$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa File: 1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa (raw, json) Hash identifier: CvvljqvYVXK3IAyYuFPUxn31HRO5QPuAoV6m4kxX3hk= Subject key identifier: 39:73:0F:DB:5C:3F:71:30:61:2F:DD:98:BA:DA:80:5C:CA:A6:AC:0E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1A417D57F8374B54CF385B525D9D981C4C202024 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa Signing time: Sat 08 Aug 2026 00:50:29 +0000 ROA not before: Sat 08 Aug 2026 00:50:29 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:41:7d:57:f8:37:4b:54:cf:38:5b:52:5d:9d:98:1c:4c:20:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:29 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=229d335116af323b98c490c007a9e4ff32b5561f55ad87944eb761323bf0aa75, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:d8:18:9c:b3:cb:40:23:3c:c3:b5:d5:35: aa:6a:58:99:52:c7:3b:81:71:af:7b:c9:20:4d:30: e6:9e:86:f1:e0:1f:11:74:94:ce:c5:dc:d6:a5:ea: 6b:e0:54:3a:74:28:fc:9e:dd:16:2e:77:65:24:8a: d4:56:43:3b:e2:49:5f:74:27:f7:c9:f8:47:97:f1: 1d:c9:42:21:c1:e7:5e:d4:95:6b:59:db:0c:09:36: 46:96:72:16:70:d7:86:d4:f4:51:c5:a2:d8:67:fa: 15:31:32:f8:4f:04:d0:0f:d2:3b:ae:66:24:b3:4e: f5:e7:ca:64:14:11:e6:64:f6:5c:af:5f:eb:3e:62: 18:0b:00:0e:1a:de:4f:98:b2:c0:55:e8:07:b5:a3: 49:2b:4e:d7:53:45:70:f0:d2:7b:6b:ed:08:f9:65: 80:0c:78:7e:0c:d3:ab:e0:4e:40:36:10:c9:8c:5c: ee:e4:e9:53:39:b2:0f:46:e7:d1:a9:73:92:b6:de: 55:ac:7a:7f:88:e3:6c:bb:01:92:20:b4:a8:d9:87: 72:23:6f:57:61:e2:61:24:ac:15:0c:0f:b2:8a:31: ea:94:01:18:4a:c7:c4:a2:68:31:ee:dd:e4:c7:6b: ba:79:a1:2a:16:a0:32:26:f7:5b:5f:7c:69:7d:32: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:73:0F:DB:5C:3F:71:30:61:2F:DD:98:BA:DA:80:5C:CA:A6:AC:0E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 69:64:89:6a:b1:62:cd:7c:6c:8f:b6:0c:d7:4f:fb:f9:bf:66: e3:61:54:b5:47:9c:73:9a:58:16:87:6c:ef:cf:21:de:74:4f: cf:6d:06:35:24:84:48:bc:8b:68:2c:1f:49:b6:72:97:5b:01: 80:7a:1a:16:a1:d8:36:48:57:1a:8b:57:60:0c:b3:44:1a:94: 6f:1a:dd:e3:0a:13:9b:e3:ac:db:35:80:00:16:0e:01:a3:39: 55:9d:49:75:3e:5f:ad:b0:91:78:96:19:b0:e8:02:c8:c4:bd: 08:7a:51:cf:e5:32:35:85:68:6c:41:ce:de:05:23:31:41:fc: 41:52:74:e4:f5:12:4c:d4:14:b7:6d:8b:e2:df:0a:0d:f3:8e: 64:81:3a:61:00:cb:c8:1c:6c:88:d2:1d:1a:f3:52:79:27:b2: 0e:59:99:3e:be:2d:9d:21:df:3d:10:19:e8:4a:a9:7a:11:01: 78:01:64:e2:ee:63:bd:a0:7d:8e:0c:9c:3b:5b:0e:2d:e3:44: 5c:af:be:c0:e4:49:d5:b5:4b:5e:fb:79:41:54:3f:d6:95:f9: b7:8d:71:b6:d4:0a:a2:af:79:5d:3b:fe:77:1c:d1:f5:d5:13: 5d:57:f2:b4:c3:a4:a7:0d:94:61:ba:64:9a:ca:da:96:b2:bc: 34:0b:c9:a7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGkF9V/g3S1TPOFtSXZ2YHEwgICQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDI5WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjlkMzM1MTE2YWYzMjNiOThjNDkwYzAwN2E5ZTRmZjMy YjU1NjFmNTVhZDg3OTQ0ZWI3NjEzMjNiZjBhYTc1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpEdgYnLPLQCM8w7XVNapqWJlSxzuBca97ySBNMOaehvHg HxF0lM7F3Nal6mvgVDp0KPye3RYud2UkitRWQzviSV90J/fJ+EeX8R3JQiHB517U lWtZ2wwJNkaWchZw14bU9FHFothn+hUxMvhPBNAP0juuZiSzTvXnymQUEeZk9lyv X+s+YhgLAA4a3k+YssBV6Ae1o0krTtdTRXDw0ntr7Qj5ZYAMeH4M06vgTkA2EMmM XO7k6VM5sg9G59Gpc5K23lWsen+I42y7AZIgtKjZh3Ijb1dh4mEkrBUMD7KKMeqU ARhKx8SiaDHu3eTHa7p5oSoWoDIm91tffGl9Mq6bAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOXMP21w/cTBhL92YutqAXMqmrA4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFkZjRhODJhLTA4NzUtNDdiNi05ZmMwLWI2N2MwOTdiYzQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxiDANBgkqhkiG9w0BAQsFAAOCAQEAaWSJarFizXxsj7YM10/7+b9m 42FUtUecc5pYFods788h3nRPz20GNSSESLyLaCwfSbZyl1sBgHoaFqHYNkhXGotX YAyzRBqUbxrd4woTm+Os2zWAABYOAaM5VZ1JdT5frbCReJYZsOgCyMS9CHpRz+Uy NYVobEHO3gUjMUH8QVJ05PUSTNQUt22L4t8KDfOOZIE6YQDLyBxsiNIdGvNSeSey DlmZPr4tnSHfPRAZ6EqpehEBeAFk4u5jvaB9jgycO1sOLeNEXK++wORJ1bVLXvt5 QVQ/1pX5t41xttQKoq95XTv+dxzR9dUTXVfytMOkpw2UYbpkmsralrK8NAvJpw== -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:36 2026 by rpki-client