This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa File: e5c81786-0e97-4a99-b30c-884b01e282fe.roa (raw, json) Hash identifier: NKU/L9nL2kUllwQ9R30rvlj3C+nPwfz94AtGeayhoYA= Subject key identifier: 90:14:39:21:1A:D8:1F:81:3A:9A:E5:CE:57:BF:6D:99:03:F8:0D:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70950C8EDDA1CB6034D6FDE3C5A676E474D9BF29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa Signing time: Wed 12 Nov 2025 01:40:47 +0000 ROA not before: Wed 12 Nov 2025 01:40:47 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f70:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:0c:8e:dd:a1:cb:60:34:d6:fd:e3:c5:a6:76:e4:74:d9:bf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 01:40:47 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=ce3160765b14717d1b0e2e4817524ed563541f4ce96ef7b3bd71f9da3dd34a2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:80:ed:91:c1:e2:e1:9d:4d:76:99:70:ee: 7d:bb:46:79:bb:92:c6:77:1b:46:0d:9c:35:df:25: 1f:7d:e7:ca:2f:90:8b:8b:34:3a:c6:de:5b:0a:0d: 4f:e6:7a:b6:9d:92:33:26:b7:22:06:a2:e6:93:fd: 51:22:a3:48:a4:d4:68:17:1a:a6:b8:28:28:a2:fc: 01:16:58:4d:6a:b7:26:d6:00:63:b8:a4:d0:64:c8: 16:0a:0c:3a:e1:5e:58:0c:74:84:36:a9:71:e9:c3: 4e:87:7a:d7:d8:3e:07:01:36:12:c4:84:7a:ed:a5: 2c:64:52:da:27:bc:0f:81:a7:1b:ba:1b:fc:02:87: a3:31:81:2c:75:46:fa:c4:c9:d4:4a:3d:b2:fc:18: a8:07:a6:6e:35:a7:6e:0d:bc:40:c0:bd:a6:c0:f1: a1:89:d9:07:82:fc:e7:fa:ec:69:9d:9b:71:85:9e: 73:1b:cf:ab:bf:89:d4:30:bc:f3:ec:7b:b1:68:4e: 70:93:02:eb:44:13:2c:c2:d5:6d:c5:7f:da:ff:68: ff:e4:5f:a6:0f:36:96:96:90:6b:bc:58:1f:22:dc: c0:3a:0d:17:ff:2d:18:1f:ea:9e:c7:43:65:9f:b8: d6:ff:01:d9:4c:48:22:a2:7f:05:87:de:7c:e4:3c: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:39:21:1A:D8:1F:81:3A:9A:E5:CE:57:BF:6D:99:03:F8:0D:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:2000::/40 Signature Algorithm: sha256WithRSAEncryption 93:ae:a4:1b:fa:44:3e:c3:3d:10:ef:7f:1a:b0:27:23:76:df: 91:37:ab:f4:ad:e0:d8:b4:bd:03:49:da:ee:63:c5:c8:b9:aa: 6f:54:17:51:90:0b:62:03:6b:10:18:8e:b0:c5:ec:34:18:43: 13:c6:b7:ad:b3:aa:e3:b5:58:0b:af:20:e6:0b:ff:5f:e9:52: a3:0c:d8:f2:a0:57:fa:e3:1e:ed:6c:3b:3e:be:02:c4:33:a7: 07:32:e6:67:05:21:bb:cb:46:ee:b1:ab:90:ed:c8:ff:79:d3: a0:ab:c1:82:a9:5c:ea:de:50:34:df:c2:d7:5d:c8:1e:de:e5: 0c:86:8b:ba:4d:f2:56:13:92:b2:75:47:6c:95:a6:e6:40:53: 89:e1:13:a3:a2:20:b9:e5:92:64:7a:89:99:7c:fc:07:37:be: 9d:32:3f:c8:b1:ab:68:b0:a1:83:54:5a:55:7f:aa:e7:bf:6b: e8:56:5c:0d:d3:09:bb:2d:42:6b:ef:f0:6f:48:84:8d:8f:6c: f1:29:61:7e:37:a7:82:37:73:bf:59:e5:2b:58:62:f3:ed:bd: 8c:76:59:11:98:17:37:dd:8c:51:d5:69:cb:3e:bc:29:b3:9f: a9:66:56:ac:d5:d4:49:4c:11:9d:ed:3d:ef:df:10:35:2e:4c: 36:0e:63:09 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcJUMjt2hy2A01v3jxaZ25HTZvykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDE0MDQ3WhcNMjUxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTMxNjA3NjViMTQ3MTdkMWIwZTJlNDgxNzUyNGVkNTYz NTQxZjRjZTk2ZWY3YjNiZDcxZjlkYTNkZDM0YTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM4oDtkcHi4Z1Ndplw7n27Rnm7ksZ3G0YNnDXfJR9958ov kIuLNDrG3lsKDU/meradkjMmtyIGouaT/VEio0ik1GgXGqa4KCii/AEWWE1qtybW AGO4pNBkyBYKDDrhXlgMdIQ2qXHpw06HetfYPgcBNhLEhHrtpSxkUtonvA+Bpxu6 G/wCh6MxgSx1RvrEydRKPbL8GKgHpm41p24NvEDAvabA8aGJ2QeC/Of67Gmdm3GF nnMbz6u/idQwvPPse7FoTnCTAutEEyzC1W3Ff9r/aP/kX6YPNpaWkGu8WB8i3MA6 DRf/LRgf6p7HQ2WfuNb/AdlMSCKifwWH3nzkPAcpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkBQ5IRrYH4E6muXOV79tmQP4DdcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1YzgxNzg2LTBlOTctNGE5OS1iMzBjLTg4NGIwMWUyODJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wIDANBgkqhkiG9w0BAQsFAAOCAQEAk66kG/pEPsM9EO9/GrAnI3bf kTer9K3g2LS9A0na7mPFyLmqb1QXUZALYgNrEBiOsMXsNBhDE8a3rbOq47VYC68g 5gv/X+lSowzY8qBX+uMe7Ww7Pr4CxDOnBzLmZwUhu8tG7rGrkO3I/3nToKvBgqlc 6t5QNN/C113IHt7lDIaLuk3yVhOSsnVHbJWm5kBTieETo6IgueWSZHqJmXz8Bze+ nTI/yLGraLChg1RaVX+q579r6FZcDdMJuy1Ca+/wb0iEjY9s8Slhfjengjdzv1nl K1hi8+29jHZZEZgXN92MUdVpyz68KbOfqWZWrNXUSUwRne09798QNS5MNg5jCQ== -----END CERTIFICATE-----Generated at Tue Nov 25 17:33:39 2025 by rpki-client