This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa File: 3c970d21-5c9a-410a-8900-2a24d6b0b719.roa (raw, json) Hash identifier: 5ULB7KQtKXMPkhYL/YAObJcNK+YBTF3eMR6+FUxL4q0= Subject key identifier: DB:C9:0C:A4:D9:71:8A:CB:63:C9:0D:4D:18:21:DE:05:E3:4F:52:D1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1D2A729AE8AF3B606CDF279901077B50104B1855 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa Signing time: Tue 25 Nov 2025 13:12:19 +0000 ROA not before: Tue 25 Nov 2025 13:12:19 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3960::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2a:72:9a:e8:af:3b:60:6c:df:27:99:01:07:7b:50:10:4b:18:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 25 13:12:19 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=e12a26e31dd37e7840b405443c8da71110b77172bd04f130f35be8f1a182f294, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:11:b6:b4:04:99:96:d0:4a:80:ad:4f:b7: 32:6b:cf:1f:69:58:64:c8:3c:ea:08:3b:10:70:8a: c2:8a:91:86:6b:24:d0:a7:92:08:3a:b6:ba:64:49: 68:9e:5c:78:04:57:03:d0:08:b1:c1:ff:7f:6c:06: 71:5a:67:ef:d6:ab:3c:62:ee:f1:31:6d:20:eb:38: 06:f7:e6:3d:ca:67:e0:7c:f8:79:1e:d8:3c:a4:22: db:8e:92:2d:6c:d9:67:e5:47:6c:d0:e9:2d:3c:f1: 18:a1:e3:2d:ca:fc:c6:dc:a8:34:24:85:38:d9:74: a1:57:9b:b7:37:f8:40:9e:ae:a0:c9:08:52:6f:41: 40:0d:65:79:60:78:d6:8e:8a:4a:bd:7a:35:20:10: 46:4c:75:4f:c9:64:b8:5f:8d:a1:81:21:91:5e:7c: 9f:cb:36:c3:e6:89:41:74:83:fe:20:4d:e1:68:0a: 1a:4a:17:b1:f0:92:44:f3:bc:da:32:ee:2a:7c:8e: 49:93:4f:66:e8:08:77:88:61:42:1e:06:23:58:3c: 1c:ed:4c:55:aa:81:c3:6a:8b:d3:63:21:2b:43:d3: db:21:31:fe:22:16:ec:ea:2e:9c:ff:61:b9:15:21: 8a:bd:35:31:f9:8e:13:91:b8:1b:0d:c7:cc:bf:2c: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:0C:A4:D9:71:8A:CB:63:C9:0D:4D:18:21:DE:05:E3:4F:52:D1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3960::/45 Signature Algorithm: sha256WithRSAEncryption a5:9b:3e:66:dc:1b:fe:99:2b:68:4f:d5:ee:f4:af:c3:c5:2b: c5:12:1f:a7:50:ce:1c:cd:9d:05:bd:12:ff:56:4a:ae:22:4c: 6a:e5:bf:eb:c3:4a:35:a7:e8:50:db:93:d3:7b:b8:f2:72:bd: e7:6b:f2:92:54:8b:da:ef:9c:6a:42:ef:c1:a7:0d:c9:08:8d: 0d:0b:99:fb:e0:a8:25:8f:37:57:2a:87:17:bb:36:6e:88:be: 39:a6:bf:1b:a6:55:b3:ba:85:d2:4e:fd:3a:39:c7:ab:7e:42: 47:e1:e3:6b:b7:3e:92:67:4b:a4:2e:82:71:f9:67:00:cd:6c: 10:5d:d2:d0:63:e2:00:f7:b6:2b:0a:ed:7b:34:60:db:41:de: a3:48:59:54:c8:b9:5f:66:06:b9:f4:0c:6a:bd:33:af:b4:0d: 2f:1b:05:2b:55:73:a3:72:56:87:18:7c:d0:20:55:12:81:15: bc:f8:bb:84:89:bd:0d:ea:3b:d6:70:d9:13:36:33:d1:49:f2: 42:6a:a1:62:ae:2d:b7:5c:56:ec:0b:99:32:a3:7a:26:61:cc: 19:c9:89:ca:f6:82:4c:48:e9:11:cc:0a:30:ca:6b:9e:25:09: e2:a8:5d:7a:2d:7b:63:d1:a1:91:23:58:e0:46:4d:be:86:a2: a6:49:7c:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHSpymuivO2Bs3yeZAQd7UBBLGFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTMxMjE5WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTJhMjZlMzFkZDM3ZTc4NDBiNDA1NDQzYzhkYTcxMTEw Yjc3MTcyYmQwNGYxMzBmMzViZThmMWExODJmMjk0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpnRG2tASZltBKgK1PtzJrzx9pWGTIPOoIOxBwisKKkYZr JNCnkgg6trpkSWieXHgEVwPQCLHB/39sBnFaZ+/Wqzxi7vExbSDrOAb35j3KZ+B8 +Hke2DykItuOki1s2WflR2zQ6S088Rih4y3K/MbcqDQkhTjZdKFXm7c3+ECerqDJ CFJvQUANZXlgeNaOikq9ejUgEEZMdU/JZLhfjaGBIZFefJ/LNsPmiUF0g/4gTeFo ChpKF7HwkkTzvNoy7ip8jkmTT2boCHeIYUIeBiNYPBztTFWqgcNqi9NjIStD09sh Mf4iFuzqLpz/YbkVIYq9NTH5jhORuBsNx8y/LJs/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU28kMpNlxistjyQ1NGCHeBeNPUtEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNjOTcwZDIxLTVjOWEtNDEwYS04OTAwLTJhMjRkNmIwYjcxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAOWAwDQYJKoZIhvcNAQELBQADggEBAKWbPmbcG/6ZK2hP1e70r8PF K8USH6dQzhzNnQW9Ev9WSq4iTGrlv+vDSjWn6FDbk9N7uPJyvedr8pJUi9rvnGpC 78GnDckIjQ0LmfvgqCWPN1cqhxe7Nm6IvjmmvxumVbO6hdJO/To5x6t+Qkfh42u3 PpJnS6QugnH5ZwDNbBBd0tBj4gD3tisK7Xs0YNtB3qNIWVTIuV9mBrn0DGq9M6+0 DS8bBStVc6NyVocYfNAgVRKBFbz4u4SJvQ3qO9Zw2RM2M9FJ8kJqoWKuLbdcVuwL mTKjeiZhzBnJicr2gkxI6RHMCjDKa54lCeKoXXote2PRoZEjWOBGTb6GoqZJfOg= -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:10 2025 by rpki-client