$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/89220456-ced7-475d-a185-9e621139cdcb.roa File: 89220456-ced7-475d-a185-9e621139cdcb.roa (raw, json) Hash identifier: 7nWFg3f3KQu25OrYwjHTO/3kiDQQzzaDoXqGokmBQf8= Subject key identifier: 4E:61:80:4A:BB:A8:DA:30:58:14:32:82:BA:A2:5C:D8:00:73:04:BF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7320D7B7039AC163637127D8EA04EAC387E37064 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/89220456-ced7-475d-a185-9e621139cdcb.roa Signing time: Mon 26 Oct 2026 04:10:38 +0000 ROA not before: Mon 26 Oct 2026 04:10:38 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:20:d7:b7:03:9a:c1:63:63:71:27:d8:ea:04:ea:c3:87:e3:70:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:38 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=2fe1107b35064408351f68f42ca33864e887e13eea8c803f55f11c8e5e08688a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:19:41:d3:22:ab:2f:68:9f:19:34:8c:54: e6:cd:25:eb:9e:3e:43:ec:0f:b5:c7:dd:96:f3:b7: c0:4e:f1:37:fb:e2:1f:ef:2a:43:63:d6:a6:8b:9e: 9d:63:49:79:12:32:e0:b1:c8:6e:26:f7:9d:5e:dd: ca:67:a9:b1:60:63:9b:ad:4f:46:99:0a:03:b6:55: c3:55:85:25:09:f9:24:df:d9:13:f1:e7:6b:8f:26: b7:15:5a:d9:b6:ba:88:b5:c2:95:f5:e7:1c:69:dc: 53:54:46:88:a4:3e:09:d1:17:1b:8e:5c:d7:e4:29: bb:2e:36:23:05:8f:f7:fb:a4:59:47:00:f6:92:8e: fe:5d:2b:0a:6d:19:e9:ad:a3:20:f2:f3:9b:d2:18: f0:ea:50:57:3e:2d:e4:61:e5:8f:64:f3:e6:0c:de: a2:ca:8f:8c:aa:7b:ab:68:22:68:81:75:9b:ab:92: 16:5f:b8:a7:5d:95:0f:f8:18:3f:fc:ee:eb:fd:d9: 86:40:55:b3:5c:8e:a1:08:3f:c0:12:5e:dc:9a:aa: e2:25:c0:4c:a5:36:27:4f:f6:00:43:b1:1c:88:fa: 58:a1:12:5f:b4:14:28:dd:0d:ac:cc:36:a2:d8:d3: 58:18:c1:dc:7e:fd:cd:49:8e:b2:8a:b1:54:ee:f9: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:61:80:4A:BB:A8:DA:30:58:14:32:82:BA:A2:5C:D8:00:73:04:BF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/89220456-ced7-475d-a185-9e621139cdcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:c001::/48 Signature Algorithm: sha256WithRSAEncryption 15:2a:c2:11:53:de:fd:ce:66:ab:a1:66:60:bc:0a:ec:bd:03: e6:99:56:0e:c3:0a:f2:5e:02:ae:a3:1f:b1:dc:a9:b3:92:4d: b6:1a:32:79:4d:32:16:37:ee:26:cb:54:8c:bf:fd:93:ae:b4: 3e:3c:04:3d:9f:77:e5:65:1b:45:02:6a:42:11:66:8c:41:d6: f8:f7:25:77:3e:e5:0b:af:6e:11:82:9e:48:04:13:df:80:fc: b6:50:44:93:00:81:34:c9:66:68:61:57:d5:c1:63:23:de:b4: 45:68:9b:a7:1e:76:c3:70:30:22:81:67:b6:29:62:03:07:60: 81:61:2b:05:7c:08:7e:2f:57:44:8f:72:9e:37:48:78:65:86: 99:5d:f6:f2:ef:98:f1:50:38:2c:51:d5:d1:22:ac:db:96:68: fc:9f:81:e6:3b:3e:f8:30:dc:27:df:66:b8:e6:17:dd:60:1d: 15:74:24:8c:7c:31:29:32:22:4b:54:5b:c8:4c:31:e4:f2:b3: 55:1f:7c:f3:84:a3:4b:2f:31:1d:2e:8e:f6:ba:ec:68:33:a3: 6a:ac:bd:72:c6:8a:e4:ad:cf:f9:1b:2b:f6:9b:7b:49:31:db: 17:ae:15:d7:5c:42:f6:9a:92:52:bb:85:74:5d:06:fe:21:b3: 20:21:b0:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcyDXtwOawWNjcSfY6gTqw4fjcGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDM4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmUxMTA3YjM1MDY0NDA4MzUxZjY4ZjQyY2EzMzg2NGU4 ODdlMTNlZWE4YzgwM2Y1NWYxMWM4ZTVlMDg2ODhhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZqRlB0yKrL2ifGTSMVObNJeuePkPsD7XH3Zbzt8BO8Tf7 4h/vKkNj1qaLnp1jSXkSMuCxyG4m951e3cpnqbFgY5utT0aZCgO2VcNVhSUJ+STf 2RPx52uPJrcVWtm2uoi1wpX15xxp3FNURoikPgnRFxuOXNfkKbsuNiMFj/f7pFlH APaSjv5dKwptGemtoyDy85vSGPDqUFc+LeRh5Y9k8+YM3qLKj4yqe6toImiBdZur khZfuKddlQ/4GD/87uv92YZAVbNcjqEIP8ASXtyaquIlwEylNidP9gBDsRyI+lih El+0FCjdDazMNqLY01gYwdx+/c1JjrKKsVTu+b8vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTmGASruo2jBYFDKCuqJc2ABzBL8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg5MjIwNDU2LWNlZDctNDc1ZC1hMTg1LTllNjIxMTM5Y2RjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD7wAEwDQYJKoZIhvcNAQELBQADggEBABUqwhFT3v3OZquhZmC8Cuy9 A+aZVg7DCvJeAq6jH7HcqbOSTbYaMnlNMhY37ibLVIy//ZOutD48BD2fd+VlG0UC akIRZoxB1vj3JXc+5QuvbhGCnkgEE9+A/LZQRJMAgTTJZmhhV9XBYyPetEVom6ce dsNwMCKBZ7YpYgMHYIFhKwV8CH4vV0SPcp43SHhlhpld9vLvmPFQOCxR1dEirNuW aPyfgeY7Pvgw3CffZrjmF91gHRV0JIx8MSkyIktUW8hMMeTys1UffPOEo0svMR0u jva67Ggzo2qsvXLGiuStz/kbK/abe0kx2xeuFddcQvaaklK7hXRdBv4hsyAhsHs= -----END CERTIFICATE-----Generated at Sun Nov 8 16:49:40 2026 by rpki-client