This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json) Hash identifier: URV9uzcH6YC3jtuLCY1uugvqZMSAzCYBJou1OpKtCjY= Subject key identifier: BD:7A:F1:E8:49:E5:28:44:B7:9D:14:55:F9:E1:56:65:A5:30:DD:72 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 79A180B7F43695767CA5C4287461EF4D49BC1C4C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa Signing time: Sat 15 Nov 2025 04:00:07 +0000 ROA not before: Sat 15 Nov 2025 04:00:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a1:80:b7:f4:36:95:76:7c:a5:c4:28:74:61:ef:4d:49:bc:1c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 04:00:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=01f8a29b59be043ab68c3fd311d211348e48c127f6ba14131249e460c054f6cf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:e7:f8:7a:b3:0d:23:64:97:43:73:0b:81: ed:ce:ee:87:82:f1:a6:d5:94:f7:1e:c7:24:b2:83: 2f:ec:3b:e8:42:98:22:7f:9c:b0:2e:70:db:c5:82: be:b4:fd:2f:0b:c3:1c:e7:c9:5c:5e:ee:ce:fb:9e: 80:cb:0b:bd:58:67:70:31:54:ce:62:f9:4a:02:86: 77:f9:8a:e3:4b:44:e9:79:b8:cc:c1:1d:bf:d1:d9: 20:e7:0c:8c:b8:4c:de:a6:c6:fa:1a:7b:3f:f5:f9: bd:d1:ed:eb:df:6f:fa:71:27:0e:50:fe:55:97:90: 52:8c:4d:a0:22:78:15:9e:a9:60:83:39:e6:bf:46: c0:e6:a2:17:2d:87:62:1a:60:58:16:ff:d7:b5:3b: 05:01:53:ec:e7:c4:bb:46:e1:96:15:85:11:53:d1: 29:64:92:2f:00:dd:92:44:29:4d:c4:9a:db:d7:14: 17:87:30:da:8a:f6:bb:88:1d:de:47:7c:26:49:dd: 5d:00:23:59:a4:28:e9:78:48:78:1c:1f:fa:bd:09: c0:58:41:c0:a5:87:78:50:88:6a:70:0b:23:87:fd: a1:e3:7a:77:2b:13:36:83:5b:59:15:1c:f5:b6:29: f0:c6:00:1e:52:93:54:bb:c3:e9:59:e7:0b:75:8d: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:F1:E8:49:E5:28:44:B7:9D:14:55:F9:E1:56:65:A5:30:DD:72 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 5b:3a:3e:a7:2e:59:37:70:10:6b:a1:5d:7d:0a:32:30:8b:27: c1:4b:f6:6d:c0:35:8f:f0:a3:b4:54:28:b0:f4:b3:cf:5a:9d: 22:ff:fc:ff:70:4c:18:c5:46:74:be:6f:ce:d8:23:84:65:79: d5:e3:ee:08:40:d9:98:08:77:d9:12:3c:33:af:a5:37:34:68: 53:ce:d5:68:46:0c:3d:39:8c:ea:34:c1:12:83:c4:61:94:6c: e6:8c:8f:21:c9:e1:61:f7:10:07:c4:fd:1d:49:54:41:19:bb: cf:5c:c4:27:a8:b7:a2:64:4a:66:a3:1a:83:fa:a6:61:21:0c: 16:9c:d1:a0:ae:02:4b:7e:5a:a4:53:44:81:0a:d0:5e:53:09: a3:41:ef:f5:cb:90:94:7d:23:6d:b1:d9:8a:67:08:03:d6:3a: 46:97:fa:a7:14:52:dd:5b:fe:1e:9e:db:89:7c:c7:c0:7d:cc: a7:f4:32:e6:cf:76:08:b4:81:6d:29:ba:40:7e:3d:18:22:54: e3:b1:e5:88:5d:20:5b:bd:70:f0:3d:18:d3:6d:11:9b:5b:c9: 3c:c0:4d:0f:98:97:4e:69:9f:04:10:a4:67:ee:d5:9c:c4:c1: b6:dd:12:2c:86:dc:a8:a3:c9:f8:2f:35:d9:0c:63:30:32:e9: ba:72:e1:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeaGAt/Q2lXZ8pcQodGHvTUm8HEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDQwMDA3WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWY4YTI5YjU5YmUwNDNhYjY4YzNmZDMxMWQyMTEzNDhl NDhjMTI3ZjZiYTE0MTMxMjQ5ZTQ2MGMwNTRmNmNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC78Of4erMNI2SXQ3MLge3O7oeC8abVlPcexySygy/sO+hC mCJ/nLAucNvFgr60/S8LwxznyVxe7s77noDLC71YZ3AxVM5i+UoChnf5iuNLROl5 uMzBHb/R2SDnDIy4TN6mxvoaez/1+b3R7evfb/pxJw5Q/lWXkFKMTaAieBWeqWCD Oea/RsDmohcth2IaYFgW/9e1OwUBU+znxLtG4ZYVhRFT0Slkki8A3ZJEKU3EmtvX FBeHMNqK9ruIHd5HfCZJ3V0AI1mkKOl4SHgcH/q9CcBYQcClh3hQiGpwCyOH/aHj encrEzaDW1kVHPW2KfDGAB5Sk1S7w+lZ5wt1jbYTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvXrx6EnlKES3nRRV+eFWZaUw3XIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAWzo+py5ZN3AQa6FdfQoyMIsn wUv2bcA1j/CjtFQosPSzz1qdIv/8/3BMGMVGdL5vztgjhGV51ePuCEDZmAh32RI8 M6+lNzRoU87VaEYMPTmM6jTBEoPEYZRs5oyPIcnhYfcQB8T9HUlUQRm7z1zEJ6i3 omRKZqMag/qmYSEMFpzRoK4CS35apFNEgQrQXlMJo0Hv9cuQlH0jbbHZimcIA9Y6 Rpf6pxRS3Vv+Hp7biXzHwH3Mp/Qy5s92CLSBbSm6QH49GCJU47HliF0gW71w8D0Y 020Rm1vJPMBND5iXTmmfBBCkZ+7VnMTBtt0SLIbcqKPJ+C812QxjMDLpunLh6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:31 2025 by rpki-client