This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/406efba0-e869-4dff-8309-2889d774cb6b.roa File: 406efba0-e869-4dff-8309-2889d774cb6b.roa (raw, json) Hash identifier: fJRg3dBK/50SLeA1fEDLRLILV9jOMG+POM+fPG2OAx8= Subject key identifier: AA:D1:C8:16:7A:AC:35:BC:DE:97:FE:CD:00:DC:7E:28:AB:E0:69:09 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 24CE8DC560EAF03B23B1FB914C000D98EE4C92 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/406efba0-e869-4dff-8309-2889d774cb6b.roa Signing time: Tue 25 Nov 2025 04:00:38 +0000 ROA not before: Tue 25 Nov 2025 04:00:38 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a50::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ce:8d:c5:60:ea:f0:3b:23:b1:fb:91:4c:00:0d:98:ee:4c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 25 04:00:38 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=7f78fa114a640cc39c9a286da828a767446ee97fdf27996865d4d7636591bb3a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:0e:88:2c:47:43:42:43:34:9d:2b:3d:d6: a2:2d:6d:22:4a:81:f4:af:e2:b2:9c:7c:2a:e5:76: cc:17:05:95:89:3d:24:c4:18:37:34:bf:22:de:bb: 2b:f5:15:99:15:47:c7:d3:a7:c8:e3:32:c3:ef:24: a7:c7:e6:d2:4d:bb:99:68:40:20:e4:7c:7d:dc:1f: 5b:5e:c2:32:ca:90:a6:23:69:87:03:60:74:58:90: a1:c1:0c:09:a7:2c:55:10:37:9b:eb:45:bf:28:ac: dc:26:80:9e:cd:83:78:f7:53:44:03:7e:ea:07:3f: ba:53:03:48:84:81:7e:2e:2b:76:de:c9:79:a6:0c: 76:92:d4:12:36:1c:26:8a:72:44:bf:9e:a1:f0:4c: 36:32:92:32:cb:c1:a9:a0:e3:f3:6d:54:55:14:9a: ea:ff:7f:a2:02:d8:84:e5:15:4d:2f:0d:cb:22:f5: 70:fb:33:60:48:04:a2:fe:4e:a0:d8:a8:cb:45:1b: 82:02:43:81:ad:bb:a6:f3:b6:78:49:9e:f7:25:34: e6:18:a6:50:9e:42:f6:b2:af:a8:01:fd:bd:b6:4a: 7f:05:16:af:cd:30:6e:0a:46:21:35:fb:a2:f5:c8: da:93:7a:58:8d:90:e5:cb:3c:3d:6d:16:78:58:82: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:C8:16:7A:AC:35:BC:DE:97:FE:CD:00:DC:7E:28:AB:E0:69:09 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/406efba0-e869-4dff-8309-2889d774cb6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a50::/46 Signature Algorithm: sha256WithRSAEncryption a2:c9:c3:51:3a:f0:d0:04:35:31:10:03:66:6e:ba:4b:2c:79: 1c:c6:ba:78:95:cc:d2:1b:04:1b:a1:8f:4c:ef:33:a1:0a:51: b7:8d:54:48:18:4f:7d:6e:9c:5e:ee:44:8f:d4:cb:8c:e1:3d: 49:95:59:d8:69:1a:8a:77:d1:89:63:0c:ca:15:22:eb:cd:23: a1:95:62:74:8a:5d:df:35:ef:48:0a:bb:66:b8:70:25:5b:a9: 55:af:0d:0e:b2:c1:b0:1c:fe:9d:0b:de:47:9c:db:52:8f:1d: 9e:c0:96:36:2d:a2:6b:67:03:6a:b3:4e:42:4f:a7:f3:f4:a6: 81:98:b9:51:47:55:ea:c9:1d:0b:73:26:2a:af:74:53:7f:f5: 19:41:59:0c:16:d2:be:d7:1e:56:ea:ed:c9:5d:7a:97:cb:d3: 0a:77:70:1a:e8:e1:8e:da:c7:ae:c5:71:7f:ae:28:cb:01:05: 39:37:6f:84:b3:80:55:a8:7e:d1:54:c0:6e:55:16:9b:a7:6e: ef:f6:b6:a3:a9:e3:17:4a:88:fc:22:93:c4:42:6f:13:02:b6: 11:ff:8a:0e:8f:2c:8f:18:44:d9:d4:31:48:d9:a0:f8:ab:cb: e5:4f:3a:6b:24:82:21:05:a7:1d:70:59:1f:ec:ee:fd:19:5f: a6:38:c1:6a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITJM6NxWDq8DsjsfuRTAANmO5MkjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMjUwNDAwMzhaFw0yNjAyMjMyMzU5NTla MHoxSTBHBgNVBAUTQDdmNzhmYTExNGE2NDBjYzM5YzlhMjg2ZGE4MjhhNzY3NDQ2 ZWU5N2ZkZjI3OTk2ODY1ZDRkNzYzNjU5MWJiM2ExLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIUUDogsR0NCQzSdKz3Woi1tIkqB9K/ispx8KuV2zBcFlYk9 JMQYNzS/It67K/UVmRVHx9OnyOMyw+8kp8fm0k27mWhAIOR8fdwfW17CMsqQpiNp hwNgdFiQocEMCacsVRA3m+tFvyis3CaAns2DePdTRAN+6gc/ulMDSISBfi4rdt7J eaYMdpLUEjYcJopyRL+eofBMNjKSMsvBqaDj821UVRSa6v9/ogLYhOUVTS8NyyL1 cPszYEgEov5OoNioy0UbggJDga27pvO2eEme9yU05himUJ5C9rKvqAH9vbZKfwUW r80wbgpGITX7ovXI2pN6WI2Q5cs8PW0WeFiC5rECAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSq0cgWeqw1vN6X/s0A3H4oq+BpCTAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvNDA2ZWZiYTAtZTg2OS00ZGZmLTgzMDktMjg4OWQ3NzRjYjZiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAiYAkAAqUDANBgkqhkiG9w0BAQsFAAOCAQEAosnDUTrw0AQ1MRADZm66Syx5 HMa6eJXM0hsEG6GPTO8zoQpRt41USBhPfW6cXu5Ej9TLjOE9SZVZ2GkainfRiWMM yhUi680joZVidIpd3zXvSAq7ZrhwJVupVa8NDrLBsBz+nQveR5zbUo8dnsCWNi2i a2cDarNOQk+n8/SmgZi5UUdV6skdC3MmKq90U3/1GUFZDBbSvtceVurtyV16l8vT CndwGujhjtrHrsVxf64oywEFOTdvhLOAVah+0VTAblUWm6du7/a2o6njF0qI/CKT xEJvEwK2Ef+KDo8sjxhE2dQxSNmg+KvL5U86aySCIQWnHXBZH+zu/RlfpjjBag== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:10 2025 by rpki-client