This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa File: 344bc29d-01a1-4e8a-bded-f30ec2519804.roa (raw, json) Hash identifier: SIxWuVDgIvs8u+NzbEarAsG3z2e5EKdxdNbITotLK7U= Subject key identifier: 07:3D:04:2B:D3:CA:C8:51:32:EB:FD:2C:CF:A4:D3:0F:A0:1C:5C:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3D55FDD9CF19524ED8A77E277E5C529C5F235109 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa Signing time: Wed 10 Dec 2025 05:10:34 +0000 ROA not before: Wed 10 Dec 2025 05:10:34 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:55:fd:d9:cf:19:52:4e:d8:a7:7e:27:7e:5c:52:9c:5f:23:51:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 05:10:34 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=7f001cd71f3db9ffd513289a23124449bc4f59496940473e23fcc809b471d557, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:45:bb:b3:68:75:0b:ce:de:00:66:52:13: 74:ae:77:df:75:8e:39:82:17:4f:98:e0:29:7f:dc: b9:2b:25:e7:b4:43:e7:cb:4d:c5:f5:69:4e:37:3e: d2:fa:dc:b2:d1:ec:c2:7d:44:67:fd:ea:69:ec:f9: 30:12:f4:8c:b4:f3:29:40:08:d4:48:48:78:0e:98: 86:39:e0:6d:70:65:bc:aa:52:f6:64:a9:06:ae:d2: 45:4b:8e:ea:f5:73:60:4f:64:f2:b7:8e:6d:e5:ea: b8:2a:8d:57:70:ac:8c:f5:c8:77:dc:b7:58:6d:28: 20:4c:7d:d1:8c:f7:88:3d:d8:e2:0d:1d:51:47:54: 03:bb:65:1c:4e:d7:03:a3:54:da:94:e1:88:24:e4: ac:c4:a7:0f:be:97:90:62:e7:b2:54:14:00:3c:4c: b8:b8:ec:b9:f5:3f:37:6f:47:3c:16:73:8b:98:23: ad:fd:77:db:6b:13:5f:ca:e4:c6:9e:3e:eb:09:7f: 9d:09:d7:1a:2a:e2:bd:59:79:a6:97:d4:90:93:19: ed:e6:14:ff:23:7b:8f:e2:ae:02:53:e9:11:b5:3d: dd:31:67:6b:8a:ea:94:c5:06:9e:41:b8:96:e5:d0: 8b:11:94:67:48:96:11:18:de:4a:0f:72:24:5b:45: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3D:04:2B:D3:CA:C8:51:32:EB:FD:2C:CF:A4:D3:0F:A0:1C:5C:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 28:01:83:bb:e5:15:bb:b4:98:8f:b5:6b:da:b8:08:ed:d7:f8: 58:2c:ef:50:ea:33:31:77:b7:ce:56:72:24:ac:1b:d1:eb:e4: ed:9b:c3:f6:09:8b:87:85:19:ec:d5:16:62:f8:7b:fb:a3:d5: 6d:7b:03:c2:8b:57:a0:8c:ba:6c:92:3a:23:e2:e7:39:65:b5: f1:8a:a1:04:5d:d8:ba:72:34:11:9d:ac:ca:11:ca:1e:62:a7: fb:b9:e3:a8:1e:60:bb:88:4e:5a:38:4f:fa:a9:9b:f0:f9:ff: b4:d6:2d:8f:35:8d:aa:4d:01:6a:22:2f:76:a0:66:10:14:3e: cf:80:20:50:73:ad:e7:d9:68:a4:2e:22:8f:54:3b:67:63:a6: 59:51:0b:b6:90:39:ee:da:3f:a4:8c:33:d9:e7:ee:79:39:33: 03:68:36:e5:97:f6:3f:93:a4:e1:43:eb:a6:3b:f3:fa:2f:79: b2:3c:e3:01:d8:12:56:d3:0d:c8:2e:3e:bb:c6:dc:29:bf:db: 4c:46:48:3e:63:5d:b3:03:51:79:98:00:a8:69:93:c1:31:b6: c3:14:5d:db:d6:86:cb:b3:f5:d6:6d:3a:7d:08:f2:b9:a7:50: 80:47:66:94:d8:d3:20:8d:28:0d:66:3f:59:d6:61:cc:68:3a: a5:5b:e1:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPVX92c8ZUk7Yp34nflxSnF8jUQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUxMDM0WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjAwMWNkNzFmM2RiOWZmZDUxMzI4OWEyMzEyNDQ0OWJj NGY1OTQ5Njk0MDQ3M2UyM2ZjYzgwOWI0NzFkNTU3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIrUW7s2h1C87eAGZSE3Sud991jjmCF0+Y4Cl/3LkrJee0 Q+fLTcX1aU43PtL63LLR7MJ9RGf96mns+TAS9Iy08ylACNRISHgOmIY54G1wZbyq UvZkqQau0kVLjur1c2BPZPK3jm3l6rgqjVdwrIz1yHfct1htKCBMfdGM94g92OIN HVFHVAO7ZRxO1wOjVNqU4Ygk5KzEpw++l5Bi57JUFAA8TLi47Ln1PzdvRzwWc4uY I639d9trE1/K5MaePusJf50J1xoq4r1ZeaaX1JCTGe3mFP8je4/irgJT6RG1Pd0x Z2uK6pTFBp5BuJbl0IsRlGdIlhEY3koPciRbRZ63AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBz0EK9PKyFEy6/0sz6TTD6AcXLYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM0NGJjMjlkLTAxYTEtNGU4YS1iZGVkLWYzMGVjMjUxOTgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEAKAGDu+UVu7SYj7Vr2rgI7df4 WCzvUOozMXe3zlZyJKwb0evk7ZvD9gmLh4UZ7NUWYvh7+6PVbXsDwotXoIy6bJI6 I+LnOWW18YqhBF3YunI0EZ2syhHKHmKn+7njqB5gu4hOWjhP+qmb8Pn/tNYtjzWN qk0BaiIvdqBmEBQ+z4AgUHOt59lopC4ij1Q7Z2OmWVELtpA57to/pIwz2efueTkz A2g25Zf2P5Ok4UPrpjvz+i95sjzjAdgSVtMNyC4+u8bcKb/bTEZIPmNdswNReZgA qGmTwTG2wxRd29aGy7P11m06fQjyuadQgEdmlNjTII0oDWY/WdZhzGg6pVvh/A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:30:54 2025 by rpki-client