This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json) Hash identifier: MtAWIRSU/Zs51LoQrdMEo8Vpg/qEFe7IpSh2oU8SshE= Subject key identifier: CC:33:24:04:8C:63:38:92:8D:A2:53:84:3C:C5:7F:93:25:17:13:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2B5A0F2AA8AE45DDA5EAB99AF54E190B2C8B7791 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa Signing time: Sat 15 Nov 2025 05:00:33 +0000 ROA not before: Sat 15 Nov 2025 05:00:33 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5a:0f:2a:a8:ae:45:dd:a5:ea:b9:9a:f5:4e:19:0b:2c:8b:77:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:00:33 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=2cb13cb0b590c004ba7aeb5b905c7b6961935c17b0386aefe88bfd44bfef06f1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:67:ff:67:d3:4b:5d:8e:1b:42:62:d6:cf:e9: 84:9c:60:76:23:51:5f:c9:1b:f0:21:80:5c:dc:71: e4:59:0c:e6:45:7b:b6:2e:47:d4:d3:9e:89:e7:99: 54:f1:bb:65:25:57:0e:21:c1:c5:9d:04:52:d5:2f: 0d:a4:79:68:95:b0:43:44:3b:cc:8b:95:05:ff:b0: e5:86:c1:cc:d5:78:9e:80:1f:51:17:95:b0:79:35: b6:84:c4:69:49:22:0a:b7:b4:aa:e3:dd:c1:cd:b1: dc:48:43:e3:4b:a1:91:fa:79:c6:2b:9e:a1:75:b8: 54:73:2d:78:b9:d0:29:b6:66:ba:76:cf:c1:3b:71: 4a:7c:b1:1b:ae:19:15:e4:5c:8a:18:3b:a8:78:b8: d3:c7:c6:c1:98:56:0e:b6:e1:6c:9e:05:58:9f:5a: 00:3d:3e:1e:54:d5:49:a4:4e:13:b0:ec:66:86:44: 4b:e7:06:20:1d:6f:92:5e:ec:92:2c:73:39:c5:a3: ef:65:a3:06:89:86:3e:7d:b5:b4:67:22:bc:c8:68: 57:f8:6e:89:91:2c:99:1b:49:1c:09:cf:31:5c:cc: 55:ea:6c:9f:7b:51:23:10:62:e4:f6:c3:ba:89:e4: 1b:8b:f7:24:38:db:0c:37:04:b3:4f:4f:0e:b0:9c: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:24:04:8C:63:38:92:8D:A2:53:84:3C:C5:7F:93:25:17:13:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 9a:4f:e8:a4:ab:56:6b:f9:5f:0a:db:25:47:36:2a:98:2b:58: bc:84:05:5b:98:ab:5c:26:b9:38:86:66:17:e2:b8:7b:f4:e6: df:a6:9a:79:1d:f1:4b:48:1c:e3:0b:ea:82:fe:17:bc:13:ad: 0b:82:81:51:df:d8:4d:2c:42:24:87:83:dd:8e:46:de:52:b6: aa:84:c4:f5:47:b1:27:d0:3d:bd:90:64:96:47:56:6e:12:3c: 03:f5:ba:f0:eb:b2:41:3b:80:2a:89:59:41:45:65:40:96:bc: 90:18:70:cb:ed:4a:83:06:29:01:5a:44:d9:ce:5d:98:ed:1f: b1:2a:72:f0:e5:57:27:0d:4f:0a:c7:8a:85:c5:38:61:0c:20: 14:b9:cf:ce:62:43:31:56:fc:cb:cf:9f:62:be:fc:db:91:54: 43:39:c8:e5:81:db:f3:7a:75:cf:d2:62:2e:07:61:73:e3:a7: 5e:e4:78:c6:b1:bf:be:dd:03:a5:c3:a7:8e:a9:63:70:14:85: b2:f9:6b:8f:6f:a5:a9:f2:e0:94:af:c0:0b:20:b0:25:51:be: 00:19:ad:09:f9:71:98:06:ff:46:b4:b3:a1:55:c8:bc:96:27: 94:3a:9d:2e:64:95:f1:8a:5b:fd:52:99:1a:8a:4f:2b:55:5e: e0:86:ad:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK1oPKqiuRd2l6rma9U4ZCyyLd5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDMzWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2IxM2NiMGI1OTBjMDA0YmE3YWViNWI5MDVjN2I2OTYx OTM1YzE3YjAzODZhZWZlODhiZmQ0NGJmZWYwNmYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcZ/9n00tdjhtCYtbP6YScYHYjUV/JG/AhgFzcceRZDOZF e7YuR9TTnonnmVTxu2UlVw4hwcWdBFLVLw2keWiVsENEO8yLlQX/sOWGwczVeJ6A H1EXlbB5NbaExGlJIgq3tKrj3cHNsdxIQ+NLoZH6ecYrnqF1uFRzLXi50Cm2Zrp2 z8E7cUp8sRuuGRXkXIoYO6h4uNPHxsGYVg624WyeBVifWgA9Ph5U1UmkThOw7GaG REvnBiAdb5Je7JIscznFo+9lowaJhj59tbRnIrzIaFf4bomRLJkbSRwJzzFczFXq bJ97USMQYuT2w7qJ5BuL9yQ42ww3BLNPTw6wnH2PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzDMkBIxjOJKNolOEPMV/kyUXE70wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YjFkOGUwLTdmYmItNDUyOC04Yzk3LTEwNTFjYTQ5NTA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAJpP6KSrVmv5XwrbJUc2Kpgr WLyEBVuYq1wmuTiGZhfiuHv05t+mmnkd8UtIHOML6oL+F7wTrQuCgVHf2E0sQiSH g92ORt5StqqExPVHsSfQPb2QZJZHVm4SPAP1uvDrskE7gCqJWUFFZUCWvJAYcMvt SoMGKQFaRNnOXZjtH7EqcvDlVycNTwrHioXFOGEMIBS5z85iQzFW/MvPn2K+/NuR VEM5yOWB2/N6dc/SYi4HYXPjp17keMaxv77dA6XDp46pY3AUhbL5a49vpany4JSv wAsgsCVRvgAZrQn5cZgG/0a0s6FVyLyWJ5Q6nS5klfGKW/1SmRqKTytVXuCGrT8= -----END CERTIFICATE-----Generated at Sat Nov 22 21:31:19 2025 by rpki-client