This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa File: aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa (raw, json) Hash identifier: nh1UOZrB/5xp1BFEvAgGeTstHERMBL7/dhbbo+/ta6Q= Subject key identifier: 2C:90:77:9C:0C:58:AE:DF:19:EB:7B:E3:9C:E4:3B:F2:A5:27:81:BB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 230F718A7B87B0CF4C67FFC42F9F4EE3F316D9F2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa Signing time: Sat 15 Nov 2025 05:00:31 +0000 ROA not before: Sat 15 Nov 2025 05:00:31 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e200::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0f:71:8a:7b:87:b0:cf:4c:67:ff:c4:2f:9f:4e:e3:f3:16:d9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:00:31 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=075c5464177c45825e0efdc788083fac08dc571afe2314f440c5380efe6cc2c9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:8c:3b:b5:1a:ab:bf:9c:48:bd:9e:1b:d6: 4e:bc:33:45:ba:bd:aa:2e:17:24:c9:e5:19:23:d9: 7d:b4:dd:41:59:1a:ff:4f:01:23:ff:6e:e3:1c:df: 02:f7:05:cb:18:73:86:84:21:db:ed:89:87:08:86: f8:ed:d8:8e:ef:4a:6d:12:f8:60:e8:b6:16:cf:b7: d1:6e:f3:5f:b0:a7:de:1f:ae:95:cd:6d:f1:75:ad: 26:1e:39:59:a7:7d:90:2a:79:68:7f:81:b7:3e:1e: 8a:b1:88:08:01:92:2c:09:97:a8:09:4b:17:b1:a5: 17:6c:ec:e3:ee:5a:cb:f9:6d:b0:3a:c2:94:41:91: 87:00:08:33:74:17:07:f0:21:55:c2:3b:a7:75:b5: 1a:2e:59:22:98:72:bb:74:0b:ea:fe:0b:b9:1f:60: 1a:a1:f6:db:7f:42:67:ed:8d:59:4f:d6:e9:d4:26: bb:04:da:3c:77:29:16:7b:51:56:09:94:60:70:ba: cc:8f:db:c2:f6:e4:65:c0:7c:a5:ab:b5:75:fd:ce: bf:18:99:fe:21:26:47:4f:f8:d1:79:60:c2:ce:e6: 68:b5:34:b2:11:28:fd:52:2f:66:21:1a:21:79:b5: 60:4a:82:de:52:b5:c4:81:50:2a:a9:13:73:8c:fa: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:90:77:9C:0C:58:AE:DF:19:EB:7B:E3:9C:E4:3B:F2:A5:27:81:BB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e200::/42 Signature Algorithm: sha256WithRSAEncryption 7b:22:09:4e:92:47:7e:3f:e6:20:51:5e:ee:72:28:b2:43:e4: f6:d0:88:23:6e:b0:f0:b7:c9:3e:a7:07:10:90:3d:9a:ce:6d: 76:f3:df:24:b2:9c:48:85:3f:d9:8f:85:eb:51:de:86:21:61: 59:75:14:18:d0:05:bc:c6:ac:3c:1d:6f:12:c1:c0:8b:15:b1: d2:2e:45:97:a3:99:c7:bf:65:06:60:61:c2:6a:42:d8:72:94: 58:03:9c:f3:c9:eb:9f:74:f2:19:72:e1:ce:4b:ba:f5:5d:d2: 92:02:15:f2:bc:70:75:ae:09:ee:aa:97:68:2f:6b:46:3a:d0: 47:45:f4:05:f7:85:bd:70:a0:3e:79:61:b5:8d:e8:6c:f6:6e: d0:b7:5c:68:2f:35:09:45:7c:91:41:30:55:9b:95:32:b1:9c: ad:86:25:61:8f:c4:22:16:4a:2b:2d:8d:9b:d1:88:70:43:96: 87:69:8a:05:76:3d:4d:a5:d4:96:a7:c4:34:62:09:e6:4d:43: 68:59:fc:a0:50:c6:1a:8e:91:a7:28:62:0b:09:06:68:9d:49: 07:b6:92:37:91:53:d3:ce:05:3c:82:cc:57:6a:6d:c8:46:20: 6e:1d:5d:da:52:4c:6f:dd:09:f0:2c:43:84:70:42:87:e6:18: 30:c8:3d:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIw9xinuHsM9MZ//EL59O4/MW2fIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDMxWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzVjNTQ2NDE3N2M0NTgyNWUwZWZkYzc4ODA4M2ZhYzA4 ZGM1NzFhZmUyMzE0ZjQ0MGM1MzgwZWZlNmNjMmM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ZYw7tRqrv5xIvZ4b1k68M0W6vaouFyTJ5Rkj2X203UFZ Gv9PASP/buMc3wL3BcsYc4aEIdvtiYcIhvjt2I7vSm0S+GDothbPt9Fu81+wp94f rpXNbfF1rSYeOVmnfZAqeWh/gbc+HoqxiAgBkiwJl6gJSxexpRds7OPuWsv5bbA6 wpRBkYcACDN0FwfwIVXCO6d1tRouWSKYcrt0C+r+C7kfYBqh9tt/QmftjVlP1unU JrsE2jx3KRZ7UVYJlGBwusyP28L25GXAfKWrtXX9zr8Ymf4hJkdP+NF5YMLO5mi1 NLIRKP1SL2YhGiF5tWBKgt5StcSBUCqpE3OM+hEBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULJB3nAxYrt8Z63vjnOQ78qUngbswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FhZjUxNDAyLWYxYmYtNGU3Yi1iN2MzLTY1ZDkzZGVmNmJkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74gAwDQYJKoZIhvcNAQELBQADggEBAHsiCU6SR34/5iBRXu5yKLJD 5PbQiCNusPC3yT6nBxCQPZrObXbz3ySynEiFP9mPhetR3oYhYVl1FBjQBbzGrDwd bxLBwIsVsdIuRZejmce/ZQZgYcJqQthylFgDnPPJ65908hly4c5LuvVd0pICFfK8 cHWuCe6ql2gva0Y60EdF9AX3hb1woD55YbWN6Gz2btC3XGgvNQlFfJFBMFWblTKx nK2GJWGPxCIWSistjZvRiHBDlodpigV2PU2l1JanxDRiCeZNQ2hZ/KBQxhqOkaco YgsJBmidSQe2kjeRU9POBTyCzFdqbchGIG4dXdpSTG/dCfAsQ4RwQofmGDDIPe4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:26 2025 by rpki-client