This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/058b2723-0749-41cb-992b-215b81ddf36a.roa File: 058b2723-0749-41cb-992b-215b81ddf36a.roa (raw, json) Hash identifier: tAe2a1h6T/qkW8///4/PW2F6SVVAgf7TGoC2R8jXv0M= Subject key identifier: 5C:BA:2A:CA:2B:E6:F6:02:34:5D:5E:98:DC:0E:48:4F:75:8D:2A:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3AAD2478BBFFF21B29F47F3949F487D8804701B1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/058b2723-0749-41cb-992b-215b81ddf36a.roa Signing time: Thu 11 Dec 2025 01:00:32 +0000 ROA not before: Thu 11 Dec 2025 01:00:32 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ad:24:78:bb:ff:f2:1b:29:f4:7f:39:49:f4:87:d8:80:47:01:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 11 01:00:32 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=72d02828c21a0ab67f219f30f6ec6110eaee0b4127034e4c9d4dd5589481c79e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:22:0a:e6:3d:9c:cb:da:9b:6b:03:7f:f8: 92:29:68:b6:a8:dc:68:d9:8a:e3:4a:24:0d:0d:48: 07:74:17:36:14:7f:5d:6c:d9:be:49:86:25:c0:8e: 79:4c:78:64:f3:19:73:d7:a3:25:4f:2c:15:98:b3: b3:79:ca:6b:50:9d:1f:7e:15:42:66:53:21:fb:60: 6b:d1:7f:7c:44:84:24:7e:0d:b8:50:c7:39:4c:10: 51:f7:c7:19:bd:a9:b3:87:ee:32:f9:41:59:c8:1d: 86:20:17:62:da:60:bd:7d:64:ce:c5:4e:79:93:f6: d3:ba:1f:a1:4b:20:7b:49:77:28:b0:e9:ee:7f:b7: 53:03:03:70:85:2c:33:69:ef:49:ca:0a:9e:1e:bf: 8b:f9:cd:24:2a:24:1d:9d:ed:ac:23:03:b9:3b:19: 4f:bd:b6:b6:e1:c3:e9:86:be:97:8a:44:30:6f:89: 1b:09:38:b7:14:c6:ea:cb:c3:7e:65:bd:33:ea:2d: aa:db:c6:0e:5b:6a:90:4f:bd:49:c8:e5:ff:31:a1: e1:67:5f:44:d1:22:9f:b1:da:17:25:64:e9:c9:d5: 65:5e:00:bf:d9:9c:4f:b0:69:75:90:10:13:9c:aa: 5e:58:5e:2d:e9:65:73:29:7b:66:f0:45:6a:eb:a8: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BA:2A:CA:2B:E6:F6:02:34:5D:5E:98:DC:0E:48:4F:75:8D:2A:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/058b2723-0749-41cb-992b-215b81ddf36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/44 Signature Algorithm: sha256WithRSAEncryption 71:f1:32:81:de:ae:64:2c:a8:de:d3:d9:25:fc:17:e3:ac:18: 81:1c:08:4a:a6:8b:85:8f:32:e1:dd:b3:a5:a4:0d:28:ad:eb: 7e:93:44:ce:ee:17:82:27:6e:6c:d6:5a:10:3a:42:7e:24:bc: 9a:d8:e7:ea:c1:14:4a:4e:f3:dd:45:3e:ab:7a:8a:b1:10:8a: ec:a0:b4:f2:9a:cf:92:57:07:c8:0c:cd:d8:81:c3:b5:d9:70: 06:56:cb:7c:82:80:b9:30:46:d8:32:ee:5a:4a:ee:89:9b:9b: 05:8b:f8:87:0d:88:ed:43:8b:34:aa:39:1d:75:2c:31:d3:f7: af:c7:48:c2:f2:fb:13:2b:fa:76:90:50:c6:9f:54:0f:47:42: fa:dd:23:16:81:f1:83:5d:ff:97:ea:ae:b8:77:71:a1:ca:e9: 4f:1a:92:0c:b7:06:97:ad:4d:22:9b:e7:63:32:f0:e6:f1:3b: f1:30:7b:1c:19:c8:c2:e7:b8:97:49:78:8f:23:cc:bb:6b:4b: a6:67:ee:79:26:94:32:75:84:53:a8:cd:29:d7:2b:50:3f:91: 40:4b:1a:ea:05:a5:dc:ce:8b:04:14:7e:f5:e7:8c:6b:7c:95: df:de:4b:0d:7b:3b:d1:eb:40:d5:38:86:30:e6:80:a9:7b:e5: 0f:44:a7:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOq0keLv/8hsp9H85SfSH2IBHAbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDEwMDMyWhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmQwMjgyOGMyMWEwYWI2N2YyMTlmMzBmNmVjNjExMGVh ZWUwYjQxMjcwMzRlNGM5ZDRkZDU1ODk0ODFjNzllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrkyIK5j2cy9qbawN/+JIpaLao3GjZiuNKJA0NSAd0FzYU f11s2b5JhiXAjnlMeGTzGXPXoyVPLBWYs7N5ymtQnR9+FUJmUyH7YGvRf3xEhCR+ DbhQxzlMEFH3xxm9qbOH7jL5QVnIHYYgF2LaYL19ZM7FTnmT9tO6H6FLIHtJdyiw 6e5/t1MDA3CFLDNp70nKCp4ev4v5zSQqJB2d7awjA7k7GU+9trbhw+mGvpeKRDBv iRsJOLcUxurLw35lvTPqLarbxg5bapBPvUnI5f8xoeFnX0TRIp+x2hclZOnJ1WVe AL/ZnE+waXWQEBOcql5YXi3pZXMpe2bwRWrrqBKlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXLoqyivm9gI0XV6Y3A5IT3WNKqAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA1OGIyNzIzLTA3NDktNDFjYi05OTJiLTIxNWI4MWRkZjM2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycAAwDQYJKoZIhvcNAQELBQADggEBAHHxMoHermQsqN7T2SX8F+Os GIEcCEqmi4WPMuHds6WkDSit636TRM7uF4InbmzWWhA6Qn4kvJrY5+rBFEpO891F Pqt6irEQiuygtPKaz5JXB8gMzdiBw7XZcAZWy3yCgLkwRtgy7lpK7ombmwWL+IcN iO1DizSqOR11LDHT96/HSMLy+xMr+naQUMafVA9HQvrdIxaB8YNd/5fqrrh3caHK 6U8akgy3BpetTSKb52My8ObxO/EwexwZyMLnuJdJeI8jzLtrS6Zn7nkmlDJ1hFOo zSnXK1A/kUBLGuoFpdzOiwQUfvXnjGt8ld/eSw17O9HrQNU4hjDmgKl75Q9Ep3k= -----END CERTIFICATE-----Generated at Sat Dec 20 12:56:46 2025 by rpki-client