This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a84b381b-bc70-4b19-91a5-fa66fa80011e.roa File: a84b381b-bc70-4b19-91a5-fa66fa80011e.roa (raw, json) Hash identifier: kzM6EJy/+eBN/klPaWkYXGOhKOPRwRRBzOGpcrc2cl8= Subject key identifier: EC:1D:44:A4:9E:64:B1:CD:7D:85:AA:16:75:CF:3F:13:29:0C:2C:27 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 55007FC909BD78CF2E4F40EBECEC92C374D2FBA6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a84b381b-bc70-4b19-91a5-fa66fa80011e.roa Signing time: Thu 11 Dec 2025 01:00:30 +0000 ROA not before: Thu 11 Dec 2025 01:00:30 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:00:7f:c9:09:bd:78:cf:2e:4f:40:eb:ec:ec:92:c3:74:d2:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 11 01:00:30 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=a18bcef30151d348ec333f5aa379553c37f28665878cea6365a97c57e236b6a8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:7f:04:ca:88:f8:70:3e:fc:9e:3e:47:3e: bc:29:c8:16:a5:f0:a7:08:b6:6d:e7:90:d4:b1:7f: 4d:e5:a1:af:3e:2d:ee:5d:eb:59:d2:8d:eb:75:97: 77:dc:72:a8:70:29:16:80:fe:41:1b:bf:11:67:0d: 8e:ca:39:7c:ed:4d:a1:85:1b:d1:b2:4c:cf:3b:03: 33:e1:49:7f:87:e7:b4:fc:a4:6c:10:bf:14:e1:34: 53:c2:f4:1d:23:27:68:b4:79:b9:72:be:47:26:6e: 4f:3f:a9:0f:4b:d1:1d:73:4a:2b:a3:5f:1a:9d:5c: 15:64:b2:5a:b9:c6:f5:36:7c:ff:26:71:7a:b8:f2: 75:6c:cb:a7:8d:27:21:08:c8:0e:a4:ec:b3:99:49: 5e:a9:1d:4f:ef:a7:a9:30:17:a9:11:e8:ed:72:8a: ff:a5:0a:cd:ce:e9:38:8b:a0:fd:bc:23:4d:d0:a4: bc:2a:2d:d6:1e:ca:d8:8e:27:92:03:bc:57:00:8e: 50:91:f1:b5:67:3a:ad:0a:f3:82:b0:a1:7e:7a:52: 38:0c:84:5c:71:f9:ac:1e:f7:f3:d6:56:de:d7:2a: 81:39:9e:72:09:5e:02:fa:97:45:ef:e3:78:3b:f8: bf:21:9e:e1:e6:7f:9b:5b:28:c9:51:9a:23:68:cd: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:44:A4:9E:64:B1:CD:7D:85:AA:16:75:CF:3F:13:29:0C:2C:27 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a84b381b-bc70-4b19-91a5-fa66fa80011e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/44 Signature Algorithm: sha256WithRSAEncryption 7e:f6:11:86:82:bb:21:29:30:66:b1:dd:3c:39:fc:dc:5f:ac: e8:2e:aa:1c:e3:dc:94:05:ca:3b:87:9c:d3:56:d2:75:b3:b0: be:96:f6:0e:c5:c3:fb:04:83:e9:86:ca:40:d2:93:8c:b4:f2: 71:5d:d4:a1:57:5e:56:e3:cd:44:a0:08:59:ba:20:6d:a7:45: b9:fb:8a:85:fe:91:42:ef:3b:3f:17:66:7e:e9:1c:75:71:98: 38:e7:20:62:83:ed:1a:02:5e:f1:12:36:a6:58:25:19:0a:49: 4a:95:4b:cc:48:d7:24:0d:3b:ae:37:e5:92:17:fe:3d:0b:07: 0c:f3:1d:a2:17:82:a1:c5:bd:99:f5:93:2e:a8:79:83:cb:8f: b3:22:f3:59:73:ce:af:0d:41:70:f7:a4:14:7f:33:c8:9c:1c: 68:17:52:20:be:37:d7:f1:4b:39:24:87:88:bf:09:df:83:4c: f4:41:44:5c:0b:8b:70:72:96:55:cb:71:6c:fe:58:4b:1b:9b: dd:cf:49:7b:1d:ef:8e:8c:8f:4a:57:7a:06:7f:f4:9b:ac:c6: bd:5e:1a:7a:c5:76:fc:e5:94:67:32:8f:13:b4:cb:81:53:74: 45:17:6c:b9:6d:cc:b2:f1:6e:bf:4a:8b:a2:5e:42:f2:c7:d5: 47:83:b9:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVQB/yQm9eM8uT0Dr7OySw3TS+6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDEwMDMwWhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMThiY2VmMzAxNTFkMzQ4ZWMzMzNmNWFhMzc5NTUzYzM3 ZjI4NjY1ODc4Y2VhNjM2NWE5N2M1N2UyMzZiNmE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkx38Eyoj4cD78nj5HPrwpyBal8KcItm3nkNSxf03loa8+ Le5d61nSjet1l3fccqhwKRaA/kEbvxFnDY7KOXztTaGFG9GyTM87AzPhSX+H57T8 pGwQvxThNFPC9B0jJ2i0eblyvkcmbk8/qQ9L0R1zSiujXxqdXBVkslq5xvU2fP8m cXq48nVsy6eNJyEIyA6k7LOZSV6pHU/vp6kwF6kR6O1yiv+lCs3O6TiLoP28I03Q pLwqLdYeytiOJ5IDvFcAjlCR8bVnOq0K84KwoX56UjgMhFxx+awe9/PWVt7XKoE5 nnIJXgL6l0Xv43g7+L8hnuHmf5tbKMlRmiNozffFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7B1EpJ5ksc19haoWdc8/EykMLCcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E4NGIzODFiLWJjNzAtNGIxOS05MWE1LWZhNjZmYTgwMDExZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycAAwDQYJKoZIhvcNAQELBQADggEBAH72EYaCuyEpMGax3Tw5/Nxf rOguqhzj3JQFyjuHnNNW0nWzsL6W9g7Fw/sEg+mGykDSk4y08nFd1KFXXlbjzUSg CFm6IG2nRbn7ioX+kULvOz8XZn7pHHVxmDjnIGKD7RoCXvESNqZYJRkKSUqVS8xI 1yQNO6435ZIX/j0LBwzzHaIXgqHFvZn1ky6oeYPLj7Mi81lzzq8NQXD3pBR/M8ic HGgXUiC+N9fxSzkkh4i/Cd+DTPRBRFwLi3ByllXLcWz+WEsbm93PSXsd746Mj0pX egZ/9Jusxr1eGnrFdvzllGcyjxO0y4FTdEUXbLltzLLxbr9Ki6JeQvLH1UeDuQ4= -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:51 2025 by rpki-client