This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa File: 5443f26e-949a-460a-b187-e26290bfcf24.roa (raw, json) Hash identifier: 12Hmu7ur0aSvvNSj1C2Yaj8+Q8ibF66DoAIhwU2/kk0= Subject key identifier: 2A:6C:E0:6D:FB:11:D8:29:FD:1D:51:CF:9B:4A:A9:20:13:31:9E:C7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 18A95694BBED2D711538749D5B874A728CA2437B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa Signing time: Sun 16 Nov 2025 00:50:58 +0000 ROA not before: Sun 16 Nov 2025 00:50:58 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a9:56:94:bb:ed:2d:71:15:38:74:9d:5b:87:4a:72:8c:a2:43:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 16 00:50:58 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=c74e45ee75ec24f345bf699fd88747c01dfbf574ae3b13b4ea36a9a06db90b86, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:fe:a5:e2:fa:ca:c7:5d:cf:1e:b6:1a:9c: 81:1f:75:28:c4:b4:f4:94:53:db:bd:27:10:ab:4e: 5d:db:5a:5b:b9:48:c5:5b:be:f7:52:ab:8f:ad:96: fb:45:80:b6:f4:16:47:b5:b7:d2:dd:5c:8b:59:58: ab:67:ee:c7:fb:1f:69:c4:85:a8:88:46:cd:6c:0d: 09:b1:a5:16:c4:28:88:07:a8:f2:76:fc:c4:eb:09: af:d7:5c:1b:6f:7b:a1:b9:71:8e:36:f0:9c:6d:44: c2:03:37:07:cf:35:c2:b2:a4:5b:ea:6a:bf:d3:b3: 5a:1b:23:c2:93:8c:41:ab:8a:db:d1:8b:14:65:e0: ac:d5:c2:56:90:94:88:5a:96:4b:cc:e0:9b:ff:54: fb:43:2f:62:53:0b:15:d7:1e:ef:05:1c:c2:6a:ff: bd:fb:0e:fd:3a:00:e9:78:4e:e5:2a:3b:f3:67:19: 4f:1d:77:13:d5:14:7c:1d:a6:c0:5f:d3:f0:d8:9c: 82:0c:80:ab:e9:38:8b:c8:07:de:30:d9:1f:1d:12: 79:b0:ee:16:1c:a7:9e:a7:bc:fc:af:05:84:d8:18: 54:7a:74:71:b2:f7:fb:66:6a:1f:cf:b4:95:f9:79: 0f:b8:61:a2:04:f4:35:21:c6:ef:38:24:72:b3:ba: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:E0:6D:FB:11:D8:29:FD:1D:51:CF:9B:4A:A9:20:13:31:9E:C7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4000::/44 Signature Algorithm: sha256WithRSAEncryption 55:c3:c1:02:4b:3a:93:4c:98:8f:b1:33:8d:17:ed:9c:69:21: 31:91:41:5c:3c:13:3f:6e:15:d8:f1:aa:74:8c:93:29:52:50: 45:cd:36:1c:0e:94:a7:d5:20:cc:16:c5:7f:e6:95:e3:19:ca: 92:35:4f:a3:01:64:eb:91:d7:7d:5d:7c:60:19:70:09:47:24: 44:0d:71:d4:fa:12:6e:c8:f1:f4:43:12:f2:a8:49:31:63:97: 72:68:b0:bb:35:de:87:f3:61:0e:da:39:73:18:da:42:f3:dc: 48:ea:31:e4:14:e3:2a:0a:eb:4a:0c:50:8c:69:4f:f8:e2:76: 04:14:a0:c1:a2:fb:15:95:7a:6a:f6:f8:38:b9:d5:3d:c7:be: 27:06:26:10:fe:ce:eb:45:5e:fb:6c:18:a7:65:d1:bd:26:33: 33:a8:79:d0:fa:8f:48:99:16:e3:aa:b4:a2:63:3c:e3:dd:5d: 93:08:26:e2:7c:92:b1:89:86:50:44:ea:c9:0d:48:6e:24:5d: 90:21:35:50:9b:fe:f6:15:ea:e1:56:95:00:9a:50:87:e8:34: 5a:f3:4d:a1:b6:1e:56:7c:38:c3:13:c4:07:72:34:9b:e8:5b: 45:56:f7:47:29:a7:ba:9f:39:bd:4b:bb:3a:97:cb:de:1c:97: e9:6c:5b:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGKlWlLvtLXEVOHSdW4dKcoyiQ3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE2MDA1MDU4WhcNMjUxMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzRlNDVlZTc1ZWMyNGYzNDViZjY5OWZkODg3NDdjMDFk ZmJmNTc0YWUzYjEzYjRlYTM2YTlhMDZkYjkwYjg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxuv6l4vrKx13PHrYanIEfdSjEtPSUU9u9JxCrTl3bWlu5 SMVbvvdSq4+tlvtFgLb0Fke1t9LdXItZWKtn7sf7H2nEhaiIRs1sDQmxpRbEKIgH qPJ2/MTrCa/XXBtve6G5cY428JxtRMIDNwfPNcKypFvqar/Ts1obI8KTjEGritvR ixRl4KzVwlaQlIhalkvM4Jv/VPtDL2JTCxXXHu8FHMJq/737Dv06AOl4TuUqO/Nn GU8ddxPVFHwdpsBf0/DYnIIMgKvpOIvIB94w2R8dEnmw7hYcp56nvPyvBYTYGFR6 dHGy9/tmah/PtJX5eQ+4YaIE9DUhxu84JHKzuorNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKmzgbfsR2Cn9HVHPm0qpIBMxnscwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU0NDNmMjZlLTk0OWEtNDYwYS1iMTg3LWUyNjI5MGJmY2YyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwQAAwDQYJKoZIhvcNAQELBQADggEBAFXDwQJLOpNMmI+xM40X7Zxp ITGRQVw8Ez9uFdjxqnSMkylSUEXNNhwOlKfVIMwWxX/mleMZypI1T6MBZOuR131d fGAZcAlHJEQNcdT6Em7I8fRDEvKoSTFjl3JosLs13ofzYQ7aOXMY2kLz3EjqMeQU 4yoK60oMUIxpT/jidgQUoMGi+xWVemr2+Di51T3HvicGJhD+zutFXvtsGKdl0b0m MzOoedD6j0iZFuOqtKJjPOPdXZMIJuJ8krGJhlBE6skNSG4kXZAhNVCb/vYV6uFW lQCaUIfoNFrzTaG2HlZ8OMMTxAdyNJvoW0VW90cpp7qfOb1LuzqXy94cl+lsW5M= -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:51 2025 by rpki-client