This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acaf1a3-88c2-485e-9062-2f7686bba60c.roa File: 1acaf1a3-88c2-485e-9062-2f7686bba60c.roa (raw, json) Hash identifier: moTs9zfaiwkNhlBcXeAARV35USwVy1bt7Rx+m5jBuMQ= Subject key identifier: D8:88:7D:EE:23:61:85:A6:AD:7E:28:1E:64:30:B2:CD:C2:F3:AF:A2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3DD8F91B0D402A6B0183056DC5DA8178C9605B22 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acaf1a3-88c2-485e-9062-2f7686bba60c.roa Signing time: Mon 24 Nov 2025 04:51:36 +0000 ROA not before: Mon 24 Nov 2025 04:51:36 +0000 ROA not after: Sun 22 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d3a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d8:f9:1b:0d:40:2a:6b:01:83:05:6d:c5:da:81:78:c9:60:5b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 24 04:51:36 2025 GMT Not After : Feb 22 23:59:59 2026 GMT Subject: serialNumber=ad21f6ea11c432d1b0055e1cd2d7cd9bbe859a66604f5f6cda1e5b2ea74a4bb5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:70:f6:ad:e9:71:64:41:e4:53:d7:12:15: ae:e9:7a:2f:41:48:f5:e2:a6:f3:f1:20:96:8f:fd: 81:ec:e6:36:44:19:5c:c3:71:b2:b6:c1:8b:61:81: d0:e0:5f:6b:9f:c7:65:02:51:bf:e4:64:11:f0:5b: c7:7a:29:0b:b3:6f:1b:31:a3:32:ac:77:91:95:2d: 0d:a6:c3:20:f3:c4:ad:ea:42:0e:fd:45:cd:69:82: df:1d:db:49:f9:0b:3f:e7:87:46:7d:5c:27:6d:d0: 61:34:9e:24:9b:9c:c1:20:9a:b3:73:b2:58:a2:a3: 50:64:72:82:3a:a3:b6:e7:f2:07:9a:f8:42:63:58: 5c:16:49:6f:97:b0:ff:4e:54:0d:93:53:67:63:ab: e7:68:b3:62:63:2c:76:90:ac:0b:e8:75:80:50:16: 3d:0e:ba:00:c6:e6:1b:3c:39:5f:ad:17:41:4c:24: d8:fc:02:46:b3:60:16:d7:db:63:f6:64:48:65:bb: b2:b9:a6:4a:46:0d:b6:da:4a:93:e1:96:a4:4b:34: 79:31:84:f9:20:2e:f4:36:63:af:b3:af:6f:e5:c8: 23:9c:8f:ae:46:f2:92:4a:3f:a2:86:bc:31:df:3a: e4:bc:ae:1f:26:c8:4c:34:82:d1:bb:3e:06:7f:d9: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:7D:EE:23:61:85:A6:AD:7E:28:1E:64:30:B2:CD:C2:F3:AF:A2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acaf1a3-88c2-485e-9062-2f7686bba60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d3a::/47 Signature Algorithm: sha256WithRSAEncryption 88:d2:cd:fe:52:3b:d4:f5:16:bc:0b:b1:f2:7b:c6:2e:a2:8b: 3a:59:6c:fc:4b:ea:c5:2a:d0:59:5d:f7:ac:49:cb:c9:4e:27: a6:e7:59:07:db:66:19:d8:f2:58:c1:02:2a:81:4c:b2:70:cb: 3a:a1:1a:6f:fe:ca:b2:68:e2:b7:38:c3:21:8c:ba:5b:05:8e: dc:6b:b3:2c:26:b5:8d:6f:fe:5c:fa:32:7c:23:1a:16:f0:a3: 8a:46:de:ec:22:14:a6:90:69:55:e3:05:5e:b7:c6:d9:11:2a: 34:ee:76:8c:a9:1e:56:f7:40:80:5f:d2:67:33:03:3e:b3:00: 3a:3c:ba:09:e6:cf:25:28:7d:f5:be:b2:57:b7:3e:91:d2:78: 06:f0:41:e9:19:70:e6:47:e3:91:d3:65:5b:8a:00:01:d1:06: 9d:46:df:ae:79:6a:a0:4d:d7:da:0e:4f:d7:f1:d7:c5:c1:a4: 7e:94:2c:d6:15:f3:54:a7:54:9f:bc:62:d0:c4:4a:fc:89:0c: f0:f8:d5:a1:83:5f:a7:c6:11:7e:1e:0b:46:6f:fa:7f:d1:0d: e9:a8:92:78:02:02:37:4f:7e:85:d0:6a:21:9d:c6:2d:9e:9b: 1d:06:1c:4f:ac:ec:e1:65:8d:6c:47:db:63:76:2d:e8:90:a4: 8c:18:dc:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPdj5Gw1AKmsBgwVtxdqBeMlgWyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDQ1MTM2WhcNMjYwMjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDIxZjZlYTExYzQzMmQxYjAwNTVlMWNkMmQ3Y2Q5YmJl ODU5YTY2NjA0ZjVmNmNkYTFlNWIyZWE3NGE0YmI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJznD2relxZEHkU9cSFa7pei9BSPXipvPxIJaP/YHs5jZE GVzDcbK2wYthgdDgX2ufx2UCUb/kZBHwW8d6KQuzbxsxozKsd5GVLQ2mwyDzxK3q Qg79Rc1pgt8d20n5Cz/nh0Z9XCdt0GE0niSbnMEgmrNzsliio1BkcoI6o7bn8gea +EJjWFwWSW+XsP9OVA2TU2djq+dos2JjLHaQrAvodYBQFj0OugDG5hs8OV+tF0FM JNj8AkazYBbX22P2ZEhlu7K5pkpGDbbaSpPhlqRLNHkxhPkgLvQ2Y6+zr2/lyCOc j65G8pJKP6KGvDHfOuS8rh8myEw0gtG7PgZ/2VPpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2Ih97iNhhaatfigeZDCyzcLzr6IwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFhY2FmMWEzLTg4YzItNDg1ZS05MDYyLTJmNzY4NmJiYTYwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALTowDQYJKoZIhvcNAQELBQADggEBAIjSzf5SO9T1FrwLsfJ7xi6i izpZbPxL6sUq0Fld96xJy8lOJ6bnWQfbZhnY8ljBAiqBTLJwyzqhGm/+yrJo4rc4 wyGMulsFjtxrsywmtY1v/lz6MnwjGhbwo4pG3uwiFKaQaVXjBV63xtkRKjTudoyp Hlb3QIBf0mczAz6zADo8ugnmzyUoffW+sle3PpHSeAbwQekZcOZH45HTZVuKAAHR Bp1G3655aqBN19oOT9fx18XBpH6ULNYV81SnVJ+8YtDESvyJDPD41aGDX6fGEX4e C0Zv+n/RDemokngCAjdPfoXQaiGdxi2emx0GHE+s7OFljWxH22N2LeiQpIwY3OQ= -----END CERTIFICATE-----Generated at Sat Dec 6 10:48:43 2025 by rpki-client