This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa File: 23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa (raw, json) Hash identifier: 4rYZ3vQkVJoUYb8AC3mnt7q28H00XgltrpRybA8R1Cs= Subject key identifier: 0C:48:E9:C6:F7:9E:B7:17:37:FF:66:14:ED:93:7A:60:0F:3D:1E:80 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1313CD7249700DBBCD338CE5A95FBE956B329D47 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa Signing time: Thu 11 Dec 2025 01:00:45 +0000 ROA not before: Thu 11 Dec 2025 01:00:45 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:13:cd:72:49:70:0d:bb:cd:33:8c:e5:a9:5f:be:95:6b:32:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 11 01:00:45 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=6069f4f40d5896cf262763a7a85c70c85433c19092f2d11f2a61a2beacf26ef2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:92:c6:eb:2d:4e:86:d7:e3:ec:2c:25:d9: 59:2d:ed:52:f1:d6:5b:64:68:50:1d:17:7c:a8:e7: 56:24:02:79:e9:c2:d4:5b:55:21:f3:c0:78:28:79: a2:3f:82:18:55:69:65:17:8e:79:20:87:06:35:df: 60:ee:25:1d:ec:89:d2:9c:8a:2d:e7:8c:af:57:4e: c9:e4:ad:cd:e8:1e:5d:a8:9a:81:6d:7d:9f:a2:fb: f5:9a:90:41:d1:61:86:a6:43:d6:c5:11:4e:6d:57: 05:b1:26:c8:1c:1a:25:a0:fa:92:99:24:88:10:fe: ec:16:55:8a:f6:6b:52:a2:6e:74:46:b2:c8:05:ad: d9:d4:e1:ca:5d:c9:4e:6d:2e:2f:b0:46:5b:4b:0e: 30:4e:aa:d6:2b:b7:c9:f2:f5:6b:3d:85:55:c0:e6: 33:03:de:07:0f:19:8a:e9:09:2c:e6:da:5f:5c:24: 4a:c2:6f:cb:1c:ed:be:9a:5f:3b:9e:6a:61:fa:ea: 3a:2a:1f:d8:c8:12:60:4f:77:8b:64:3b:a3:64:3d: ff:ef:e6:80:b3:f6:55:e2:65:7f:86:2b:c7:2b:e3: 51:dd:fb:e1:b3:ba:cf:7a:e2:90:3d:ca:e0:02:ae: d3:bb:70:bf:fa:93:2d:d0:cf:ef:2f:2b:bf:7b:32: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:48:E9:C6:F7:9E:B7:17:37:FF:66:14:ED:93:7A:60:0F:3D:1E:80 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f107::/48 Signature Algorithm: sha256WithRSAEncryption 7d:2b:e7:b4:da:5c:4d:2f:1c:fa:19:77:c5:b8:54:4b:cd:12: b2:0b:c5:31:12:d3:17:f4:0f:b0:14:56:3e:c3:d1:35:8b:bb: 64:fd:0a:ad:e8:ea:71:b6:e3:61:1a:45:93:5a:c0:ba:ad:b6: 3a:de:d1:57:fc:1b:54:a4:a8:01:45:4c:d4:25:cd:46:3a:79: 29:49:51:85:1b:63:36:00:31:44:2a:45:c9:c1:9f:f2:ac:f7: 2c:5a:b8:9a:fb:f1:70:5d:4e:fe:7a:f6:b1:4c:d9:7e:75:e9: b4:8d:37:c4:e6:3c:35:cb:41:3d:99:10:e1:2b:3e:b3:3d:24: 19:91:51:06:27:ce:34:d0:95:e4:4b:20:5a:a6:5d:0a:ac:16: a8:e7:96:e1:f6:78:d4:c1:52:01:57:81:e2:5b:d3:07:6e:1f: 7f:25:f0:b3:37:03:d0:45:7e:ff:1f:85:ba:d5:96:a9:72:8d: fc:14:9b:6e:8d:c4:d7:78:3a:33:e2:ba:b3:09:8c:47:30:4b: 58:46:e8:9b:f0:7c:15:3b:2d:fa:e4:35:68:f3:43:71:ea:18: d7:40:5a:c1:35:9a:f8:c4:06:c1:81:3e:c0:23:52:43:42:ae: 3d:9c:07:82:be:13:48:59:08:fd:17:20:44:02:e6:68:b8:51: ec:7d:e7:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUExPNcklwDbvNM4zlqV++lWsynUcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDEwMDQ1WhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDY5ZjRmNDBkNTg5NmNmMjYyNzYzYTdhODVjNzBjODU0 MzNjMTkwOTJmMmQxMWYyYTYxYTJiZWFjZjI2ZWYyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpjJLG6y1Ohtfj7Cwl2Vkt7VLx1ltkaFAdF3yo51YkAnnp wtRbVSHzwHgoeaI/ghhVaWUXjnkghwY132DuJR3sidKcii3njK9XTsnkrc3oHl2o moFtfZ+i+/WakEHRYYamQ9bFEU5tVwWxJsgcGiWg+pKZJIgQ/uwWVYr2a1KibnRG ssgFrdnU4cpdyU5tLi+wRltLDjBOqtYrt8ny9Ws9hVXA5jMD3gcPGYrpCSzm2l9c JErCb8sc7b6aXzueamH66joqH9jIEmBPd4tkO6NkPf/v5oCz9lXiZX+GK8cr41Hd ++Gzus964pA9yuACrtO7cL/6ky3Qz+8vK797MhFRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDEjpxveetxc3/2YU7ZN6YA89HoAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIzYjhlMDg5LTE5NzktNDJmMS05ZDRlLWVkNzQyOGEyNWYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QcwDQYJKoZIhvcNAQELBQADggEBAH0r57TaXE0vHPoZd8W4VEvN ErILxTES0xf0D7AUVj7D0TWLu2T9Cq3o6nG242EaRZNawLqttjre0Vf8G1SkqAFF TNQlzUY6eSlJUYUbYzYAMUQqRcnBn/Ks9yxauJr78XBdTv569rFM2X516bSNN8Tm PDXLQT2ZEOErPrM9JBmRUQYnzjTQleRLIFqmXQqsFqjnluH2eNTBUgFXgeJb0wdu H38l8LM3A9BFfv8fhbrVlqlyjfwUm26NxNd4OjPiurMJjEcwS1hG6JvwfBU7Lfrk NWjzQ3HqGNdAWsE1mvjEBsGBPsAjUkNCrj2cB4K+E0hZCP0XIEQC5mi4Uex951o= -----END CERTIFICATE-----Generated at Sun Dec 21 01:21:28 2025 by rpki-client