This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: EmpOvyZtZEN5pXRWOkW120wE3ne5o/YdOpakMVDXJhc= Subject key identifier: 37:90:9B:C1:69:8E:75:CB:42:6C:76:02:56:60:26:AC:4D:5C:62:58 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4196F67A58BFA6B5029424DAE60F1F57C9368B52 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Wed 10 Dec 2025 05:00:30 +0000 ROA not before: Wed 10 Dec 2025 05:00:30 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:96:f6:7a:58:bf:a6:b5:02:94:24:da:e6:0f:1f:57:c9:36:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 10 05:00:30 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=586ef2ed7e0d8f196abbd9a897b439a501c5765b4c2c29f3883c2e3fbb6282d5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:07:53:c0:3a:b9:77:d7:b2:be:96:46:18: 0d:da:ab:fe:43:88:26:5f:04:ec:ae:b3:a9:c9:09: fc:67:16:d7:e8:91:e7:1a:b8:07:d0:b9:75:62:e4: 14:1c:c6:b2:54:dc:57:2b:e8:6e:68:ff:95:62:7c: 12:0e:05:f2:f3:4c:40:b6:41:e3:d8:b9:1b:50:6e: 75:b5:34:13:f9:a4:20:ca:e1:38:1f:d6:56:d7:e3: 7e:e3:98:cc:e9:d8:61:9d:34:62:29:3b:6e:d4:b5: e2:9a:e2:03:07:49:9a:8d:a0:7f:ea:34:0f:c3:00: 63:0c:ce:2b:e7:28:84:47:89:62:4d:20:99:7b:2e: f8:e8:67:3b:b2:32:77:27:6d:6b:11:52:c0:44:7a: ec:a5:fc:f2:43:44:bd:d9:83:ba:3c:7d:ca:34:8e: 6a:00:fa:c7:99:9a:fa:12:d9:85:04:07:5b:9e:4e: e1:5a:37:35:59:e0:21:81:78:12:4a:1f:00:9f:16: 23:3d:05:c9:86:bf:55:dd:51:d2:bf:37:fa:1c:55: a5:5d:87:67:69:ee:95:83:47:35:33:ae:07:73:88: 73:8e:0a:5c:3c:a0:cd:f3:8d:d0:92:b8:e7:4d:77: 84:40:d7:2c:dc:2b:33:0b:c6:08:61:1c:1d:45:42: 7b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:9B:C1:69:8E:75:CB:42:6C:76:02:56:60:26:AC:4D:5C:62:58 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 17:cb:83:4a:16:5c:b7:e4:08:8b:ad:13:3a:3f:a3:ea:b1:01: 98:c0:6a:a0:62:d6:6a:a4:14:f9:e5:47:93:75:29:bb:6a:7f: e5:99:5d:0f:c4:b6:a5:25:01:85:ac:35:d2:e9:67:15:59:af: 00:84:35:aa:83:0a:ee:09:c0:83:20:eb:22:18:67:de:56:5c: 05:5d:cc:3b:1c:39:e9:cf:39:e0:07:6a:05:4f:37:e1:db:04: 5b:57:4f:e6:fe:96:fe:0e:38:85:18:17:e2:4f:49:1a:c8:08: f3:ad:80:fd:f4:4c:5a:6e:14:6f:0d:75:c8:31:e9:00:51:21: d7:12:f9:87:7d:71:de:4c:04:28:2d:77:43:2a:fe:fd:e6:be: d9:58:7e:35:c2:3a:93:0b:45:c7:2a:75:39:fb:58:55:6e:ce: 43:b1:1f:49:48:e6:58:df:7c:bd:1d:26:d2:f6:b3:5c:68:d5: c3:47:73:a4:97:89:29:8b:87:fd:ef:46:13:6d:9c:6d:2a:a7: 68:bb:07:4f:aa:9e:73:82:fc:4e:c8:29:87:6e:93:ba:b4:4e: 2d:2c:7a:d9:60:54:0d:b6:af:fe:ef:26:8b:e9:a1:da:ec:2a: d4:60:1e:eb:29:55:62:b9:b5:f1:89:1d:7e:e0:73:ad:96:bb: ee:f6:7d:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQZb2eli/prUClCTa5g8fV8k2i1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUwMDMwWhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODZlZjJlZDdlMGQ4ZjE5NmFiYmQ5YTg5N2I0MzlhNTAx YzU3NjViNGMyYzI5ZjM4ODNjMmUzZmJiNjI4MmQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD0wdTwDq5d9eyvpZGGA3aq/5DiCZfBOyus6nJCfxnFtfo kecauAfQuXVi5BQcxrJU3Fcr6G5o/5VifBIOBfLzTEC2QePYuRtQbnW1NBP5pCDK 4Tgf1lbX437jmMzp2GGdNGIpO27UteKa4gMHSZqNoH/qNA/DAGMMzivnKIRHiWJN IJl7LvjoZzuyMncnbWsRUsBEeuyl/PJDRL3Zg7o8fco0jmoA+seZmvoS2YUEB1ue TuFaNzVZ4CGBeBJKHwCfFiM9BcmGv1XdUdK/N/ocVaVdh2dp7pWDRzUzrgdziHOO Clw8oM3zjdCSuOdNd4RA1yzcKzMLxghhHB1FQnvlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN5CbwWmOdctCbHYCVmAmrE1cYlgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBABfLg0oWXLfkCIutEzo/o+qx AZjAaqBi1mqkFPnlR5N1Kbtqf+WZXQ/EtqUlAYWsNdLpZxVZrwCENaqDCu4JwIMg 6yIYZ95WXAVdzDscOenPOeAHagVPN+HbBFtXT+b+lv4OOIUYF+JPSRrICPOtgP30 TFpuFG8Ndcgx6QBRIdcS+Yd9cd5MBCgtd0Mq/v3mvtlYfjXCOpMLRccqdTn7WFVu zkOxH0lI5ljffL0dJtL2s1xo1cNHc6SXiSmLh/3vRhNtnG0qp2i7B0+qnnOC/E7I KYduk7q0Ti0setlgVA22r/7vJovpodrsKtRgHuspVWK5tfGJHX7gc62Wu+72fYA= -----END CERTIFICATE-----Generated at Sun Dec 21 01:23:09 2025 by rpki-client