This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa File: 39b45593-f3f3-4a2e-aa3a-895815db366a.roa (raw, json) Hash identifier: 7/06sbIrxErIEg0FHCw/avo8h9lGmBnKSyIj3zfhDvk= Subject key identifier: 9E:8D:1F:4F:D9:19:AE:5B:F3:8D:EF:F1:C0:8E:0F:EF:75:B3:9E:D7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B23379695BF3246F222EC18F66BDF6C6B30403B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa Signing time: Sat 15 Nov 2025 05:10:11 +0000 ROA not before: Sat 15 Nov 2025 05:10:11 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:37:96:95:bf:32:46:f2:22:ec:18:f6:6b:df:6c:6b:30:40:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:10:11 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=8df54cecbf699c6b2944a591b4f09d09d83a5047f779888abf0b8b8b8c1ddb61, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:5c:eb:c4:ea:3f:1f:56:5c:62:71:bf:3f: ce:8d:b2:d2:8c:1f:a6:a9:9c:14:d4:c1:cf:2c:1c: 78:6a:6c:fc:80:e0:a7:03:c3:82:cf:0f:d0:72:b8: 64:8a:f8:89:7f:59:1e:d8:51:94:23:65:e0:70:18: 66:9c:c0:7b:01:d4:31:18:77:21:b0:ce:b8:cf:65: c4:4c:12:b1:72:5f:ac:5c:05:aa:74:03:3d:e4:cc: fb:ba:56:a0:7f:93:ec:3d:50:89:6d:72:0e:44:28: 71:5e:e1:71:c9:60:fc:a4:1d:79:fb:14:23:a7:9c: 47:69:eb:40:39:5c:75:c1:24:25:7c:2f:71:ce:19: d8:ea:0d:29:39:fd:bf:23:c0:dd:c6:26:15:df:c2: 05:07:f5:d5:f7:1f:1d:f7:1c:69:74:57:38:d6:2b: 8d:18:ba:53:65:c5:7a:4e:9b:cb:4c:8d:07:be:9d: 9e:40:15:ba:90:26:74:0b:cf:61:39:f3:47:78:6e: 6a:81:9e:7b:db:81:4f:19:7f:ed:e3:c2:2c:a3:27: 05:b9:06:18:5b:0f:fa:87:24:b0:4a:c4:d8:b9:09: ae:97:fb:6e:25:90:19:9a:8a:fb:51:69:30:9f:db: 4d:da:c8:5b:9d:d8:61:e9:bc:58:8f:43:bd:6f:2e: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:1F:4F:D9:19:AE:5B:F3:8D:EF:F1:C0:8E:0F:EF:75:B3:9E:D7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/39 Signature Algorithm: sha256WithRSAEncryption 2f:8f:9b:44:be:f0:4a:28:b8:58:8d:6f:a5:bc:3b:5e:5d:1d: b1:08:f2:4f:a7:6f:6b:49:2c:e1:e8:19:43:7c:13:64:4a:6b: 8a:f2:f4:90:3b:c2:91:c9:c2:77:46:c4:89:22:d7:cf:27:1f: 34:3c:69:9f:cd:87:12:3d:68:63:67:4e:c6:78:22:c6:06:0e: f1:b7:8b:e8:ee:ad:1d:bd:e5:76:af:6d:a0:56:69:28:ca:76: fa:c5:ba:83:99:b2:82:df:87:5a:b2:0f:e6:b2:c8:0e:60:a7: 2d:3c:25:64:9a:31:6e:02:b1:f0:6e:ee:31:31:31:21:30:6a: 80:58:62:84:c4:ec:1c:01:d3:f4:04:ad:4a:6d:69:be:dc:4c: fb:ff:09:14:d6:8c:17:43:4e:5c:0d:8c:0b:d2:e0:6d:b1:cb: b6:9c:3c:c2:3f:99:f3:86:b5:78:84:98:37:81:89:9c:c2:52: 60:74:82:21:c7:37:d3:82:73:28:51:7e:13:6f:17:c5:cc:4b: 65:e9:42:67:ac:5b:12:41:ef:c2:b0:7f:0d:9f:a3:0a:ea:b5: bb:2e:46:60:7d:c6:e2:1e:75:6c:55:25:fc:35:e2:0d:30:2e: 3d:ad:55:90:5a:ca:b6:a9:2a:da:f7:0a:db:6f:ad:b9:7b:41: 5e:2f:61:cf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSyM3lpW/MkbyIuwY9mvfbGswQDswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDExWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGY1NGNlY2JmNjk5YzZiMjk0NGE1OTFiNGYwOWQwOWQ4 M2E1MDQ3Zjc3OTg4OGFiZjBiOGI4YjhjMWRkYjYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEiFzrxOo/H1ZcYnG/P86NstKMH6apnBTUwc8sHHhqbPyA 4KcDw4LPD9ByuGSK+Il/WR7YUZQjZeBwGGacwHsB1DEYdyGwzrjPZcRMErFyX6xc Bap0Az3kzPu6VqB/k+w9UIltcg5EKHFe4XHJYPykHXn7FCOnnEdp60A5XHXBJCV8 L3HOGdjqDSk5/b8jwN3GJhXfwgUH9dX3Hx33HGl0VzjWK40YulNlxXpOm8tMjQe+ nZ5AFbqQJnQLz2E580d4bmqBnnvbgU8Zf+3jwiyjJwW5BhhbD/qHJLBKxNi5Ca6X +24lkBmaivtRaTCf203ayFud2GHpvFiPQ71vLnbPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUno0fT9kZrlvzje/xwI4P73WzntcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5YjQ1NTkzLWYzZjMtNGEyZS1hYTNhLTg5NTgxNWRiMzY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAAADANBgkqhkiG9w0BAQsFAAOCAQEAL4+bRL7wSii4WI1vpbw7Xl0d sQjyT6dva0ks4egZQ3wTZEprivL0kDvCkcnCd0bEiSLXzycfNDxpn82HEj1oY2dO xngixgYO8beL6O6tHb3ldq9toFZpKMp2+sW6g5mygt+HWrIP5rLIDmCnLTwlZJox bgKx8G7uMTExITBqgFhihMTsHAHT9AStSm1pvtxM+/8JFNaMF0NOXA2MC9LgbbHL tpw8wj+Z84a1eISYN4GJnMJSYHSCIcc304JzKFF+E28XxcxLZelCZ6xbEkHvwrB/ DZ+jCuq1uy5GYH3G4h51bFUl/DXiDTAuPa1VkFrKtqkq2vcK22+tuXtBXi9hzw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:34 2025 by rpki-client