This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa File: 5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa (raw, json) Hash identifier: /ihMp25rQNXrub7MeU/2v9u3EmlBRfDVvvP7Yht/QcE= Subject key identifier: 8C:35:4D:9E:4F:AC:AD:C2:70:32:FD:96:C9:D1:6C:C5:5C:20:5A:4E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 28B9107CD8BF86584B53770DF1A8F93485375BCC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa Signing time: Sat 15 Nov 2025 05:00:33 +0000 ROA not before: Sat 15 Nov 2025 05:00:33 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b9:10:7c:d8:bf:86:58:4b:53:77:0d:f1:a8:f9:34:85:37:5b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:00:33 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=afffc6292f0b6a71bcfcdd52665d7607e16c455a0874675dfd770fbdbd261fac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:da:ec:e5:74:d1:41:ee:fb:27:f4:90:d6: e0:38:98:b7:f3:36:18:7f:4d:75:80:e7:c7:4e:41: 56:22:ca:6f:60:cb:b9:b4:74:3d:aa:4e:35:f9:89: 9e:d5:e9:cc:26:e7:d9:a7:d7:5b:85:27:41:26:0f: 71:bd:0c:4a:a5:5d:2c:57:29:97:20:2c:b7:02:42: 26:c7:e2:24:5c:bb:2a:07:32:6c:ae:64:6e:45:80: 55:b5:ed:c0:59:fe:1a:8c:23:89:ae:4b:45:f4:90: 31:5e:48:c0:e5:e8:d3:d1:7b:b6:09:37:59:16:ec: 68:11:55:1c:bf:6d:79:ac:0c:ec:37:4f:28:e5:66: df:d4:53:10:b0:d8:8b:6e:31:20:39:dc:80:cf:95: ba:dc:c6:d0:b6:30:21:76:60:d5:f8:6b:f1:61:38: b7:81:99:53:ba:0b:0e:f2:48:86:55:a8:f1:26:72: 45:c3:f9:d0:f5:34:4d:d6:d3:a0:90:77:ce:0e:2a: fd:b5:ad:53:d7:b6:14:f2:a9:d4:f9:37:5b:03:12: 09:e8:f0:77:49:1f:b3:39:ea:84:0a:4b:0a:86:b5: 55:99:4e:08:29:5e:c8:d8:bb:06:0c:2d:8f:02:83: 4d:26:04:30:4c:50:f8:7e:09:7a:8c:f6:33:d3:b3: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:35:4D:9E:4F:AC:AD:C2:70:32:FD:96:C9:D1:6C:C5:5C:20:5A:4E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 0e:28:b6:88:9a:ee:4d:f2:65:b2:a4:e9:53:28:d1:16:e8:f9: e2:62:92:7f:d3:39:ce:ea:bc:8f:53:31:4c:d3:16:b5:e5:61: c3:4a:c5:a0:59:02:82:1d:96:54:82:d0:ce:a9:e5:20:9c:04: 1f:1c:9d:22:4b:bc:d7:4a:b7:ae:d4:72:1e:1c:05:93:05:ec: c9:67:ee:28:5e:26:f6:f6:18:5a:20:09:eb:84:d0:01:40:56: f1:05:3a:5f:b8:5e:ed:e1:d0:74:73:cc:b3:84:fa:fe:e5:f2: f0:1f:9f:8c:85:73:06:dc:44:71:a9:0d:ce:26:67:ce:53:09: c9:4c:25:84:3b:0f:a5:2d:8e:b3:2f:a4:a3:19:ea:c5:7c:cc: 4c:99:73:36:b2:5c:ff:65:6f:91:86:18:b3:1e:9a:b3:2a:86: c0:08:94:47:e9:f0:13:4d:aa:4f:c5:4f:9a:29:7c:3d:0f:7c: 39:fa:50:30:64:4d:81:f4:32:42:b4:e4:1b:04:f8:22:0d:99: eb:34:d2:c6:cf:65:53:7b:7c:01:af:1d:14:44:04:2f:32:55: 4f:02:9a:8b:ad:00:bd:ec:d3:cc:d1:0e:33:d5:c2:a5:06:02: 1d:c4:58:a6:b0:18:0a:dc:2f:d1:cf:b4:ae:69:ce:1c:bb:2e: a5:b9:f4:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKLkQfNi/hlhLU3cN8aj5NIU3W8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDMzWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmZmYzYyOTJmMGI2YTcxYmNmY2RkNTI2NjVkNzYwN2Ux NmM0NTVhMDg3NDY3NWRmZDc3MGZiZGJkMjYxZmFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Ptrs5XTRQe77J/SQ1uA4mLfzNhh/TXWA58dOQVYiym9g y7m0dD2qTjX5iZ7V6cwm59mn11uFJ0EmD3G9DEqlXSxXKZcgLLcCQibH4iRcuyoH MmyuZG5FgFW17cBZ/hqMI4muS0X0kDFeSMDl6NPRe7YJN1kW7GgRVRy/bXmsDOw3 TyjlZt/UUxCw2ItuMSA53IDPlbrcxtC2MCF2YNX4a/FhOLeBmVO6Cw7ySIZVqPEm ckXD+dD1NE3W06CQd84OKv21rVPXthTyqdT5N1sDEgno8HdJH7M56oQKSwqGtVWZ TggpXsjYuwYMLY8Cg00mBDBMUPh+CXqM9jPTsyPvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjDVNnk+srcJwMv2WydFsxVwgWk4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhZTM1N2UxLWVmOTUtNGY1Zi1hNmMzLThhZDRmNGZhMzAxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAA4otoia7k3yZbKk6VMo0Rbo +eJikn/TOc7qvI9TMUzTFrXlYcNKxaBZAoIdllSC0M6p5SCcBB8cnSJLvNdKt67U ch4cBZMF7Mln7iheJvb2GFogCeuE0AFAVvEFOl+4Xu3h0HRzzLOE+v7l8vAfn4yF cwbcRHGpDc4mZ85TCclMJYQ7D6UtjrMvpKMZ6sV8zEyZczayXP9lb5GGGLMemrMq hsAIlEfp8BNNqk/FT5opfD0PfDn6UDBkTYH0MkK05BsE+CINmes00sbPZVN7fAGv HRREBC8yVU8CmoutAL3s08zRDjPVwqUGAh3EWKawGArcL9HPtK5pzhy7LqW59NE= -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:58 2025 by rpki-client