This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24d65fb-b909-4e36-9e79-745efa491a43.roa File: b24d65fb-b909-4e36-9e79-745efa491a43.roa (raw, json) Hash identifier: TbiNGnTb0ln+FiGwNLSIH+mPjHVlCJsuKuKMEIFLIJ8= Subject key identifier: 3F:91:15:F1:39:FA:71:18:6F:04:40:96:27:C3:C1:E8:99:26:D7:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6829CE5C88E825EB70167EA80B2104E6AD2C6C08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24d65fb-b909-4e36-9e79-745efa491a43.roa Signing time: Thu 11 Dec 2025 00:20:06 +0000 ROA not before: Thu 11 Dec 2025 00:20:06 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f68:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:29:ce:5c:88:e8:25:eb:70:16:7e:a8:0b:21:04:e6:ad:2c:6c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:20:06 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=0b0cf0e0eef32b0208c82d1aa11750e8f95f996d898e973a9849dd9e95818822, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:71:6c:17:1a:be:04:00:5b:f9:de:e2:97:c1: 03:9f:ae:da:06:df:77:eb:d2:8d:d5:d1:8f:98:35: c3:f9:23:72:3b:ae:7f:e4:ea:81:ed:7e:a4:a4:35: b8:fd:0b:5a:7e:95:85:e6:58:18:46:9e:2e:9f:0b: a5:29:73:48:82:06:f9:d7:4d:7b:16:78:f3:da:c7: c7:c3:79:6f:a9:46:3d:4c:5c:1c:01:d3:8d:4e:c6: e7:d6:56:1d:08:02:c2:5b:d8:c3:8e:a3:c0:b0:90: 29:63:83:5d:b8:01:2c:d3:8d:91:66:80:d2:26:bf: 8e:20:59:4a:07:e8:ea:31:e6:18:17:0f:17:a1:2b: c6:90:72:a6:37:22:69:42:81:8c:4d:6e:38:06:4d: 5e:82:33:e3:88:2c:ae:bb:4f:77:cc:cd:2b:ca:36: d4:78:7d:b1:07:81:12:73:e3:22:58:1e:b0:63:46: 9b:31:97:64:c0:c1:51:8e:50:5e:95:1c:e6:55:44: 04:72:80:30:0a:e6:86:32:b0:ad:16:59:e1:e8:9b: 42:47:86:70:d2:87:ad:59:9d:14:25:65:7b:64:cf: df:ba:42:cc:d8:be:8c:19:f4:38:85:f0:e8:77:74: e4:f5:63:bf:b8:b3:d6:b8:e3:5f:c5:df:1f:47:82: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:15:F1:39:FA:71:18:6F:04:40:96:27:C3:C1:E8:99:26:D7:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24d65fb-b909-4e36-9e79-745efa491a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 7d:e2:60:b6:68:d7:c6:2f:c2:76:0e:8c:25:be:61:38:32:9a: 98:e5:60:5f:65:e6:a7:13:f7:17:1d:18:18:43:03:89:cb:95: 70:6a:69:1f:b8:f7:39:93:fc:46:6c:8a:82:10:67:6b:52:63: fe:6e:79:25:33:0f:4c:1d:b3:27:7b:d1:9a:79:6f:0d:d6:29: 9a:0f:c5:c2:13:a6:31:38:e3:3b:72:33:72:b7:b0:a5:ed:03: 5c:25:f7:fb:d8:fd:f7:9f:38:ef:57:b4:de:1d:77:d9:23:7e: cd:67:b0:3c:69:5d:2e:00:7e:25:d6:ab:1a:3f:47:24:04:5c: 34:d9:f4:66:36:c4:7a:76:c9:25:e8:a5:1e:0f:60:c1:c1:05: 8f:cc:ed:f3:7c:80:38:aa:91:a9:d1:3e:ec:bf:a3:b7:39:e6: ae:88:0a:a2:1d:a3:53:80:54:7c:fe:7e:5e:ba:93:f3:e9:81: 32:7c:3c:a5:73:20:57:ef:c9:f0:86:ad:a9:0c:a0:89:28:d2: 99:50:85:e9:3f:e1:bd:f5:c3:f9:4c:8a:c4:bc:c4:d0:05:bf: 75:6e:05:78:37:b2:d2:66:07:33:07:ed:da:ec:98:64:5a:49: 5a:ba:c9:1e:be:a7:7e:0d:ad:18:30:09:01:11:d4:d4:c5:af: f5:f5:61:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaCnOXIjoJetwFn6oCyEE5q0sbAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAyMDA2WhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjBjZjBlMGVlZjMyYjAyMDhjODJkMWFhMTE3NTBlOGY5 NWY5OTZkODk4ZTk3M2E5ODQ5ZGQ5ZTk1ODE4ODIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDicWwXGr4EAFv53uKXwQOfrtoG33fr0o3V0Y+YNcP5I3I7 rn/k6oHtfqSkNbj9C1p+lYXmWBhGni6fC6Upc0iCBvnXTXsWePPax8fDeW+pRj1M XBwB041OxufWVh0IAsJb2MOOo8CwkCljg124ASzTjZFmgNImv44gWUoH6Oox5hgX DxehK8aQcqY3ImlCgYxNbjgGTV6CM+OILK67T3fMzSvKNtR4fbEHgRJz4yJYHrBj Rpsxl2TAwVGOUF6VHOZVRARygDAK5oYysK0WWeHom0JHhnDSh61ZnRQlZXtkz9+6 QszYvowZ9DiF8Oh3dOT1Y7+4s9a441/F3x9Hgj2ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP5EV8Tn6cRhvBECWJ8PB6Jkm14IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyNGQ2NWZiLWI5MDktNGUzNi05ZTc5LTc0NWVmYTQ5MWE0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9oYMAwDQYJKoZIhvcNAQELBQADggEBAH3iYLZo18YvwnYOjCW+YTgy mpjlYF9l5qcT9xcdGBhDA4nLlXBqaR+49zmT/EZsioIQZ2tSY/5ueSUzD0wdsyd7 0Zp5bw3WKZoPxcITpjE44ztyM3K3sKXtA1wl9/vY/fefOO9XtN4dd9kjfs1nsDxp XS4AfiXWqxo/RyQEXDTZ9GY2xHp2ySXopR4PYMHBBY/M7fN8gDiqkanRPuy/o7c5 5q6ICqIdo1OAVHz+fl66k/PpgTJ8PKVzIFfvyfCGrakMoIko0plQhek/4b31w/lM isS8xNAFv3VuBXg3stJmBzMH7drsmGRaSVq6yR6+p34NrRgwCQER1NTFr/X1YXM= -----END CERTIFICATE-----Generated at Fri Jan 9 16:48:13 2026 by rpki-client