This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa File: 71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json) Hash identifier: VLkUUfP389AQ5FEX9KYw9W2/qJPt/KDssSIHWi6knEE= Subject key identifier: B7:06:EC:8A:D6:67:AF:0C:D2:C0:1D:3D:7C:C1:20:F8:EC:1D:FD:0A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4300BCBA8E3F5DE80A64778EC417880D034334CF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa Signing time: Sat 15 Nov 2025 05:20:22 +0000 ROA not before: Sat 15 Nov 2025 05:20:22 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:00:bc:ba:8e:3f:5d:e8:0a:64:77:8e:c4:17:88:0d:03:43:34:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:20:22 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=cf1b42954521074165b6e3cfa730176a6e5e94a4494b8d2c4fb67340ee254435, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:fa:f3:a1:b0:79:ca:16:d8:1d:1b:76:bd: f9:39:4b:e7:d7:8c:ee:27:da:fb:c1:f2:8f:38:a7: d6:56:20:eb:ac:0d:9f:1d:cf:2b:5a:74:6e:27:b1: 23:d1:89:9b:c3:5b:da:29:de:a4:3f:07:6d:64:1f: 12:25:70:55:18:3e:71:47:44:c1:61:2e:cb:16:12: 0e:32:37:65:2d:d9:56:eb:46:00:4a:7e:63:6b:a2: 1b:d8:b9:a2:d3:60:ad:69:55:fc:1a:e3:79:72:40: a0:20:0f:26:15:6d:54:20:08:32:8d:a8:b7:27:7a: 48:77:8c:49:96:e2:19:76:30:bc:cc:73:4f:21:50: 40:c9:56:f9:85:4b:19:d7:32:6e:dc:da:ef:f4:ef: a8:ec:9b:32:dc:6c:14:a0:52:11:c2:0b:af:81:78: b3:71:f8:4c:71:f1:a5:9b:7f:35:cc:c7:be:fd:2f: 33:8f:20:3b:1f:7e:3d:4d:b6:36:97:13:1d:f0:e8: 61:66:84:00:67:e0:54:24:f1:46:7b:a2:d3:25:55: 92:29:6f:23:0c:27:52:61:ab:7d:fb:74:b0:76:a3: 84:80:e8:15:56:c3:b8:9a:1e:69:5c:22:24:0d:5e: d5:f5:d1:ee:96:46:aa:b4:0b:3f:54:6f:83:08:a3: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:EC:8A:D6:67:AF:0C:D2:C0:1D:3D:7C:C1:20:F8:EC:1D:FD:0A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5510::/44 Signature Algorithm: sha256WithRSAEncryption 9d:e5:07:93:96:59:39:f1:d9:e5:49:a4:74:fc:c9:cf:f1:6b: ea:1d:63:74:86:67:b2:fd:af:a4:85:80:47:f2:82:a9:75:4a: 3d:6a:81:7e:7b:ce:65:f3:80:05:a1:8f:7a:99:fc:3b:98:ac: ef:eb:1a:b2:db:94:b3:f9:75:e9:44:b4:66:a1:a1:fd:e9:e9: 79:9b:bf:5a:e7:09:7c:9a:f7:20:d9:3d:32:49:f9:90:63:25: 99:08:b1:21:f8:91:d0:c0:5d:54:12:5d:a3:d0:20:b2:76:f6: fa:a8:2d:cb:4b:49:a4:cc:5f:38:56:09:30:59:79:02:a3:bd: b8:fc:96:9d:82:e7:35:47:ec:42:27:38:a4:4a:a7:62:65:24: ed:15:1a:ff:6e:f2:38:67:ac:73:52:d1:bb:7f:b8:da:d6:46: 85:2c:9f:06:c5:8d:cb:f3:03:74:cf:01:9a:ec:ab:a3:96:7b: 8d:f6:6f:12:73:ec:bb:d7:cf:04:3e:5b:13:18:f6:51:34:ff: 2b:ee:5d:77:92:da:5f:18:d3:9d:c0:43:d5:36:66:1a:35:1c: 39:2c:51:b7:4e:21:0e:b0:fe:c8:dc:9a:aa:c9:23:1f:2c:1e: 56:af:2c:3a:45:79:29:50:30:b5:28:1f:d0:c2:3d:d4:4e:ee: 19:37:96:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQwC8uo4/XegKZHeOxBeIDQNDNM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUyMDIyWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjFiNDI5NTQ1MjEwNzQxNjViNmUzY2ZhNzMwMTc2YTZl NWU5NGE0NDk0YjhkMmM0ZmI2NzM0MGVlMjU0NDM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2DPrzobB5yhbYHRt2vfk5S+fXjO4n2vvB8o84p9ZWIOus DZ8dzytadG4nsSPRiZvDW9op3qQ/B21kHxIlcFUYPnFHRMFhLssWEg4yN2Ut2Vbr RgBKfmNrohvYuaLTYK1pVfwa43lyQKAgDyYVbVQgCDKNqLcnekh3jEmW4hl2MLzM c08hUEDJVvmFSxnXMm7c2u/076jsmzLcbBSgUhHCC6+BeLNx+Exx8aWbfzXMx779 LzOPIDsffj1NtjaXEx3w6GFmhABn4FQk8UZ7otMlVZIpbyMMJ1Jhq337dLB2o4SA 6BVWw7iaHmlcIiQNXtX10e6WRqq0Cz9Ub4MIo/9HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtwbsitZnrwzSwB09fMEg+Owd/QowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxYTJhMmMwLWI4ZGItNDg0Ny1hNzU2LWI3NTE1YWE0MmIwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVRAwDQYJKoZIhvcNAQELBQADggEBAJ3lB5OWWTnx2eVJpHT8yc/x a+odY3SGZ7L9r6SFgEfygql1Sj1qgX57zmXzgAWhj3qZ/DuYrO/rGrLblLP5delE tGahof3p6Xmbv1rnCXya9yDZPTJJ+ZBjJZkIsSH4kdDAXVQSXaPQILJ29vqoLctL SaTMXzhWCTBZeQKjvbj8lp2C5zVH7EInOKRKp2JlJO0VGv9u8jhnrHNS0bt/uNrW RoUsnwbFjcvzA3TPAZrsq6OWe432bxJz7LvXzwQ+WxMY9lE0/yvuXXeS2l8Y053A Q9U2Zho1HDksUbdOIQ6w/sjcmqrJIx8sHlavLDpFeSlQMLUoH9DCPdRO7hk3lr4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:17 2025 by rpki-client