This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa File: 973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa (raw, json) Hash identifier: rduHJjVesviNErICzpZgvbuc64fkS7255DGWkARmCKw= Subject key identifier: 04:3E:5A:6E:BE:46:27:BA:BD:0B:7D:54:59:90:D8:F6:72:A5:FD:ED Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0BD217BFDF83B0C18A4D18B132F50F1FFFC1FE79 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa Signing time: Tue 25 Nov 2025 19:50:50 +0000 ROA not before: Tue 25 Nov 2025 19:50:50 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d2:17:bf:df:83:b0:c1:8a:4d:18:b1:32:f5:0f:1f:ff:c1:fe:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 25 19:50:50 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=1e2f3c2da7d40e02bc06ee6d2b73526f0902f63d55ccf0bfac54cd0cfb9485e0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:f1:68:4a:86:41:63:32:7f:6c:08:15:02: 16:ca:e0:dc:94:5f:5e:3b:9e:3f:69:9d:e0:41:da: d1:44:a0:01:6f:cf:16:66:08:36:25:2b:47:ce:f4: 17:0a:fc:4b:d4:56:18:0c:8c:a9:3f:c9:dc:ff:81: 93:39:e2:65:cc:47:8c:a3:7b:25:50:7f:69:2a:9d: e0:26:3c:80:03:94:9b:24:fd:2f:ce:de:80:ad:43: 2f:fd:91:2d:79:01:58:64:82:6c:fa:f2:8c:1d:0e: 3c:db:fd:31:68:b5:18:4b:0d:fe:8d:aa:9d:a4:22: ca:b7:a4:82:0f:d8:93:05:8c:80:fa:10:fb:7f:74: 9b:d7:9a:5b:1d:15:66:0d:5a:df:4c:ec:8d:7c:02: 63:b9:d6:ad:27:b7:a2:08:e6:b2:f2:9f:e7:44:fc: b9:9e:27:f6:94:b0:92:49:c3:bf:e8:39:14:46:4f: 19:23:df:9b:43:2a:1a:67:18:1f:fe:13:af:24:0e: 86:aa:2d:fc:bf:3b:88:e8:43:3c:ae:28:b9:42:72: 3b:97:bd:38:01:b9:53:9d:80:45:92:12:cc:4b:9a: a2:83:85:69:79:86:fa:ac:04:14:87:c9:33:d0:7c: 85:3c:81:56:8a:b0:30:c7:a2:c5:cd:2c:d0:c5:ab: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:5A:6E:BE:46:27:BA:BD:0B:7D:54:59:90:D8:F6:72:A5:FD:ED X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption a7:d7:1c:69:f8:e7:92:77:6a:c4:a6:e2:5c:28:ff:cd:67:29: 2f:c8:f3:5f:ce:18:80:2b:79:a4:1d:ff:b1:cf:20:24:5f:9b: 53:9a:0c:32:d2:0c:25:aa:36:14:23:38:45:06:ba:a6:a1:d0: 3c:9f:0d:44:f4:7a:d3:fe:3a:92:a2:89:3f:0b:14:bd:93:ce: c4:4e:f8:66:5c:31:c3:6c:84:97:30:3b:54:61:ce:de:7c:b1: 49:32:8d:46:fc:62:b0:12:e2:cb:47:b8:af:df:62:3e:5f:d1: aa:1a:6a:54:56:ed:e4:c4:32:06:f5:ae:de:67:5e:67:70:37: 24:bd:a7:99:f8:fb:97:57:91:04:3c:aa:d4:e3:0c:9f:2b:13: 76:55:b7:f8:e4:f4:fe:2c:b1:34:82:99:47:00:8f:f9:73:f4: 55:96:b6:ab:c3:90:f9:9d:55:92:25:4f:c2:14:16:ed:95:95: 79:fb:70:2d:4b:72:2b:2a:f5:94:25:38:5e:4c:20:54:81:a5: 16:21:26:0a:47:f9:d7:f9:e7:0f:5f:58:06:71:1f:8a:5c:3c: a9:9f:75:22:a4:4a:16:13:49:69:d5:42:d8:b9:87:0b:9b:c2: c1:e2:1b:86:e8:60:70:54:6f:e4:47:6c:77:dc:e6:d8:1f:62: 42:cf:62:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC9IXv9+DsMGKTRixMvUPH//B/nkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk1MDUwWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTJmM2MyZGE3ZDQwZTAyYmMwNmVlNmQyYjczNTI2ZjA5 MDJmNjNkNTVjY2YwYmZhYzU0Y2QwY2ZiOTQ4NWUwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfkPFoSoZBYzJ/bAgVAhbK4NyUX147nj9pneBB2tFEoAFv zxZmCDYlK0fO9BcK/EvUVhgMjKk/ydz/gZM54mXMR4yjeyVQf2kqneAmPIADlJsk /S/O3oCtQy/9kS15AVhkgmz68owdDjzb/TFotRhLDf6Nqp2kIsq3pIIP2JMFjID6 EPt/dJvXmlsdFWYNWt9M7I18AmO51q0nt6II5rLyn+dE/LmeJ/aUsJJJw7/oORRG Txkj35tDKhpnGB/+E68kDoaqLfy/O4joQzyuKLlCcjuXvTgBuVOdgEWSEsxLmqKD hWl5hvqsBBSHyTPQfIU8gVaKsDDHosXNLNDFq8+FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBD5abr5GJ7q9C31UWZDY9nKl/e0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3M2U4MjFjLThiMmMtNGMyYi05M2ZjLTJlMDBlZjcyMWZkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAKfXHGn455J3asSm4lwo/81n KS/I81/OGIAreaQd/7HPICRfm1OaDDLSDCWqNhQjOEUGuqah0DyfDUT0etP+OpKi iT8LFL2TzsRO+GZcMcNshJcwO1Rhzt58sUkyjUb8YrAS4stHuK/fYj5f0aoaalRW 7eTEMgb1rt5nXmdwNyS9p5n4+5dXkQQ8qtTjDJ8rE3ZVt/jk9P4ssTSCmUcAj/lz 9FWWtqvDkPmdVZIlT8IUFu2VlXn7cC1Lcisq9ZQlOF5MIFSBpRYhJgpH+df55w9f WAZxH4pcPKmfdSKkShYTSWnVQti5hwubwsHiG4boYHBUb+RHbHfc5tgfYkLPYos= -----END CERTIFICATE-----Generated at Sat Nov 29 11:49:56 2025 by rpki-client