5c:03:44:45:3b: 2f:2b:12:b2:49:a8:47:b4:dd:fc:98:e8:1e:82:ec: ae:8f:fc:73:e7:09:c0:65:6e:cb:fd:79:a4:26:fb: 1c:88:59:b6:9e:c9:69:96:91:d2:03:eb:61:93:56: cf:45:42:3e:3d:3a:15:2e:01:cf:3d:30:c9:d2:4c: 52:37:ef:d9:59:55:ba:8a:0a:d9:1a:b1:a2:de:89: 2d:94:d9:80:0d:32:59:2c:1b:bf:7c:66:20:70:89: cb:68:f1:93:ef:3c:7f:3e:3c:4d:07:18:d4:29:65: fd:40:56:63:7b:42:fd:6e:fb:c6:6d:dd:a3:37:5b: 29:b9:0c:e2:6c:76:d6:46:c3:34:84:9f:5a:2e:39: 84:21:f6:d6:d3:49:f9:97:42:6b:f1:46:04:2b:b7: 8d:a3:a3:43:9e:05:20:9e:88:5d:95:48:52:d0:a8: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:F9:CA:E8:75:58:A4:54:1C:D6:E5:46:80:9A:13:E6:FD:B6:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:5000::/40 Signature Algorithm: sha256WithRSAEncryption d2:1a:27:f7:ad:74:59:77:bc:b7:85:0e:d3:a4:7d:c0:5b:bc: ca:4f:98:3c:fd:40:0f:ed:be:10:5d:70:63:b2:9f:29:a7:17: 44:34:e9:8b:d7:6e:a7:c0:87:e3:53:da:a8:d7:d5:1f:be:29: 86:dc:2e:bb:bb:49:47:74:45:75:5a:e9:55:89:1a:64:61:46: df:73:3f:a0:32:b3:d3:af:7a:40:ac:be:7d:e9:34:13:e8:32: 03:27:db:a0:74:17:dc:7f:82:ce:2a:80:f7:e7:a7:b8:38:0a: 8e:9d:de:23:7f:31:a7:fb:d3:b5:7c:eb:4f:40:34:c8:f1:64: ea:eb:e6:b2:9b:5b:60:c4:c4:6a:ee:d8:47:42:9b:35:4a:3a: 04:55:f4:d8:76:d3:0e:5d:37:4a:e0:fc:bf:d0:39:d7:6e:7e: 2a:6f:af:97:49:b6:3d:30:a8:04:55:cb:2e:19:1c:9f:f6:d1: 0a:fc:e8:d7:3e:f6:fb:88:b7:62:a2:11:72:0d:31:f8:97:8b: 4c:43:0b:90:db:67:01:c4:ea:a7:ee:05:53:d8:31:55:68:8c: 71:ff:87:69:91:96:9a:10:d9:8d:46:89:8e:41:da:b3:88:88: f7:28:01:8b:ba:30:a3:97:44:ba:3d:1f:a1:0a:b8:76:c7:73: 3d:c0:b8:2a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEsFf5nomDbfo433FshLG3wgL2xIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAyMDExWhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzgwN2M1MzRjZWZhOGU0MjhiMTJjZmE3Y2Y5OTUwNWM5 NDg1MWVkYmRhMDZlNmNmYzFlMTFmOTgzZTJkMWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbGcDCqDkJfi8/LqcOGrmuc4irxibU2hCSW4g8qQFkJVKf 46tWOSYGBwg0NKHPy7zm+l9UaaZ/hwxFKIaUCaBCSvbLvYnXdyA8+9ozqu2VLjrk PcxcA0RFOy8rErJJqEe03fyY6B6C7K6P/HPnCcBlbsv9eaQm+xyIWbaeyWmWkdID 62GTVs9FQj49OhUuAc89MMnSTFI379lZVbqKCtkasaLeiS2U2YANMlksG798ZiBw icto8ZPvPH8+PE0HGNQpZf1AVmN7Qv1u+8Zt3aM3Wym5DOJsdtZGwzSEn1ouOYQh 9tbTSfmXQmvxRgQrt42jo0OeBSCeiF2VSFLQqL5nAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDh75yuh1WKRUHNblRoCaE+b9tigwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZDUwYjQyLWJmOTQtNDBkNy05MDU0LWE4N2I4MWU2NjMxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4UDANBgkqhkiG9w0BAQsFAAOCAQEA0hon9610WXe8t4UO06R9wFu8 yk+YPP1AD+2+EF1wY7KfKacXRDTpi9dup8CH41PaqNfVH74phtwuu7tJR3RFdVrp VYkaZGFG33M/oDKz0696QKy+fek0E+gyAyfboHQX3H+CziqA9+enuDgKjp3eI38x p/vTtXzrT0A0yPFk6uvmsptbYMTEau7YR0KbNUo6BFX02HbTDl03SuD8v9A5125+ Km+vl0m2PTCoBFXLLhkcn/bRCvzo1z72+4i3YqIRcg0x+JeLTEMLkNtnAcTqp+4F U9gxVWiMcf+HaZGWmhDZjUaJjkHas4iI9ygBi7owo5dEuj0foQq4dsdzPcC4Kg== -----END CERTIFICATE-----Generated at Tue Nov 25 17:33:05 2025 by rpki-client