This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa File: 3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa (raw, json) Hash identifier: /sv2qkAWIdplIUP2hP8G+4n3VKiFyu2jShxzGVHLKQg= Subject key identifier: 96:46:CB:74:63:22:AE:C7:E4:80:7A:31:E4:C6:77:90:17:2C:FA:7F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4C25E442171DFF7B353FEDE247A30841E2B39AEE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa Signing time: Tue 25 Nov 2025 19:40:08 +0000 ROA not before: Tue 25 Nov 2025 19:40:08 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:25:e4:42:17:1d:ff:7b:35:3f:ed:e2:47:a3:08:41:e2:b3:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 25 19:40:08 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=0ddc05393d997066f0b4e47191b83709d475eabaefcf87549420d4ecc574d916, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a8:a6:4c:cb:eb:72:e0:88:a1:0c:15:50:64: 4f:e1:98:cd:b6:a7:2d:8e:45:06:f4:b5:74:7e:05: 05:37:9c:fa:f1:bf:f7:54:bf:62:2d:ea:43:25:97: cc:b3:8a:3f:05:82:32:72:58:2a:7c:83:7e:10:6b: 48:04:86:0d:d6:24:9a:35:6b:eb:de:ca:0b:db:45: 35:20:8c:3c:f0:59:55:8c:e3:15:de:b3:61:e7:af: 7a:93:2f:95:53:d4:83:3f:1d:08:5c:aa:fc:f1:34: 7c:c2:6f:a4:f6:53:94:1b:93:b2:81:07:24:c7:14: c5:22:95:00:df:d2:46:06:8f:6d:80:15:74:03:96: 6c:ff:9c:e3:f3:a6:a7:5b:e4:3e:a7:90:e6:6c:13: 95:eb:4d:c2:a3:05:bf:90:87:60:50:fc:af:68:96: af:18:6f:cf:3a:c1:d5:b0:a7:25:02:41:9a:0f:ce: 0e:d0:68:75:b5:0b:85:67:22:26:11:b7:b6:19:bd: 48:6b:1f:e1:4f:89:df:4d:ac:1b:db:69:7d:83:82: 16:b6:6b:77:fa:f7:d5:24:fb:93:e8:e1:dc:a0:3c: 97:12:18:34:61:73:83:4d:2a:02:85:03:33:88:a4: e6:54:8f:7e:24:08:89:40:1f:96:96:d8:42:52:8c: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:46:CB:74:63:22:AE:C7:E4:80:7A:31:E4:C6:77:90:17:2C:FA:7F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 1a:8e:55:8f:7d:9e:da:9b:b4:b9:39:71:b4:8b:c0:83:a9:6f: cd:d1:cc:63:9f:d8:36:0b:e6:37:8b:91:f8:21:05:5d:bb:9c: 20:bb:12:18:28:59:f0:50:80:24:84:34:30:17:47:9a:0c:c6: 3d:69:6d:5b:34:41:1e:11:df:29:4c:c6:f5:32:c1:e7:e5:d0: 98:2f:13:95:c0:71:1a:fb:65:10:26:3e:97:0a:71:ba:b4:ab: b3:9e:70:84:39:f4:8b:74:9a:9f:85:d4:15:dd:7c:9d:2b:5d: 29:bc:42:33:3a:e6:74:5f:e1:e7:0c:22:74:93:6f:fd:42:97: d2:7c:3a:e9:52:c7:13:b3:98:94:18:7b:db:ca:49:9d:8d:ae: 02:1a:44:d0:c0:12:f1:02:e7:89:12:d5:86:21:50:42:ea:79: ae:da:9c:b3:2e:61:a8:ae:49:36:a1:38:e8:95:f9:57:f8:51: 7f:3d:5d:19:ca:3a:cf:2f:ad:e6:23:03:ee:1c:a0:95:88:65: ec:97:7f:88:e6:bf:49:18:95:40:7c:6f:a6:dc:93:a7:b3:da: 65:c7:ea:f0:8e:a7:b8:b2:bb:b7:60:7e:c9:9a:63:c4:b3:99: b5:43:83:ed:6f:c1:c0:f1:71:90:8a:69:26:79:ae:e0:e8:ab: e6:0d:4c:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTCXkQhcd/3s1P+3iR6MIQeKzmu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk0MDA4WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGRjMDUzOTNkOTk3MDY2ZjBiNGU0NzE5MWI4MzcwOWQ0 NzVlYWJhZWZjZjg3NTQ5NDIwZDRlY2M1NzRkOTE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfqKZMy+ty4IihDBVQZE/hmM22py2ORQb0tXR+BQU3nPrx v/dUv2It6kMll8yzij8FgjJyWCp8g34Qa0gEhg3WJJo1a+veygvbRTUgjDzwWVWM 4xXes2Hnr3qTL5VT1IM/HQhcqvzxNHzCb6T2U5Qbk7KBByTHFMUilQDf0kYGj22A FXQDlmz/nOPzpqdb5D6nkOZsE5XrTcKjBb+Qh2BQ/K9olq8Yb886wdWwpyUCQZoP zg7QaHW1C4VnIiYRt7YZvUhrH+FPid9NrBvbaX2Dgha2a3f699Uk+5Po4dygPJcS GDRhc4NNKgKFAzOIpOZUj34kCIlAH5aW2EJSjHlPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlkbLdGMirsfkgHox5MZ3kBcs+n8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNkNDYwMmMwLTk1OTktNDMyNS1iYThkLWRjOGIxOWM2YzI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBABqOVY99ntqbtLk5cbSLwIOp b83RzGOf2DYL5jeLkfghBV27nCC7EhgoWfBQgCSENDAXR5oMxj1pbVs0QR4R3ylM xvUywefl0JgvE5XAcRr7ZRAmPpcKcbq0q7OecIQ59It0mp+F1BXdfJ0rXSm8QjM6 5nRf4ecMInSTb/1Cl9J8OulSxxOzmJQYe9vKSZ2NrgIaRNDAEvEC54kS1YYhUELq ea7anLMuYaiuSTahOOiV+Vf4UX89XRnKOs8vreYjA+4coJWIZeyXf4jmv0kYlUB8 b6bck6ez2mXH6vCOp7iyu7dgfsmaY8SzmbVDg+1vwcDxcZCKaSZ5ruDoq+YNTDw= -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:35 2025 by rpki-client