$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa File: 20df74ce-1a64-4df1-b616-115d4493a969.roa (raw, json) Hash identifier: iGwVtSRpim46LQpsb4vGLb57ouA1/9ap4Fg7QhShZHw= Subject key identifier: A3:F6:D6:62:C0:7C:82:A0:1D:8C:86:48:58:59:09:8D:91:A1:9D:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 177B40AC3053607B4339244051A01F9FFC42238B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa Signing time: Mon 26 Oct 2026 04:10:51 +0000 ROA not before: Mon 26 Oct 2026 04:10:51 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7b:40:ac:30:53:60:7b:43:39:24:40:51:a0:1f:9f:fc:42:23:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:51 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=566e0d070bcc4de02189b339056351bb2fc38817d5ebdf6bbc416f5a565e53ac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:81:94:cb:bc:a8:01:09:12:a1:06:26:9c: 9b:ec:ac:bd:a7:92:7b:21:9f:79:c1:d9:87:f7:89: 0d:ae:a7:4e:01:f4:fb:4c:b3:de:14:c9:2a:b8:be: dd:35:70:3f:2c:ed:b5:bc:5c:c6:6c:1c:78:ad:73: 62:a4:07:51:a5:b5:42:1e:3b:05:08:c2:d9:c4:36: e2:9d:78:7a:ec:ef:f3:04:5f:11:40:b5:5e:f8:9b: 6c:9b:b7:b9:58:d5:dc:5a:9e:c1:44:50:97:4c:fc: 5f:7d:cb:68:d7:4b:05:e9:59:38:8a:fb:c7:48:1b: ff:1a:7d:94:9d:84:23:fa:b1:1b:a5:b5:65:a8:26: 5a:76:cd:81:99:99:1b:45:79:30:ae:16:c6:cc:69: 47:9b:d1:37:68:3f:5a:2d:91:5d:c8:83:33:3c:4f: cc:18:67:36:37:9a:6d:2a:34:3e:48:84:55:0f:aa: 81:07:cd:8f:78:cc:a4:7c:de:a5:81:31:0c:31:c7: 75:1a:27:dc:dd:4b:f1:a0:6e:a2:17:21:69:6b:e4: 44:48:de:4d:0f:59:03:a6:19:1f:c9:c5:e9:25:a7: 97:10:4e:7f:9c:5b:3f:87:71:bb:07:e6:c1:3c:b5: 79:ba:0b:5b:1f:4a:12:a5:f3:7f:9f:9f:a7:d0:de: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:D6:62:C0:7C:82:A0:1D:8C:86:48:58:59:09:8D:91:A1:9D:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:200::/40 Signature Algorithm: sha256WithRSAEncryption 70:f9:5c:6e:7d:d4:51:0a:a6:ee:18:84:43:d3:47:6c:aa:c1: be:5f:bf:77:67:d8:be:86:e7:fb:cc:38:6d:f5:85:e6:fb:89: c5:ec:41:cc:a1:37:87:11:99:79:f8:7f:e7:d7:b6:a2:9e:7a: 0d:c7:aa:83:cb:4d:f6:d2:05:d4:44:64:d5:0a:94:62:37:7f: ee:f3:9b:9a:76:66:c2:c2:92:ae:be:8f:09:fa:42:a9:1b:43: 12:49:6c:7b:15:7c:02:dd:52:59:e5:70:33:19:6a:e6:88:76: 5a:bc:c1:93:1b:46:f5:04:32:4f:4e:d4:71:75:0e:b3:e2:d2: 6b:5a:3c:4e:5f:c6:f4:ad:8c:d4:59:b7:15:91:4d:a3:cb:a6: 0b:3c:36:21:e1:69:d9:4d:0f:de:eb:25:09:10:dc:b7:38:83: 96:e2:e2:6a:1f:46:3d:e5:f6:ec:04:e6:05:0a:3c:a2:c1:cc: df:fc:05:a8:9c:9b:bf:f6:ed:28:37:ff:02:6f:15:f8:56:a8: 25:08:e3:f3:f7:5f:14:1c:1a:77:c5:13:61:3d:18:82:00:22: 35:0c:d5:79:cb:7e:f4:79:ba:50:f6:f3:23:3e:b2:62:e6:3b: 85:45:e1:52:b7:76:bf:d9:1e:a7:37:83:fb:48:61:8b:7f:e9: b4:86:42:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUF3tArDBTYHtDOSRAUaAfn/xCI4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDUxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjZlMGQwNzBiY2M0ZGUwMjE4OWIzMzkwNTYzNTFiYjJm YzM4ODE3ZDVlYmRmNmJiYzQxNmY1YTU2NWU1M2FjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN7oGUy7yoAQkSoQYmnJvsrL2nknshn3nB2Yf3iQ2up04B 9PtMs94UySq4vt01cD8s7bW8XMZsHHitc2KkB1GltUIeOwUIwtnENuKdeHrs7/ME XxFAtV74m2ybt7lY1dxansFEUJdM/F99y2jXSwXpWTiK+8dIG/8afZSdhCP6sRul tWWoJlp2zYGZmRtFeTCuFsbMaUeb0TdoP1otkV3IgzM8T8wYZzY3mm0qND5IhFUP qoEHzY94zKR83qWBMQwxx3UaJ9zdS/GgbqIXIWlr5ERI3k0PWQOmGR/Jxeklp5cQ Tn+cWz+HcbsH5sE8tXm6C1sfShKl83+fn6fQ3tTDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUo/bWYsB8gqAdjIZIWFkJjZGhneIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIwZGY3NGNlLTFhNjQtNGRmMS1iNjE2LTExNWQ0NDkzYTk2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwAjANBgkqhkiG9w0BAQsFAAOCAQEAcPlcbn3UUQqm7hiEQ9NHbKrB vl+/d2fYvobn+8w4bfWF5vuJxexBzKE3hxGZefh/59e2op56Dceqg8tN9tIF1ERk 1QqUYjd/7vObmnZmwsKSrr6PCfpCqRtDEklsexV8At1SWeVwMxlq5oh2WrzBkxtG 9QQyT07UcXUOs+LSa1o8Tl/G9K2M1Fm3FZFNo8umCzw2IeFp2U0P3uslCRDctziD luLiah9GPeX27ATmBQo8osHM3/wFqJybv/btKDf/Am8V+FaoJQjj8/dfFBwad8UT YT0YggAiNQzVect+9Hm6UPbzIz6yYuY7hUXhUrd2v9kepzeD+0hhi3/ptIZCMA== -----END CERTIFICATE-----Generated at Tue Oct 27 05:59:21 2026 by rpki-client