$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa File: 701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa (raw, json) Hash identifier: KDSMS3TnVgL6tKLAFmwuUeuu0ZfncfTBWUJL4grdM70= Subject key identifier: 74:AB:5D:DA:C6:F8:FC:0B:CC:FB:A2:FD:76:AD:DA:C4:0E:82:77:C8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4F71B94692A300D4BB65CFFA70EEC142DD179B83 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa Signing time: Sun 18 Oct 2026 01:20:10 +0000 ROA not before: Sun 18 Oct 2026 01:20:10 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:71:b9:46:92:a3:00:d4:bb:65:cf:fa:70:ee:c1:42:dd:17:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 18 01:20:10 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=2b3c4915efc74bbc699c25211f6d243fc32cf88a92e3bd287ce13115ab1b3930, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:7d:98:42:04:5b:25:32:fb:1c:95:69:f6: 61:d6:89:23:44:58:24:89:91:2f:9b:29:cd:04:57: b8:07:ec:ab:58:53:1c:29:cd:04:2d:8d:0d:ad:1d: ea:4d:05:a9:2f:ed:67:15:84:4c:99:8d:95:56:91: ed:c2:ec:1e:fd:98:57:80:2c:01:a9:d0:e7:cc:42: 93:40:a5:e3:4e:41:a2:40:d2:88:40:c2:92:e7:34: e6:e4:98:8b:90:13:93:ac:d4:84:34:6a:19:17:e8: e5:59:9c:8d:a2:21:ec:bc:7c:6f:f2:fe:eb:5a:21: 5e:69:8b:23:c1:8a:30:51:40:22:d2:e3:99:bc:8b: 06:a5:05:d7:8d:c5:a6:f2:41:36:ce:48:22:c3:02: b8:51:7e:b0:ac:45:12:f2:b0:d9:ca:5a:b5:9e:06: d6:98:86:2f:b4:e1:e9:b5:26:89:3b:e9:1e:38:9f: b7:99:38:15:d6:a1:c6:53:5d:99:19:44:93:7b:7a: 4b:99:10:3d:91:cc:ff:d7:84:22:78:2e:cb:db:b9: 0c:99:79:fc:d8:05:d6:35:dd:cd:1f:ef:74:cd:50: e9:d6:ed:60:a1:71:52:8c:c5:52:f4:cf:ce:7c:0e: 66:2c:5d:ad:8b:fb:92:54:5b:b5:f4:68:c6:12:ca: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:5D:DA:C6:F8:FC:0B:CC:FB:A2:FD:76:AD:DA:C4:0E:82:77:C8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/48 Signature Algorithm: sha256WithRSAEncryption 37:53:bc:a7:e1:ac:b4:34:4f:78:e0:64:cf:65:3c:d3:f4:7e: be:d9:98:0c:f5:04:d7:5e:b9:5e:e4:0d:c6:b6:db:40:f4:d1: 3d:c0:7b:22:77:c3:91:be:da:11:98:77:10:1a:9e:6c:90:39: 73:f8:d5:9e:ee:6a:2d:3e:6f:64:8b:e5:ce:ca:de:3f:f1:9c: b9:f9:f1:80:7f:96:af:cd:be:89:92:e5:fc:70:74:e5:92:c1: 09:9b:a8:bd:f0:3b:ae:7d:9b:50:5a:ec:bc:b4:d2:4b:ac:e0: 8f:a2:b8:a8:06:d3:33:92:9d:ab:d9:47:03:ed:79:be:66:56: fb:f5:5e:fe:a9:00:3f:35:5a:ef:5f:5f:a5:af:0b:0b:4e:4f: 94:ae:52:25:36:de:62:31:f7:8b:ef:c0:35:56:97:29:41:11: 98:cb:54:ae:1a:85:ca:f5:15:49:25:d6:71:13:09:0e:9a:03: 24:f3:d2:db:c7:e0:42:84:41:1e:d1:3a:c3:80:04:19:98:2d: 2b:06:03:40:31:df:4b:fc:54:0b:03:3d:b7:ee:21:c3:d5:55: 5d:7b:29:e8:67:48:1b:28:56:8e:28:6b:db:5d:29:91:36:4f: 44:f6:c0:19:79:15:70:da:61:eb:60:b2:7c:1b:21:cb:f7:0e: 0e:06:0b:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT3G5RpKjANS7Zc/6cO7BQt0Xm4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDEwWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjNjNDkxNWVmYzc0YmJjNjk5YzI1MjExZjZkMjQzZmMz MmNmODhhOTJlM2JkMjg3Y2UxMzExNWFiMWIzOTMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBnH2YQgRbJTL7HJVp9mHWiSNEWCSJkS+bKc0EV7gH7KtY UxwpzQQtjQ2tHepNBakv7WcVhEyZjZVWke3C7B79mFeALAGp0OfMQpNApeNOQaJA 0ohAwpLnNObkmIuQE5Os1IQ0ahkX6OVZnI2iIey8fG/y/utaIV5piyPBijBRQCLS 45m8iwalBdeNxabyQTbOSCLDArhRfrCsRRLysNnKWrWeBtaYhi+04em1Jok76R44 n7eZOBXWocZTXZkZRJN7ekuZED2RzP/XhCJ4LsvbuQyZefzYBdY13c0f73TNUOnW 7WChcVKMxVL0z858DmYsXa2L+5JUW7X0aMYSyjP/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdKtd2sb4/AvM+6L9dq3axA6Cd8gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcwMWY3MmE1LWZiMjctNDljYS1iM2FkLTNhNjBjN2MzMDM3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBAwDQYJKoZIhvcNAQELBQADggEBADdTvKfhrLQ0T3jgZM9lPNP0 fr7ZmAz1BNdeuV7kDca220D00T3AeyJ3w5G+2hGYdxAanmyQOXP41Z7uai0+b2SL 5c7K3j/xnLn58YB/lq/NvomS5fxwdOWSwQmbqL3wO659m1Ba7Ly00kus4I+iuKgG 0zOSnavZRwPteb5mVvv1Xv6pAD81Wu9fX6WvCwtOT5SuUiU23mIx94vvwDVWlylB EZjLVK4ahcr1FUkl1nETCQ6aAyTz0tvH4EKEQR7ROsOABBmYLSsGA0Ax30v8VAsD PbfuIcPVVV17KehnSBsoVo4oa9tdKZE2T0T2wBl5FXDaYetgsnwbIcv3Dg4GCys= -----END CERTIFICATE-----Generated at Tue Oct 27 05:12:59 2026 by rpki-client