$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa File: ca586b6c-c586-4283-8392-892b53790b90.roa (raw, json) Hash identifier: iYGP33IQaIeXfcUicPtBt6FbuYAjbf2BfJ5IiQtY/SA= Subject key identifier: 42:A6:FD:6F:C5:C2:80:E3:BE:74:60:1E:AA:AF:D9:73:45:07:5F:C6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29AEBDFE39951DFF6E7187412AADED1DB4C199B8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa Signing time: Thu 30 Jul 2026 01:20:03 +0000 ROA not before: Thu 30 Jul 2026 01:20:03 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:bd:fe:39:95:1d:ff:6e:71:87:41:2a:ad:ed:1d:b4:c1:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 30 01:20:03 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=4b73142e5e4b0939e8695462fc732d8701243a103fc0437d209ac8e47f8d55e1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:49:46:4f:66:e6:d2:6f:7d:62:79:ce:32: 95:79:ac:53:be:e6:86:fe:50:0f:85:3e:e1:1a:de: e4:24:34:50:5d:ee:35:50:f5:69:d0:80:7b:ae:71: 40:87:37:fd:82:fc:c1:51:28:fe:45:bc:77:d6:b7: 5c:fa:71:9f:92:0d:bf:a8:92:b7:33:2d:85:c3:47: a4:fd:eb:a7:59:e9:76:06:36:ef:2d:a4:64:69:10: 18:72:ae:09:4e:3c:bf:3f:b9:b8:bb:76:ab:b8:ec: a4:b7:fe:34:b2:6e:83:95:70:e8:e7:d8:96:cc:f5: ef:5a:34:13:79:15:e6:8c:1a:d8:28:39:95:1e:cc: fb:80:2b:a4:3a:be:9c:16:35:a9:37:47:30:c0:ce: 06:45:2e:34:d6:56:e2:ad:42:80:62:5f:81:f6:4b: 92:39:d6:8e:dd:93:db:b3:a6:e4:8e:db:fb:b3:c4: dd:be:19:81:9c:59:3b:19:62:34:5e:3a:fa:a2:3c: 83:ab:92:7e:4d:83:f0:15:ea:fc:9a:63:b6:d7:c8: 95:e2:13:31:9b:2f:af:7c:a7:06:a8:93:71:b1:1f: 2d:d5:ae:e7:4d:21:fe:9e:2c:0c:58:2e:b1:2b:bc: 99:49:39:d7:95:84:a3:95:0c:18:bb:64:98:92:66: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:FD:6F:C5:C2:80:E3:BE:74:60:1E:AA:AF:D9:73:45:07:5F:C6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1::/44 Signature Algorithm: sha256WithRSAEncryption 55:55:03:47:87:37:a7:b5:2e:82:cb:41:50:07:30:d8:14:92: cf:cf:59:65:9e:93:a7:43:cd:a3:89:fd:38:4c:f4:2d:89:91: 05:68:76:de:46:2a:c8:a6:1e:f1:23:3a:b2:00:e2:b1:e7:e2: 65:fd:57:56:90:8f:10:ee:50:72:49:10:03:fc:9d:bb:bc:00: ae:3f:1c:ba:43:06:cb:39:01:19:d1:c1:67:df:a0:0a:1a:a7: d9:fe:7a:f3:66:32:fb:0f:91:1e:43:01:57:96:7e:3e:ca:db: b2:53:cd:c2:a3:0b:fe:c2:12:2f:90:bd:9c:7e:82:ef:f6:ad: 9b:e0:4e:73:8b:be:7d:a3:6e:fc:9d:c1:d0:9b:47:8f:7e:36: f6:91:b9:6d:d0:ab:ef:0b:c8:37:93:8f:ff:e6:3b:96:fb:18: 70:bc:b4:ea:bd:fe:dc:c1:d4:51:14:d6:db:40:56:71:74:cf: d5:a1:86:a6:b3:83:89:85:cc:81:a0:6e:a7:92:fa:37:6c:1f: 92:25:49:bd:8e:b3:ca:6b:3c:79:e1:15:6d:ad:35:21:49:6e: fb:5a:71:db:a7:8b:f5:65:dd:68:53:76:7e:46:24:69:4e:89: 4f:ff:72:63:31:81:2e:68:cb:48:29:bc:2b:bb:88:34:26:90: 85:84:f8:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKa69/jmVHf9ucYdBKq3tHbTBmbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzMwMDEyMDAzWhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjczMTQyZTVlNGIwOTM5ZTg2OTU0NjJmYzczMmQ4NzAx MjQzYTEwM2ZjMDQzN2QyMDlhYzhlNDdmOGQ1NWUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS2UlGT2bm0m99YnnOMpV5rFO+5ob+UA+FPuEa3uQkNFBd 7jVQ9WnQgHuucUCHN/2C/MFRKP5FvHfWt1z6cZ+SDb+okrczLYXDR6T966dZ6XYG Nu8tpGRpEBhyrglOPL8/ubi7dqu47KS3/jSyboOVcOjn2JbM9e9aNBN5FeaMGtgo OZUezPuAK6Q6vpwWNak3RzDAzgZFLjTWVuKtQoBiX4H2S5I51o7dk9uzpuSO2/uz xN2+GYGcWTsZYjReOvqiPIOrkn5Ng/AV6vyaY7bXyJXiEzGbL698pwaok3GxHy3V rudNIf6eLAxYLrErvJlJOdeVhKOVDBi7ZJiSZrJVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQqb9b8XCgOO+dGAeqq/Zc0UHX8YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NhNTg2YjZjLWM1ODYtNDI4My04MzkyLTg5MmI1Mzc5MGI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAAAwDQYJKoZIhvcNAQELBQADggEBAFVVA0eHN6e1LoLLQVAHMNgU ks/PWWWek6dDzaOJ/ThM9C2JkQVodt5GKsimHvEjOrIA4rHn4mX9V1aQjxDuUHJJ EAP8nbu8AK4/HLpDBss5ARnRwWffoAoap9n+evNmMvsPkR5DAVeWfj7K27JTzcKj C/7CEi+QvZx+gu/2rZvgTnOLvn2jbvydwdCbR49+NvaRuW3Qq+8LyDeTj//mO5b7 GHC8tOq9/tzB1FEU1ttAVnF0z9Whhqazg4mFzIGgbqeS+jdsH5IlSb2Os8prPHnh FW2tNSFJbvtacduni/Vl3WhTdn5GJGlOiU//cmMxgS5oy0gpvCu7iDQmkIWE+NA= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:51 2026 by rpki-client