$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa File: 11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa (raw, json) Hash identifier: 5H84FmAxfVg5p2kmvGOwUofacM5w8qBj3rrjln7+dR0= Subject key identifier: 94:08:B0:0D:51:42:16:D0:55:7A:07:6D:2A:B3:F2:AC:E1:39:2C:0C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D71F0F47C3F2A2187F0AF9AABD633F4D90C94D8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa Signing time: Fri 07 Aug 2026 04:20:42 +0000 ROA not before: Fri 07 Aug 2026 04:20:42 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 31 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:71:f0:f4:7c:3f:2a:21:87:f0:af:9a:ab:d6:33:f4:d9:0c:94:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:42 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=69fd6a0980d38cad43615b7c7458ea91d0c4b0780c6cd5d33b7db43250474b31, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:ed:33:8b:50:07:4d:e9:39:a2:28:86:00: a1:5d:6a:34:ed:c9:83:59:69:56:ec:b7:d8:bd:d5: 44:5e:05:78:dd:46:74:5d:0c:d4:48:16:65:83:c5: 47:d8:35:e7:49:2b:39:f8:78:99:99:fc:e5:67:71: ae:f6:3b:b0:48:ef:93:45:b5:f8:da:f9:de:f9:a7: cc:77:52:ff:17:a1:50:18:a0:3a:d6:d0:27:b0:f7: 65:be:97:bb:1c:4e:78:d7:ff:6d:98:14:48:44:64: bd:f2:69:a6:2d:2f:f2:e5:41:2c:f8:c1:31:65:0c: eb:8b:b5:46:c7:90:52:50:b9:b6:1d:b6:37:ad:d9: 8c:27:87:23:98:ea:be:6d:84:79:b7:32:ae:ce:22: 57:ea:a5:b0:b1:00:36:7d:3e:e0:6a:37:7d:43:76: c5:9b:1b:ec:7a:f2:de:b3:e7:71:d3:b7:39:b4:2a: e5:00:aa:59:d9:9c:4c:f4:7e:73:dd:bb:bd:42:4b: e0:89:54:0f:0e:18:fd:75:20:d1:eb:da:1a:9b:a3: c1:be:94:37:e4:1c:e3:4a:77:6e:fe:d2:c3:8a:1c: 8d:a3:f6:70:0f:9a:e8:16:d0:49:4d:61:2c:62:ad: 19:dc:6a:00:3e:41:19:37:62:17:b9:ee:1d:e8:a4: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:B0:0D:51:42:16:D0:55:7A:07:6D:2A:B3:F2:AC:E1:39:2C:0C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption a8:90:ff:1b:5f:a6:b1:cd:f3:15:f1:d0:05:45:7b:f4:2c:dc: 6f:43:67:8f:35:52:85:b2:8c:04:bc:dd:31:83:58:ae:03:55: a0:8b:bf:10:7f:62:af:26:24:d7:3f:5b:c4:73:20:65:f3:03: 11:68:31:da:a7:1d:b6:3a:86:8a:01:4c:0f:62:df:bb:02:0c: 29:9b:39:17:35:3b:78:dc:23:3e:ba:72:ff:70:15:16:a8:6f: 14:c7:d6:23:80:2e:d8:d0:42:af:27:5c:cb:2d:72:84:ee:c9: 15:05:90:73:96:3d:22:4c:fe:50:05:d0:b0:e1:48:a5:57:35: 2e:8a:e1:4a:5c:6a:e4:78:5d:01:fd:2c:d2:61:14:ae:40:4d: c5:b7:b1:1c:ba:b5:72:b1:8b:78:24:01:3e:6e:4d:1d:41:8f: b2:ea:43:c3:d1:52:39:1c:b2:5d:a7:3d:37:1f:56:08:f8:21: 41:bb:34:0a:1d:7c:fa:38:8c:6d:ac:3d:ff:56:42:52:4c:35: dc:de:7a:cb:4b:7d:f1:53:58:09:77:7d:9c:0e:52:61:6f:05: 77:f7:e6:38:cb:1d:ba:b7:a3:85:9b:6a:8a:c5:b5:6a:38:49: 86:98:15:7e:4c:1f:75:2c:5e:2c:dd:50:fa:95:68:32:04:0b: 88:eb:03:97 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIULXHw9Hw/KiGH8K+aq9Yz9NkMlNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQyWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWZkNmEwOTgwZDM4Y2FkNDM2MTViN2M3NDU4ZWE5MWQw YzRiMDc4MGM2Y2Q1ZDMzYjdkYjQzMjUwNDc0YjMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6s+0zi1AHTek5oiiGAKFdajTtyYNZaVbst9i91UReBXjd RnRdDNRIFmWDxUfYNedJKzn4eJmZ/OVnca72O7BI75NFtfja+d75p8x3Uv8XoVAY oDrW0Cew92W+l7scTnjX/22YFEhEZL3yaaYtL/LlQSz4wTFlDOuLtUbHkFJQubYd tjet2YwnhyOY6r5thHm3Mq7OIlfqpbCxADZ9PuBqN31DdsWbG+x68t6z53HTtzm0 KuUAqlnZnEz0fnPdu71CS+CJVA8OGP11INHr2hqbo8G+lDfkHONKd27+0sOKHI2j 9nAPmugW0ElNYSxirRncagA+QRk3Yhe57h3opAtdAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUlAiwDVFCFtBVegdtKrPyrOE5LAwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzExZjg5ODE3LTdmYzgtNGQ5ZC04MGUyLTcyMmY4NjBmZjBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQCokP8bX6axzfMV8dAFRXv0LNxv Q2ePNVKFsowEvN0xg1iuA1Wgi78Qf2KvJiTXP1vEcyBl8wMRaDHapx22OoaKAUwP Yt+7AgwpmzkXNTt43CM+unL/cBUWqG8Ux9YjgC7Y0EKvJ1zLLXKE7skVBZBzlj0i TP5QBdCw4UilVzUuiuFKXGrkeF0B/SzSYRSuQE3Ft7EcurVysYt4JAE+bk0dQY+y 6kPD0VI5HLJdpz03H1YI+CFBuzQKHXz6OIxtrD3/VkJSTDXc3nrLS33xU1gJd32c DlJhbwV39+Y4yx26t6OFm2qKxbVqOEmGmBV+TB91LF4s3VD6lWgyBAuI6wOX -----END CERTIFICATE-----Generated at Sun Aug 30 04:43:06 2026 by rpki-client