This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa File: 5aab2439-03d3-439a-885f-e2f641886f3d.roa (raw, json) Hash identifier: BcCuPOPPdMTWIno4DA/Jdvw+NJ7SfDvPJKDrgZJyea8= Subject key identifier: 3C:5E:3F:00:85:A8:C9:A1:E9:BB:7E:A6:08:88:5D:62:E3:03:36:25 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 10C04272250EC868423A6CF3690194C26FCC7BED Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa Signing time: Tue 25 Nov 2025 19:50:11 +0000 ROA not before: Tue 25 Nov 2025 19:50:11 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c0:42:72:25:0e:c8:68:42:3a:6c:f3:69:01:94:c2:6f:cc:7b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 25 19:50:11 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=754ec9ae31d575e17859a60112ec681e245840b6a3b8b1b165b7fd5b386f2ce5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:b9:a9:c0:20:c7:f7:02:76:34:36:84:71: 8f:3a:ed:4f:93:07:41:20:ce:21:c8:bd:e0:df:e7: ad:e0:20:c5:f6:84:e0:e7:a1:aa:be:3a:5a:be:58: 2f:6a:44:df:c8:ca:53:a7:40:92:5f:f3:66:7e:7b: ca:c7:ef:ed:2a:81:ea:0c:b9:2b:d0:4e:78:7c:ee: e8:cd:13:fb:3f:90:2a:29:be:e8:d8:1c:88:2d:f5: 54:f4:38:d0:2a:29:f6:31:33:0c:49:98:20:a2:7e: 64:a9:13:45:d4:fb:c3:21:23:c7:0a:a2:79:e0:85: 9d:22:41:a6:87:87:71:86:78:13:90:b0:39:41:14: 3b:e1:95:9c:0e:c1:dd:cc:0e:fa:53:4b:2a:3e:9c: aa:c8:e0:e7:a9:b1:07:d3:ef:7c:85:80:5f:0a:c8: 55:0c:56:d7:5f:70:ba:1a:2b:31:4f:69:1d:eb:67: 3c:b1:64:b0:b5:77:1f:1e:5b:8c:2c:cf:4d:6c:54: c5:32:0d:fc:2b:46:04:b0:85:1d:71:36:26:09:9c: 5a:a6:6c:f9:1b:a8:66:75:68:2c:a4:7d:db:af:4f: c1:4b:5a:25:dc:72:70:5f:d8:b5:89:2e:b7:2d:c9: 2a:cc:14:f4:94:d2:c7:b3:2f:e3:ac:ce:fc:17:17: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:3F:00:85:A8:C9:A1:E9:BB:7E:A6:08:88:5D:62:E3:03:36:25 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f020::/44 Signature Algorithm: sha256WithRSAEncryption 5a:6e:aa:53:03:c9:6f:04:d0:dd:29:d4:c0:58:73:d3:39:d4: f2:a4:30:d9:5c:9d:b7:16:73:7e:a9:7f:49:fa:c2:e5:a4:af: a7:40:c7:49:fe:86:d8:47:a2:b5:4d:f0:e5:9a:a6:c2:56:f0: 91:3c:f3:da:54:89:09:2d:cd:9e:ef:c6:69:c6:5d:a3:2f:b8: c1:e0:07:ab:48:d2:47:33:7a:9d:ee:5f:a4:c5:54:db:05:c9: 9a:d6:74:cb:2d:78:43:cb:ba:55:23:a5:96:bb:e8:a3:a4:44: 59:d9:a6:57:de:c4:d1:bd:7b:e9:72:e3:e6:2f:f7:a2:87:ce: d6:19:ca:3b:8e:c2:46:42:bf:59:6a:d8:0c:45:91:2e:52:8a: e4:c2:1a:e2:8a:e5:45:05:67:ec:f5:1a:a2:0c:16:11:1e:f6: fd:4f:3b:f2:bf:db:55:32:d3:f0:c3:0b:42:20:dc:be:0b:f5: dd:29:f5:51:aa:69:ec:40:c3:fd:e2:a7:32:60:cf:77:08:b5: cc:31:14:da:de:2d:4f:15:c6:27:cc:f6:0f:9b:1d:49:a5:22: d3:1d:43:63:73:c1:3a:f0:6e:f8:8c:e2:cd:2f:f2:67:6a:9d: 5e:72:6b:2e:81:4b:f1:66:52:1a:bc:88:68:b0:f7:c0:4b:d8: 23:1d:d1:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEMBCciUOyGhCOmzzaQGUwm/Me+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk1MDExWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTRlYzlhZTMxZDU3NWUxNzg1OWE2MDExMmVjNjgxZTI0 NTg0MGI2YTNiOGIxYjE2NWI3ZmQ1YjM4NmYyY2U1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPZ7mpwCDH9wJ2NDaEcY867U+TB0EgziHIveDf563gIMX2 hODnoaq+Olq+WC9qRN/IylOnQJJf82Z+e8rH7+0qgeoMuSvQTnh87ujNE/s/kCop vujYHIgt9VT0ONAqKfYxMwxJmCCifmSpE0XU+8MhI8cKonnghZ0iQaaHh3GGeBOQ sDlBFDvhlZwOwd3MDvpTSyo+nKrI4OepsQfT73yFgF8KyFUMVtdfcLoaKzFPaR3r ZzyxZLC1dx8eW4wsz01sVMUyDfwrRgSwhR1xNiYJnFqmbPkbqGZ1aCykfduvT8FL WiXccnBf2LWJLrctySrMFPSU0sezL+OszvwXF9FPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPF4/AIWoyaHpu36mCIhdYuMDNiUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhYWIyNDM5LTAzZDMtNDM5YS04ODVmLWUyZjY0MTg4NmYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78CAwDQYJKoZIhvcNAQELBQADggEBAFpuqlMDyW8E0N0p1MBYc9M5 1PKkMNlcnbcWc36pf0n6wuWkr6dAx0n+hthHorVN8OWapsJW8JE889pUiQktzZ7v xmnGXaMvuMHgB6tI0kczep3uX6TFVNsFyZrWdMsteEPLulUjpZa76KOkRFnZplfe xNG9e+ly4+Yv96KHztYZyjuOwkZCv1lq2AxFkS5SiuTCGuKK5UUFZ+z1GqIMFhEe 9v1PO/K/21Uy0/DDC0Ig3L4L9d0p9VGqaexAw/3ipzJgz3cItcwxFNreLU8VxifM 9g+bHUmlItMdQ2NzwTrwbviM4s0v8mdqnV5yay6BS/FmUhq8iGiw98BL2CMd0dU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:27:35 2025 by rpki-client