This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa File: f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa (raw, json) Hash identifier: rDhd6TKRve8cYPVmKYZFVGeuUu0L0uRSrVC/MSNUmwE= Subject key identifier: 48:36:6F:DD:6B:6E:B9:DF:73:10:B1:94:2C:77:3E:C0:44:BF:62:8B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 26309335939BD3BF7216BA57CD36A71A4DD83ADF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa Signing time: Sat 15 Nov 2025 04:00:04 +0000 ROA not before: Sat 15 Nov 2025 04:00:04 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:30:93:35:93:9b:d3:bf:72:16:ba:57:cd:36:a7:1a:4d:d8:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 04:00:04 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=5318df6678ef38fd2d40ceb03c0cc1a0c342b43871335a3115885952c577b826, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:e7:17:92:fa:8f:3f:49:9e:47:c7:a9:41: 13:52:fd:45:c5:9d:a3:57:9d:81:72:62:a6:35:8b: a2:f0:99:a4:d6:06:0f:72:45:c6:ca:44:16:1c:99: b9:e5:a3:d5:c2:b8:bc:f7:d8:7c:3b:8d:73:97:cb: d6:6d:aa:24:92:e0:63:17:dc:6d:de:e6:07:23:e8: 25:c1:32:57:33:6d:46:20:dc:46:c3:54:c7:c7:8f: 3a:68:d8:7a:62:43:df:1d:39:01:d8:b3:99:9b:ac: cb:14:04:59:bb:1d:a0:d7:a2:63:26:72:0d:8c:85: 44:b1:5e:db:ee:7a:98:e3:77:02:c8:fe:db:86:b7: 63:7a:48:a0:de:42:0e:d0:23:a6:54:75:0d:f4:8d: 58:be:9c:0a:2d:e3:c5:27:82:59:d6:03:fe:79:15: 66:f0:22:59:cc:cc:6f:5f:c7:73:55:27:82:54:0d: 96:d3:cd:ac:79:b4:a8:24:c5:18:cb:ea:e6:3d:b9: 65:76:d5:33:de:e1:cb:eb:33:bb:7a:e0:04:ae:fe: e1:d1:11:89:48:c3:e6:bf:71:99:f9:34:82:ba:a7: 87:2c:c8:0c:c9:ec:90:d0:ed:6f:44:9e:32:5c:4d: ce:a1:61:15:5c:b3:1e:57:64:5c:60:44:18:31:43: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:6F:DD:6B:6E:B9:DF:73:10:B1:94:2C:77:3E:C0:44:BF:62:8B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/42 Signature Algorithm: sha256WithRSAEncryption 98:1f:4f:4c:84:90:c8:3c:8d:56:7b:88:3e:b2:e4:be:f7:01: ba:2f:1f:72:8c:8d:71:40:a2:0b:1b:d2:f3:de:ae:3c:b6:84: 0c:62:e0:cc:0b:d7:8d:50:3d:26:ae:d2:b1:15:18:77:15:3c: a6:22:9d:53:19:21:a3:02:ad:ed:cd:0c:4e:3c:d9:8a:4d:75: 40:1b:d3:c9:e8:bd:59:c5:0f:7a:12:15:7a:16:f6:24:98:75: f8:05:eb:e6:f7:3d:cc:a4:5a:80:3c:1b:1d:cd:13:38:fa:7e: 44:64:d4:2b:7b:5e:0f:04:20:db:84:29:21:ce:af:ce:db:a9: 6d:cc:20:2b:45:4a:31:88:ca:e3:d8:ab:88:f3:ca:d3:16:23: 7e:8c:b2:17:1a:71:37:fa:9c:f4:a1:c3:de:cf:14:b8:95:9b: 22:06:cf:af:b4:3b:82:a4:ae:f2:97:9e:e3:a7:29:21:e0:15: e7:78:90:91:80:f8:17:fd:99:2a:cf:49:eb:fd:19:c4:81:63: 95:a4:90:33:3f:8f:d1:93:72:b1:70:7a:ee:87:06:8d:aa:25: 41:75:b5:ac:b2:f5:4b:f0:80:49:6d:dc:c3:cf:97:c2:87:02: 68:37:06:e3:b8:a4:05:ab:2e:f3:7e:6a:44:b7:87:03:13:57: 92:40:a0:a1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJjCTNZOb079yFrpXzTanGk3YOt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDQwMDA0WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzE4ZGY2Njc4ZWYzOGZkMmQ0MGNlYjAzYzBjYzFhMGMz NDJiNDM4NzEzMzVhMzExNTg4NTk1MmM1NzdiODI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClr+cXkvqPP0meR8epQRNS/UXFnaNXnYFyYqY1i6LwmaTW Bg9yRcbKRBYcmbnlo9XCuLz32Hw7jXOXy9ZtqiSS4GMX3G3e5gcj6CXBMlczbUYg 3EbDVMfHjzpo2HpiQ98dOQHYs5mbrMsUBFm7HaDXomMmcg2MhUSxXtvuepjjdwLI /tuGt2N6SKDeQg7QI6ZUdQ30jVi+nAot48UnglnWA/55FWbwIlnMzG9fx3NVJ4JU DZbTzax5tKgkxRjL6uY9uWV21TPe4cvrM7t64ASu/uHREYlIw+a/cZn5NIK6p4cs yAzJ7JDQ7W9EnjJcTc6hYRVcsx5XZFxgRBgxQ4j/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSDZv3Wtuud9zELGULHc+wES/YoswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzN2M4NjMzLWFhZjMtNGE0OS1iZmE2LTc3NWFiNzcyNGQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD7gAAwDQYJKoZIhvcNAQELBQADggEBAJgfT0yEkMg8jVZ7iD6y5L73 AbovH3KMjXFAogsb0vPerjy2hAxi4MwL141QPSau0rEVGHcVPKYinVMZIaMCre3N DE482YpNdUAb08novVnFD3oSFXoW9iSYdfgF6+b3PcykWoA8Gx3NEzj6fkRk1Ct7 Xg8EINuEKSHOr87bqW3MICtFSjGIyuPYq4jzytMWI36MshcacTf6nPShw97PFLiV myIGz6+0O4KkrvKXnuOnKSHgFed4kJGA+Bf9mSrPSev9GcSBY5WkkDM/j9GTcrFw eu6HBo2qJUF1tayy9UvwgElt3MPPl8KHAmg3BuO4pAWrLvN+akS3hwMTV5JAoKE= -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:03 2025 by rpki-client