This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: fhAFcwTVNoBg+2FTEt80kERhWTGw9rs6AsuHhQmay6I= Subject key identifier: 57:A5:5F:22:E5:1B:25:65:04:D7:D2:94:07:E7:1D:E9:56:30:D7:53 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 44CCCADF6C035AFB889F021A8600B3CF17971692 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Tue 25 Nov 2025 19:50:50 +0000 ROA not before: Tue 25 Nov 2025 19:50:50 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cc:ca:df:6c:03:5a:fb:88:9f:02:1a:86:00:b3:cf:17:97:16:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 25 19:50:50 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=635d632e439479e0d66bce2c28afd12dae4c15f188fc675e3d2144ae2e1103b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:3b:0c:d2:12:86:3b:33:ff:eb:8f:0b:23: c5:56:c8:98:3d:c1:79:6d:de:9b:fb:29:91:8d:54: 33:c1:fc:d1:5e:38:94:e0:b8:04:c6:b7:36:8e:cc: a1:f0:3c:1d:9a:c3:a5:b7:0f:dd:7f:2e:0c:ca:bb: 38:2f:8b:b9:79:8f:9c:9c:a0:06:6c:79:13:ca:2c: eb:1c:37:1b:34:3d:bf:6e:6c:f7:24:3a:ab:4c:bc: ed:8a:15:80:5f:00:ac:ac:f9:72:59:84:27:9b:a4: ff:ff:a1:a8:ad:3a:8b:64:cf:5a:ba:51:31:89:42: d1:af:3a:2d:7e:b3:6e:0a:5a:ba:ed:ff:16:c1:28: d9:11:40:62:59:a2:4c:a9:c3:af:18:82:47:3e:c1: d6:52:37:88:41:93:f9:8e:44:af:f4:64:1a:e1:17: 8a:07:51:bc:39:f8:91:3b:82:a1:2c:ec:f3:9b:99: b2:e2:ca:c5:8c:1f:bd:80:b7:35:6c:34:3e:1a:b5: 00:51:a5:df:00:fb:46:d9:7e:e2:7f:4e:bb:ca:7c: ec:07:1b:a2:c1:4e:45:63:97:cf:26:20:b3:13:69: f7:d2:aa:46:65:4d:60:c5:a4:06:f1:60:b4:23:9b: f4:9d:37:99:3d:84:ca:1c:f7:de:40:5e:2f:4a:53: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A5:5F:22:E5:1B:25:65:04:D7:D2:94:07:E7:1D:E9:56:30:D7:53 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 14:18:14:0c:f8:62:23:de:60:6e:01:39:5e:7d:24:b3:f2:43: e6:a3:af:30:9e:7d:06:93:28:99:06:e8:03:a8:c4:a0:16:0e: b1:ce:0f:0d:a2:d9:ec:2b:7d:b0:35:4b:d2:d6:9c:51:c1:34: 36:9d:d6:85:04:db:de:7e:67:ed:29:ee:72:7d:aa:87:7d:d2: 8b:56:93:10:0b:31:61:53:71:9d:e1:d1:3f:18:e2:3e:f2:59: 57:b6:9d:66:fb:9b:0c:7b:a7:ae:dd:35:f5:be:7d:b1:63:74: c2:25:62:52:76:06:bb:e9:e1:16:c4:de:f5:bf:5f:21:20:af: 77:6d:0d:9a:39:bf:68:93:16:42:a2:94:9c:05:48:fc:4d:c1: 6c:b7:cc:91:ea:43:54:f2:13:5e:76:11:88:08:9e:59:61:fa: e0:43:e5:92:bd:a7:70:57:d1:33:52:c7:72:97:e3:d2:46:69: 7a:32:cd:be:b5:1a:23:27:c5:d0:eb:ca:7e:69:90:ee:ad:80: b8:67:44:e8:0b:bd:c0:19:42:3e:c7:d7:aa:34:78:f5:d2:4e: ba:c4:8a:f6:af:6c:be:40:94:8b:39:ef:f8:b9:58:44:38:e3: d2:a3:e9:a4:a9:7d:05:97:b3:42:e6:a7:38:2b:30:a4:85:96: 44:a6:77:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURMzK32wDWvuInwIahgCzzxeXFpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk1MDUwWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzVkNjMyZTQzOTQ3OWUwZDY2YmNlMmMyOGFmZDEyZGFl NGMxNWYxODhmYzY3NWUzZDIxNDRhZTJlMTEwM2IyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVwjsM0hKGOzP/648LI8VWyJg9wXlt3pv7KZGNVDPB/NFe OJTguATGtzaOzKHwPB2aw6W3D91/LgzKuzgvi7l5j5ycoAZseRPKLOscNxs0Pb9u bPckOqtMvO2KFYBfAKys+XJZhCebpP//oaitOotkz1q6UTGJQtGvOi1+s24KWrrt /xbBKNkRQGJZokypw68Ygkc+wdZSN4hBk/mORK/0ZBrhF4oHUbw5+JE7gqEs7POb mbLiysWMH72AtzVsND4atQBRpd8A+0bZfuJ/TrvKfOwHG6LBTkVjl88mILMTaffS qkZlTWDFpAbxYLQjm/SdN5k9hMoc995AXi9KU5APAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV6VfIuUbJWUE19KUB+cd6VYw11MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBABQYFAz4YiPeYG4BOV59JLPy Q+ajrzCefQaTKJkG6AOoxKAWDrHODw2i2ewrfbA1S9LWnFHBNDad1oUE295+Z+0p 7nJ9qod90otWkxALMWFTcZ3h0T8Y4j7yWVe2nWb7mwx7p67dNfW+fbFjdMIlYlJ2 Brvp4RbE3vW/XyEgr3dtDZo5v2iTFkKilJwFSPxNwWy3zJHqQ1TyE152EYgInllh +uBD5ZK9p3BX0TNSx3KX49JGaXoyzb61GiMnxdDryn5pkO6tgLhnROgLvcAZQj7H 16o0ePXSTrrEivavbL5AlIs57/i5WEQ449Kj6aSpfQWXs0LmpzgrMKSFlkSmdwA= -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:30 2025 by rpki-client