$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa File: ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa (raw, json) Hash identifier: 9dEUuMITCY9yLTCcXbCj/3CWtAtMStOC2JQzP5sRUYM= Subject key identifier: BD:0A:B7:29:72:0C:CC:91:A2:87:30:EA:87:38:CB:BA:CA:28:55:01 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 21C5EE55846C112759E54D29383322F2816710F0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa Signing time: Sun 11 Oct 2026 15:08:14 +0000 ROA not before: Sun 11 Oct 2026 15:08:14 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c5:ee:55:84:6c:11:27:59:e5:4d:29:38:33:22:f2:81:67:10:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:14 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=785f24df6421f340908c74f7389ca7d05df4d8bb7d3a53507d7ffe90bcf05ec5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:b0:55:6b:0d:98:b5:54:66:ba:83:a0:f3: a6:7a:f8:c0:27:61:5c:dd:8c:9e:7b:45:6a:be:b6: 87:f7:b4:0e:90:d0:8a:88:8c:a1:1c:7d:ba:65:3e: 0d:fc:94:fe:8c:5e:25:8a:88:27:5f:dc:c8:cc:06: cd:f7:9b:15:44:26:49:0d:19:62:15:76:01:ce:fe: 1a:e7:18:cf:26:48:91:5a:2b:ff:9c:a4:a8:3d:01: c1:88:ee:81:e3:f6:d6:d8:c0:ab:62:dc:89:0c:d6: f1:e4:4c:05:da:cc:39:94:be:3d:e5:6f:08:af:6e: 8f:0c:e9:c3:e4:53:d9:e5:f1:cd:5a:a1:0c:c4:0a: 39:b8:0f:68:46:78:64:84:b2:b9:e7:34:48:ac:74: 97:cc:9b:6f:97:90:29:11:52:b4:41:fc:cb:ef:61: 1a:5a:87:67:ef:e8:eb:ac:5b:1f:65:f5:40:a4:f6: 11:88:08:e0:db:24:3b:85:3f:db:6b:75:50:43:65: 6c:84:d2:ec:e3:88:d8:9d:fb:b6:4b:28:bd:bb:ec: 52:b7:37:8c:4f:42:c8:8d:c1:c2:2f:71:da:98:be: 4a:b8:41:37:e6:13:1c:ce:36:b6:d5:0d:21:30:39: 57:72:bc:c3:a2:96:45:bb:77:1d:b4:51:85:df:58: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0A:B7:29:72:0C:CC:91:A2:87:30:EA:87:38:CB:BA:CA:28:55:01 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 0e:a9:d3:37:a3:12:ad:71:cf:0d:ff:03:97:e6:05:20:fb:74: c6:2e:c2:f3:fa:0d:0e:bb:4e:8d:7f:e6:80:7d:d6:bd:92:5f: ab:8f:09:c1:ba:24:01:cc:a2:7a:4e:d5:3f:0b:4f:64:f0:b8: 8f:6b:61:aa:e1:2c:3b:b9:eb:d1:07:93:da:c3:41:54:65:e3: d7:14:52:8f:4b:fa:d7:0b:18:4f:14:fc:37:a6:f4:28:2b:33: da:52:32:ce:88:8c:43:cc:57:a6:a7:f9:d2:ba:5d:0e:a1:29: c7:1c:ae:52:79:bd:32:b4:93:5b:fc:b1:12:2d:d9:63:cd:b3: ce:1b:99:20:58:d7:d9:fb:a7:cb:2d:8f:7a:a0:19:d1:09:9f: 9b:3b:71:42:7a:29:de:dd:b3:21:8e:d2:e3:dd:a3:1f:9f:b1: 19:0b:9d:64:34:d7:b4:06:58:4b:db:58:e4:05:1d:8d:a0:5d: 4f:65:b1:05:67:50:24:6b:41:90:5a:48:f8:0b:6f:14:3f:c7: 95:05:8e:72:9f:40:fe:28:84:64:da:d3:48:83:0d:9f:3a:d2: 11:ff:2d:96:e8:f7:53:b8:34:eb:64:aa:52:35:06:3c:9c:2b: b5:d2:b2:e7:08:3d:38:7b:68:6b:10:2e:c9:7b:08:17:64:82: 95:78:1a:a1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIcXuVYRsESdZ5U0pODMi8oFnEPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODE0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODVmMjRkZjY0MjFmMzQwOTA4Yzc0ZjczODljYTdkMDVk ZjRkOGJiN2QzYTUzNTA3ZDdmZmU5MGJjZjA1ZWM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVp7BVaw2YtVRmuoOg86Z6+MAnYVzdjJ57RWq+tof3tA6Q 0IqIjKEcfbplPg38lP6MXiWKiCdf3MjMBs33mxVEJkkNGWIVdgHO/hrnGM8mSJFa K/+cpKg9AcGI7oHj9tbYwKti3IkM1vHkTAXazDmUvj3lbwivbo8M6cPkU9nl8c1a oQzECjm4D2hGeGSEsrnnNEisdJfMm2+XkCkRUrRB/MvvYRpah2fv6OusWx9l9UCk 9hGICODbJDuFP9trdVBDZWyE0uzjiNid+7ZLKL277FK3N4xPQsiNwcIvcdqYvkq4 QTfmExzONrbVDSEwOVdyvMOilkW7dx20UYXfWJI/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvQq3KXIMzJGihzDqhzjLusooVQEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JhNjk5YzFlLTllMTctNDEzNC05ZDFmLThiYTk3ZmZkOWYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBAA6p0zejEq1xzw3/A5fmBSD7 dMYuwvP6DQ67To1/5oB91r2SX6uPCcG6JAHMonpO1T8LT2TwuI9rYarhLDu569EH k9rDQVRl49cUUo9L+tcLGE8U/Dem9CgrM9pSMs6IjEPMV6an+dK6XQ6hKcccrlJ5 vTK0k1v8sRIt2WPNs84bmSBY19n7p8stj3qgGdEJn5s7cUJ6Kd7dsyGO0uPdox+f sRkLnWQ017QGWEvbWOQFHY2gXU9lsQVnUCRrQZBaSPgLbxQ/x5UFjnKfQP4ohGTa 00iDDZ860hH/LZbo91O4NOtkqlI1BjycK7XSsucIPTh7aGsQLsl7CBdkgpV4GqE= -----END CERTIFICATE-----Generated at Tue Oct 27 15:29:03 2026 by rpki-client