This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa File: bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa (raw, json) Hash identifier: p8u28XG/kpzbdSI755Zu69OC/KV5wfTX3cTOam/4A+Q= Subject key identifier: 25:3F:A2:3F:B3:32:0B:E1:77:61:A7:EB:3A:C2:26:BE:5C:17:DE:AD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 58D5A0E80C5638694C876ECDA3488453136C9232 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa Signing time: Sat 15 Nov 2025 05:00:32 +0000 ROA not before: Sat 15 Nov 2025 05:00:32 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e400::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d5:a0:e8:0c:56:38:69:4c:87:6e:cd:a3:48:84:53:13:6c:92:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:00:32 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f63e5f683c7b5ec83ef76d4a45c209dcc54da2668474b4a70fb519da06cc3b5c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f1:51:6e:2b:db:f0:aa:96:df:42:71:ba:3c: 17:03:2e:b7:dd:8a:3d:bf:fc:38:8a:5e:d7:60:48: be:84:d6:21:45:dc:bd:cd:8d:19:c7:ab:ec:fb:4d: d7:4b:37:b6:0a:f3:25:29:5f:19:ee:e4:f7:69:55: 07:f5:76:2b:cf:d8:6f:dd:2c:21:33:da:10:ea:44: c4:3b:2c:05:85:aa:31:a8:58:55:68:60:50:fa:77: c2:61:92:bb:59:37:94:3d:28:b3:8e:13:f7:7e:a6: 08:6d:2b:49:f7:98:23:99:2a:1c:6f:af:58:33:82: dc:88:cb:39:e2:6a:5f:11:17:26:57:e1:0d:2e:87: e7:ca:fb:66:4a:27:59:8b:06:af:7f:fe:98:a6:e4: 47:31:b6:e2:66:1f:8b:cd:04:90:e7:96:26:c3:1b: be:32:cf:53:6b:6e:41:18:da:21:d5:a4:b3:b8:db: fc:37:49:02:83:65:0c:46:98:7e:ea:e7:59:af:52: 7c:a3:7f:d5:64:19:62:cb:2f:cf:c7:79:36:16:c9: 29:b0:64:ec:c6:42:06:f0:bd:81:a9:af:46:41:08: 7b:cb:52:e6:92:6e:f6:0f:3b:42:0c:40:91:c9:c3: f5:a5:81:97:14:33:10:e6:5a:aa:9f:68:e0:da:a5: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:A2:3F:B3:32:0B:E1:77:61:A7:EB:3A:C2:26:BE:5C:17:DE:AD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e400::/42 Signature Algorithm: sha256WithRSAEncryption 6a:7a:19:7e:43:55:2f:6e:ef:08:55:81:c5:54:1d:7a:c5:2a: 4f:cc:a2:64:71:e5:1a:d0:00:ca:76:82:86:32:2d:ef:2b:e7: 2c:65:77:7f:a6:f2:47:cf:b1:fa:5a:c9:87:ab:1d:2f:de:c5: 35:c7:3a:62:a0:81:0a:31:89:f5:8c:32:40:be:ac:6f:36:f6: ac:0c:07:b1:d6:90:e3:9e:f4:09:54:dc:42:53:cb:d9:64:97: 8e:20:52:8d:47:43:45:55:6a:31:03:aa:8e:d0:fd:73:e2:97: f8:b4:ed:d7:15:a9:08:2f:e9:ab:9b:71:19:43:33:bd:60:1d: 64:66:3d:5f:f4:e5:9a:45:9a:d4:09:f9:cc:55:df:48:9a:72: 58:31:0e:e0:21:dc:56:a9:8a:60:41:3f:45:fe:42:fd:96:90: cd:e4:dd:6c:b7:74:00:d0:8c:bc:02:d6:9f:38:26:78:d0:55: 55:93:67:fd:14:db:97:85:4b:f0:66:0b:17:63:b7:9c:47:f5: dd:fb:51:30:51:f9:bd:c1:bb:bb:cd:b4:ba:14:10:a4:d0:bd: 23:27:b3:01:0f:32:d5:c5:45:72:c3:0f:8c:82:96:5c:ea:5c: 18:14:63:48:b5:54:cd:c5:f5:b8:b4:53:4b:5f:7b:80:b3:f5: ae:1b:8c:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWNWg6AxWOGlMh27No0iEUxNskjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUwMDMyWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjNlNWY2ODNjN2I1ZWM4M2VmNzZkNGE0NWMyMDlkY2M1 NGRhMjY2ODQ3NGI0YTcwZmI1MTlkYTA2Y2MzYjVjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ8VFuK9vwqpbfQnG6PBcDLrfdij2//DiKXtdgSL6E1iFF 3L3NjRnHq+z7TddLN7YK8yUpXxnu5PdpVQf1divP2G/dLCEz2hDqRMQ7LAWFqjGo WFVoYFD6d8JhkrtZN5Q9KLOOE/d+pghtK0n3mCOZKhxvr1gzgtyIyznial8RFyZX 4Q0uh+fK+2ZKJ1mLBq9//pim5EcxtuJmH4vNBJDnlibDG74yz1NrbkEY2iHVpLO4 2/w3SQKDZQxGmH7q51mvUnyjf9VkGWLLL8/HeTYWySmwZOzGQgbwvYGpr0ZBCHvL UuaSbvYPO0IMQJHJw/WlgZcUMxDmWqqfaODapT1rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJT+iP7MyC+F3YafrOsImvlwX3q0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmMjdmZGI3LTg0YmYtNDBkMi05MDZhLTdiNGMxZmY0MDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75AAwDQYJKoZIhvcNAQELBQADggEBAGp6GX5DVS9u7whVgcVUHXrF Kk/MomRx5RrQAMp2goYyLe8r5yxld3+m8kfPsfpayYerHS/exTXHOmKggQoxifWM MkC+rG829qwMB7HWkOOe9AlU3EJTy9lkl44gUo1HQ0VVajEDqo7Q/XPil/i07dcV qQgv6aubcRlDM71gHWRmPV/05ZpFmtQJ+cxV30iaclgxDuAh3FapimBBP0X+Qv2W kM3k3Wy3dADQjLwC1p84JnjQVVWTZ/0U25eFS/BmCxdjt5xH9d37UTBR+b3Bu7vN tLoUEKTQvSMnswEPMtXFRXLDD4yCllzqXBgUY0i1VM3F9bi0U0tfe4Cz9a4bjHk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:19 2025 by rpki-client