This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa File: a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json) Hash identifier: TZOZ1dGq9kbRPwrSZT/wm03SZSDBDTXEKd6bYE04Wks= Subject key identifier: 2F:4A:CD:70:67:F5:0C:00:82:96:2F:1B:B9:48:53:72:61:99:92:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C40AF0B337B4B61078751CEBFB74E450A8784A4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa Signing time: Wed 10 Dec 2025 04:50:03 +0000 ROA not before: Wed 10 Dec 2025 04:50:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:40:af:0b:33:7b:4b:61:07:87:51:ce:bf:b7:4e:45:0a:87:84:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 04:50:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a7cfe10c9db26fd9f99cac623bd0889f95b2414c4b7da8458dbdc8568e47a0c0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:03:c3:58:f2:2c:8e:9d:42:43:db:19:52: e4:57:3a:88:99:32:37:4a:56:95:32:f1:ed:2a:71: e0:f6:d7:1e:2d:51:7a:b1:63:4b:73:4f:6b:00:65: 56:02:57:1b:d3:15:ba:9c:0b:cd:ca:e3:ba:3e:c1: d9:42:f1:65:e3:97:af:b9:39:93:4b:17:15:89:4d: f0:71:82:d0:75:bf:ab:29:af:bd:e8:20:c0:92:26: 0d:89:6c:b8:18:fa:ef:53:ea:a6:80:67:aa:84:98: ff:55:c2:f0:0e:d7:50:2e:e2:7b:91:cf:11:38:e2: 94:eb:7b:36:9b:89:80:a7:85:d6:e1:c3:c9:74:16: 14:a6:07:ae:22:af:c7:72:38:a6:0b:c4:63:5c:5b: de:85:ec:17:d2:40:3a:22:d3:5f:be:51:9b:29:b2: 90:a6:2e:87:51:51:cd:80:9b:ba:cc:c7:ee:af:f5: 47:c9:4b:c2:15:1d:14:d7:fc:e6:37:f0:83:b7:04: 94:85:04:94:3b:25:85:35:03:57:47:3a:c1:3b:2d: f5:49:5b:f4:33:36:3e:99:c1:1f:2b:8a:35:f9:ca: c8:87:d6:9c:6b:7e:18:89:a4:f0:68:95:4e:e9:80: be:fc:4f:40:36:c7:10:79:3f:b7:ac:8b:d4:c9:b3: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:CD:70:67:F5:0C:00:82:96:2F:1B:B9:48:53:72:61:99:92:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 5b:05:56:f7:ce:30:91:73:09:95:c4:7c:ae:70:f8:c5:66:5b: 83:af:fc:a9:91:8f:c8:47:94:66:8e:7b:33:89:b4:e5:67:ee: 11:41:95:b2:44:81:9b:f5:a4:25:cb:67:71:ef:92:d9:4f:1a: c5:6b:bb:00:d2:e6:57:1d:a1:a2:ea:62:f3:e3:ef:5d:16:fb: b4:2e:d1:a8:c9:2a:42:f7:76:03:c0:04:e8:15:d9:4e:c6:96: 36:b6:c4:e7:c2:34:fe:f4:78:84:49:70:ee:b2:31:53:c0:82: 93:38:82:2c:4d:0d:0d:98:7d:09:0a:91:70:dd:4f:53:52:54: 51:6d:b9:c8:9c:10:7e:df:6d:a4:5a:3b:2c:74:10:a7:2c:06: a5:ee:45:ed:33:57:ba:8c:0f:fc:f5:d4:c1:75:65:f5:4d:04: 95:99:c8:e3:c4:aa:b8:1a:a6:30:51:fb:20:db:ef:24:7f:7a: f9:54:bf:50:f3:30:fe:fa:2a:1d:49:92:fb:b7:85:f3:f6:db: 86:9a:6e:c2:88:78:17:f3:99:26:26:88:eb:5a:0c:c8:4e:5b: ae:6b:86:ba:2c:d8:d8:e9:2b:e8:ff:e3:f6:4b:2e:9b:75:d7: 47:45:9e:b3:66:ca:ae:d5:89:a6:45:bd:aa:d7:62:7e:b6:15: 2d:ab:11:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHECvCzN7S2EHh1HOv7dORQqHhKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDQ1MDAzWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2NmZTEwYzlkYjI2ZmQ5Zjk5Y2FjNjIzYmQwODg5Zjk1 YjI0MTRjNGI3ZGE4NDU4ZGJkYzg1NjhlNDdhMGMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdeQPDWPIsjp1CQ9sZUuRXOoiZMjdKVpUy8e0qceD21x4t UXqxY0tzT2sAZVYCVxvTFbqcC83K47o+wdlC8WXjl6+5OZNLFxWJTfBxgtB1v6sp r73oIMCSJg2JbLgY+u9T6qaAZ6qEmP9VwvAO11Au4nuRzxE44pTrezabiYCnhdbh w8l0FhSmB64ir8dyOKYLxGNcW96F7BfSQDoi01++UZspspCmLodRUc2Am7rMx+6v 9UfJS8IVHRTX/OY38IO3BJSFBJQ7JYU1A1dHOsE7LfVJW/QzNj6ZwR8rijX5ysiH 1pxrfhiJpPBolU7pgL78T0A2xxB5P7esi9TJs9HNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL0rNcGf1DACCli8buUhTcmGZkiowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwMDI0ZTAwLWY5MzctNGI2My05MWRmLWQ0NWNlMGE2YTI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBAFsFVvfOMJFzCZXEfK5w+MVm W4Ov/KmRj8hHlGaOezOJtOVn7hFBlbJEgZv1pCXLZ3HvktlPGsVruwDS5lcdoaLq YvPj710W+7Qu0ajJKkL3dgPABOgV2U7Glja2xOfCNP70eIRJcO6yMVPAgpM4gixN DQ2YfQkKkXDdT1NSVFFtucicEH7fbaRaOyx0EKcsBqXuRe0zV7qMD/z11MF1ZfVN BJWZyOPEqrgapjBR+yDb7yR/evlUv1DzMP76Kh1Jkvu3hfP224aabsKIeBfzmSYm iOtaDMhOW65rhros2NjpK+j/4/ZLLpt110dFnrNmyq7ViaZFvarXYn62FS2rEao= -----END CERTIFICATE-----Generated at Thu Dec 18 14:07:50 2025 by rpki-client