This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa File: 535a7848-0977-4f59-b656-b3f581248b27.roa (raw, json) Hash identifier: WKMZJXr96gh6q0cV42aEZlwqqdW7f0nfgfBH1APFMnk= Subject key identifier: 77:97:94:8B:20:FA:D2:32:C4:49:43:A6:FA:0E:33:6E:62:01:14:29 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 37BF6B5BDE673A0BC420280276278E791930A96E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa Signing time: Fri 12 Dec 2025 00:00:08 +0000 ROA not before: Fri 12 Dec 2025 00:00:08 +0000 ROA not after: Thu 12 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bf:6b:5b:de:67:3a:0b:c4:20:28:02:76:27:8e:79:19:30:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 12 00:00:08 2025 GMT Not After : Mar 12 23:59:59 2026 GMT Subject: serialNumber=5d47a6c59a8f1329c755eb4c0bc9b4c57167ea48f509f991dd94ce1806fb7dad, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:94:33:90:72:95:94:5e:f4:01:28:12:fd: a9:20:7b:b3:cc:e3:af:18:e9:93:6b:12:dd:3e:67: 4d:9e:ce:d4:8d:ec:09:1b:ff:79:3c:4d:10:b0:15: 18:c6:a8:06:6e:68:fe:6b:71:2e:20:48:48:ed:54: 48:40:f9:66:d1:85:75:4c:b7:e1:20:ff:da:72:b3: 0e:8a:5a:0c:0a:57:17:81:25:4a:dd:17:30:94:11: f0:f6:65:3e:87:49:b4:14:50:dd:e5:49:3f:dd:fa: 68:b5:d3:d7:ff:f2:b5:f5:9a:39:3f:5e:c4:77:24: 39:45:75:2c:fe:c3:15:84:bc:d8:d2:c3:10:4e:fb: b1:81:25:8e:36:fd:84:1c:59:a5:ec:ef:89:35:82: 74:68:a8:07:ae:2c:22:a3:96:a3:bb:0d:7c:ba:21: 3f:ab:50:56:88:25:4b:c7:ed:b7:c3:6e:37:73:d5: 93:36:28:23:16:af:28:a1:51:62:cf:1b:92:5d:c6: 37:c0:48:56:19:ed:44:09:54:97:74:82:5f:ba:47: 45:5f:4e:06:52:67:47:7d:3b:4f:9c:a6:49:32:27: e5:59:df:51:4a:b4:9e:22:9d:5f:52:fb:e1:ab:10: 09:22:a9:9c:bc:de:4a:27:4d:9f:c1:9c:9e:03:33: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:94:8B:20:FA:D2:32:C4:49:43:A6:FA:0E:33:6E:62:01:14:29 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8100::/40 Signature Algorithm: sha256WithRSAEncryption 22:fd:b5:14:50:08:19:88:c1:69:a8:8f:26:43:04:67:73:a2: 29:17:5d:da:81:9b:73:a2:51:56:12:7a:96:8b:57:ea:eb:06: bd:f7:92:be:57:ec:03:07:ea:96:ef:49:36:b4:7d:59:c1:ea: 77:1d:68:2f:1e:27:81:e6:af:d8:a1:ad:ce:23:d4:3c:4d:73: bb:2a:83:9f:90:8f:bf:d6:3a:84:33:b6:6c:a2:57:3c:db:9d: 56:60:c7:34:5e:03:38:21:fd:65:1f:92:90:d1:e4:15:b7:b0: e0:f8:c9:87:35:98:cc:6a:b9:29:1d:25:dd:75:c9:05:cf:02: 3f:eb:2c:8f:e0:48:dd:aa:90:93:7b:7b:3d:b9:ab:e3:a5:39: 92:9f:b1:ff:92:d9:d1:ba:bd:27:3c:20:47:12:b4:d0:e0:d5: 9b:d7:6f:5c:5c:26:92:df:b4:f7:57:63:1e:11:d4:11:96:78: 18:32:35:f3:b4:41:7e:bc:57:1e:35:36:81:22:f1:68:13:4f: e1:75:45:3e:d4:92:54:f7:ce:59:36:11:77:b2:3c:e3:35:76: 4c:89:ac:6d:f4:45:d7:38:eb:bd:2b:66:3d:18:38:5e:37:10: 17:2b:e0:75:6e:e6:34:3a:7a:58:2f:32:ee:c1:a4:75:c0:88: cc:91:e9:69 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUN79rW95nOgvEICgCdieOeRkwqW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEyMDAwMDA4WhcNMjYwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDQ3YTZjNTlhOGYxMzI5Yzc1NWViNGMwYmM5YjRjNTcx NjdlYTQ4ZjUwOWY5OTFkZDk0Y2UxODA2ZmI3ZGFkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5h5QzkHKVlF70ASgS/akge7PM468Y6ZNrEt0+Z02eztSN 7Akb/3k8TRCwFRjGqAZuaP5rcS4gSEjtVEhA+WbRhXVMt+Eg/9pysw6KWgwKVxeB JUrdFzCUEfD2ZT6HSbQUUN3lST/d+mi109f/8rX1mjk/XsR3JDlFdSz+wxWEvNjS wxBO+7GBJY42/YQcWaXs74k1gnRoqAeuLCKjlqO7DXy6IT+rUFaIJUvH7bfDbjdz 1ZM2KCMWryihUWLPG5JdxjfASFYZ7UQJVJd0gl+6R0VfTgZSZ0d9O0+cpkkyJ+VZ 31FKtJ4inV9S++GrEAkiqZy83konTZ/BnJ4DMyqLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUd5eUiyD60jLESUOm+g4zbmIBFCkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUzNWE3ODQ4LTA5NzctNGY1OS1iNjU2LWIzZjU4MTI0OGIyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgTANBgkqhkiG9w0BAQsFAAOCAQEAIv21FFAIGYjBaaiPJkMEZ3Oi KRdd2oGbc6JRVhJ6lotX6usGvfeSvlfsAwfqlu9JNrR9WcHqdx1oLx4ngeav2KGt ziPUPE1zuyqDn5CPv9Y6hDO2bKJXPNudVmDHNF4DOCH9ZR+SkNHkFbew4PjJhzWY zGq5KR0l3XXJBc8CP+ssj+BI3aqQk3t7Pbmr46U5kp+x/5LZ0bq9JzwgRxK00ODV m9dvXFwmkt+091djHhHUEZZ4GDI187RBfrxXHjU2gSLxaBNP4XVFPtSSVPfOWTYR d7I84zV2TImsbfRF1zjrvStmPRg4XjcQFyvgdW7mNDp6WC8y7sGkdcCIzJHpaQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:14 2025 by rpki-client