$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32252657-94c1-49bc-b9ab-6b87cfbad1ae.roa File: 32252657-94c1-49bc-b9ab-6b87cfbad1ae.roa (raw, json) Hash identifier: QOByUe+uxfKpxuAmSNH2JDMM6sy6DUw7fUkzxAn4d30= Subject key identifier: EC:98:94:C7:39:F4:D0:F2:B7:84:B6:B0:6C:65:5B:A5:0C:78:F2:69 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 505D80BADB47B19E78815AAEF36F13A7E3C2BAC9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32252657-94c1-49bc-b9ab-6b87cfbad1ae.roa Signing time: Sun 06 Sep 2026 00:00:06 +0000 ROA not before: Sun 06 Sep 2026 00:00:06 +0000 ROA not after: Sat 05 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5d:80:ba:db:47:b1:9e:78:81:5a:ae:f3:6f:13:a7:e3:c2:ba:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 6 00:00:06 2026 GMT Not After : Dec 5 23:59:59 2026 GMT Subject: serialNumber=45c8da26d274e0cf01b12b7ff1a2c3ef6b9ef0f204809a547a988bf72ec0a4f5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:6b:1e:10:e4:14:3a:b0:40:85:17:7b:73: 79:28:a8:6a:14:c5:49:0c:e2:09:e2:18:75:d4:53: ac:2c:ba:c3:b9:63:0d:8e:8d:5d:ba:e1:76:da:8f: de:aa:d1:84:51:a7:bf:ce:ba:b0:4d:1e:03:10:db: 8a:ae:a8:80:c2:58:9b:ba:5b:36:f0:83:88:e4:cf: 92:42:35:ab:f8:e9:84:2b:ca:f6:d3:62:ba:25:9a: 01:13:3a:82:46:4e:0c:33:71:1d:52:3e:7b:d0:f6: 19:d8:cc:ed:8b:19:73:64:5e:ec:21:9b:3a:07:0b: 50:2b:88:1b:6c:0f:90:db:75:11:5e:91:be:a2:93: 59:d0:12:00:26:39:95:25:8f:70:41:ec:c4:d9:87: 46:63:43:70:09:0f:c9:4e:f9:3c:87:e3:1b:21:06: b3:9d:ef:be:c9:d2:42:cd:77:6e:5e:4a:69:0b:21: ff:78:ef:ae:3b:88:51:d2:9c:99:ee:1b:8a:1b:15: a2:e1:34:87:1d:1e:e6:0c:54:eb:57:75:42:8b:a5: 24:fb:34:77:c1:87:70:55:5c:24:fd:95:86:8d:84: a5:36:7c:9a:0b:c2:a6:45:25:17:78:a7:14:74:da: 61:0a:12:0a:5c:5c:7f:bd:20:07:b0:19:c4:a4:20: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:94:C7:39:F4:D0:F2:B7:84:B6:B0:6C:65:5B:A5:0C:78:F2:69 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32252657-94c1-49bc-b9ab-6b87cfbad1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:100::/40 Signature Algorithm: sha256WithRSAEncryption 84:cd:07:53:0e:03:65:9c:62:e7:a5:a5:5c:c5:37:11:51:0f: a4:0b:01:48:75:5a:c6:18:a8:d2:63:7d:7d:37:11:a6:b8:12: 15:43:d6:46:0e:9d:47:db:97:f4:01:e5:a1:84:54:57:82:63: c6:7e:d0:20:3d:c6:07:81:ce:56:16:5d:59:b2:a8:68:3a:93: 4c:3a:67:db:7d:29:9e:7b:83:c5:21:8b:68:2f:b5:fe:14:5a: b3:a3:76:00:ac:c4:89:70:79:6d:6a:59:10:19:1d:75:37:b9: d2:34:dd:84:9a:a7:fe:53:ac:5c:a8:0d:1c:65:12:b2:eb:03: 97:e4:5f:1a:78:dd:2d:36:02:13:87:11:e3:9d:69:41:d6:95: 51:18:7c:11:aa:79:14:20:a0:c9:92:8d:10:c7:1f:af:66:04: 09:c4:d5:5b:29:60:05:10:c0:4d:7a:16:97:db:ba:75:6c:64: 7d:4f:24:ab:c8:b9:d5:9c:83:43:78:9e:bd:45:79:ce:60:26: 47:55:e7:da:72:e3:e7:70:11:27:1a:45:d4:c0:b0:be:c9:78: 92:f1:07:a2:83:50:af:7a:44:36:d4:dd:c6:b0:8b:6a:b9:6e: 21:c9:38:24:62:4e:b8:d6:d6:44:c9:b5:9b:d1:b4:13:b3:51: 40:d4:29:c0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUF2AuttHsZ54gVqu828Tp+PCuskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTA2MDAwMDA2WhcNMjYxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWM4ZGEyNmQyNzRlMGNmMDFiMTJiN2ZmMWEyYzNlZjZi OWVmMGYyMDQ4MDlhNTQ3YTk4OGJmNzJlYzBhNGY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU1GseEOQUOrBAhRd7c3koqGoUxUkM4gniGHXUU6wsusO5 Yw2OjV264Xbaj96q0YRRp7/OurBNHgMQ24quqIDCWJu6Wzbwg4jkz5JCNav46YQr yvbTYrolmgETOoJGTgwzcR1SPnvQ9hnYzO2LGXNkXuwhmzoHC1AriBtsD5DbdRFe kb6ik1nQEgAmOZUlj3BB7MTZh0ZjQ3AJD8lO+TyH4xshBrOd777J0kLNd25eSmkL If947647iFHSnJnuG4obFaLhNIcdHuYMVOtXdUKLpST7NHfBh3BVXCT9lYaNhKU2 fJoLwqZFJRd4pxR02mEKEgpcXH+9IAewGcSkIHDPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7JiUxzn00PK3hLawbGVbpQx48mkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMjUyNjU3LTk0YzEtNDliYy1iOWFiLTZiODdjZmJhZDFhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxATANBgkqhkiG9w0BAQsFAAOCAQEAhM0HUw4DZZxi56WlXMU3EVEP pAsBSHVaxhio0mN9fTcRprgSFUPWRg6dR9uX9AHloYRUV4Jjxn7QID3GB4HOVhZd WbKoaDqTTDpn230pnnuDxSGLaC+1/hRas6N2AKzEiXB5bWpZEBkddTe50jTdhJqn /lOsXKgNHGUSsusDl+RfGnjdLTYCE4cR451pQdaVURh8Eap5FCCgyZKNEMcfr2YE CcTVWylgBRDATXoWl9u6dWxkfU8kq8i51ZyDQ3ievUV5zmAmR1Xn2nLj53ARJxpF 1MCwvsl4kvEHooNQr3pENtTdxrCLarluIck4JGJOuNbWRMm1m9G0E7NRQNQpwA== -----END CERTIFICATE-----Generated at Sun Sep 20 09:49:38 2026 by rpki-client