This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa File: ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa (raw, json) Hash identifier: 4oOyJN5gNJcKOMdIljLufhaN/JFjxVICxwwlBz+tKzY= Subject key identifier: 3C:B9:8B:A2:F9:61:68:AF:3F:AD:69:50:01:53:09:50:64:F3:EE:B2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 09ADDEFDC9BB2842FA5390FDD8D09DECC7A07BF1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa Signing time: Sat 15 Nov 2025 05:00:06 +0000 ROA not before: Sat 15 Nov 2025 05:00:06 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ad:de:fd:c9:bb:28:42:fa:53:90:fd:d8:d0:9d:ec:c7:a0:7b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:00:06 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=dfc1cd7f6e451c943cb0e7058877058f07bd2e97fa079d47a5c3b8584297cade, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:33:62:2f:58:b1:0d:a5:11:f6:30:8c:72: 57:35:24:fc:0c:1b:6c:d0:e2:6d:82:9c:e4:cc:15: b1:e7:20:81:9d:81:ae:72:12:f8:0a:42:ff:9a:80: bd:6a:3d:9d:6d:4e:26:23:c6:c5:12:e8:ec:f3:07: 81:ec:bd:3e:3a:76:0b:88:87:e9:aa:64:6e:e9:87: 3e:ba:71:fd:cb:0e:3f:0d:b3:f4:5d:c6:fd:a2:6b: 7b:c8:ff:ef:25:cc:d5:de:7a:f9:e9:e1:ae:e4:23: a0:ca:1d:fe:19:fd:57:f8:2b:68:a2:68:93:9b:7a: b5:e7:92:d7:b7:c0:45:c0:21:a3:d4:af:5e:fd:45: 72:e7:29:b1:e5:3a:a2:00:34:9a:a7:84:43:36:25: 8d:38:47:30:e2:d3:c2:44:40:85:5d:c0:13:a4:84: 3f:7d:3f:7c:3d:a9:9d:e2:b9:ed:e6:d9:30:46:24: 63:b9:70:2e:27:33:d3:25:71:7f:29:9d:46:b4:d4: 0e:5d:52:01:ea:a2:5d:65:96:3e:b5:0a:5f:13:33: 9f:c7:22:0d:61:20:ab:9a:bd:5d:92:fa:d3:33:6b: 04:b7:6c:1b:61:dc:6f:ae:c3:ea:05:73:93:8b:bc: 71:bc:e6:cf:aa:b6:b4:36:de:93:53:d2:46:72:f0: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B9:8B:A2:F9:61:68:AF:3F:AD:69:50:01:53:09:50:64:F3:EE:B2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e200::/40 Signature Algorithm: sha256WithRSAEncryption 54:da:ad:af:00:14:c7:d0:00:4d:2e:fa:c6:0e:ab:68:4d:79: aa:59:f2:a0:16:a0:54:c0:3d:be:97:bd:c1:01:bf:23:3d:bd: 27:7d:9a:28:8a:03:ff:5f:f7:c8:0e:a9:f7:45:72:33:35:0c: 75:6f:83:cb:1f:2b:ce:3a:42:53:eb:ea:d6:52:a5:91:c8:25: 87:bc:80:7e:4e:2e:9c:91:08:82:75:2a:35:b5:19:16:93:68: e5:c3:40:78:d9:72:e2:74:57:11:6b:d6:ca:b2:07:9e:2c:2f: 01:e6:fa:aa:fb:ce:91:27:22:c8:9b:4f:88:c7:f6:06:f7:e8: 81:d6:23:21:56:bf:8b:f5:5e:1e:f0:5e:02:8d:72:82:39:df: 33:ae:d0:7a:87:b4:f4:e1:cd:49:d2:4e:24:4a:cd:d3:f5:e8: 8a:de:52:6d:71:04:22:ac:51:f0:2f:58:66:f0:1b:c1:2a:e8: c1:8b:47:41:ee:ea:da:f7:42:8f:b8:19:98:be:2a:1c:23:fb: a2:fe:af:92:3c:76:ea:0d:58:f2:25:e9:5e:cf:5b:96:22:f7: 57:28:a7:be:7b:fe:b1:97:3f:11:f4:5d:42:49:ac:74:b2:37: 34:05:8a:d1:ef:2f:c4:a9:13:84:f3:d2:33:63:b1:28:79:39: 48:7a:7e:3b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCa3e/cm7KEL6U5D92NCd7Mege/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDA2WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmMxY2Q3ZjZlNDUxYzk0M2NiMGU3MDU4ODc3MDU4ZjA3 YmQyZTk3ZmEwNzlkNDdhNWMzYjg1ODQyOTdjYWRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHgTNiL1ixDaUR9jCMclc1JPwMG2zQ4m2CnOTMFbHnIIGd ga5yEvgKQv+agL1qPZ1tTiYjxsUS6OzzB4HsvT46dguIh+mqZG7phz66cf3LDj8N s/Rdxv2ia3vI/+8lzNXeevnp4a7kI6DKHf4Z/Vf4K2iiaJOberXnkte3wEXAIaPU r179RXLnKbHlOqIANJqnhEM2JY04RzDi08JEQIVdwBOkhD99P3w9qZ3iue3m2TBG JGO5cC4nM9MlcX8pnUa01A5dUgHqol1llj61Cl8TM5/HIg1hIKuavV2S+tMzawS3 bBth3G+uw+oFc5OLvHG85s+qtrQ23pNT0kZy8C0ZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPLmLovlhaK8/rWlQAVMJUGTz7rIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZmZDJjM2UyLTRkODktNDFhMy1iNDUwLWI1M2Y5NWE5ZGNkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74jANBgkqhkiG9w0BAQsFAAOCAQEAVNqtrwAUx9AATS76xg6raE15 qlnyoBagVMA9vpe9wQG/Iz29J32aKIoD/1/3yA6p90VyMzUMdW+Dyx8rzjpCU+vq 1lKlkcglh7yAfk4unJEIgnUqNbUZFpNo5cNAeNly4nRXEWvWyrIHniwvAeb6qvvO kSciyJtPiMf2BvfogdYjIVa/i/VeHvBeAo1ygjnfM67Qeoe09OHNSdJOJErN0/Xo it5SbXEEIqxR8C9YZvAbwSrowYtHQe7q2vdCj7gZmL4qHCP7ov6vkjx26g1Y8iXp Xs9bliL3Vyinvnv+sZc/EfRdQkmsdLI3NAWK0e8vxKkThPPSM2OxKHk5SHp+Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:29 2025 by rpki-client