This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7e8f658-938b-423b-827f-9781855cfd20.roa File: a7e8f658-938b-423b-827f-9781855cfd20.roa (raw, json) Hash identifier: tocSxxdTcXGiC+YvW+VzhBv8s+8Q1rDR5ec4OzvlOzk= Subject key identifier: D2:65:F4:BF:DA:24:97:AF:AD:A2:25:68:67:86:DB:E5:78:A8:45:42 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7E414BC6867C23CC3B33B8BAD0CFFB628777CBA7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7e8f658-938b-423b-827f-9781855cfd20.roa Signing time: Mon 24 Nov 2025 06:01:21 +0000 ROA not before: Mon 24 Nov 2025 06:01:21 +0000 ROA not after: Sun 22 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:15f2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:41:4b:c6:86:7c:23:cc:3b:33:b8:ba:d0:cf:fb:62:87:77:cb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 24 06:01:21 2025 GMT Not After : Feb 22 23:59:59 2026 GMT Subject: serialNumber=d924a3dbf0eb0f1ec91086b24d3187ff9724de35c560a5e2a396020345a7eac1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:21:8b:ef:2e:5b:12:4c:11:04:8d:9b:af: db:9d:31:dd:e6:d6:9d:56:48:6a:b7:b0:97:7d:93: b7:36:94:5b:36:b4:c2:71:3a:ab:b3:de:a9:cc:dd: 21:e9:be:0c:e0:3a:c7:31:9b:c6:62:42:05:d5:5b: 80:9d:cc:b4:f5:0c:df:0e:e8:33:61:46:04:34:ae: f6:f8:a7:f2:fd:86:ca:96:26:9f:03:1e:5f:7a:36: d2:6d:f2:b2:ce:5f:5e:b3:eb:5e:d6:79:1d:71:5e: 65:a6:77:77:bf:0a:dc:70:0c:24:be:a5:f4:ef:64: d3:f3:18:9f:dd:97:a4:97:72:b8:d7:9f:28:59:41: 97:9d:13:bd:8d:b9:69:93:a8:46:2f:ea:a4:e8:55: 01:92:6f:38:c8:ad:78:de:f6:b7:53:01:fd:d4:81: 72:7e:a6:dc:e8:5f:43:90:1f:83:07:4c:47:ba:7a: 20:30:57:3a:4a:0f:d3:c9:d3:84:89:c8:01:6f:58: bc:a0:8a:a2:7d:d2:9a:be:a7:00:29:db:e8:71:34: 52:c0:5d:6d:56:28:77:2a:89:fd:9d:ff:82:fb:c5: 4f:57:48:ab:86:09:71:f9:fd:27:ad:a7:1e:99:d6: 2b:84:dd:c2:39:8a:63:19:6e:03:f9:7e:7a:21:fa: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:F4:BF:DA:24:97:AF:AD:A2:25:68:67:86:DB:E5:78:A8:45:42 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7e8f658-938b-423b-827f-9781855cfd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:15f2::/47 Signature Algorithm: sha256WithRSAEncryption 4d:69:3b:0d:0c:2a:f5:cc:96:d4:11:51:c6:7b:50:15:5b:e9: 1b:5b:0e:bd:29:c3:11:6d:f7:93:62:1a:0e:b7:46:e3:73:f4: 3b:ca:2a:1d:c7:fe:19:15:1b:fa:17:00:b0:ac:77:4f:20:47: b5:ab:09:39:a1:ff:9c:61:54:b7:7a:84:34:14:6d:1a:dc:ce: a3:20:6b:3e:13:9a:29:31:1b:17:2c:aa:c7:8c:dc:4f:2c:45: ae:6f:b0:79:ae:86:33:81:e8:60:2a:83:9c:3c:ef:d1:55:17: 3f:81:5b:c8:22:dd:04:56:f4:48:2b:a4:8e:e8:2c:db:da:b2: e2:1e:27:5d:37:74:0c:ce:48:aa:bf:9e:94:5b:28:09:1e:56: 89:68:09:b8:91:90:b0:94:6d:42:49:68:1a:f4:e9:d3:2a:7c: f9:4e:32:06:83:c6:1a:a9:85:35:1e:14:74:45:ea:ae:bf:84: cf:a2:11:02:52:ac:d6:05:fe:32:fb:0e:2d:72:32:09:29:90: 31:8d:a8:88:77:c4:b3:75:46:db:f5:1e:f0:7a:4d:de:5e:f1: e4:69:6e:c5:fa:46:2e:c5:fe:93:59:86:31:a8:ff:b3:df:26: 69:e4:4d:ad:8e:16:16:0e:3d:e7:fe:e3:92:c6:5d:8a:ac:69: f6:a1:b1:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfkFLxoZ8I8w7M7i60M/7Yod3y6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI0MDYwMTIxWhcNMjYwMjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTI0YTNkYmYwZWIwZjFlYzkxMDg2YjI0ZDMxODdmZjk3 MjRkZTM1YzU2MGE1ZTJhMzk2MDIwMzQ1YTdlYWMxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzJSGL7y5bEkwRBI2br9udMd3m1p1WSGq3sJd9k7c2lFs2 tMJxOquz3qnM3SHpvgzgOscxm8ZiQgXVW4CdzLT1DN8O6DNhRgQ0rvb4p/L9hsqW Jp8DHl96NtJt8rLOX16z617WeR1xXmWmd3e/CtxwDCS+pfTvZNPzGJ/dl6SXcrjX nyhZQZedE72NuWmTqEYv6qToVQGSbzjIrXje9rdTAf3UgXJ+ptzoX0OQH4MHTEe6 eiAwVzpKD9PJ04SJyAFvWLygiqJ90pq+pwAp2+hxNFLAXW1WKHcqif2d/4L7xU9X SKuGCXH5/Setpx6Z1iuE3cI5imMZbgP5fnoh+v6DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0mX0v9okl6+toiVoZ4bb5XioRUIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E3ZThmNjU4LTkzOGItNDIzYi04MjdmLTk3ODE4NTVjZmQyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFfIwDQYJKoZIhvcNAQELBQADggEBAE1pOw0MKvXMltQRUcZ7UBVb 6RtbDr0pwxFt95NiGg63RuNz9DvKKh3H/hkVG/oXALCsd08gR7WrCTmh/5xhVLd6 hDQUbRrczqMgaz4TmikxGxcsqseM3E8sRa5vsHmuhjOB6GAqg5w879FVFz+BW8gi 3QRW9EgrpI7oLNvasuIeJ103dAzOSKq/npRbKAkeVoloCbiRkLCUbUJJaBr06dMq fPlOMgaDxhqphTUeFHRF6q6/hM+iEQJSrNYF/jL7Di1yMgkpkDGNqIh3xLN1Rtv1 HvB6Td5e8eRpbsX6Ri7F/pNZhjGo/7PfJmnkTa2OFhYOPef+45LGXYqsafahsXo= -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:57 2025 by rpki-client