Colin Percival
In case anyone else trips over this: There seems to be an IPv6 routing loop between us-west-2 and the network Let's Encrypt sends HTTP challenges from; this is causing renewals to fail. I've emailed the network engineering contact listed in ARIN whois.