This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa File: a4c99211-8489-4968-bb5b-fa10b298aaaf.roa (raw, json) Hash identifier: iXvHip2Dsj5YEaXOaEOimA3p5zj2KPqiU5MZ8zrx0bw= Subject key identifier: 6A:D4:A2:89:86:A3:0A:68:9D:79:8F:35:0E:63:AB:3E:5E:A5:94:58 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 57FC77B8C7A927767E98DA253B43C44F137070F2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa Signing time: Tue 18 Nov 2025 00:30:10 +0000 ROA not before: Tue 18 Nov 2025 00:30:10 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fc:77:b8:c7:a9:27:76:7e:98:da:25:3b:43:c4:4f:13:70:70:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 18 00:30:10 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=5eebeaf5923a32a913309558f273df181d8840b655f709c8b01752e41cd9af6e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:98:1e:a6:8c:4d:9f:68:ad:71:38:47:57:84: 71:86:6e:e2:9f:a9:cf:d7:e0:5a:c8:b8:bc:13:e6: 6c:19:69:02:16:9f:e3:52:d5:fe:d1:86:aa:08:d9: 7f:7f:3e:33:85:14:a5:7a:57:96:f4:7a:69:d1:fb: 0e:2c:d5:28:07:51:d4:70:d9:0f:f7:86:43:82:bf: 57:0a:ff:f3:51:e0:03:4d:7d:92:22:9b:35:38:33: 5f:05:a3:60:a1:a5:7b:07:3a:64:ae:6f:85:ef:8d: c4:47:90:46:8f:a3:32:6d:e4:59:7c:9d:fe:ba:b6: bb:8b:c7:ad:23:62:39:2d:18:3f:77:d6:8c:12:5b: 33:cb:0d:80:b0:e7:5a:50:2d:5e:10:53:18:43:38: 58:00:b3:69:93:36:57:ed:71:07:4a:67:81:6c:07: 7b:35:9c:ae:84:9b:90:19:9d:e3:d2:76:12:ae:8e: 0a:2d:78:3e:95:12:20:eb:fe:03:48:28:0e:90:27: b0:7f:5f:44:2f:82:41:a8:57:d2:52:3b:df:0d:59: d1:64:7e:fa:8a:0e:88:42:55:31:d4:c7:31:ee:47: 30:66:14:d7:17:75:04:c3:59:f0:ab:b7:a1:d3:e5: fe:1c:80:c9:41:4d:0f:02:ed:2b:d3:26:9e:52:19: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:A2:89:86:A3:0A:68:9D:79:8F:35:0E:63:AB:3E:5E:A5:94:58 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 08:e9:15:8a:3a:ef:4c:4b:7f:c7:80:e4:ab:49:e2:5f:44:82: 28:c3:07:a9:39:74:fd:07:72:31:9d:20:1b:ee:a7:7e:f2:46: 87:3a:9b:2f:18:c2:81:0f:63:b9:9d:68:e2:50:9e:03:68:f1: ea:1c:97:97:79:92:cb:a1:57:df:c6:82:4a:bb:c5:71:57:ee: 9a:09:29:d7:27:96:1a:d8:11:5e:ed:1c:d8:a5:d7:45:8b:4b: b0:4b:90:60:c8:81:3d:68:45:36:cf:ef:a4:33:4d:d5:7d:04: cf:9d:00:b3:e8:98:b6:35:9a:84:ff:17:99:4e:7d:7e:14:54: 28:ae:be:1a:fd:69:7b:f7:e8:03:c6:31:71:6c:97:93:16:23: 70:2d:6e:71:c9:4d:ab:61:f4:24:f8:4f:97:d0:ca:b4:ef:0e: 50:56:18:1b:a9:bb:ad:72:be:09:37:a8:3c:f1:3b:7f:b3:cf: 68:01:3e:60:b3:4f:e8:ee:8b:9a:8a:22:41:e6:08:50:d1:ce: d0:76:85:b4:7e:86:79:3a:eb:d2:ec:e9:38:4b:c4:02:c5:93: 91:7a:d1:ea:70:16:9b:ef:a1:2c:a3:37:82:4c:fb:5d:ed:8d: 8e:55:a7:a4:cf:31:55:da:3f:cf:6b:5b:6e:af:62:c5:b7:19: 84:f5:94:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV/x3uMepJ3Z+mNolO0PETxNwcPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE4MDAzMDEwWhcNMjYwMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWViZWFmNTkyM2EzMmE5MTMzMDk1NThmMjczZGYxODFk ODg0MGI2NTVmNzA5YzhiMDE3NTJlNDFjZDlhZjZlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUmB6mjE2faK1xOEdXhHGGbuKfqc/X4FrIuLwT5mwZaQIW n+NS1f7RhqoI2X9/PjOFFKV6V5b0emnR+w4s1SgHUdRw2Q/3hkOCv1cK//NR4ANN fZIimzU4M18Fo2ChpXsHOmSub4XvjcRHkEaPozJt5Fl8nf66truLx60jYjktGD93 1owSWzPLDYCw51pQLV4QUxhDOFgAs2mTNlftcQdKZ4FsB3s1nK6Em5AZnePSdhKu jgoteD6VEiDr/gNIKA6QJ7B/X0QvgkGoV9JSO98NWdFkfvqKDohCVTHUxzHuRzBm FNcXdQTDWfCrt6HT5f4cgMlBTQ8C7SvTJp5SGfH/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUatSiiYajCmideY81DmOrPl6llFgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0Yzk5MjExLTg0ODktNDk2OC1iYjViLWZhMTBiMjk4YWFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAAjpFYo670xLf8eA5KtJ4l9E gijDB6k5dP0HcjGdIBvup37yRoc6my8YwoEPY7mdaOJQngNo8eocl5d5ksuhV9/G gkq7xXFX7poJKdcnlhrYEV7tHNil10WLS7BLkGDIgT1oRTbP76QzTdV9BM+dALPo mLY1moT/F5lOfX4UVCiuvhr9aXv36APGMXFsl5MWI3AtbnHJTath9CT4T5fQyrTv DlBWGBupu61yvgk3qDzxO3+zz2gBPmCzT+jui5qKIkHmCFDRztB2hbR+hnk669Ls 6ThLxALFk5F60epwFpvvoSyjN4JM+13tjY5Vp6TPMVXaP89rW26vYsW3GYT1lIk= -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:58 2025 by rpki-client