This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa File: cf62b964-3d33-414c-b4ce-9c3db9218363.roa (raw, json) Hash identifier: 2R8uXCNsbgKjaYSE2Dar7z7NZj6gDtmsUv3DD2z9YgI= Subject key identifier: 43:03:66:9D:5F:44:C9:9D:BD:BA:19:31:79:47:20:31:0A:42:66:51 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3B5A7F08689A4FBCE7C61C5CD1E637F980AFE263 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa Signing time: Sat 06 Dec 2025 00:20:06 +0000 ROA not before: Sat 06 Dec 2025 00:20:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:7f:08:68:9a:4f:bc:e7:c6:1c:5c:d1:e6:37:f9:80:af:e2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Dec 6 00:20:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=ae4ec451bbbcdeceb280e5730b74ecf503ecd989ed14b8ffccb040dac528ed5e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:76:a4:30:28:9b:6c:87:8d:b6:33:00:f1: fa:92:87:5a:7c:21:69:fa:b4:d0:c6:f9:85:b0:53: 3c:56:96:3c:67:25:6b:fe:24:73:90:d7:e1:ea:92: ca:ad:53:78:96:34:c0:7b:05:83:a6:c1:34:99:30: dd:23:d3:bd:29:2c:64:90:cf:ee:78:16:84:41:88: 78:ff:f1:10:93:c3:d7:0e:90:3d:39:35:cc:3e:e2: bd:9f:b5:db:ea:1a:94:9e:76:db:e5:a5:2b:3a:e1: c6:70:ff:5f:f6:27:07:70:be:ff:c2:ed:79:b3:9e: e1:2a:d8:9b:14:02:de:27:6a:95:8f:26:1e:a7:5a: 94:63:7c:10:36:c1:37:54:1a:78:ea:4c:46:98:de: 26:89:4f:f5:ee:b3:83:6c:e6:1b:34:13:47:54:9a: de:e6:8f:d9:ec:f7:38:23:ba:7c:98:e7:17:59:2d: ed:95:b2:43:29:cb:a6:0d:e2:9c:be:73:38:16:dc: 92:87:14:0d:7d:f2:57:83:a3:fc:18:91:da:c5:19: 0f:cf:d6:c7:30:87:e0:2f:0a:ae:e7:c8:d8:13:d5: 2f:81:3e:66:6a:c3:f5:7f:2a:d0:38:98:49:70:c4: 0f:df:40:8e:12:51:9d:06:23:44:91:69:9a:19:53: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:66:9D:5F:44:C9:9D:BD:BA:19:31:79:47:20:31:0A:42:66:51 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 89:8e:d6:45:68:ba:4d:e6:39:8f:b3:17:ba:65:e7:5b:24:cd: e6:f2:4f:d6:c4:11:b7:80:7e:73:57:00:43:d8:8f:78:a9:92: be:27:05:b6:ae:78:06:69:7f:af:4f:a9:1d:e3:dd:fc:ca:09: 3b:32:10:3c:e6:1b:3b:94:11:d3:9d:c4:37:c8:b6:96:80:d2: 15:a0:5a:9d:92:d5:ac:67:70:e1:34:87:c9:8c:1e:d3:23:2e: 09:8e:94:4c:35:b4:3c:ed:1b:c0:90:14:2f:97:26:3f:6c:4c: fc:59:47:9b:c2:97:2c:8b:7b:71:92:eb:d1:e6:a9:d6:61:d5: e6:58:64:ce:db:7a:a4:54:52:0b:9f:f4:a7:70:25:58:02:24: bf:7d:6a:33:34:8c:c8:98:52:f5:42:14:db:df:06:66:d2:0f: 8c:e5:09:69:44:1b:09:ed:ec:dc:4e:80:05:cd:43:06:88:9d: 19:22:a0:36:29:60:cc:45:c2:fd:7d:a9:99:e7:85:6c:a8:6d: 8f:15:c7:71:96:f8:3c:4f:ce:36:c9:62:f2:ee:df:85:e3:bb: 0b:a0:15:10:26:97:f4:7d:62:5c:38:e6:8f:01:2b:ec:b8:60: 8b:cf:8a:24:b7:cf:5a:d7:e0:cc:dc:03:99:c5:53:2e:de:d7: c3:78:05:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO1p/CGiaT7znxhxc0eY3+YCv4mMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMjA2MDAyMDA2WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTRlYzQ1MWJiYmNkZWNlYjI4MGU1NzMwYjc0ZWNmNTAz ZWNkOTg5ZWQxNGI4ZmZjY2IwNDBkYWM1MjhlZDVlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFr3akMCibbIeNtjMA8fqSh1p8IWn6tNDG+YWwUzxWljxn JWv+JHOQ1+HqksqtU3iWNMB7BYOmwTSZMN0j070pLGSQz+54FoRBiHj/8RCTw9cO kD05Ncw+4r2ftdvqGpSedtvlpSs64cZw/1/2Jwdwvv/C7XmznuEq2JsUAt4napWP Jh6nWpRjfBA2wTdUGnjqTEaY3iaJT/Xus4Ns5hs0E0dUmt7mj9ns9zgjunyY5xdZ Le2VskMpy6YN4py+czgW3JKHFA198leDo/wYkdrFGQ/P1scwh+AvCq7nyNgT1S+B PmZqw/V/KtA4mElwxA/fQI4SUZ0GI0SRaZoZU1xZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQwNmnV9EyZ29uhkxeUcgMQpCZlEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NmNjJiOTY0LTNkMzMtNDE0Yy1iNGNlLTljM2RiOTIxODM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAImO1kVouk3mOY+zF7pl51sk zebyT9bEEbeAfnNXAEPYj3ipkr4nBbaueAZpf69PqR3j3fzKCTsyEDzmGzuUEdOd xDfItpaA0hWgWp2S1axncOE0h8mMHtMjLgmOlEw1tDztG8CQFC+XJj9sTPxZR5vC lyyLe3GS69HmqdZh1eZYZM7beqRUUguf9KdwJVgCJL99ajM0jMiYUvVCFNvfBmbS D4zlCWlEGwnt7NxOgAXNQwaInRkioDYpYMxFwv19qZnnhWyobY8Vx3GW+DxPzjbJ YvLu34XjuwugFRAml/R9Ylw45o8BK+y4YIvPiiS3z1rX4MzcA5nFUy7e18N4BQM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:16 2025 by rpki-client