This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa File: 14518d87-9a80-47da-80c6-efeb62f0643b.roa (raw, json) Hash identifier: PS99UTMM4of819GDzhhv1W8M7RNs5FkmSZpMUF+EpNk= Subject key identifier: C5:EF:34:25:67:95:E9:F4:47:38:20:06:09:3E:E0:51:6E:A3:1E:13 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1280ED9D529029B37B719A78751FF61D6CEE1477 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa Signing time: Wed 10 Dec 2025 05:10:33 +0000 ROA not before: Wed 10 Dec 2025 05:10:33 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:80:ed:9d:52:90:29:b3:7b:71:9a:78:75:1f:f6:1d:6c:ee:14:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 05:10:33 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=15c546091b437714f3442b2096d26f70297bb3e1c21da7f024fdb9cca0da5752, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:59:23:fd:2a:0e:f7:82:f0:66:ef:3d:2c: 6c:80:c0:f9:b7:91:46:56:88:2a:b5:75:29:81:84: e3:7b:47:52:9a:a4:4a:22:75:c3:aa:c3:6a:35:49: 3a:eb:c3:44:9c:fb:61:74:a6:cf:75:b6:7f:6b:28: ea:42:58:74:36:c6:10:d1:1c:e4:64:85:db:89:f6: 81:98:4f:3f:fd:84:c3:89:3c:68:a9:4e:aa:ac:89: e3:2b:05:be:21:f5:ca:bf:6b:28:54:21:59:ba:c7: 2b:35:c2:22:66:67:6b:4e:08:10:b3:9a:da:4d:2c: a5:ef:1e:53:4d:9b:82:89:30:48:6c:cb:84:04:33: ad:b8:ca:e1:d3:cc:f2:39:67:a1:53:ca:20:23:c3: d7:08:e8:eb:96:e7:cc:e4:3b:20:5d:15:9a:d1:ef: 9b:5f:54:a9:67:a5:12:87:b2:8f:64:84:f0:95:bb: 00:45:11:08:a7:fe:30:19:d2:75:58:45:51:e9:c1: 46:a6:1d:d0:88:7e:c6:32:b8:8e:4c:d7:49:3d:c8: 9e:77:c5:d3:c7:3f:fe:63:62:b1:7c:23:b9:86:a3: af:25:58:1c:e0:65:01:cc:9d:bb:ec:2c:60:b6:d5: d9:ea:ee:dc:1d:d2:bd:83:2a:56:8b:56:4a:58:fa: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:34:25:67:95:E9:F4:47:38:20:06:09:3E:E0:51:6E:A3:1E:13 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:3::/48 Signature Algorithm: sha256WithRSAEncryption 53:f1:48:6c:c5:08:8c:86:05:7f:c5:7d:14:92:42:00:cd:cf: f6:59:fa:4e:5a:60:06:71:49:84:30:b9:e6:4c:4b:be:6d:b6: 41:d0:97:19:66:38:70:c8:08:b2:8b:f7:7a:ad:3e:36:62:72: 21:4c:d8:4c:c6:b1:3d:8d:89:9d:f9:eb:56:17:42:65:32:bf: 49:3b:13:eb:c1:23:ee:ca:5b:ff:46:b7:ea:12:e6:cc:30:29: d5:73:42:ae:49:c1:53:1f:c9:9e:ee:ca:6b:81:8b:5a:c3:0f: 48:2e:25:8b:d5:5d:34:f5:e1:19:a5:e7:3b:14:5a:3c:1e:bb: 61:fd:d2:ca:13:2b:a7:c3:6f:70:e2:b0:3d:be:73:1d:9f:ed: 65:52:ee:c0:06:c2:e5:e3:d2:2d:d6:48:cd:d0:4a:5d:ca:5e: 01:f6:0e:50:e9:7d:65:71:3f:7b:33:36:b9:82:ac:51:0e:cd: d4:4f:af:61:cc:45:4a:6c:89:22:ea:28:23:24:b3:7f:4c:ca: 89:d5:11:2a:d8:5f:e9:d1:1c:b3:af:d0:67:2c:fb:d3:bd:aa: 70:f5:aa:42:10:17:29:cb:05:05:93:26:c1:8d:5b:76:ff:ee: 6a:74:ac:b6:cb:0e:18:58:1c:ec:2b:f1:89:c6:0b:10:3f:cc: 2a:92:8b:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEoDtnVKQKbN7cZp4dR/2HWzuFHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUxMDMzWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWM1NDYwOTFiNDM3NzE0ZjM0NDJiMjA5NmQyNmY3MDI5 N2JiM2UxYzIxZGE3ZjAyNGZkYjljY2EwZGE1NzUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4iFkj/SoO94LwZu89LGyAwPm3kUZWiCq1dSmBhON7R1Ka pEoidcOqw2o1STrrw0Sc+2F0ps91tn9rKOpCWHQ2xhDRHORkhduJ9oGYTz/9hMOJ PGipTqqsieMrBb4h9cq/ayhUIVm6xys1wiJmZ2tOCBCzmtpNLKXvHlNNm4KJMEhs y4QEM624yuHTzPI5Z6FTyiAjw9cI6OuW58zkOyBdFZrR75tfVKlnpRKHso9khPCV uwBFEQin/jAZ0nVYRVHpwUamHdCIfsYyuI5M10k9yJ53xdPHP/5jYrF8I7mGo68l WBzgZQHMnbvsLGC21dnq7twd0r2DKlaLVkpY+tyNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxe80JWeV6fRHOCAGCT7gUW6jHhMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0NTE4ZDg3LTlhODAtNDdkYS04MGM2LWVmZWI2MmYwNjQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAMwDQYJKoZIhvcNAQELBQADggEBAFPxSGzFCIyGBX/FfRSSQgDN z/ZZ+k5aYAZxSYQwueZMS75ttkHQlxlmOHDICLKL93qtPjZiciFM2EzGsT2NiZ35 61YXQmUyv0k7E+vBI+7KW/9Gt+oS5swwKdVzQq5JwVMfyZ7uymuBi1rDD0guJYvV XTT14Rml5zsUWjweu2H90soTK6fDb3DisD2+cx2f7WVS7sAGwuXj0i3WSM3QSl3K XgH2DlDpfWVxP3szNrmCrFEOzdRPr2HMRUpsiSLqKCMks39MyonVESrYX+nRHLOv 0Gcs+9O9qnD1qkIQFynLBQWTJsGNW3b/7mp0rLbLDhhYHOwr8YnGCxA/zCqSi50= -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:14 2025 by rpki-client