$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa File: 222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json) Hash identifier: pa2/ipMAiTEAK1woyFu0v3HXOIodSjujGOlSVfizZ44= Subject key identifier: 34:27:59:A5:E9:63:3F:DC:8F:C7:7E:21:CB:0E:31:FB:4F:30:FB:EE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4581277E90053513E2287CEBC9237A49EA6AF22C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa Signing time: Mon 26 Oct 2026 04:10:56 +0000 ROA not before: Mon 26 Oct 2026 04:10:56 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:81:27:7e:90:05:35:13:e2:28:7c:eb:c9:23:7a:49:ea:6a:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:56 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=9c0daab72ce899cb67145267c166541a911927d3e0f7ce5592c7955c6751d715, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:3f:b5:d5:7f:34:40:23:4b:68:70:3b:99: 02:8e:5a:cf:d3:86:63:0d:98:0b:b1:64:68:79:91: 8d:c9:f6:78:30:06:b9:be:ac:e3:f1:da:2f:c0:20: 6d:be:0c:e9:79:dc:c7:83:27:08:1b:c0:4f:69:ef: 04:71:f2:69:c5:ee:14:fb:42:53:d7:5f:57:83:c9: ec:b2:a0:cc:0a:c6:b6:a4:fa:d9:73:74:df:73:d5: f8:98:03:bf:75:a1:c6:18:a0:81:87:83:67:41:9d: 16:91:12:96:b6:88:0d:b0:5c:37:15:8d:28:39:96: f5:38:81:62:8b:67:a2:ee:1a:31:04:66:ea:a1:63: 67:37:e9:38:ce:b9:60:df:b5:20:91:79:cc:75:bb: 4e:a9:a6:7f:6d:5b:b0:d3:86:a8:1c:27:ad:c5:8a: 45:5f:e2:75:b7:24:f7:95:5b:98:ce:3e:8b:e7:f5: 3b:5f:1d:0d:d9:a3:2e:d8:be:a8:40:fd:4e:ac:b9: 82:3c:5c:dd:70:d9:89:c8:9e:2c:c7:44:1e:cb:0c: d3:58:34:1b:ba:78:12:3a:79:36:0d:56:48:b5:e3: e5:59:20:5c:18:f3:21:36:71:bc:d8:dd:63:83:d4: 95:27:2e:ee:26:2c:ed:91:32:e7:2f:dc:03:f9:b2: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:27:59:A5:E9:63:3F:DC:8F:C7:7E:21:CB:0E:31:FB:4F:30:FB:EE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:40::/48 Signature Algorithm: sha256WithRSAEncryption 20:4e:96:80:2b:87:c4:19:4c:25:f6:18:2a:53:15:be:50:20: cc:15:fc:bc:d2:18:db:d0:a8:01:ce:93:99:fc:63:24:6a:ac: fc:3f:35:b4:bd:24:8b:76:b5:08:74:25:78:a6:e2:18:8d:7b: ef:cd:cb:0b:85:b4:b2:1d:71:b5:66:e9:ce:7c:ee:b3:e1:13: e6:43:4d:66:7e:e7:0e:79:5c:46:47:0a:bc:19:44:19:11:59: 62:c7:4f:06:66:ba:ee:fd:7a:f1:5f:e2:92:0f:2e:a4:e7:0a: b2:1b:13:3e:cf:a8:78:7f:70:32:36:0f:3c:4e:13:67:3a:c4: 91:db:88:57:50:8b:d3:f4:9c:a3:2c:a6:9e:99:1c:9e:cf:77: 84:26:b6:97:dc:65:f9:75:34:af:bd:b6:19:c9:aa:7f:3c:d3: 84:42:1b:52:b7:be:f4:c8:9a:b2:59:c1:c0:e3:be:dc:b7:9f: 3d:cd:40:3b:f0:c1:8a:18:6a:b6:f1:0a:fb:e4:fd:4f:52:a7: a7:1e:e2:5d:ca:fc:19:6a:78:54:d8:e2:84:9b:cc:36:5e:52: ae:5a:78:ff:d9:a4:26:5a:42:98:9d:7b:9f:9a:a9:0e:47:cf: cd:75:d7:d4:bb:28:84:fb:29:d2:a2:92:d6:52:f2:4d:f6:a6: 7c:67:cd:26 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURYEnfpAFNRPiKHzrySN6Sepq8iwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDU2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzBkYWFiNzJjZTg5OWNiNjcxNDUyNjdjMTY2NTQxYTkx MTkyN2QzZTBmN2NlNTU5MmM3OTU1YzY3NTFkNzE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoTj+11X80QCNLaHA7mQKOWs/ThmMNmAuxZGh5kY3J9ngw Brm+rOPx2i/AIG2+DOl53MeDJwgbwE9p7wRx8mnF7hT7QlPXX1eDyeyyoMwKxrak +tlzdN9z1fiYA791ocYYoIGHg2dBnRaREpa2iA2wXDcVjSg5lvU4gWKLZ6LuGjEE ZuqhY2c36TjOuWDftSCRecx1u06ppn9tW7DThqgcJ63FikVf4nW3JPeVW5jOPovn 9TtfHQ3Zoy7YvqhA/U6suYI8XN1w2YnInizHRB7LDNNYNBu6eBI6eTYNVki14+VZ IFwY8yE2cbzY3WOD1JUnLu4mLO2RMucv3AP5snWzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNCdZpeljP9yPx34hyw4x+08w++4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMjkwNmQyLWE2YTAtNDBhZC05ZTQxLWVhYjJkN2ZmMzVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAEAwDQYJKoZIhvcNAQELBQADggEBACBOloArh8QZTCX2GCpTFb5Q IMwV/LzSGNvQqAHOk5n8YyRqrPw/NbS9JIt2tQh0JXim4hiNe+/NywuFtLIdcbVm 6c587rPhE+ZDTWZ+5w55XEZHCrwZRBkRWWLHTwZmuu79evFf4pIPLqTnCrIbEz7P qHh/cDI2DzxOE2c6xJHbiFdQi9P0nKMspp6ZHJ7Pd4QmtpfcZfl1NK+9thnJqn88 04RCG1K3vvTImrJZwcDjvty3nz3NQDvwwYoYarbxCvvk/U9Sp6ce4l3K/BlqeFTY 4oSbzDZeUq5aeP/ZpCZaQpide5+aqQ5Hz81119S7KIT7KdKiktZS8k32pnxnzSY= -----END CERTIFICATE-----Generated at Tue Nov 3 22:29:14 2026 by rpki-client