$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7848a3e-d112-40af-ba54-36e601fb43bf.roa File: b7848a3e-d112-40af-ba54-36e601fb43bf.roa (raw, json) Hash identifier: N/y/DLj2XYDASGtQR6nExMFbvtjrY+lUdp+NIJ3M1aw= Subject key identifier: 64:12:CB:73:9D:2F:D1:1D:8C:78:62:24:B4:5F:35:91:A8:6B:C2:A9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 612EB00069854164063B195EDDBD2B18E203A35D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7848a3e-d112-40af-ba54-36e601fb43bf.roa Signing time: Fri 13 Nov 2026 21:34:14 +0000 ROA not before: Fri 13 Nov 2026 21:34:14 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:4314::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2e:b0:00:69:85:41:64:06:3b:19:5e:dd:bd:2b:18:e2:03:a3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:34:14 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=ab63b8fa17d556137e4b5534c26a035ec4d6ddc81ad671412d2ebfb5cb65dd7d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:8d:1b:19:1f:91:9b:99:a5:13:72:43:79: 19:70:e6:b5:6b:8a:c6:f7:6c:a8:1d:4f:df:3f:07: c8:03:27:ce:67:34:a0:1b:a2:fe:bc:da:dd:52:aa: 36:b6:9d:bb:64:d5:6a:19:8d:73:b7:b7:33:26:26: ac:a5:f3:9d:72:4f:28:4e:9e:64:57:60:2d:e6:ca: 42:b0:8f:9e:81:b6:8e:0f:f8:96:f1:77:cf:b2:23: 1a:b0:00:bb:75:05:48:0f:82:ae:e8:fc:4a:7e:97: 7b:25:b4:35:a3:b0:0d:b8:98:e4:3f:bd:b8:10:c1: 93:d1:2e:ab:c6:1c:0d:c6:80:69:5b:94:3d:e9:d0: ba:34:53:ac:e4:22:49:57:a8:5e:bf:ca:92:a9:6b: 48:73:d6:5d:23:86:ad:ea:e2:8d:7e:69:af:fe:47: fa:f4:8c:f3:e5:3c:cf:64:d4:78:6c:3c:58:9e:93: fd:48:b2:d0:3f:14:43:5d:73:72:84:3d:3d:bf:f8: 68:61:fc:0b:dc:0e:ed:52:60:c5:db:4f:f1:10:39: ff:aa:06:4c:9f:f9:89:48:4a:68:78:97:55:fe:2c: e0:94:06:ae:39:43:31:71:3a:44:f7:9d:29:9d:6c: bd:23:31:91:6b:63:61:56:c0:99:f4:9d:12:bb:1f: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:12:CB:73:9D:2F:D1:1D:8C:78:62:24:B4:5F:35:91:A8:6B:C2:A9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7848a3e-d112-40af-ba54-36e601fb43bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4314::/46 Signature Algorithm: sha256WithRSAEncryption 3e:37:38:fe:f4:76:24:fb:6c:44:2f:b7:83:32:64:e4:a5:7d: bf:b8:3e:f4:fd:dc:4f:9a:da:43:7a:22:e5:38:2c:a4:f1:d6: a4:6e:e5:00:86:56:1d:0b:0e:e2:30:bf:dc:ce:2e:cf:47:81: ec:64:35:b8:d9:45:2b:8d:fa:6f:77:6a:a0:8a:a9:93:ed:33: 86:67:23:e8:1d:bf:bd:54:67:b8:c2:af:eb:c8:01:d8:a1:91: 60:5f:3c:26:8a:10:f6:a1:78:40:a1:30:a7:5b:64:8d:75:57: 2d:c0:10:04:89:f1:8f:28:cc:cf:bb:76:f5:71:c6:d9:94:32: f1:d6:78:cc:f6:4a:d0:bf:72:99:da:0a:fb:46:9f:69:9a:0e: 30:4d:80:63:0c:98:ca:7b:88:78:10:48:d0:d5:9a:c0:73:47: 00:fb:7b:29:03:88:09:76:da:4b:08:e9:9a:c2:66:d9:43:f0: 37:ac:75:ad:a5:16:9a:3c:2f:36:52:3c:68:59:fa:3b:bb:79: b7:4a:4c:b7:a3:d5:3a:f7:ae:3a:5d:6c:0a:9f:40:97:7b:56: 93:93:65:e9:84:d6:91:32:ad:17:5c:18:90:f7:74:34:ec:99: f8:31:3b:74:a9:15:50:63:5a:9d:20:7d:5b:46:55:13:a4:94: 1b:11:e4:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYS6wAGmFQWQGOxle3b0rGOIDo10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjEzNDE0WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjYzYjhmYTE3ZDU1NjEzN2U0YjU1MzRjMjZhMDM1ZWM0 ZDZkZGM4MWFkNjcxNDEyZDJlYmZiNWNiNjVkZDdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpYY0bGR+Rm5mlE3JDeRlw5rVrisb3bKgdT98/B8gDJ85n NKAbov682t1Sqja2nbtk1WoZjXO3tzMmJqyl851yTyhOnmRXYC3mykKwj56Bto4P +Jbxd8+yIxqwALt1BUgPgq7o/Ep+l3sltDWjsA24mOQ/vbgQwZPRLqvGHA3GgGlb lD3p0Lo0U6zkIklXqF6/ypKpa0hz1l0jhq3q4o1+aa/+R/r0jPPlPM9k1HhsPFie k/1IstA/FENdc3KEPT2/+Ghh/AvcDu1SYMXbT/EQOf+qBkyf+YlISmh4l1X+LOCU Bq45QzFxOkT3nSmdbL0jMZFrY2FWwJn0nRK7HynfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZBLLc50v0R2MeGIktF81kahrwqkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3ODQ4YTNlLWQxMTItNDBhZi1iYTU0LTM2ZTYwMWZiNDNiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxQwDQYJKoZIhvcNAQELBQADggEBAD43OP70diT7bEQvt4MyZOSl fb+4PvT93E+a2kN6IuU4LKTx1qRu5QCGVh0LDuIwv9zOLs9HgexkNbjZRSuN+m93 aqCKqZPtM4ZnI+gdv71UZ7jCr+vIAdihkWBfPCaKEPaheEChMKdbZI11Vy3AEASJ 8Y8ozM+7dvVxxtmUMvHWeMz2StC/cpnaCvtGn2maDjBNgGMMmMp7iHgQSNDVmsBz RwD7eykDiAl22ksI6ZrCZtlD8Desda2lFpo8LzZSPGhZ+ju7ebdKTLej1Tr3rjpd bAqfQJd7VpOTZemE1pEyrRdcGJD3dDTsmfgxO3SpFVBjWp0gfVtGVROklBsR5DY= -----END CERTIFICATE-----Generated at Sun Nov 15 05:42:46 2026 by rpki-client