$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa File: 93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa (raw, json) Hash identifier: oXRQ3Cmggt87daAzgFRaZwteW6KS24MxkLHxs2Q0TPI= Subject key identifier: 16:F6:98:31:22:03:1D:C1:8D:EE:38:40:71:25:C5:86:80:4A:38:3F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 342AD1EF7F89DB6E18DA255BD1F2A30A0E38DF6A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa Signing time: Sun 11 Oct 2026 15:10:30 +0000 ROA not before: Sun 11 Oct 2026 15:10:30 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2a:d1:ef:7f:89:db:6e:18:da:25:5b:d1:f2:a3:0a:0e:38:df:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:30 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=8c020d14fa7afb905eb07eabd62c54bc199f5a2d3bcf7bd09c4139a5e1f1d299, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:f4:03:85:4f:93:f2:a9:fa:c7:f7:da:7f: 80:eb:b6:64:32:71:9a:ba:5e:eb:48:fd:dd:cb:6a: f3:0e:e3:95:36:06:e0:e0:89:d9:2e:5d:67:81:e0: e4:0e:93:a9:7f:9d:f6:4d:bc:d4:61:e4:bf:86:21: aa:48:a2:0f:e0:2a:ef:3e:3a:50:8a:80:a8:0b:44: 5e:e5:b7:fa:7e:a8:d0:b7:dc:ea:f2:38:87:5d:7c: 1f:85:5c:92:9d:f9:a2:ff:28:66:bb:c6:33:72:71: 1f:8e:3d:9f:08:86:4f:78:1c:d3:12:3b:9e:fb:9c: 32:c9:83:52:95:08:6b:03:bc:df:d0:d0:77:2c:6e: 18:2a:ed:c0:a3:60:d7:c1:f2:97:93:f4:25:13:29: 88:be:5c:82:32:07:b6:e4:6c:03:f0:23:37:05:29: fe:fa:9e:af:70:5d:6b:5e:8e:c2:c1:94:71:2c:e6: 09:74:d5:5b:48:fb:91:18:ca:eb:99:43:a3:04:45: 00:f4:ac:46:79:78:ee:87:66:81:f8:75:8a:f2:4a: 40:31:8d:fe:50:cd:df:af:7f:fe:9f:ad:50:0f:5f: ad:b2:52:4f:a7:cf:b3:8a:9a:90:11:d2:d1:40:7f: 06:cd:d1:f2:1d:b6:cb:4e:6c:36:63:c2:84:a7:00: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F6:98:31:22:03:1D:C1:8D:EE:38:40:71:25:C5:86:80:4A:38:3F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6104::/48 Signature Algorithm: sha256WithRSAEncryption 2a:46:0f:0d:05:88:ac:67:b5:5e:5b:bd:ff:08:98:d0:b1:e0: 14:4e:49:50:41:b1:71:ed:63:f4:26:25:3a:45:9f:e0:e4:41: 58:10:f6:d5:e9:fd:79:38:c3:0d:a6:61:61:c6:a9:87:48:4d: da:e3:5e:8d:8d:ed:6e:ba:ad:26:df:0d:b8:54:6f:9e:6d:48: b2:63:4a:89:6b:68:33:a1:8f:bd:c8:64:c3:dd:cd:7d:d3:67: 6a:d9:80:fa:f0:eb:34:02:31:b3:ab:36:a2:59:af:cc:67:2b: 98:5b:38:87:ca:78:76:c3:30:d4:48:28:be:c4:7b:cb:f8:d7: fc:0d:5f:f9:d3:57:b2:a3:43:30:5a:cb:48:44:79:8c:d5:7f: 01:91:49:e0:21:b8:02:c1:b7:3d:42:c7:a7:1d:b8:0f:64:5d: ea:a5:a7:72:28:47:65:b5:a3:1d:5c:51:ff:be:fd:0c:38:35: 83:30:0a:65:08:e2:15:b3:82:4d:eb:47:e4:78:ab:d1:d8:de: b1:75:a7:e5:5a:3e:60:f4:07:8f:3e:44:5f:7f:45:b9:9b:ba: 0a:35:ae:f1:ca:a7:37:e2:e5:d7:30:c5:ca:3b:78:32:3a:f7: 1a:ed:3b:9e:0a:7f:3a:fe:54:e8:25:43:a0:a1:45:f4:83:0e: 61:58:e2:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNCrR73+J224Y2iVb0fKjCg4432owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDMwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzAyMGQxNGZhN2FmYjkwNWViMDdlYWJkNjJjNTRiYzE5 OWY1YTJkM2JjZjdiZDA5YzQxMzlhNWUxZjFkMjk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcTfQDhU+T8qn6x/faf4DrtmQycZq6XutI/d3LavMO45U2 BuDgidkuXWeB4OQOk6l/nfZNvNRh5L+GIapIog/gKu8+OlCKgKgLRF7lt/p+qNC3 3OryOIddfB+FXJKd+aL/KGa7xjNycR+OPZ8Ihk94HNMSO577nDLJg1KVCGsDvN/Q 0Hcsbhgq7cCjYNfB8peT9CUTKYi+XIIyB7bkbAPwIzcFKf76nq9wXWtejsLBlHEs 5gl01VtI+5EYyuuZQ6MERQD0rEZ5eO6HZoH4dYrySkAxjf5Qzd+vf/6frVAPX62y Uk+nz7OKmpAR0tFAfwbN0fIdtstObDZjwoSnAKg/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFvaYMSIDHcGN7jhAcSXFhoBKOD8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkzYmQ4MDQxLTQwMTgtNDVhYi1hZDI5LWVjOWMxMmMwMWZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQQwDQYJKoZIhvcNAQELBQADggEBACpGDw0FiKxntV5bvf8ImNCx 4BROSVBBsXHtY/QmJTpFn+DkQVgQ9tXp/Xk4ww2mYWHGqYdITdrjXo2N7W66rSbf DbhUb55tSLJjSolraDOhj73IZMPdzX3TZ2rZgPrw6zQCMbOrNqJZr8xnK5hbOIfK eHbDMNRIKL7Ee8v41/wNX/nTV7KjQzBay0hEeYzVfwGRSeAhuALBtz1Cx6cduA9k Xeqlp3IoR2W1ox1cUf++/Qw4NYMwCmUI4hWzgk3rR+R4q9HY3rF1p+VaPmD0B48+ RF9/Rbmbugo1rvHKpzfi5dcwxco7eDI69xrtO54Kfzr+VOglQ6ChRfSDDmFY4hM= -----END CERTIFICATE-----Generated at Tue Oct 13 12:46:18 2026 by rpki-client