This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa File: 868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa (raw, json) Hash identifier: XD1IDtGaMl6cEh2ujRdHIzm0qWsShAewUnE/muwa3Q8= Subject key identifier: EE:2A:A9:DD:12:B3:91:9E:D3:EE:61:B8:80:E9:6D:36:98:FB:D9:5C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2AB8FAF21583E0A319F20ACF63DB05971DBF5BC5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa Signing time: Sun 16 Nov 2025 00:50:35 +0000 ROA not before: Sun 16 Nov 2025 00:50:35 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b8:fa:f2:15:83:e0:a3:19:f2:0a:cf:63:db:05:97:1d:bf:5b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 16 00:50:35 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=be20be4b14ac5579eb6ddc2fd45a4218fbf5944ae0dd7bf5932c18e90f04fad3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:5f:b3:36:4b:4e:5b:aa:40:b1:4b:0d:45: 74:17:c5:6b:33:47:7f:ab:b5:98:35:5c:c7:1e:9f: 09:d8:e7:84:15:97:78:9a:23:74:d9:fd:ea:67:fd: b3:06:ad:9c:47:6a:f0:37:4a:b9:75:43:43:dc:92: cd:1a:ce:b3:e7:0b:12:0a:23:d6:06:62:93:4a:53: f4:71:a4:41:25:9d:8a:d2:af:13:f9:4f:60:3e:58: 36:47:29:dc:d7:45:a2:dd:2a:b3:b9:05:99:ab:4c: ff:12:2d:a6:ea:cb:9a:8f:7a:87:a9:79:ef:4c:5c: f2:bb:36:57:f2:81:05:ee:01:69:50:71:90:c0:db: ab:2b:91:01:e7:25:d5:c2:07:40:42:91:13:f0:2f: 11:38:2b:2b:02:66:38:9c:36:7b:de:26:68:e2:ce: ec:84:79:49:8a:b6:3d:f4:a2:8b:6e:8b:4c:b2:4f: 1f:1d:08:be:0d:01:71:f1:5d:46:2b:5b:77:af:d0: 63:f1:4b:fa:d1:f2:77:70:13:04:69:ad:ff:bf:68: 57:68:29:c1:aa:ca:97:90:7a:f0:9f:4c:af:86:35: 50:e0:19:77:94:5a:41:b6:3d:73:1c:dc:91:58:d7: 33:02:fd:98:49:a6:66:bf:5a:b8:8d:8b:99:16:4d: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2A:A9:DD:12:B3:91:9E:D3:EE:61:B8:80:E9:6D:36:98:FB:D9:5C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 0a:d8:aa:15:0c:d5:3f:78:9a:af:36:82:12:ba:79:9c:93:4e: 18:f4:0a:45:e7:1b:c6:a5:59:6d:45:48:2c:69:85:c2:cd:52: 14:83:2b:c0:bd:37:67:a3:f1:36:d7:c2:0c:78:f5:7c:82:c6: 38:e3:7b:9f:89:38:cb:6c:f4:50:59:21:3d:75:21:30:69:d4: 2a:24:80:a8:42:9b:20:43:89:79:4b:34:5a:3a:db:c1:f3:98: 5c:1e:05:5c:bb:d0:34:27:33:23:6b:85:23:42:9a:0e:80:78: 94:da:f2:20:78:27:52:d0:28:fe:10:3d:f2:b6:9d:86:40:77: aa:e7:83:f4:cb:52:e4:17:7f:9d:be:e5:af:73:16:fa:d3:f9: 79:59:48:ac:14:67:47:67:bb:dd:f9:d9:ea:ef:3c:5c:00:89: 77:a1:0e:59:a9:34:d7:82:1d:00:da:3d:5b:51:95:d9:35:8f: 0e:49:56:c7:78:da:11:78:17:5f:78:eb:ca:f7:77:c4:b2:3f: eb:ed:64:16:16:bf:d7:83:64:d9:1d:bd:15:e5:5b:8a:28:85: 95:90:c1:95:6a:0a:8e:d0:9c:3a:78:9d:6e:a0:36:a5:d1:9a: 9c:5c:64:6a:26:11:d9:6b:98:b1:73:18:79:3f:85:59:35:aa: 28:c1:6b:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKrj68hWD4KMZ8grPY9sFlx2/W8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE2MDA1MDM1WhcNMjUxMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTIwYmU0YjE0YWM1NTc5ZWI2ZGRjMmZkNDVhNDIxOGZi ZjU5NDRhZTBkZDdiZjU5MzJjMThlOTBmMDRmYWQzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+fV+zNktOW6pAsUsNRXQXxWszR3+rtZg1XMcenwnY54QV l3iaI3TZ/epn/bMGrZxHavA3Srl1Q0Pcks0azrPnCxIKI9YGYpNKU/RxpEElnYrS rxP5T2A+WDZHKdzXRaLdKrO5BZmrTP8SLabqy5qPeoepee9MXPK7NlfygQXuAWlQ cZDA26srkQHnJdXCB0BCkRPwLxE4KysCZjicNnveJmjizuyEeUmKtj30ootui0yy Tx8dCL4NAXHxXUYrW3ev0GPxS/rR8ndwEwRprf+/aFdoKcGqypeQevCfTK+GNVDg GXeUWkG2PXMc3JFY1zMC/ZhJpma/WriNi5kWTTKFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7iqp3RKzkZ7T7mG4gOltNpj72VwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2OGZlNWEzLTNjMTgtNGQyYS1iZjk2LTBlMGE4NDAxMThlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBAArYqhUM1T94mq82ghK6eZyT Thj0CkXnG8alWW1FSCxphcLNUhSDK8C9N2ej8TbXwgx49XyCxjjje5+JOMts9FBZ IT11ITBp1CokgKhCmyBDiXlLNFo628HzmFweBVy70DQnMyNrhSNCmg6AeJTa8iB4 J1LQKP4QPfK2nYZAd6rng/TLUuQXf52+5a9zFvrT+XlZSKwUZ0dnu9352ervPFwA iXehDlmpNNeCHQDaPVtRldk1jw5JVsd42hF4F19468r3d8SyP+vtZBYWv9eDZNkd vRXlW4oohZWQwZVqCo7QnDp4nW6gNqXRmpxcZGomEdlrmLFzGHk/hVk1qijBa7Y= -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:31 2025 by rpki-client