This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: l95nK8I3aS8ppmhRbW6ee/9Oh9ne1bu1977vmFrvQ7c= Subject key identifier: E9:DC:4E:0B:DF:EC:DD:79:EA:E9:97:AD:F8:A1:39:9F:A7:F6:71:47 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5818FA594B4AF6349057FFC96D526B09A08CCD5E Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Sat 15 Nov 2025 00:00:05 +0000 ROA not before: Sat 15 Nov 2025 00:00:05 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:18:fa:59:4b:4a:f6:34:90:57:ff:c9:6d:52:6b:09:a0:8c:cd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Nov 15 00:00:05 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=6872941ffc1ed79a57b509a8b5985f9c3c72f7e3769b665d49633d678c57c44b, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:0e:28:b8:c7:61:d3:ab:ae:79:00:6a:4c: f5:59:64:b9:94:f3:76:fc:3b:26:97:fa:98:8c:d0: c3:1b:cd:a1:ff:10:c1:f8:4f:60:c5:b9:0c:d8:b8: a9:f3:d6:54:37:50:ad:95:7f:ee:24:e1:43:49:d5: 8e:c9:e6:57:29:4a:03:05:9e:53:a0:84:60:de:33: c4:b2:49:eb:41:fd:a2:d2:0b:59:5a:e0:bd:25:a1: 7a:11:21:31:31:2f:d6:a8:96:7b:06:c7:56:20:97: 34:0b:56:21:04:fa:b7:fc:f8:c9:73:22:f1:f7:d8: 33:32:7c:30:df:fa:5b:81:0f:d3:0d:8f:55:d2:54: 6d:76:f9:50:4f:86:d3:10:5e:0f:38:cc:34:22:90: 29:36:02:6b:4c:8d:e1:fb:dc:2e:86:a2:e5:f6:43: 74:99:b5:19:26:9b:d6:ad:d9:0a:c8:25:28:e5:9e: 98:21:41:4d:03:3c:fb:32:d4:34:b7:25:c3:06:ef: 89:91:88:eb:9f:15:91:8d:c9:2d:42:b3:da:92:45: 8d:e9:e8:ce:4c:22:3a:54:b1:50:49:6e:44:cc:5d: 51:f5:fc:72:7a:4f:bb:0b:83:27:ec:07:01:15:a0: 41:81:f8:67:b2:14:38:ca:d3:34:39:a7:35:ad:4a: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:4E:0B:DF:EC:DD:79:EA:E9:97:AD:F8:A1:39:9F:A7:F6:71:47 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 95:62:c9:57:25:de:0c:d5:d8:fe:a1:9b:e7:bd:fc:fe:78:48: 81:86:98:58:c4:98:6c:77:c5:55:b3:7a:2c:d5:f4:bd:58:9a: d2:f3:a7:c6:39:ec:d8:67:a0:33:68:ce:91:47:43:f2:10:a8: 83:21:99:1d:45:d4:0b:60:fb:d0:43:57:09:5b:fb:1b:c3:46: e4:f7:bf:ad:e8:58:42:32:24:c6:ca:d5:6d:e2:67:98:bf:f7: 65:a4:e1:e3:5e:ec:f7:41:77:d4:b8:8f:59:1f:20:ae:db:f8: 72:8f:0b:b5:0e:a1:58:ec:b9:1c:3a:09:5b:1e:43:4e:ab:ed: 81:3a:66:ec:0c:03:63:b3:a3:e9:72:59:04:5d:e3:a1:d9:5b: fe:0c:b9:00:47:85:80:a6:ab:2f:72:94:ff:7b:12:0a:cd:77: a6:04:16:fb:1a:17:94:de:d9:c5:05:5f:56:87:7f:57:f4:74: b3:09:75:29:92:2c:49:56:19:29:9a:d3:46:1f:b1:31:9f:4c: 37:1e:e7:e8:68:03:6e:76:cc:df:fd:5a:f0:1d:ee:67:4a:17: 8d:b2:5f:a8:18:3d:28:8b:39:e3:a3:b0:f6:c8:3a:51:57:73: 81:85:43:49:b2:23:57:6e:36:cf:0d:e8:8b:e7:4f:dd:1b:06: 0d:2c:dc:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWBj6WUtK9jSQV//JbVJrCaCMzV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMTE1MDAwMDA1WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODcyOTQxZmZjMWVkNzlhNTdiNTA5YThiNTk4NWY5YzNj NzJmN2UzNzY5YjY2NWQ0OTYzM2Q2NzhjNTdjNDRiMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD8g4ouMdh06uueQBqTPVZZLmU83b8OyaX+piM0MMbzaH/ EMH4T2DFuQzYuKnz1lQ3UK2Vf+4k4UNJ1Y7J5lcpSgMFnlOghGDeM8SySetB/aLS C1la4L0loXoRITExL9aolnsGx1YglzQLViEE+rf8+MlzIvH32DMyfDDf+luBD9MN j1XSVG12+VBPhtMQXg84zDQikCk2AmtMjeH73C6GouX2Q3SZtRkmm9at2QrIJSjl npghQU0DPPsy1DS3JcMG74mRiOufFZGNyS1Cs9qSRY3p6M5MIjpUsVBJbkTMXVH1 /HJ6T7sLgyfsBwEVoEGB+GeyFDjK0zQ5pzWtShL9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6dxOC9/s3Xnq6Zet+KE5n6f2cUcwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAJViyVcl3gzV2P6hm+e9/P54 SIGGmFjEmGx3xVWzeizV9L1YmtLzp8Y57NhnoDNozpFHQ/IQqIMhmR1F1Atg+9BD Vwlb+xvDRuT3v63oWEIyJMbK1W3iZ5i/92Wk4eNe7PdBd9S4j1kfIK7b+HKPC7UO oVjsuRw6CVseQ06r7YE6ZuwMA2Ozo+lyWQRd46HZW/4MuQBHhYCmqy9ylP97EgrN d6YEFvsaF5Te2cUFX1aHf1f0dLMJdSmSLElWGSma00YfsTGfTDce5+hoA252zN/9 WvAd7mdKF42yX6gYPSiLOeOjsPbIOlFXc4GFQ0myI1duNs8N6IvnT90bBg0s3Oc= -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:40 2025 by rpki-client