$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa File: c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa (raw, json) Hash identifier: 4WsgS41avQq6QfAVD7b6gSj4nAL2bJRzzTzOC0quPZU= Subject key identifier: BB:61:29:F7:05:F9:EC:1B:30:6E:DD:7D:29:04:63:FB:06:3C:CB:9F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1AB9727DFCC230D077DCB78FC6C478A6E9990F3E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa Signing time: Fri 07 Aug 2026 04:21:01 +0000 ROA not before: Fri 07 Aug 2026 04:21:01 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b9:72:7d:fc:c2:30:d0:77:dc:b7:8f:c6:c4:78:a6:e9:99:0f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:21:01 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=8d3bca90922747c701a9408d17643977ff7774e6e0f5c944995c6132ca54a3dd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:d7:3b:22:58:98:56:b3:27:69:34:f0:3b: 1e:dc:a7:4e:15:a9:00:85:fc:b4:35:f6:ad:4e:ad: 63:6e:43:78:da:13:f7:d4:b4:a4:e9:7d:e8:de:12: fb:22:93:a2:e1:ea:33:28:33:9d:24:57:a2:d0:9b: 29:4b:02:78:99:fa:8e:9e:34:e5:a0:17:87:f4:cf: 06:0d:1e:ba:3a:42:0e:aa:66:3e:31:72:d2:fd:87: 3a:1f:8c:58:7b:83:e8:cd:39:36:f2:5c:15:90:9d: e1:38:e9:c8:80:fe:59:e1:9c:d1:cd:7b:0f:3a:26: b0:cf:27:79:77:f2:b6:74:84:8c:c0:77:b9:8f:90: 8e:2c:5e:20:4c:38:b1:1e:28:0a:71:9f:f6:e8:48: 37:84:8c:e5:6a:a6:7e:39:0e:8f:f2:02:d0:1f:25: 33:fd:44:39:b0:11:1f:df:63:c8:e5:ad:95:4f:82: 46:0d:f1:c0:dd:96:1c:ca:3d:a9:cc:13:a1:b5:38: 66:98:e5:ac:a3:7a:d3:8d:4b:de:eb:80:f3:4c:c8: 1e:10:14:6c:55:b5:2a:4e:ba:9b:92:e4:db:70:d2: e0:5e:3c:21:33:92:2d:43:6f:2c:b4:4e:fd:2e:0e: 17:ac:ea:84:06:31:8f:aa:dd:d9:88:3a:70:69:8b: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:29:F7:05:F9:EC:1B:30:6E:DD:7D:29:04:63:FB:06:3C:CB:9F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:300::/44 Signature Algorithm: sha256WithRSAEncryption 42:3a:95:b4:38:bd:da:54:cd:60:81:ec:e1:3a:b0:b1:aa:b1: c9:98:2a:ea:5a:59:4b:93:ad:7e:35:eb:93:2f:eb:cb:4e:9a: 6e:35:eb:5e:c0:9e:29:e5:0a:5d:b1:bc:51:37:13:21:fc:5f: b1:14:40:37:d0:b9:0b:6f:fd:0b:4b:e4:78:57:f2:14:e2:e8: c7:f1:39:4a:68:2d:32:30:d1:22:bc:18:65:42:79:af:22:00: e1:5a:4b:d6:66:c4:21:1c:c3:d2:31:80:42:a4:48:7b:f2:ec: c9:10:38:1e:d2:6a:53:8f:9a:fc:8c:b4:ee:f6:d4:3a:25:87: a2:62:22:22:b8:2d:16:d1:d6:b3:7f:c4:2d:53:e6:a9:ed:b9: 36:f4:c0:33:01:8a:e2:f1:9c:72:3c:04:8c:f7:58:8e:40:0d: 57:be:12:10:1c:cb:99:21:80:16:bf:5e:7c:f1:de:62:40:ae: fc:6e:25:62:71:4f:94:b8:c3:2c:d5:ed:04:4b:1d:60:a5:77: 8f:d9:60:b3:18:3c:60:f5:05:cd:a6:e2:d2:17:4c:64:f3:63: 04:e4:ca:8f:77:e2:a1:60:f5:e2:c5:9d:81:b6:ba:90:a2:bd: 12:c5:cc:97:3a:ef:78:94:ef:64:7e:3b:77:22:36:3c:be:3e: ee:34:3c:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGrlyffzCMNB33LePxsR4pumZDz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMTAxWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDNiY2E5MDkyMjc0N2M3MDFhOTQwOGQxNzY0Mzk3N2Zm Nzc3NGU2ZTBmNWM5NDQ5OTVjNjEzMmNhNTRhM2RkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDopNc7IliYVrMnaTTwOx7cp04VqQCF/LQ19q1OrWNuQ3ja E/fUtKTpfejeEvsik6Lh6jMoM50kV6LQmylLAniZ+o6eNOWgF4f0zwYNHro6Qg6q Zj4xctL9hzofjFh7g+jNOTbyXBWQneE46ciA/lnhnNHNew86JrDPJ3l38rZ0hIzA d7mPkI4sXiBMOLEeKApxn/boSDeEjOVqpn45Do/yAtAfJTP9RDmwER/fY8jlrZVP gkYN8cDdlhzKPanME6G1OGaY5ayjetONS97rgPNMyB4QFGxVtSpOupuS5Ntw0uBe PCEzki1Dbyy0Tv0uDhes6oQGMY+q3dmIOnBpi9wzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUu2Ep9wX57Bswbt19KQRj+wY8y58wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5YTdiZDIwLTQ4YmQtNGYwYS05MzdlLTJjY2M3MzAwOGY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAwAwDQYJKoZIhvcNAQELBQADggEBAEI6lbQ4vdpUzWCB7OE6sLGq scmYKupaWUuTrX4165Mv68tOmm41617AninlCl2xvFE3EyH8X7EUQDfQuQtv/QtL 5HhX8hTi6MfxOUpoLTIw0SK8GGVCea8iAOFaS9ZmxCEcw9IxgEKkSHvy7MkQOB7S alOPmvyMtO721Dolh6JiIiK4LRbR1rN/xC1T5qntuTb0wDMBiuLxnHI8BIz3WI5A DVe+EhAcy5khgBa/Xnzx3mJArvxuJWJxT5S4wyzV7QRLHWCld4/ZYLMYPGD1Bc2m 4tIXTGTzYwTkyo934qFg9eLFnYG2upCivRLFzJc673iU72R+O3ciNjy+Pu40PFI= -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:58 2026 by rpki-client