This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: jLR/2eajQBohZMBLt2fHGfaibxJsP7cHfXgVhU0nQI8= Subject key identifier: 64:F5:E2:46:B9:20:71:45:37:97:07:3F:F9:06:D5:0F:FF:82:2E:BC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 706EAB053DBF9692C0205C78AAEA2C4E021619B5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Sun 16 Nov 2025 00:50:04 +0000 ROA not before: Sun 16 Nov 2025 00:50:04 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6e:ab:05:3d:bf:96:92:c0:20:5c:78:aa:ea:2c:4e:02:16:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 16 00:50:04 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=056847d3b885d8ba472a1f1cf426550cdcaef9c9ed15199127c72ee6d477b7a1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:9d:2c:42:9b:91:c1:79:b7:81:46:9a:4b: 51:ac:d9:ec:39:c5:62:01:0f:50:67:33:11:3b:2e: 31:df:c3:de:fb:b2:0e:c0:38:ed:9c:1a:47:65:8d: 71:35:50:0d:d8:1f:ff:a5:2f:09:f2:87:23:cb:db: 1f:ee:1f:d7:81:54:ab:b5:ce:bb:ea:80:f1:d9:2f: bb:f9:ad:9a:84:69:60:d4:85:ce:b7:b4:ea:d9:aa: 09:94:bf:51:51:b9:cb:99:67:1a:15:21:6f:10:7c: ba:87:f4:fd:05:3a:97:2c:a8:e8:6b:9d:52:ce:c8: 79:dc:db:ee:08:47:67:57:7d:d8:54:38:cd:29:5f: 18:2d:7b:51:ea:0f:9c:4d:41:c4:72:ca:c9:db:15: c6:6d:43:8f:83:4a:33:5c:fd:09:9c:a3:33:fa:1f: e4:94:c9:6b:bf:f1:74:43:7e:3a:f5:e6:6f:98:cd: e4:e7:5a:0a:7e:0d:04:b3:cd:a4:f6:05:8e:f6:31: 42:bd:97:b7:fc:22:ae:28:5a:6b:d3:f9:d9:01:2b: c3:c5:c7:20:7d:65:70:97:73:e5:f5:1d:f5:8f:af: 97:25:6a:68:65:65:ab:a5:17:4a:5b:b1:c0:33:7d: 86:7d:40:9c:65:3c:81:fc:e5:76:6b:02:3d:42:40: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F5:E2:46:B9:20:71:45:37:97:07:3F:F9:06:D5:0F:FF:82:2E:BC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 2f:0b:ec:d2:2e:8b:9a:7c:b1:5c:ad:3c:68:61:3c:53:78:82: dc:ad:87:18:0b:fa:d5:25:c1:be:d2:58:1e:ca:d4:7b:0b:f9: f5:cc:55:7c:ec:d2:66:8c:80:cd:0f:96:5c:4d:b3:38:3d:d5: 7f:87:aa:57:25:3e:e9:23:7e:81:72:fa:62:43:65:7e:32:bb: 06:64:5f:d2:f2:f0:dc:60:e2:a7:5d:db:1f:8e:87:42:d6:e0: 8e:1a:00:ec:7f:07:f7:cd:f2:06:2e:8a:12:d6:c5:57:96:55: 10:1a:27:ae:e5:5a:c4:77:c8:88:66:39:85:9e:6b:dc:f6:11: 71:96:4c:a7:cf:48:be:e8:4e:f2:16:bb:58:09:66:2c:76:20: df:8b:c1:1a:a3:04:f1:52:d2:78:5f:bf:e2:79:a4:bb:a7:94: b7:bd:5d:a0:7a:47:16:56:fc:ff:f8:28:11:d1:2d:57:15:97: 04:ad:5c:a7:f1:74:f1:c7:eb:9b:cc:b9:be:d3:67:c1:35:7f: b8:ae:c7:a7:10:01:51:77:db:0e:d9:ed:ab:2e:f8:7a:96:d4: e2:03:48:03:1a:2f:c8:1e:4e:84:98:44:43:32:d4:cd:fb:1f: b7:4a:b8:5a:e8:4f:95:db:c7:ad:4c:b6:0a:8c:f8:b3:0e:97: f5:99:a7:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcG6rBT2/lpLAIFx4quosTgIWGbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE2MDA1MDA0WhcNMjUxMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTY4NDdkM2I4ODVkOGJhNDcyYTFmMWNmNDI2NTUwY2Rj YWVmOWM5ZWQxNTE5OTEyN2M3MmVlNmQ0NzdiN2ExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI5J0sQpuRwXm3gUaaS1Gs2ew5xWIBD1BnMxE7LjHfw977 sg7AOO2cGkdljXE1UA3YH/+lLwnyhyPL2x/uH9eBVKu1zrvqgPHZL7v5rZqEaWDU hc63tOrZqgmUv1FRucuZZxoVIW8QfLqH9P0FOpcsqOhrnVLOyHnc2+4IR2dXfdhU OM0pXxgte1HqD5xNQcRyysnbFcZtQ4+DSjNc/QmcozP6H+SUyWu/8XRDfjr15m+Y zeTnWgp+DQSzzaT2BY72MUK9l7f8Iq4oWmvT+dkBK8PFxyB9ZXCXc+X1HfWPr5cl amhlZaulF0pbscAzfYZ9QJxlPIH85XZrAj1CQMpXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZPXiRrkgcUU3lwc/+QbVD/+CLrwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAC8L7NIui5p8sVytPGhhPFN4 gtythxgL+tUlwb7SWB7K1HsL+fXMVXzs0maMgM0PllxNszg91X+HqlclPukjfoFy +mJDZX4yuwZkX9Ly8Nxg4qdd2x+Oh0LW4I4aAOx/B/fN8gYuihLWxVeWVRAaJ67l WsR3yIhmOYWea9z2EXGWTKfPSL7oTvIWu1gJZix2IN+LwRqjBPFS0nhfv+J5pLun lLe9XaB6RxZW/P/4KBHRLVcVlwStXKfxdPHH65vMub7TZ8E1f7iux6cQAVF32w7Z 7asu+HqW1OIDSAMaL8geToSYREMy1M37H7dKuFroT5Xbx61MtgqM+LMOl/WZp9s= -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:00 2025 by rpki-client