$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa File: 7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa (raw, json) Hash identifier: mbkEr/fWCFp0GZQ5140pBtGnxtsAq/CKMJKmzfDwQPA= Subject key identifier: D5:F3:D1:F2:CA:83:81:ED:2D:F5:57:F8:79:7D:BA:88:D9:3C:24:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 33CFC382D1DFF51187845DB1D5894D97D9DADEF8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa Signing time: Tue 25 Aug 2026 00:00:07 +0000 ROA not before: Tue 25 Aug 2026 00:00:07 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:10::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cf:c3:82:d1:df:f5:11:87:84:5d:b1:d5:89:4d:97:d9:da:de:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 25 00:00:07 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=8aa543220bb45090ac8f78c0d8a3a2121a60c11f1c76b206efd536936dd24c17, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:8b:d2:02:26:f1:c6:68:3c:49:60:e3:e0: 27:66:7b:ec:5c:ed:5e:d0:ce:7f:97:1a:e7:a7:0b: 32:44:3f:32:96:1d:b6:f5:48:17:34:01:ca:ae:97: 40:b1:2c:3c:e4:77:87:f8:a6:84:26:9f:9e:2d:b0: 49:dd:b9:07:d0:f3:2d:56:84:a8:f8:0a:14:40:00: 72:7e:19:b8:ae:00:c1:ea:e9:27:a2:ca:11:d6:b5: ed:1c:17:1c:6d:39:ac:f4:eb:56:f7:6c:18:a8:fe: e2:4e:68:5d:b3:f2:ca:82:9e:43:cf:77:12:ee:d2: 18:f4:bb:39:d7:0e:6b:ee:68:b3:78:0b:bc:63:a2: 6b:52:db:a3:00:ad:8f:95:f5:a6:9e:a9:10:bb:80: 5c:0e:49:eb:4f:2f:8d:97:97:9e:22:c7:f6:7f:16: f0:45:27:92:a5:98:12:c2:ea:47:09:e8:54:53:60: 79:50:1d:ca:f5:ae:c6:62:5c:b0:86:9e:ce:6b:0e: 65:da:fe:98:79:65:f4:8c:7c:e8:83:cd:bf:44:ed: 27:b7:6a:b9:01:64:60:77:45:4c:c4:3e:bd:b6:3c: b5:0b:ec:aa:5c:f8:65:6a:5d:87:83:f7:7e:e8:4d: 5e:f4:dd:c4:43:e5:14:8b:3b:91:3d:24:dc:d7:c5: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:D1:F2:CA:83:81:ED:2D:F5:57:F8:79:7D:BA:88:D9:3C:24:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:10::/47 Signature Algorithm: sha256WithRSAEncryption 32:3c:be:36:93:93:37:b9:08:c3:d6:03:0b:b9:3a:8a:75:b0: 0f:fd:09:26:ff:65:ef:40:6d:ae:5e:27:02:39:6d:d5:0c:3e: 76:cf:e4:24:99:8d:a7:e7:e1:6c:90:19:4a:2f:be:7b:21:0d: fb:34:5c:ba:44:c1:5f:1d:9e:c4:89:d0:db:45:14:c4:02:6d: 37:f6:51:00:71:07:cf:97:8b:99:68:58:d4:d9:22:96:df:96: bd:37:d6:bf:b3:e4:a2:60:90:7e:b6:28:cf:d6:24:31:e9:38: be:78:9c:04:8f:48:70:ec:67:e0:17:db:86:eb:4c:4a:8f:82: 12:c7:fb:36:45:ff:10:29:88:f3:98:b4:4e:f3:2c:89:fc:d5: bf:25:61:9e:19:c0:40:aa:8f:30:1c:8e:75:46:d4:db:00:91: a2:99:97:04:7d:4f:2d:84:82:98:f7:34:20:35:82:7d:bf:9e: 92:d7:bf:3d:08:d0:c5:aa:b8:1c:d4:a9:29:7c:2f:5f:6f:dc: 8d:bf:53:c5:4c:7f:45:de:f6:d6:0f:e5:d1:4c:2e:70:c7:a2: d4:29:f0:ab:4e:b0:c0:57:9b:95:f7:0f:9b:47:4d:1c:12:45: 04:13:8d:cd:b6:f4:cd:fa:f8:03:cb:94:41:c6:46:09:89:9a: f0:33:06:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM8/DgtHf9RGHhF2x1YlNl9na3vgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODI1MDAwMDA3WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWE1NDMyMjBiYjQ1MDkwYWM4Zjc4YzBkOGEzYTIxMjFh NjBjMTFmMWM3NmIyMDZlZmQ1MzY5MzZkZDI0YzE3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLY4vSAibxxmg8SWDj4Cdme+xc7V7Qzn+XGuenCzJEPzKW Hbb1SBc0Acqul0CxLDzkd4f4poQmn54tsEnduQfQ8y1WhKj4ChRAAHJ+GbiuAMHq 6SeiyhHWte0cFxxtOaz061b3bBio/uJOaF2z8sqCnkPPdxLu0hj0uznXDmvuaLN4 C7xjomtS26MArY+V9aaeqRC7gFwOSetPL42Xl54ix/Z/FvBFJ5KlmBLC6kcJ6FRT YHlQHcr1rsZiXLCGns5rDmXa/ph5ZfSMfOiDzb9E7Se3arkBZGB3RUzEPr22PLUL 7Kpc+GVqXYeD937oTV703cRD5RSLO5E9JNzXxdfBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1fPR8sqDge0t9Vf4eX26iNk8JCYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdmMWJhNDNhLTliZjYtNDhhMS05ZDE3LWM0MDhiZmQ1OGM2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDxABAwDQYJKoZIhvcNAQELBQADggEBADI8vjaTkze5CMPWAwu5Oop1 sA/9CSb/Ze9Aba5eJwI5bdUMPnbP5CSZjafn4WyQGUovvnshDfs0XLpEwV8dnsSJ 0NtFFMQCbTf2UQBxB8+Xi5loWNTZIpbflr031r+z5KJgkH62KM/WJDHpOL54nASP SHDsZ+AX24brTEqPghLH+zZF/xApiPOYtE7zLIn81b8lYZ4ZwECqjzAcjnVG1NsA kaKZlwR9Ty2Egpj3NCA1gn2/npLXvz0I0MWquBzUqSl8L19v3I2/U8VMf0Xe9tYP 5dFMLnDHotQp8KtOsMBXm5X3D5tHTRwSRQQTjc229M36+APLlEHGRgmJmvAzBh0= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:41 2026 by rpki-client