$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa File: 8d914165-a3e7-48af-b624-8691c64e5360.roa (raw, json) Hash identifier: 9oOclpJslNXlXtED49RO6ZaugMPCtnjEozZVq+9JL1U= Subject key identifier: A1:37:9A:F7:28:63:E0:EE:94:87:BD:7F:B5:3D:00:14:9C:2F:B3:94 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 042EF8D3338B5C496ADC412C448C6EF57C8125FB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa Signing time: Mon 26 Oct 2026 04:10:24 +0000 ROA not before: Mon 26 Oct 2026 04:10:24 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2e:f8:d3:33:8b:5c:49:6a:dc:41:2c:44:8c:6e:f5:7c:81:25:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:24 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ed15f02f68ee3db1ca08d722d10f16122d6bd0e1e5c644d6967bc77fc6750a04, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:a3:41:d2:87:83:d3:f0:d7:92:59:71:9b: 10:d4:86:2b:44:de:e2:a1:7f:1e:c5:37:66:c0:6b: 40:b5:71:67:45:ca:e6:e3:4d:b8:af:99:10:75:93: da:2b:12:26:f7:24:67:d9:36:0f:1d:fc:b8:d8:b7: 55:dd:a0:c1:8a:8b:4a:51:39:20:83:eb:8f:a0:19: 67:73:df:d2:c8:58:34:f8:a7:db:d6:34:dd:98:58: cc:52:5e:76:82:b1:29:e7:cc:03:22:8e:1f:53:d6: 59:05:e2:c1:33:cf:9f:23:07:93:ac:d2:65:17:59: c2:25:15:09:ff:22:19:92:6b:e5:24:aa:9d:fb:9b: ee:72:09:4c:86:70:b4:48:c4:99:f0:ff:5c:2f:f9: a4:79:52:56:3d:df:70:6c:f1:a0:95:48:ec:47:da: 80:e4:ff:39:ed:24:c8:69:7c:c0:27:18:2c:f2:fd: cb:f6:7a:39:7c:4b:b7:86:1b:15:3f:9c:69:7d:fb: 44:18:b9:28:87:77:06:c7:46:48:7c:fb:fb:11:5c: 16:47:23:05:ee:90:e5:4e:9e:e5:a9:07:45:a9:86: e9:36:b4:aa:1a:26:4e:d9:7f:7a:d7:b3:16:20:1f: 7e:bd:8a:83:21:b2:7a:7f:1e:3a:1a:32:11:23:5b: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:9A:F7:28:63:E0:EE:94:87:BD:7F:B5:3D:00:14:9C:2F:B3:94 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption 70:0b:ab:7c:7b:f6:ae:88:55:fe:2a:6e:bd:fb:99:5c:2b:d2: d1:e4:0b:93:ee:39:41:f4:04:53:8c:0e:91:39:a5:5b:e2:f1: 82:d0:72:7a:e6:48:c2:55:b3:68:8b:16:00:98:0b:e1:75:25: 97:62:19:07:9a:08:74:80:50:e4:64:0c:ba:7e:3c:a3:89:58: e0:7d:76:25:64:57:08:20:54:dc:b4:67:3c:c2:0a:12:ca:0f: fc:d8:98:11:f6:99:61:a8:a5:86:03:75:6c:5c:c1:57:40:d9: e4:b0:b0:ec:86:d0:69:c1:dc:1d:0d:b7:2d:23:54:79:e9:11: 0c:e7:58:9f:ce:8a:d7:84:0d:25:f7:10:2b:56:cb:66:5a:24: a1:c3:de:45:df:c7:09:b0:b6:96:54:76:6d:e0:a6:c0:0f:11: e1:94:fe:75:a6:22:3f:b5:9f:fe:a9:d1:1e:26:c1:13:5b:0b: 88:d4:0d:0a:dd:94:be:e6:50:4e:86:5b:ae:3c:31:bc:94:a5: fc:d7:e0:83:8d:ff:b0:21:42:0e:da:bc:02:91:70:70:12:25: b6:56:91:a3:1c:bf:15:8c:99:92:98:bd:f0:cb:31:74:ce:87: f1:83:d7:23:9b:c7:82:6f:00:18:e3:d2:12:e2:a9:cc:c5:8b: fd:91:8e:40 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBC740zOLXElq3EEsRIxu9XyBJfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDI0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDE1ZjAyZjY4ZWUzZGIxY2EwOGQ3MjJkMTBmMTYxMjJk NmJkMGUxZTVjNjQ0ZDY5NjdiYzc3ZmM2NzUwYTA0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPwKNB0oeD0/DXkllxmxDUhitE3uKhfx7FN2bAa0C1cWdF yubjTbivmRB1k9orEib3JGfZNg8d/LjYt1XdoMGKi0pROSCD64+gGWdz39LIWDT4 p9vWNN2YWMxSXnaCsSnnzAMijh9T1lkF4sEzz58jB5Os0mUXWcIlFQn/IhmSa+Uk qp37m+5yCUyGcLRIxJnw/1wv+aR5UlY933Bs8aCVSOxH2oDk/zntJMhpfMAnGCzy /cv2ejl8S7eGGxU/nGl9+0QYuSiHdwbHRkh8+/sRXBZHIwXukOVOnuWpB0Wphuk2 tKoaJk7Zf3rXsxYgH369ioMhsnp/HjoaMhEjWyHTAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUoTea9yhj4O6Uh71/tT0AFJwvs5QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkOTE0MTY1LWEzZTctNDhhZi1iNjI0LTg2OTFjNjRlNTM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQBwC6t8e/auiFX+Km69+5lcK9LR 5AuT7jlB9ARTjA6ROaVb4vGC0HJ65kjCVbNoixYAmAvhdSWXYhkHmgh0gFDkZAy6 fjyjiVjgfXYlZFcIIFTctGc8wgoSyg/82JgR9plhqKWGA3VsXMFXQNnksLDshtBp wdwdDbctI1R56REM51ifzorXhA0l9xArVstmWiShw95F38cJsLaWVHZt4KbADxHh lP51piI/tZ/+qdEeJsETWwuI1A0K3ZS+5lBOhluuPDG8lKX81+CDjf+wIUIO2rwC kXBwEiW2VpGjHL8VjJmSmL3wyzF0zofxg9cjm8eCbwAY49IS4qnMxYv9kY5A -----END CERTIFICATE-----Generated at Sun Nov 8 17:11:36 2026 by rpki-client