$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa File: 57817121-2ded-4a32-92fa-48c260a4d9f6.roa (raw, json) Hash identifier: F+/xWVTa/O2EjrzE9US3cOroIR8ye1xn1pNyTfbFqqk= Subject key identifier: 43:9E:6B:BF:68:11:AC:BE:55:6D:63:10:3C:3E:A2:A0:60:57:F6:95 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 632F1049C149FB76CC695E027A55AFFA79437FF6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa Signing time: Sun 11 Oct 2026 15:10:15 +0000 ROA not before: Sun 11 Oct 2026 15:10:15 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2f:10:49:c1:49:fb:76:cc:69:5e:02:7a:55:af:fa:79:43:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:15 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=fd1ffa6804be9e25251844f4e98b036bd09e276d8bcde32e616bf465a96ec9cf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:27:82:2a:e4:93:57:49:14:95:73:9c:be: c7:ff:17:9c:bc:02:83:ba:5f:d1:83:c8:db:ff:ab: 61:0e:e1:7d:16:4d:b0:ba:72:90:ac:f4:77:3f:7d: 89:6c:d1:41:12:28:ea:19:77:3a:f5:00:f3:37:69: b6:ec:4d:eb:22:3c:d0:39:23:db:04:20:f2:c7:7d: ff:3e:ee:58:26:0f:36:0f:30:11:81:27:e7:7e:51: 48:b9:4f:1c:09:90:f3:19:8f:8b:9a:13:5f:21:ed: 3f:d8:36:05:94:bd:b7:00:99:f9:71:8a:02:e9:09: 83:28:ad:d3:b4:8b:f8:a8:05:6e:fe:78:c7:cf:8e: 44:d7:8f:d4:44:00:1c:4a:82:3c:2a:48:dd:2b:a1: bb:81:72:06:c4:ed:66:25:8b:f3:93:5a:7c:53:60: 68:a1:02:5b:bf:ed:a0:a5:e5:92:e3:37:e1:14:6d: b7:4e:05:c5:7a:e6:82:e7:ab:d5:66:ca:d9:22:e1: 34:40:f4:1c:47:78:a3:61:b7:bc:8a:b8:05:46:eb: 8b:e4:33:02:7d:66:00:b4:ca:8c:1d:07:e3:04:cd: 58:45:e3:d5:10:af:42:03:95:60:01:65:8c:2a:08: 30:c2:1b:11:5a:71:0e:38:9f:5e:8c:17:d8:51:f5: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:6B:BF:68:11:AC:BE:55:6D:63:10:3C:3E:A2:A0:60:57:F6:95 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611c::/48 Signature Algorithm: sha256WithRSAEncryption 98:22:b0:05:c0:27:c6:a2:dc:63:29:25:f2:50:60:b3:ed:20: fd:e9:f1:b7:6a:7f:77:a9:c5:90:4e:6e:c2:36:7b:09:64:e8: 6f:5c:c2:8e:27:4e:3e:b3:bc:c6:c5:f1:b8:27:d0:2f:b4:cc: 55:38:4e:e6:27:c5:72:51:b1:f0:2e:14:64:f1:94:e4:fd:db: 95:4e:58:58:51:69:a7:d3:ea:57:12:01:7f:c2:fe:22:04:0e: dd:6d:18:8c:13:ba:57:54:80:72:01:f8:be:92:dc:9f:62:ae: 4b:f4:ff:3d:3f:a4:64:e0:20:0c:1f:e6:24:26:ef:48:c9:bc: ce:ab:c3:44:3d:94:54:44:ac:80:3a:74:e0:c2:ab:1d:85:4c: 16:78:2a:9b:53:ee:42:46:55:9a:ec:b8:dd:2f:19:4a:f7:60: ca:6a:27:d7:d8:fa:3f:61:04:ed:52:5b:83:19:e2:2e:02:9f: e1:22:f5:d2:19:df:24:25:b3:dc:02:e2:05:b0:cf:d5:b3:b2: cd:92:bb:62:01:47:00:a3:76:6f:b9:c6:05:50:6e:74:46:b8: 1f:34:a7:fa:7d:b9:cd:78:45:91:4d:f6:0a:76:b5:35:52:bd: d6:0b:c0:d3:9a:72:47:50:b2:94:08:de:2b:24:06:14:68:1f: 18:00:27:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYy8QScFJ+3bMaV4CelWv+nlDf/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDE1WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDFmZmE2ODA0YmU5ZTI1MjUxODQ0ZjRlOThiMDM2YmQw OWUyNzZkOGJjZGUzMmU2MTZiZjQ2NWE5NmVjOWNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkAyeCKuSTV0kUlXOcvsf/F5y8AoO6X9GDyNv/q2EO4X0W TbC6cpCs9Hc/fYls0UESKOoZdzr1APM3abbsTesiPNA5I9sEIPLHff8+7lgmDzYP MBGBJ+d+UUi5TxwJkPMZj4uaE18h7T/YNgWUvbcAmflxigLpCYMordO0i/ioBW7+ eMfPjkTXj9REABxKgjwqSN0robuBcgbE7WYli/OTWnxTYGihAlu/7aCl5ZLjN+EU bbdOBcV65oLnq9Vmytki4TRA9BxHeKNht7yKuAVG64vkMwJ9ZgC0yowdB+MEzVhF 49UQr0IDlWABZYwqCDDCGxFacQ44n16MF9hR9aBfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ55rv2gRrL5VbWMQPD6ioGBX9pUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3ODE3MTIxLTJkZWQtNGEzMi05MmZhLTQ4YzI2MGE0ZDlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRwwDQYJKoZIhvcNAQELBQADggEBAJgisAXAJ8ai3GMpJfJQYLPt IP3p8bdqf3epxZBObsI2ewlk6G9cwo4nTj6zvMbF8bgn0C+0zFU4TuYnxXJRsfAu FGTxlOT925VOWFhRaafT6lcSAX/C/iIEDt1tGIwTuldUgHIB+L6S3J9irkv0/z0/ pGTgIAwf5iQm70jJvM6rw0Q9lFRErIA6dODCqx2FTBZ4KptT7kJGVZrsuN0vGUr3 YMpqJ9fY+j9hBO1SW4MZ4i4Cn+Ei9dIZ3yQls9wC4gWwz9Wzss2Su2IBRwCjdm+5 xgVQbnRGuB80p/p9uc14RZFN9gp2tTVSvdYLwNOackdQspQI3iskBhRoHxgAJ4A= -----END CERTIFICATE-----Generated at Tue Oct 27 01:36:05 2026 by rpki-client