This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da0d0f1f-f82d-47bb-9ac7-ee09a51b3f2c.roa File: da0d0f1f-f82d-47bb-9ac7-ee09a51b3f2c.roa (raw, json) Hash identifier: +KZxcL/EsHquugWcMYixFCIW4mGnrGF4KZPZi2eIKhE= Subject key identifier: 27:39:BA:B8:B7:E0:A7:48:47:DD:98:AB:AA:F5:A5:E1:9F:C7:DB:A6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: FCC19AA4A372B1AA5C4E656D69B66BF0C66808 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da0d0f1f-f82d-47bb-9ac7-ee09a51b3f2c.roa Signing time: Sat 15 Nov 2025 05:10:33 +0000 ROA not before: Sat 15 Nov 2025 05:10:33 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fc:c1:9a:a4:a3:72:b1:aa:5c:4e:65:6d:69:b6:6b:f0:c6:68:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 05:10:33 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=bd72dc0680cf6d66a99bc9c922c637e303bfefa10a2470e4ae38b4821b735535, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:81:74:d3:7b:9c:de:41:76:3e:c7:ff:d4: 4c:32:a1:f0:85:02:ea:47:f3:64:e3:c6:2c:ff:8e: ca:8a:7f:d6:78:dd:23:58:46:a8:df:99:56:6b:03: 66:c8:24:e4:3d:02:a3:1f:eb:49:bc:a8:52:5f:4a: 80:aa:ea:f6:12:44:32:17:ae:2f:d5:06:49:04:52: 98:d0:0e:88:a8:05:a8:72:c0:d1:4c:c9:09:07:be: 14:00:27:74:f6:cb:74:90:ac:65:59:f6:09:9c:ff: c8:85:1b:33:7b:31:f7:77:10:32:20:96:27:a6:e1: 19:13:28:37:f6:6a:de:2a:43:b5:ec:35:ad:fa:1e: 37:a5:fa:bb:da:c4:2b:fe:50:48:c4:0b:94:a7:ad: 27:58:49:0a:ca:02:58:d2:a7:57:0c:50:ca:8b:c6: 90:34:0f:14:08:3e:e4:fe:4f:a6:3f:c7:b9:40:e0: 81:8b:45:cb:a9:78:07:51:46:fc:30:65:5c:97:13: 24:9f:1a:74:25:7c:05:6f:ad:70:4e:3d:8c:07:09: 61:fd:d2:8a:1f:09:48:0c:9c:0d:b0:1b:f5:19:da: a5:f3:15:45:06:cc:c6:6d:88:f3:90:e3:b9:c1:64: a9:7f:97:73:f0:64:ff:a9:eb:3e:ad:d1:1c:30:b2: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:39:BA:B8:B7:E0:A7:48:47:DD:98:AB:AA:F5:A5:E1:9F:C7:DB:A6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da0d0f1f-f82d-47bb-9ac7-ee09a51b3f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/48 Signature Algorithm: sha256WithRSAEncryption 4b:7a:b2:9e:80:70:0d:d4:79:33:49:3d:9a:c3:9d:97:79:2c: 26:50:ed:fa:08:d4:83:5a:65:fb:b2:dc:fc:e9:85:a5:ef:b1: 16:1d:bb:52:4e:a8:b1:31:93:30:71:8f:8e:37:59:15:32:5a: a2:b7:40:2a:9b:f8:7c:6e:ed:1b:7c:f0:4f:ff:77:b5:de:8c: 0d:9f:a0:54:5e:e4:e3:c5:a1:8c:be:94:69:23:75:13:4d:b7: 0a:2b:52:64:80:82:a8:7d:fa:ae:3d:bc:17:82:ba:57:68:06: 14:a9:d9:6e:ae:aa:ee:0c:9b:07:c8:4b:6e:60:c5:5d:2f:33: d9:47:e7:a7:71:de:df:a8:2f:b7:8c:ec:d9:8c:c5:41:dc:69: 2d:2d:95:f4:5d:95:1e:30:90:28:f6:aa:83:4d:dc:a0:6e:a5: da:f4:b0:1f:62:db:cd:80:cd:d6:83:2c:af:bb:ea:87:11:b2: 45:db:ac:67:0d:e3:8a:6d:87:b5:88:ce:3c:8b:ad:24:db:70: 56:14:53:11:1d:7b:be:c8:59:46:a4:09:0d:7d:70:e5:dc:49: f8:f3:64:3e:1b:3a:5e:8e:7d:be:28:1e:78:8f:17:59:16:88: 21:ca:c0:da:9b:13:fe:b3:6f:12:2c:d8:27:f9:c1:ef:c9:18: 7f:88:4e:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAPzBmqSjcrGqXE5lbWm2a/DGaAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTE1MDUxMDMzWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDcyZGMwNjgwY2Y2ZDY2YTk5YmM5YzkyMmM2MzdlMzAz YmZlZmExMGEyNDcwZTRhZTM4YjQ4MjFiNzM1NTM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/EYF003uc3kF2Psf/1EwyofCFAupH82Tjxiz/jsqKf9Z4 3SNYRqjfmVZrA2bIJOQ9AqMf60m8qFJfSoCq6vYSRDIXri/VBkkEUpjQDoioBahy wNFMyQkHvhQAJ3T2y3SQrGVZ9gmc/8iFGzN7Mfd3EDIgliem4RkTKDf2at4qQ7Xs Na36Hjel+rvaxCv+UEjEC5SnrSdYSQrKAljSp1cMUMqLxpA0DxQIPuT+T6Y/x7lA 4IGLRcupeAdRRvwwZVyXEySfGnQlfAVvrXBOPYwHCWH90oofCUgMnA2wG/UZ2qXz FUUGzMZtiPOQ47nBZKl/l3PwZP+p6z6t0Rwwsm7JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJzm6uLfgp0hH3ZirqvWl4Z/H26YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhMGQwZjFmLWY4MmQtNDdiYi05YWM3LWVlMDlhNTFiM2YyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBAEt6sp6AcA3UeTNJPZrDnZd5 LCZQ7foI1INaZfuy3PzphaXvsRYdu1JOqLExkzBxj443WRUyWqK3QCqb+Hxu7Rt8 8E//d7XejA2foFRe5OPFoYy+lGkjdRNNtworUmSAgqh9+q49vBeCuldoBhSp2W6u qu4MmwfIS25gxV0vM9lH56dx3t+oL7eM7NmMxUHcaS0tlfRdlR4wkCj2qoNN3KBu pdr0sB9i282AzdaDLK+76ocRskXbrGcN44pth7WIzjyLrSTbcFYUUxEde77IWUak CQ19cOXcSfjzZD4bOl6Ofb4oHniPF1kWiCHKwNqbE/6zbxIs2Cf5we/JGH+ITjg= -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:18 2025 by rpki-client