This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dc8b90b-7591-404d-b954-05b005230216.roa File: 8dc8b90b-7591-404d-b954-05b005230216.roa (raw, json) Hash identifier: VeHFRjWn1gMFcJJ78151kd21qlvUvRoyNaEisrjYTvA= Subject key identifier: CD:93:D0:8C:55:68:5F:AD:4D:C9:57:44:A5:4A:DB:9B:A0:1C:C7:9D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D72638A8CBFCC7F946711D63F44246989A4315A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dc8b90b-7591-404d-b954-05b005230216.roa Signing time: Sat 15 Nov 2025 05:10:11 +0000 ROA not before: Sat 15 Nov 2025 05:10:11 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:72:63:8a:8c:bf:cc:7f:94:67:11:d6:3f:44:24:69:89:a4:31:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:10:11 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f08801e1f7459d85bf2f922e9568c446f29b1d69d4202c7bb62866edbb505039, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:74:ba:a5:69:9c:b0:db:82:68:32:33:31: 1c:bf:49:44:0e:09:19:4e:9c:d8:4f:1b:0f:0c:a2: e3:ec:4d:2f:6f:5e:78:fc:b0:02:46:6e:41:50:9f: 6e:1c:64:fb:07:6a:1a:93:6b:2f:27:b8:76:d0:ef: 59:4b:a2:0b:37:bb:97:84:a0:d0:4f:de:1a:12:b7: 04:e5:4a:09:0a:9d:f6:48:89:57:8e:7a:12:25:26: 5c:3d:31:20:73:24:f6:94:97:87:20:6e:20:db:09: 67:e0:88:f3:f6:48:d9:90:55:a3:8c:a4:36:9c:5e: 7e:94:de:2b:7d:6c:b5:58:2d:c8:e9:2c:6d:c2:50: 74:52:fc:7d:47:1f:1b:ee:68:e9:57:7f:5c:0a:db: 93:27:4f:da:7a:3e:8f:ce:bd:75:98:92:52:29:e2: 90:2c:d9:30:cc:29:12:d7:68:26:5f:9f:0a:bc:a7: 99:bf:d0:e0:21:cd:8e:54:4b:9b:80:b5:6a:d3:a3: b2:f6:c1:fc:82:3a:97:c4:00:31:6a:ed:45:01:03: 11:be:b8:f0:06:dd:a6:da:36:72:c3:c0:d1:67:97: 76:3f:f2:74:72:47:dd:bf:48:fb:71:d5:2f:cd:fc: 0f:66:40:b4:92:09:c7:ae:cb:83:1a:5b:6a:4d:40: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:93:D0:8C:55:68:5F:AD:4D:C9:57:44:A5:4A:DB:9B:A0:1C:C7:9D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dc8b90b-7591-404d-b954-05b005230216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/39 Signature Algorithm: sha256WithRSAEncryption 81:e3:40:24:f0:1c:86:e7:0f:30:6b:a2:1b:34:3e:78:35:72: 99:64:83:02:33:59:a2:f9:3a:36:e5:c1:a6:f7:25:fc:3a:2c: d0:32:d8:6b:f5:5e:6b:fc:11:5d:8b:5f:37:95:8b:c9:d5:71: 7a:cb:2b:35:25:74:9a:58:e5:78:b8:49:22:bb:08:21:a7:3a: 01:e8:94:da:0d:0f:06:03:40:a2:1b:eb:31:83:fb:1d:ab:f2: e6:be:3f:7d:88:7c:70:22:de:0a:0a:57:05:ee:30:68:9e:ff: 98:95:af:65:03:e9:4f:d7:cb:d4:00:d8:02:44:e9:a1:4e:39: f4:1b:e5:8d:b8:77:65:2a:9a:e9:94:2d:ce:b9:5d:22:37:33: 2d:d0:11:4d:f9:3d:1d:b1:e5:c9:e3:67:57:f8:f8:44:99:ee: a8:db:6c:f4:2c:b8:bf:77:fa:96:fc:0b:ec:5d:fc:69:cf:97: a4:8c:a1:22:01:66:3e:b3:d2:d9:4b:9f:91:a9:01:e9:a2:ad: ce:04:e9:02:c7:3d:9e:00:a7:0d:e0:1e:4b:d6:d7:bc:34:b3: 70:29:99:19:2b:51:35:5b:a9:97:1f:2f:a9:b6:75:36:7c:ca: d0:f4:c0:61:52:d0:c7:d7:95:d7:f8:47:0f:27:14:f7:5a:15: 09:32:58:6c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfXJjioy/zH+UZxHWP0QkaYmkMVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDExWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDg4MDFlMWY3NDU5ZDg1YmYyZjkyMmU5NTY4YzQ0NmYy OWIxZDY5ZDQyMDJjN2JiNjI4NjZlZGJiNTA1MDM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa33S6pWmcsNuCaDIzMRy/SUQOCRlOnNhPGw8MouPsTS9v Xnj8sAJGbkFQn24cZPsHahqTay8nuHbQ71lLogs3u5eEoNBP3hoStwTlSgkKnfZI iVeOehIlJlw9MSBzJPaUl4cgbiDbCWfgiPP2SNmQVaOMpDacXn6U3it9bLVYLcjp LG3CUHRS/H1HHxvuaOlXf1wK25MnT9p6Po/OvXWYklIp4pAs2TDMKRLXaCZfnwq8 p5m/0OAhzY5US5uAtWrTo7L2wfyCOpfEADFq7UUBAxG+uPAG3abaNnLDwNFnl3Y/ 8nRyR92/SPtx1S/N/A9mQLSSCceuy4MaW2pNQBTFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzZPQjFVoX61NyVdEpUrbm6Acx50wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkYzhiOTBiLTc1OTEtNDA0ZC1iOTU0LTA1YjAwNTIzMDIxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAAADANBgkqhkiG9w0BAQsFAAOCAQEAgeNAJPAchucPMGuiGzQ+eDVy mWSDAjNZovk6NuXBpvcl/Dos0DLYa/Vea/wRXYtfN5WLydVxessrNSV0mljleLhJ IrsIIac6AeiU2g0PBgNAohvrMYP7Havy5r4/fYh8cCLeCgpXBe4waJ7/mJWvZQPp T9fL1ADYAkTpoU459Bvljbh3ZSqa6ZQtzrldIjczLdARTfk9HbHlyeNnV/j4RJnu qNts9Cy4v3f6lvwL7F38ac+XpIyhIgFmPrPS2UufkakB6aKtzgTpAsc9ngCnDeAe S9bXvDSzcCmZGStRNVuplx8vqbZ1NnzK0PTAYVLQx9eV1/hHDycU91oVCTJYbA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:27 2025 by rpki-client