This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e41509eb-88a3-4824-979f-51efa2dfccac.roa File: e41509eb-88a3-4824-979f-51efa2dfccac.roa (raw, json) Hash identifier: BchwtmilVXXtGRMk/qdkoR5CybhzMQRGDfl3SGTZezQ= Subject key identifier: 40:EC:16:80:4E:E7:A1:2E:C0:4F:7B:64:89:E1:2E:12:AC:E0:73:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3FD2B7076233113472FAAA1A31D4661F12374B19 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e41509eb-88a3-4824-979f-51efa2dfccac.roa Signing time: Tue 25 Nov 2025 16:11:58 +0000 ROA not before: Tue 25 Nov 2025 16:11:58 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3cec::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d2:b7:07:62:33:11:34:72:fa:aa:1a:31:d4:66:1f:12:37:4b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 25 16:11:58 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=aeb226d6f44e4404904eb43acb658c12d348c547e72787e79751f6bfce5d5c2d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:c6:51:ce:2e:7e:fa:8d:a1:b4:bb:27:62: 38:0e:7e:7c:03:98:21:ff:79:e2:b5:c7:17:fe:46: 08:a6:3c:95:84:5d:0a:2f:76:10:4d:93:68:a1:d3: ca:fc:8a:e9:83:f7:25:e8:cb:d8:12:26:d2:81:fb: aa:0c:2b:4c:c0:87:fe:55:03:ab:95:dc:ea:f5:64: 27:0d:66:50:ad:20:16:46:e7:d5:60:c9:de:cc:f3: d1:b1:57:fa:68:e6:7c:a9:93:bc:39:70:45:60:53: 36:ad:36:a3:b8:d7:0b:18:f4:bd:60:20:93:a4:79: 8a:a2:13:55:d3:a7:db:21:a0:cf:47:53:7b:f4:b9: 14:f7:0e:d9:25:14:62:45:b9:5b:8f:67:1f:80:94: b7:15:d9:0d:02:30:2d:f2:41:3f:eb:fb:82:82:8e: 57:1a:5c:c3:35:94:7b:48:75:93:77:32:d7:71:d5: 81:fa:dd:d9:f3:40:2f:20:26:b0:38:b9:95:d5:68: 93:80:24:12:9e:97:3d:ed:7f:b1:6f:f8:62:39:fb: 02:59:f6:d8:b5:45:89:08:7d:57:d7:a7:db:c6:62: 61:ca:bb:1b:29:94:8d:58:4c:9e:e7:df:c8:28:3b: e4:8c:9f:b5:51:09:df:b8:4f:6f:91:42:cf:34:ec: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EC:16:80:4E:E7:A1:2E:C0:4F:7B:64:89:E1:2E:12:AC:E0:73:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e41509eb-88a3-4824-979f-51efa2dfccac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3cec::/46 Signature Algorithm: sha256WithRSAEncryption bf:c2:97:2f:68:6c:de:d5:4b:e3:4e:52:2e:1d:ff:8a:d7:21: ff:ce:8b:01:3b:1e:fc:06:f6:3c:94:7d:26:2d:a4:e3:be:8e: 8a:14:41:25:8f:4c:4a:3f:83:57:4e:63:e7:57:8a:c9:bd:38: 54:ee:19:3c:cf:b0:be:b4:94:6b:69:f5:0b:0d:28:7b:7c:0e: 39:07:17:2e:37:a9:f1:30:eb:64:63:13:9f:8d:4c:6c:52:d5: 34:04:6d:04:11:92:13:a2:02:bf:9e:9a:0e:62:1e:4b:17:e0: 46:6b:21:60:9f:5b:e9:61:56:3d:eb:49:14:8a:af:84:e1:e7: 18:06:bc:bb:b4:36:5c:5a:88:c0:af:3e:b5:bd:b6:a6:8b:d0: c3:31:93:7f:af:f7:69:52:49:ff:65:90:62:36:87:ef:23:74: b0:a7:72:a1:75:34:6c:d9:f4:69:f7:a5:66:3e:2f:a9:09:7e: f6:90:b7:97:d2:d3:3a:d2:7a:b8:00:27:f7:cc:29:e8:3b:02: b8:66:0f:b3:c7:e1:99:cb:b0:da:12:a6:ec:46:10:b0:7e:97: 4c:ce:6e:66:74:7a:71:22:ba:5c:22:7e:b2:f9:c2:1d:7e:55: ea:a8:db:58:34:c6:9d:84:4c:5b:9b:9c:92:a7:af:b1:68:c3: d2:34:f1:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP9K3B2IzETRy+qoaMdRmHxI3SxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTI1MTYxMTU4WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWIyMjZkNmY0NGU0NDA0OTA0ZWI0M2FjYjY1OGMxMmQz NDhjNTQ3ZTcyNzg3ZTc5NzUxZjZiZmNlNWQ1YzJkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe7cZRzi5++o2htLsnYjgOfnwDmCH/eeK1xxf+RgimPJWE XQovdhBNk2ih08r8iumD9yXoy9gSJtKB+6oMK0zAh/5VA6uV3Or1ZCcNZlCtIBZG 59Vgyd7M89GxV/po5nypk7w5cEVgUzatNqO41wsY9L1gIJOkeYqiE1XTp9shoM9H U3v0uRT3DtklFGJFuVuPZx+AlLcV2Q0CMC3yQT/r+4KCjlcaXMM1lHtIdZN3Mtdx 1YH63dnzQC8gJrA4uZXVaJOAJBKelz3tf7Fv+GI5+wJZ9ti1RYkIfVfXp9vGYmHK uxsplI1YTJ7n38goO+SMn7VRCd+4T2+RQs807DphAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQOwWgE7noS7AT3tkieEuEqzgc5gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U0MTUwOWViLTg4YTMtNDgyNC05NzlmLTUxZWZhMmRmY2NhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPOwwDQYJKoZIhvcNAQELBQADggEBAL/Cly9obN7VS+NOUi4d/4rX If/OiwE7HvwG9jyUfSYtpOO+jooUQSWPTEo/g1dOY+dXism9OFTuGTzPsL60lGtp 9QsNKHt8DjkHFy43qfEw62RjE5+NTGxS1TQEbQQRkhOiAr+emg5iHksX4EZrIWCf W+lhVj3rSRSKr4Th5xgGvLu0NlxaiMCvPrW9tqaL0MMxk3+v92lSSf9lkGI2h+8j dLCncqF1NGzZ9Gn3pWY+L6kJfvaQt5fS0zrSergAJ/fMKeg7ArhmD7PH4ZnLsNoS puxGELB+l0zObmZ0enEiulwifrL5wh1+Veqo21g0xp2ETFubnJKnr7Fow9I08YM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:47:54 2025 by rpki-client