This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa File: 5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa (raw, json) Hash identifier: SRNYlYm5ndXfXoWp4KBQVz5SvMhwtj58YaL2EltRsr8= Subject key identifier: D0:D1:F6:95:9A:EE:E8:DE:A3:F8:8D:0A:BF:C5:A1:7B:EA:D7:5D:51 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3EED7041358A92EA9F3C0784785B72FB468A7E4C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa Signing time: Wed 10 Dec 2025 05:00:46 +0000 ROA not before: Wed 10 Dec 2025 05:00:46 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ed:70:41:35:8a:92:ea:9f:3c:07:84:78:5b:72:fb:46:8a:7e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 05:00:46 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=bcfd616a03bcbf3a298f9883579de37d04a4bdd9e86c3ad7195557ac45539b86, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:25:52:06:6a:3b:00:b5:b7:dd:1f:d2:c6: 6e:a4:a0:f4:9a:ac:e1:24:64:da:69:03:ba:c4:c2: 60:fe:50:9a:45:11:92:e5:e0:88:53:0a:0e:60:83: e5:7b:a0:52:08:48:81:3c:f3:fa:71:80:67:68:2d: fa:ff:bb:f6:84:08:1f:02:06:4f:40:8e:32:82:71: 23:69:b2:7e:b7:4c:6b:00:f7:24:60:07:05:6e:9b: e7:4b:c0:5a:e1:64:78:ad:0a:34:90:0d:fc:bf:f4: 9b:be:9a:44:07:0a:e8:fd:1d:76:b4:3b:a7:f4:f2: b3:62:21:cd:97:1c:57:5e:52:b9:56:da:46:13:46: d9:bd:5d:53:fe:bd:13:8a:a2:ca:90:8f:3e:02:09: d0:03:4d:b8:b4:f6:fc:cd:1a:ee:c7:9e:fc:b4:62: 1c:90:17:ea:43:6a:29:12:1f:bf:e7:b5:8f:bf:fa: 31:9f:57:c9:4b:fc:24:57:7b:d1:4a:c7:40:5e:c2: 5c:96:f1:6e:10:4c:4c:ee:ff:49:71:32:cd:8d:74: 22:81:a9:89:df:2a:46:c3:88:d4:5d:09:ce:bc:b6: 48:4a:83:49:69:a5:ed:38:a2:f5:ac:79:48:8b:f7: 91:c4:cf:4b:0e:8d:db:be:39:8f:ef:12:36:ac:4d: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:F6:95:9A:EE:E8:DE:A3:F8:8D:0A:BF:C5:A1:7B:EA:D7:5D:51 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/40 Signature Algorithm: sha256WithRSAEncryption 53:8c:3c:0d:e4:8d:19:13:de:f4:9f:e8:43:ea:46:c5:ba:30: 91:05:b9:10:e4:62:b6:a5:fd:cd:14:4f:42:e2:6f:ce:c1:f0: 5f:bb:18:87:ca:68:3f:23:9d:bf:d0:b1:8c:03:63:7c:3b:80: cb:53:9b:f9:81:29:36:f9:0b:d4:76:93:94:32:9c:28:08:66: 9f:65:3b:3a:d4:9f:6a:19:3b:84:d4:a9:8a:d7:97:7f:ae:8d: 93:b0:49:a7:b8:54:97:9c:93:8a:d5:98:ce:a9:db:67:35:65: d9:c9:37:65:15:84:bc:35:6c:15:21:26:95:89:fb:19:08:60: ea:6b:0c:75:f0:7f:6f:8c:27:a7:4f:85:4f:a1:7b:13:3a:88: 13:8e:cc:60:b6:c2:95:ba:b1:74:90:b0:64:ec:c0:5b:0d:a9: cd:2d:3e:90:ce:36:db:d4:0b:e6:df:37:02:f1:a5:d9:d7:92: a9:d6:b3:27:20:21:d1:f9:94:df:eb:ce:64:b5:d4:8f:a2:ed: 0d:a3:15:38:d4:75:cf:71:bb:38:5d:cf:7a:61:ed:74:0e:ff: 02:d6:96:08:17:12:25:0c:75:5b:4f:51:d4:76:dd:13:13:15: c7:7e:6c:94:83:85:17:2f:6e:42:78:56:69:84:a2:fe:0b:ac: 61:5f:e6:4a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPu1wQTWKkuqfPAeEeFty+0aKfkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUwMDQ2WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2ZkNjE2YTAzYmNiZjNhMjk4Zjk4ODM1NzlkZTM3ZDA0 YTRiZGQ5ZTg2YzNhZDcxOTU1NTdhYzQ1NTM5Yjg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP+yVSBmo7ALW33R/Sxm6koPSarOEkZNppA7rEwmD+UJpF EZLl4IhTCg5gg+V7oFIISIE88/pxgGdoLfr/u/aECB8CBk9AjjKCcSNpsn63TGsA 9yRgBwVum+dLwFrhZHitCjSQDfy/9Ju+mkQHCuj9HXa0O6f08rNiIc2XHFdeUrlW 2kYTRtm9XVP+vROKosqQjz4CCdADTbi09vzNGu7Hnvy0YhyQF+pDaikSH7/ntY+/ +jGfV8lL/CRXe9FKx0BewlyW8W4QTEzu/0lxMs2NdCKBqYnfKkbDiNRdCc68tkhK g0lppe04ovWseUiL95HEz0sOjdu+OY/vEjasTUAfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0NH2lZru6N6j+I0Kv8Whe+rXXVEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUyMTFiYmZhLWMyNmMtNDRmOC05NmIyLWE5MjgyY2ZkNjFhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74TANBgkqhkiG9w0BAQsFAAOCAQEAU4w8DeSNGRPe9J/oQ+pGxbow kQW5EORitqX9zRRPQuJvzsHwX7sYh8poPyOdv9CxjANjfDuAy1Ob+YEpNvkL1HaT lDKcKAhmn2U7OtSfahk7hNSpiteXf66Nk7BJp7hUl5yTitWYzqnbZzVl2ck3ZRWE vDVsFSEmlYn7GQhg6msMdfB/b4wnp0+FT6F7EzqIE47MYLbClbqxdJCwZOzAWw2p zS0+kM4229QL5t83AvGl2deSqdazJyAh0fmU3+vOZLXUj6LtDaMVONR1z3G7OF3P emHtdA7/AtaWCBcSJQx1W09R1HbdExMVx35slIOFFy9uQnhWaYSi/gusYV/mSg== -----END CERTIFICATE-----Generated at Wed Dec 17 22:24:58 2025 by rpki-client