This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: DMEz3b020AwOKZr39VWB/OR5Br69onTmS4c3MlJW1UA= Subject key identifier: A7:D4:53:8B:F6:11:70:FF:49:F1:18:55:28:5A:F7:52:58:CC:85:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 43E593F5ABD395AF386849CD1BDB24CCB0925DF3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Thu 11 Dec 2025 00:50:08 +0000 ROA not before: Thu 11 Dec 2025 00:50:08 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e5:93:f5:ab:d3:95:af:38:68:49:cd:1b:db:24:cc:b0:92:5d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 11 00:50:08 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=42e2a2e6bfd06ccb1cdbc02f20867d3f48b5ba7765d495549be472fa88714451, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:b9:8d:c7:18:5e:e0:02:70:d1:40:10:f8: 87:bb:87:91:18:66:e8:9c:80:5b:70:ee:4a:58:0e: 9e:5d:a7:1e:57:85:43:b1:73:4e:c8:8c:c1:01:65: 97:b8:0d:12:38:f0:e8:b6:8b:f8:b3:8a:a2:1f:07: 3d:08:46:33:37:ab:50:8a:47:bf:e7:b6:cd:b2:cc: 3a:57:fa:3e:77:9d:6a:99:3a:2d:b4:7a:96:43:db: ea:bc:9b:c5:ce:bd:8b:c5:26:53:ca:c3:72:4f:94: f7:b2:7c:11:58:14:15:1e:ff:bb:6f:db:31:2f:9a: 3d:f3:22:cb:36:54:25:ad:e3:6c:4b:92:52:1c:2c: ac:37:c2:b3:13:21:40:2d:97:e1:9d:eb:85:52:95: 0c:1a:9e:32:69:85:bb:ab:fb:4c:9b:bd:a4:dd:fc: 1b:16:77:ec:50:3b:4f:5a:4b:c2:73:b5:c6:53:de: 05:53:87:d5:3b:67:c3:8a:60:dc:47:0e:ca:22:24: 5c:08:74:88:59:45:22:8c:ca:c7:2a:c8:17:ad:71: 6e:d2:54:a7:62:16:8b:6a:9f:f2:af:c9:c7:0a:22: 25:06:72:98:ec:8b:64:cc:8c:1e:9c:4a:fe:84:2d: 33:f8:52:e8:7e:90:51:77:c5:a1:dd:d2:ea:9d:a1: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:53:8B:F6:11:70:FF:49:F1:18:55:28:5A:F7:52:58:CC:85:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 6d:6c:55:88:6e:63:3a:2d:af:eb:4a:8e:e1:91:78:41:2b:3f: de:72:d6:d3:e9:39:77:76:d0:20:f8:dc:f1:e4:84:1f:62:41: 87:54:ab:fc:6d:6f:81:b6:b6:80:13:2c:8e:43:5b:51:54:b0: 0a:2b:9b:06:1e:35:4a:63:83:dc:31:c8:c5:04:da:c2:f0:e3: 76:86:5f:22:51:7d:a1:6f:b2:df:1e:e3:34:3a:42:fc:65:be: 44:f4:1e:5b:88:f5:ac:c9:8c:cc:31:94:aa:bd:16:c5:42:d9: 08:93:ea:61:94:11:3a:a2:6b:03:c8:a1:f8:0b:a2:ae:f6:bb: aa:21:9d:e6:4e:3b:88:22:07:05:f9:ee:1c:5a:11:70:e5:c1: 43:8c:23:33:dc:41:7f:20:10:fc:b6:eb:02:21:a4:c3:33:a6: 43:1e:41:cc:35:cc:29:42:da:c5:f9:e7:c8:e8:60:a2:14:fd: 5a:d2:fe:71:f5:68:26:da:71:f4:d7:1a:e9:4b:a4:03:4f:25: be:5d:ef:77:f7:84:42:31:50:2a:c5:c9:f3:59:55:64:dc:c9: 41:de:69:24:70:6b:83:44:0c:5b:5b:b8:58:b4:ab:67:2b:27: 20:20:2c:63:ba:fe:8a:36:b3:fa:f5:37:6e:55:fa:10:05:c5: 02:6d:56:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ+WT9avTla84aEnNG9skzLCSXfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjExMDA1MDA4WhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmUyYTJlNmJmZDA2Y2NiMWNkYmMwMmYyMDg2N2QzZjQ4 YjViYTc3NjVkNDk1NTQ5YmU0NzJmYTg4NzE0NDUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuZbmNxxhe4AJw0UAQ+Ie7h5EYZuicgFtw7kpYDp5dpx5X hUOxc07IjMEBZZe4DRI48Oi2i/iziqIfBz0IRjM3q1CKR7/nts2yzDpX+j53nWqZ Oi20epZD2+q8m8XOvYvFJlPKw3JPlPeyfBFYFBUe/7tv2zEvmj3zIss2VCWt42xL klIcLKw3wrMTIUAtl+Gd64VSlQwanjJphbur+0ybvaTd/BsWd+xQO09aS8JztcZT 3gVTh9U7Z8OKYNxHDsoiJFwIdIhZRSKMyscqyBetcW7SVKdiFotqn/KvyccKIiUG cpjsi2TMjB6cSv6ELTP4Uuh+kFF3xaHd0uqdoR+5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUp9RTi/YRcP9J8RhVKFr3UljMhbYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAG1sVYhuYzotr+tKjuGReEEr P95y1tPpOXd20CD43PHkhB9iQYdUq/xtb4G2toATLI5DW1FUsAormwYeNUpjg9wx yMUE2sLw43aGXyJRfaFvst8e4zQ6QvxlvkT0HluI9azJjMwxlKq9FsVC2QiT6mGU ETqiawPIofgLoq72u6ohneZOO4giBwX57hxaEXDlwUOMIzPcQX8gEPy26wIhpMMz pkMeQcw1zClC2sX558joYKIU/VrS/nH1aCbacfTXGulLpANPJb5d73f3hEIxUCrF yfNZVWTcyUHeaSRwa4NEDFtbuFi0q2crJyAgLGO6/oo2s/r1N25V+hAFxQJtVl0= -----END CERTIFICATE-----Generated at Sat Dec 20 11:16:26 2025 by rpki-client