$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa File: 0e462966-259e-41b9-ba8b-855fa8efdacb.roa (raw, json) Hash identifier: 736hXI2dTP5tUgfwMB10zqoyjNmjfBn6RTgYNNT0Duw= Subject key identifier: 87:9A:C5:DD:07:22:CE:EC:50:40:95:A1:DB:DF:4E:C3:40:53:55:6A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0C378637BA718FB07321B77E62CDC378DF9891D7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa Signing time: Mon 27 Jul 2026 03:10:13 +0000 ROA not before: Mon 27 Jul 2026 03:10:13 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:86:37:ba:71:8f:b0:73:21:b7:7e:62:cd:c3:78:df:98:91:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:13 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=9bb2485d1ec2c785d8170a00c541e00ce57af390fdd7b7f9543a4c695f14777f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:75:9c:6c:fc:d8:a5:a4:21:78:c9:fc:35: a4:39:d3:c0:e2:57:1f:7e:67:b0:c0:1a:52:44:9c: f0:8e:50:25:64:1b:55:7d:4f:51:30:c7:3a:e2:7c: f6:81:7f:a8:be:d0:b3:84:bf:5d:81:cb:ec:3f:89: 48:9f:92:7a:7c:0a:0d:50:b3:67:34:22:6d:cb:cf: 0b:78:af:23:87:a4:c8:81:0f:16:66:91:02:ac:30: f8:dd:2f:94:7a:c9:bb:22:b2:f9:4e:8d:c9:3d:d5: 06:a3:44:d3:8d:d8:03:4f:d7:15:5f:b1:8b:ad:c7: b9:d9:53:52:ed:17:1c:65:ed:d8:e0:d1:24:a9:6c: 36:a4:46:2a:50:07:19:54:43:a1:6c:64:82:36:85: a3:de:f4:12:d4:8c:c0:8f:ea:f6:da:13:8e:6a:ad: 49:e3:2a:89:7b:89:eb:b2:fc:4a:d8:22:ae:2d:48: 30:1b:ff:d5:5a:1e:78:2c:30:5b:8a:b5:f9:28:7d: 7e:6c:d8:7a:11:ec:51:5c:a7:15:5c:38:ae:4b:7f: f2:1f:8d:be:d0:50:fe:20:3f:8f:ba:f5:34:df:54: 27:ac:11:4d:ed:76:28:56:93:68:ad:66:ea:40:ab: 31:1f:52:da:e2:bd:ac:b0:0f:af:06:92:e5:b4:fa: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:C5:DD:07:22:CE:EC:50:40:95:A1:DB:DF:4E:C3:40:53:55:6A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:601::/48 Signature Algorithm: sha256WithRSAEncryption 4f:a1:cd:a1:19:19:7e:ef:04:03:e0:38:0b:7b:f8:f2:0c:11: c9:d6:6b:f7:30:95:e5:aa:94:18:02:12:d8:39:33:2b:3a:f3: e2:a5:54:62:16:4c:bb:f1:38:79:2b:96:9f:4b:0e:f7:23:d4: f0:da:ab:af:fe:6e:dc:17:ab:2b:9c:6e:11:0e:48:36:9e:9d: bd:05:1d:27:91:ed:37:64:ab:89:f9:85:82:f3:04:77:ff:9a: 5f:90:be:5b:c1:4e:c4:6d:ef:0f:24:c9:d1:cb:be:f6:4e:04: 37:9b:4d:ae:b6:1f:0f:c9:4b:2e:df:18:53:0c:0a:8b:83:1c: 51:4e:83:5c:24:8f:4a:4f:74:bd:8a:58:0b:3c:37:25:bc:89: 5f:13:0a:97:21:db:66:90:2a:69:bb:08:01:2d:ee:e0:ca:03: 50:1d:a2:99:db:42:6b:0c:51:0a:8a:60:f4:69:d2:25:45:74: 42:74:48:11:5f:b1:13:ef:63:65:30:70:60:75:32:8c:f4:f0: 65:08:94:eb:dc:8f:91:1f:b8:54:33:c8:38:64:0b:b2:11:0e: 83:d7:be:fa:53:3d:7e:64:7e:e7:77:90:ae:b1:64:2a:9a:e4: dd:7f:86:0c:04:4e:1e:7e:92:1e:eb:2e:7a:6f:98:34:ae:c1: f2:b2:be:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDDeGN7pxj7BzIbd+Ys3DeN+YkdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDEzWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmIyNDg1ZDFlYzJjNzg1ZDgxNzBhMDBjNTQxZTAwY2U1 N2FmMzkwZmRkN2I3Zjk1NDNhNGM2OTVmMTQ3NzdmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD3nWcbPzYpaQheMn8NaQ508DiVx9+Z7DAGlJEnPCOUCVk G1V9T1EwxzrifPaBf6i+0LOEv12By+w/iUifknp8Cg1Qs2c0Im3Lzwt4ryOHpMiB DxZmkQKsMPjdL5R6ybsisvlOjck91QajRNON2ANP1xVfsYutx7nZU1LtFxxl7djg 0SSpbDakRipQBxlUQ6FsZII2haPe9BLUjMCP6vbaE45qrUnjKol7ieuy/ErYIq4t SDAb/9VaHngsMFuKtfkofX5s2HoR7FFcpxVcOK5Lf/Ifjb7QUP4gP4+69TTfVCes EU3tdihWk2itZupAqzEfUtrivaywD68GkuW0+k6BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUh5rF3QcizuxQQJWh299Ow0BTVWowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBlNDYyOTY2LTI1OWUtNDFiOS1iYThiLTg1NWZhOGVmZGFjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgEwDQYJKoZIhvcNAQELBQADggEBAE+hzaEZGX7vBAPgOAt7+PIM EcnWa/cwleWqlBgCEtg5Mys68+KlVGIWTLvxOHkrlp9LDvcj1PDaq6/+btwXqyuc bhEOSDaenb0FHSeR7Tdkq4n5hYLzBHf/ml+QvlvBTsRt7w8kydHLvvZOBDebTa62 Hw/JSy7fGFMMCouDHFFOg1wkj0pPdL2KWAs8NyW8iV8TCpch22aQKmm7CAEt7uDK A1AdopnbQmsMUQqKYPRp0iVFdEJ0SBFfsRPvY2UwcGB1Moz08GUIlOvcj5EfuFQz yDhkC7IRDoPXvvpTPX5kfud3kK6xZCqa5N1/hgwETh5+kh7rLnpvmDSuwfKyvlc= -----END CERTIFICATE-----Generated at Mon Jul 27 22:07:30 2026 by rpki-client