This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa File: afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa (raw, json) Hash identifier: eAocQb79iZzANwxVrwiCNH70jox9G3DxuxzLrPeOwxI= Subject key identifier: 54:DA:DF:43:7E:4E:C3:B9:6B:92:BB:BC:F2:4B:79:00:B4:F2:04:F8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B5E1517E258EC5A3BF64EA7576E562A045229D6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa Signing time: Tue 25 Nov 2025 19:50:39 +0000 ROA not before: Tue 25 Nov 2025 19:50:39 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5e:15:17:e2:58:ec:5a:3b:f6:4e:a7:57:6e:56:2a:04:52:29:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 25 19:50:39 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=f2dc3dbef1b5fbf2369bb7cc736bf9ef9da934a21f85175a958d7f08d6d1811c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:45:8e:dd:51:15:ea:9e:42:37:ab:b8:4e: 69:65:da:df:20:7a:94:90:10:c5:f1:d5:65:9a:cb: 03:7d:ee:c8:85:bb:38:df:64:2a:ed:6f:a3:95:34: fa:cf:8f:d5:b8:a2:6a:e9:97:1a:fb:db:e7:9a:4b: d2:eb:fb:29:01:21:7d:e2:d4:a3:c6:d9:c1:bc:7e: a3:c0:31:4b:8b:ca:65:a9:a6:b7:d7:ed:1c:11:88: 00:c8:55:50:d2:20:18:4c:c1:81:b4:ee:21:d5:10: d7:f7:b5:55:97:67:be:e7:28:0b:fd:d1:fa:0c:6c: a1:59:fe:e8:62:e6:2b:d3:38:1a:86:00:78:08:a9: e0:70:ba:61:6d:29:92:66:f8:79:bf:1a:70:cc:0b: 50:18:d6:fa:d5:d9:d9:85:63:10:32:30:7b:d7:29: 3b:b3:dc:0c:dd:9c:0f:76:9b:20:d2:25:a3:c9:9a: 01:41:d9:90:f3:6e:1f:1c:1d:ad:dc:72:0a:dc:f3: bb:1f:ff:2c:d2:8d:2e:71:68:9e:b5:aa:f7:a0:72: 21:54:ea:97:0a:d6:92:a8:09:2d:44:36:84:70:56: d7:24:4c:df:02:7a:e1:e1:12:ba:7e:24:19:38:c0: cd:c0:63:32:64:84:1e:81:17:5f:f5:6e:bb:5a:73: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DA:DF:43:7E:4E:C3:B9:6B:92:BB:BC:F2:4B:79:00:B4:F2:04:F8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6111::/48 Signature Algorithm: sha256WithRSAEncryption 74:03:6c:93:97:81:f2:1e:0b:d8:e3:33:68:2c:3a:47:43:58: 68:33:8e:ca:12:5d:88:26:1f:16:c6:33:88:42:f4:dc:b4:7e: d0:10:24:a3:77:71:00:45:1a:42:c0:71:14:73:35:e5:37:af: a5:5b:52:86:33:b8:3c:8e:8a:75:c7:60:32:1d:85:af:63:75: 3e:9b:b7:12:ba:22:32:7c:5d:23:41:aa:9c:3c:8d:5a:47:d0: f0:c2:a9:5b:c0:53:3c:1b:e0:44:49:bd:b4:e6:f1:8b:56:a2: 08:3b:17:16:be:b7:39:7c:45:96:30:16:4b:ba:17:b5:87:52: 5b:8d:c1:ff:73:cb:a3:6b:91:87:68:26:73:78:2e:0c:ad:45: ac:23:c1:84:38:2f:ea:e2:fe:d2:35:61:4b:ed:5d:a3:79:45: 1b:d7:26:90:d2:8d:46:78:f3:e8:2c:16:c8:3e:c8:b2:1e:ad: 60:4f:07:aa:1c:b8:de:42:2e:c0:ea:82:1c:a5:c0:f2:37:55: 34:7f:02:34:bf:22:cd:66:fd:93:5a:12:fc:c8:a5:bb:f4:be: 18:a9:9c:bb:e6:14:f9:45:01:a4:49:83:b9:b6:d8:74:a3:e0: ab:ca:83:38:64:02:60:20:9c:de:80:dd:09:42:2d:48:90:13: d3:f3:ee:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS14VF+JY7Fo79k6nV25WKgRSKdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk1MDM5WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmRjM2RiZWYxYjVmYmYyMzY5YmI3Y2M3MzZiZjllZjlk YTkzNGEyMWY4NTE3NWE5NThkN2YwOGQ2ZDE4MTFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzmEWO3VEV6p5CN6u4Tmll2t8gepSQEMXx1WWaywN97siF uzjfZCrtb6OVNPrPj9W4omrplxr72+eaS9Lr+ykBIX3i1KPG2cG8fqPAMUuLymWp prfX7RwRiADIVVDSIBhMwYG07iHVENf3tVWXZ77nKAv90foMbKFZ/uhi5ivTOBqG AHgIqeBwumFtKZJm+Hm/GnDMC1AY1vrV2dmFYxAyMHvXKTuz3AzdnA92myDSJaPJ mgFB2ZDzbh8cHa3ccgrc87sf/yzSjS5xaJ61qvegciFU6pcK1pKoCS1ENoRwVtck TN8CeuHhErp+JBk4wM3AYzJkhB6BF1/1brtac1rTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVNrfQ35Ow7lrkru88kt5ALTyBPgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmY2ZjZmZlLWM3MzQtNGVmMC05NWM4LWViYzYyMzJmNjU5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYREwDQYJKoZIhvcNAQELBQADggEBAHQDbJOXgfIeC9jjM2gsOkdD WGgzjsoSXYgmHxbGM4hC9Ny0ftAQJKN3cQBFGkLAcRRzNeU3r6VbUoYzuDyOinXH YDIdha9jdT6btxK6IjJ8XSNBqpw8jVpH0PDCqVvAUzwb4ERJvbTm8YtWogg7Fxa+ tzl8RZYwFku6F7WHUluNwf9zy6NrkYdoJnN4LgytRawjwYQ4L+ri/tI1YUvtXaN5 RRvXJpDSjUZ48+gsFsg+yLIerWBPB6ocuN5CLsDqghylwPI3VTR/AjS/Is1m/ZNa EvzIpbv0vhipnLvmFPlFAaRJg7m22HSj4KvKgzhkAmAgnN6A3QlCLUiQE9Pz7oM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:17 2025 by rpki-client