$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bebb2494-7910-4959-bc62-23415be752c8.roa File: bebb2494-7910-4959-bc62-23415be752c8.roa (raw, json) Hash identifier: onR0gLFIQfcPxG7VBGNUtxaV9gfR5oNGyDzPZQCwu5U= Subject key identifier: 21:12:9C:77:8C:44:13:2C:CE:7A:E1:DA:0C:B0:A2:E0:9F:ED:15:20 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 10615499764885361E389B83062760A64ECDE108 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bebb2494-7910-4959-bc62-23415be752c8.roa Signing time: Thu 15 Oct 2026 17:13:06 +0000 ROA not before: Thu 15 Oct 2026 17:13:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:740f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:61:54:99:76:48:85:36:1e:38:9b:83:06:27:60:a6:4e:cd:e1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 17:13:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=26217323403d260d891ea36018bbcbdbf69f398b4a428876171c23c8064e4527, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:d1:2e:b1:0b:0c:8a:60:db:b0:6a:2b:bd: 10:f1:88:58:61:c0:70:39:6c:56:82:ca:5a:d5:41: be:10:10:ee:86:21:e2:66:2a:19:18:ae:ff:63:37: 4a:44:f7:78:ed:fa:7f:8d:28:7d:81:89:c2:5c:52: df:85:0d:e0:48:62:dd:09:ed:f6:ec:ac:78:36:4e: 12:30:57:68:5d:54:6f:55:11:b9:f1:93:40:a6:d2: 69:52:2f:a9:ab:86:56:ea:d2:24:8e:ce:ae:df:bc: 70:9c:a0:33:92:36:7d:e2:e7:30:1b:24:1e:fc:0e: c4:29:bb:ef:c8:59:48:8c:5c:b6:a1:d8:e7:f7:33: 9d:96:ba:5e:36:1d:45:dc:3e:b9:ac:9c:de:ea:74: da:c3:8b:23:05:63:71:f2:86:75:71:41:44:cc:8f: 39:6a:14:21:45:f6:86:6e:3f:d3:32:f4:4f:17:ca: 51:de:27:63:da:c2:c6:43:82:75:eb:3b:23:85:be: e1:a7:39:79:96:de:f9:b1:0d:d8:7b:55:f8:a7:d2: b7:8a:00:df:fa:e7:3c:65:0c:5c:f5:53:a0:3c:21: d4:d5:c3:58:ee:38:4e:11:52:9e:51:fc:e8:aa:02: 29:bf:52:17:2d:9b:cb:c3:ac:7e:0a:a4:87:67:55: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:9C:77:8C:44:13:2C:CE:7A:E1:DA:0C:B0:A2:E0:9F:ED:15:20 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bebb2494-7910-4959-bc62-23415be752c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:740f::/48 Signature Algorithm: sha256WithRSAEncryption 89:1d:b6:37:d3:7e:4d:90:ee:aa:99:87:2d:6c:94:77:fa:88: 2f:63:da:93:99:13:59:01:3d:b8:9b:73:ad:b4:25:0a:90:bd: f9:37:df:9d:72:0a:e6:33:b5:b9:27:81:79:db:44:e1:74:03: 90:42:1d:65:14:da:12:30:9e:f7:9d:89:d8:b5:b0:d0:2d:68: 00:eb:4d:ec:74:b9:10:ca:7a:6e:8b:3a:6f:06:b8:16:62:c5: 56:32:2a:ef:41:52:ad:0f:e4:93:d4:b4:c9:42:97:ab:2b:b0: 67:af:a0:b3:cd:12:3c:cb:9f:3d:29:87:6c:75:4d:b9:77:56: 60:b5:57:2e:60:9c:ca:06:a5:d8:d2:e7:0e:bb:df:7f:f5:fe: f4:7e:64:5d:b3:d7:b5:68:6f:ad:09:57:20:83:15:d3:34:ee: 36:4c:a9:64:54:1e:e9:34:7e:ae:4b:9d:3a:67:ab:f9:13:2d: 70:32:2c:11:b0:10:c5:4f:b8:10:47:ba:f6:2a:fd:14:ca:83: 5f:eb:11:e1:3c:c4:cd:3f:8b:9d:e2:39:18:d9:8b:90:a7:2a: 40:c9:07:1c:e1:70:38:6e:47:52:95:ae:36:95:78:67:1d:74: d5:d8:80:6d:14:d9:fd:f0:4c:91:3f:61:7a:e0:2d:a5:6c:3c: 20:82:c3:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEGFUmXZIhTYeOJuDBidgpk7N4QgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MTcxMzA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjIxNzMyMzQwM2QyNjBkODkxZWEzNjAxOGJiY2JkYmY2 OWYzOThiNGE0Mjg4NzYxNzFjMjNjODA2NGU0NTI3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqFdEusQsMimDbsGorvRDxiFhhwHA5bFaCylrVQb4QEO6G IeJmKhkYrv9jN0pE93jt+n+NKH2BicJcUt+FDeBIYt0J7fbsrHg2ThIwV2hdVG9V Ebnxk0Cm0mlSL6mrhlbq0iSOzq7fvHCcoDOSNn3i5zAbJB78DsQpu+/IWUiMXLah 2Of3M52Wul42HUXcPrmsnN7qdNrDiyMFY3HyhnVxQUTMjzlqFCFF9oZuP9My9E8X ylHeJ2PawsZDgnXrOyOFvuGnOXmW3vmxDdh7Vfin0reKAN/65zxlDFz1U6A8IdTV w1juOE4RUp5R/OiqAim/Uhctm8vDrH4KpIdnVRXPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIRKcd4xEEyzOeuHaDLCi4J/tFSAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JlYmIyNDk0LTc5MTAtNDk1OS1iYzYyLTIzNDE1YmU3NTJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydA8wDQYJKoZIhvcNAQELBQADggEBAIkdtjfTfk2Q7qqZhy1slHf6 iC9j2pOZE1kBPbibc620JQqQvfk3351yCuYztbkngXnbROF0A5BCHWUU2hIwnved idi1sNAtaADrTex0uRDKem6LOm8GuBZixVYyKu9BUq0P5JPUtMlCl6srsGevoLPN EjzLnz0ph2x1Tbl3VmC1Vy5gnMoGpdjS5w6733/1/vR+ZF2z17Vob60JVyCDFdM0 7jZMqWRUHuk0fq5LnTpnq/kTLXAyLBGwEMVPuBBHuvYq/RTKg1/rEeE8xM0/i53i ORjZi5CnKkDJBxzhcDhuR1KVrjaVeGcddNXYgG0U2f3wTJE/YXrgLaVsPCCCw4U= -----END CERTIFICATE-----Generated at Wed Oct 21 05:22:59 2026 by rpki-client