This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa File: 321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json) Hash identifier: Mkkh0NpwjQZeghd8An/+cGop44A9Qo0v1zS/FSFXw18= Subject key identifier: 24:BE:22:FF:F4:BF:CC:CB:7D:B3:9F:20:F2:DF:E6:B5:9C:CE:9D:F5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 462E7FB0852F02BF3CFC33BD118F6FA47A01CD1C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa Signing time: Sat 15 Nov 2025 05:10:33 +0000 ROA not before: Sat 15 Nov 2025 05:10:33 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2e:7f:b0:85:2f:02:bf:3c:fc:33:bd:11:8f:6f:a4:7a:01:cd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:10:33 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=6d9af0292449e3354ff5739d1d1dbbbb5928506c6e01ca819616bf6fdae834eb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:96:dc:fd:1e:48:03:05:32:c4:a9:a0:ca: 71:2a:36:89:18:7f:a9:02:9d:ff:0e:ea:52:d0:7a: 26:06:2b:34:f2:2c:e6:b6:0d:6f:b3:1b:9c:b6:20: e8:57:06:bc:1e:18:8e:21:79:e5:81:df:5f:df:69: 4e:f6:7a:98:81:8d:f5:8d:7f:cf:f1:eb:a6:b3:29: 63:a4:55:0d:b8:e6:a0:c7:ca:85:f2:ad:c7:6e:71: 21:4e:ca:99:c6:a1:be:c6:e1:bb:37:d0:82:3d:51: dd:31:07:3b:1f:e5:3a:8e:e9:06:8b:3a:b7:fa:c2: 41:5d:84:92:5a:73:4b:68:e8:ef:fc:b8:16:53:af: 5c:75:ca:39:f1:f2:30:8f:63:36:29:3c:90:05:6c: 0c:8e:68:2b:1a:72:55:d9:77:54:cc:aa:cd:fb:4b: f4:2a:dd:79:5c:fc:6a:db:d9:e2:02:74:03:92:49: c9:8e:5a:f0:13:60:ef:45:c9:a5:2f:0d:98:d7:04: 87:ac:2a:dd:3f:12:07:aa:60:90:6c:7b:83:4a:6c: f1:30:07:bc:eb:13:88:9e:93:95:0a:a2:0a:65:ba: fb:68:fc:b6:12:25:d4:1f:85:12:00:b7:7a:79:7b: c0:9c:18:80:42:d7:32:f6:f8:2b:4e:6e:ee:4a:f2: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:22:FF:F4:BF:CC:CB:7D:B3:9F:20:F2:DF:E6:B5:9C:CE:9D:F5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/48 Signature Algorithm: sha256WithRSAEncryption 72:5c:ca:6c:8d:f2:1d:27:bc:e0:f8:fc:ec:81:20:93:54:98: 05:42:d0:ac:66:ce:07:58:b8:1e:d6:16:57:80:c0:3d:45:a7: 2e:f9:d1:35:1f:87:6b:d6:82:96:47:71:ae:48:fb:83:5a:64: 59:ad:da:cc:48:20:2d:58:9d:6b:95:b0:d6:e9:af:21:68:1a: 36:2b:fd:4d:aa:9c:c8:9a:dd:67:1f:94:ef:53:6d:76:20:21: 3d:a8:04:17:40:f3:3c:51:8b:2e:fc:3b:59:3f:fd:1c:57:5a: 57:27:e8:4e:56:1a:42:19:68:86:86:e3:a5:79:f8:91:66:38: 52:4e:9f:9c:92:4b:eb:28:e1:f3:3f:57:e2:51:f8:22:8d:ad: fd:4e:7d:1e:14:b2:71:a7:af:d2:0e:d1:8a:c7:5c:fa:63:b9: d9:5b:48:4d:cb:83:33:c0:2d:60:da:61:88:ca:9e:92:e2:0b: c3:27:d1:35:0f:55:9a:b2:e9:83:a2:ef:58:96:68:9d:3a:29: c9:a9:e8:f0:5f:25:12:14:fb:58:c8:99:4c:83:13:de:92:33: 87:ef:10:c2:f0:96:08:44:26:7b:e9:d9:4f:9c:7f:f0:38:28: da:39:34:44:9b:2b:4f:3a:8f:3f:55:c0:90:3b:25:28:a6:1d: f3:b6:78:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURi5/sIUvAr88/DO9EY9vpHoBzRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDMzWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDlhZjAyOTI0NDllMzM1NGZmNTczOWQxZDFkYmJiYjU5 Mjg1MDZjNmUwMWNhODE5NjE2YmY2ZmRhZTgzNGViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI7Zbc/R5IAwUyxKmgynEqNokYf6kCnf8O6lLQeiYGKzTy LOa2DW+zG5y2IOhXBrweGI4heeWB31/faU72epiBjfWNf8/x66azKWOkVQ245qDH yoXyrcducSFOypnGob7G4bs30II9Ud0xBzsf5TqO6QaLOrf6wkFdhJJac0to6O/8 uBZTr1x1yjnx8jCPYzYpPJAFbAyOaCsaclXZd1TMqs37S/Qq3Xlc/Grb2eICdAOS ScmOWvATYO9FyaUvDZjXBIesKt0/EgeqYJBse4NKbPEwB7zrE4iek5UKogpluvto /LYSJdQfhRIAt3p5e8CcGIBC1zL2+CtObu5K8iDpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJL4i//S/zMt9s58g8t/mtZzOnfUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMTAyOGVlLTJlMmQtNDEwYy04YmRjLTM5YTAwZjIwNDRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBAHJcymyN8h0nvOD4/OyBIJNU mAVC0KxmzgdYuB7WFleAwD1Fpy750TUfh2vWgpZHca5I+4NaZFmt2sxIIC1YnWuV sNbpryFoGjYr/U2qnMia3WcflO9TbXYgIT2oBBdA8zxRiy78O1k//RxXWlcn6E5W GkIZaIaG46V5+JFmOFJOn5ySS+so4fM/V+JR+CKNrf1OfR4UsnGnr9IO0YrHXPpj udlbSE3LgzPALWDaYYjKnpLiC8Mn0TUPVZqy6YOi71iWaJ06Kcmp6PBfJRIU+1jI mUyDE96SM4fvEMLwlghEJnvp2U+cf/A4KNo5NESbK086jz9VwJA7JSimHfO2eAI= -----END CERTIFICATE-----Generated at Sat Nov 22 21:35:05 2025 by rpki-client