This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: H02J52+/eiTZN0EYP2pEn1h2aJZpIypgmLtP58pkXWI= Subject key identifier: EF:66:31:2C:FF:E3:6B:A5:07:A7:E2:BD:8C:BF:63:49:53:55:39:0C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3F611B40C910368FD88187005CA890B4456563E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Wed 10 Dec 2025 05:00:11 +0000 ROA not before: Wed 10 Dec 2025 05:00:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:61:1b:40:c9:10:36:8f:d8:81:87:00:5c:a8:90:b4:45:65:63:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 05:00:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=8a5a66a3541d7b089ed1349f1143111ba5aac5c1ca84367c88a15cc33b08552d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3f:1a:a9:4d:86:8d:c4:88:d2:a9:5b:ff:d1: 5b:fe:02:19:60:33:cf:b4:92:be:cc:36:96:af:5a: ee:d8:93:42:29:0c:48:34:00:68:22:e1:06:84:3e: 7e:bb:94:f2:5c:74:df:03:a9:8e:a1:16:07:d8:8f: 8e:91:14:86:14:51:89:70:8d:6e:51:13:58:91:98: 16:b0:dc:c2:a1:0c:91:b8:99:c5:43:44:32:32:50: 13:82:54:9a:ba:02:b1:e7:b2:8b:fa:c0:1d:82:85: 08:77:6f:91:04:49:08:44:9b:1a:8c:44:0b:40:33: 49:2f:a8:e8:73:66:f9:28:fd:7e:4f:42:b0:37:62: fc:22:e4:74:3f:54:0e:61:ff:df:e1:69:dc:30:a8: 61:31:fa:56:ea:5f:1a:17:87:19:8f:49:f4:bb:3b: 4b:07:ad:7d:9c:78:34:ae:23:e8:74:0c:d2:7d:87: eb:d1:d4:db:37:24:39:0c:90:75:87:52:7c:dd:66: 86:1b:99:89:32:f1:b8:f1:49:00:c1:28:54:21:79: d5:43:34:45:dc:c4:8a:ed:83:13:ee:0f:ec:bb:30: 57:d1:d4:c9:27:ef:8d:f2:9a:70:f0:7a:dd:5e:2f: 90:0d:a8:fe:1d:31:e7:25:81:48:71:3b:99:a7:5a: 16:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:31:2C:FF:E3:6B:A5:07:A7:E2:BD:8C:BF:63:49:53:55:39:0C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 11:39:3a:c2:8c:0b:8f:f1:fa:3a:e4:21:80:5a:40:54:91:9d: 76:ff:37:26:3b:5c:58:8b:af:00:95:c1:ab:6e:cc:64:9d:8d: 66:56:2c:81:0f:92:05:0b:fa:c5:2f:78:03:6b:fb:ad:38:84: 17:0d:1a:9b:09:89:13:69:96:92:4a:af:d1:be:21:20:35:30: c4:60:a6:21:50:89:56:57:ec:6a:58:59:ea:f6:60:ea:a1:ae: 76:eb:66:f7:54:3d:76:36:da:48:1a:37:29:5f:ee:02:dc:13: 31:20:ba:a4:7a:73:db:28:7c:ab:62:ca:26:cc:82:de:b6:e8: 67:02:92:9e:e1:b4:27:e9:78:d1:77:ca:45:fd:99:bf:d8:61: 43:f0:06:f2:a8:02:15:02:bd:3f:28:f4:3d:d5:71:64:d4:7f: c9:ab:0a:0e:4d:6f:89:0b:57:18:37:95:6a:ee:c4:d9:7a:a0: 6f:08:9c:66:52:46:ce:48:13:5a:9c:12:e9:86:a5:2f:0b:4b: 85:2c:e4:72:b3:e2:c7:30:90:3d:d2:cb:af:b0:42:63:e5:a4: 4c:da:e1:4c:9e:b9:02:b9:bd:0e:e2:cc:8e:c6:6c:4b:96:ea: 75:5e:88:c9:54:7d:da:28:de:b9:df:68:82:bf:55:55:3b:15: 77:94:09:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP2EbQMkQNo/YgYcAXKiQtEVlY+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUwMDExWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTVhNjZhMzU0MWQ3YjA4OWVkMTM0OWYxMTQzMTExYmE1 YWFjNWMxY2E4NDM2N2M4OGExNWNjMzNiMDg1NTJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwPxqpTYaNxIjSqVv/0Vv+AhlgM8+0kr7MNpavWu7Yk0Ip DEg0AGgi4QaEPn67lPJcdN8DqY6hFgfYj46RFIYUUYlwjW5RE1iRmBaw3MKhDJG4 mcVDRDIyUBOCVJq6ArHnsov6wB2ChQh3b5EESQhEmxqMRAtAM0kvqOhzZvko/X5P QrA3Yvwi5HQ/VA5h/9/hadwwqGEx+lbqXxoXhxmPSfS7O0sHrX2ceDSuI+h0DNJ9 h+vR1Ns3JDkMkHWHUnzdZoYbmYky8bjxSQDBKFQhedVDNEXcxIrtgxPuD+y7MFfR 1Mkn743ymnDwet1eL5ANqP4dMeclgUhxO5mnWhahAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU72YxLP/ja6UHp+K9jL9jSVNVOQwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBABE5OsKMC4/x+jrkIYBaQFSR nXb/NyY7XFiLrwCVwatuzGSdjWZWLIEPkgUL+sUveANr+604hBcNGpsJiRNplpJK r9G+ISA1MMRgpiFQiVZX7GpYWer2YOqhrnbrZvdUPXY22kgaNylf7gLcEzEguqR6 c9sofKtiyibMgt626GcCkp7htCfpeNF3ykX9mb/YYUPwBvKoAhUCvT8o9D3VcWTU f8mrCg5Nb4kLVxg3lWruxNl6oG8InGZSRs5IE1qcEumGpS8LS4Us5HKz4scwkD3S y6+wQmPlpEza4UyeuQK5vQ7izI7GbEuW6nVeiMlUfdoo3rnfaIK/VVU7FXeUCSg= -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:31 2025 by rpki-client