This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa File: e38c0ac9-7354-471e-a074-90a74b5b2052.roa (raw, json) Hash identifier: s9CsjdDTdC6ASwPLySRdwxpkOs3+mX7Mbswu+bf2RsM= Subject key identifier: 3C:97:24:61:37:AE:AE:3F:31:F3:DA:50:59:3C:24:C4:3C:10:C9:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FAD98E5FCFA4D2FA8BB3C47B6845AA1C4B07373 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa Signing time: Thu 13 Nov 2025 00:21:30 +0000 ROA not before: Thu 13 Nov 2025 00:21:30 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fed:6000::/40 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ad:98:e5:fc:fa:4d:2f:a8:bb:3c:47:b6:84:5a:a1:c4:b0:73:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 13 00:21:30 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=5b1d988e316d7630ebc57919e9f87d69dddc8ff9bda36bfee5379e273bb30259, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:06:1f:f5:7a:d2:f2:18:55:21:41:64:f3: cf:2d:ed:65:a0:5a:21:d1:9d:3f:f6:ed:13:01:60: 1b:91:10:15:cf:f6:2e:c8:54:bc:fe:95:79:e7:e5: b9:2e:3b:62:dc:90:10:40:22:59:73:c3:1e:62:e0: 1b:0c:a8:e2:7f:35:82:1b:01:8f:ce:80:19:cc:c7: 8e:a8:be:b3:2e:af:b4:8f:f5:7d:d2:d3:de:19:a1: b6:49:98:f0:11:d2:60:47:51:c3:06:15:e1:79:90: e6:9e:99:9b:a6:5d:a4:7e:db:ec:0a:e9:78:c1:bb: e3:e3:e2:09:aa:94:32:7d:b9:62:28:90:86:4f:2b: 31:6e:aa:91:82:74:3c:81:b5:e0:34:1f:74:3c:0e: be:9a:a9:01:48:96:a1:98:43:32:1c:60:16:01:3d: 1d:61:3e:f1:73:e4:ee:b1:16:50:a0:fc:d4:f4:ee: fe:48:7f:10:5e:d9:5d:2f:f4:8c:b7:b4:60:e7:5e: c0:fd:c0:54:78:37:6a:e6:c2:09:22:fa:1f:6e:a0: f2:bf:db:3b:a7:80:fb:90:cb:6d:75:5f:2e:2a:51: 0c:f3:3e:0e:43:ce:43:e5:d9:9b:47:5c:c1:d4:65: 79:a8:64:d9:7b:d1:a9:15:06:f4:d1:57:76:fe:d3: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:24:61:37:AE:AE:3F:31:F3:DA:50:59:3C:24:C4:3C:10:C9:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e38c0ac9-7354-471e-a074-90a74b5b2052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:6000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:c6:15:6b:a2:0e:37:98:4c:99:a6:9e:a8:8a:e8:99:f6:34: 85:ef:ad:d2:1b:0d:16:6f:6d:2d:cb:04:f2:6d:6d:76:e5:bb: 03:fd:3a:bf:d8:e4:ef:40:78:4f:64:76:14:db:76:85:77:35: 7c:9d:f2:64:2e:aa:08:75:c5:79:b4:84:65:3d:4d:a9:60:ee: 2d:7f:85:fd:d4:3a:ad:fd:e1:ee:30:73:fa:eb:b6:f2:59:db: a5:0a:a7:f3:e5:5f:80:c2:15:cb:76:b6:03:1b:a8:11:c8:84: 14:92:11:7a:0a:78:cf:d3:cf:c3:10:49:c8:95:af:85:10:b5: 78:c9:ce:d4:5c:2c:d8:19:21:d5:c9:33:e6:84:6d:95:f1:a9: 57:a0:31:c4:d1:92:32:6d:43:c3:ff:26:bb:88:03:30:c0:a3: 56:0f:25:3a:ff:24:3a:41:e6:39:6b:9e:ad:29:60:de:bf:31: 79:e3:86:b7:d1:11:e2:8d:3b:68:6b:93:13:21:6d:da:32:e6: 8c:d6:25:55:2d:ef:78:e9:1f:b6:ec:cd:63:04:d1:e8:d4:0a: f8:4f:90:59:d2:78:a8:0d:30:8b:88:df:4b:f7:74:67:20:d6: 3a:33:e1:21:39:e2:e8:5d:e6:0c:68:19:5e:74:81:36:8a:aa: f0:94:8c:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUf62Y5fz6TS+ouzxHtoRaocSwc3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAyMTMwWhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjFkOTg4ZTMxNmQ3NjMwZWJjNTc5MTllOWY4N2Q2OWRk ZGM4ZmY5YmRhMzZiZmVlNTM3OWUyNzNiYjMwMjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgZwYf9XrS8hhVIUFk888t7WWgWiHRnT/27RMBYBuREBXP 9i7IVLz+lXnn5bkuO2LckBBAIllzwx5i4BsMqOJ/NYIbAY/OgBnMx46ovrMur7SP 9X3S094ZobZJmPAR0mBHUcMGFeF5kOaemZumXaR+2+wK6XjBu+Pj4gmqlDJ9uWIo kIZPKzFuqpGCdDyBteA0H3Q8Dr6aqQFIlqGYQzIcYBYBPR1hPvFz5O6xFlCg/NT0 7v5IfxBe2V0v9Iy3tGDnXsD9wFR4N2rmwgki+h9uoPK/2zungPuQy211Xy4qUQzz Pg5DzkPl2ZtHXMHUZXmoZNl70akVBvTRV3b+05TlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPJckYTeurj8x89pQWTwkxDwQyTYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzOGMwYWM5LTczNTQtNDcxZS1hMDc0LTkwYTc0YjViMjA1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/tYDANBgkqhkiG9w0BAQsFAAOCAQEAj8YVa6ION5hMmaaeqIromfY0 he+t0hsNFm9tLcsE8m1tduW7A/06v9jk70B4T2R2FNt2hXc1fJ3yZC6qCHXFebSE ZT1NqWDuLX+F/dQ6rf3h7jBz+uu28lnbpQqn8+VfgMIVy3a2AxuoEciEFJIRegp4 z9PPwxBJyJWvhRC1eMnO1Fws2Bkh1ckz5oRtlfGpV6AxxNGSMm1Dw/8mu4gDMMCj Vg8lOv8kOkHmOWuerSlg3r8xeeOGt9ER4o07aGuTEyFt2jLmjNYlVS3veOkftuzN YwTR6NQK+E+QWdJ4qA0wi4jfS/d0ZyDWOjPhITni6F3mDGgZXnSBNoqq8JSMQg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:22 2025 by rpki-client