$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa File: cd541762-84a0-4063-89f9-de14817d2419.roa (raw, json) Hash identifier: Ju+5QsiVsRC7W0F7n9F9W3GJAuu5OWV0m+15JW+QTes= Subject key identifier: 55:AC:57:27:60:3A:92:90:90:01:A1:25:0A:29:37:2B:F5:89:06:7C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5CA94BBA83EB5F4A5B5DA490575E2A51B232F50C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa Signing time: Mon 26 Oct 2026 04:10:12 +0000 ROA not before: Mon 26 Oct 2026 04:10:12 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a9:4b:ba:83:eb:5f:4a:5b:5d:a4:90:57:5e:2a:51:b2:32:f5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:12 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d5bd8015b17b1e953f5a720b3d1f43441b304a85d2c76254024bf9e1b1be3cb1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:42:0a:b4:9a:ad:3c:59:48:9c:7a:c9:f8: 2a:bc:e3:52:c0:b1:41:6f:e5:74:62:0f:f5:39:51: 0f:1b:87:5a:99:77:f2:e7:f6:49:b0:b8:09:11:e0: b9:80:d4:35:97:14:a9:77:9c:f1:db:e8:84:e4:e7: cf:86:ee:56:b2:1c:e2:87:5d:a3:7d:9e:cf:9f:b8: f6:a5:43:b2:70:96:c0:43:90:71:03:cd:11:1f:6d: a5:91:a5:48:15:61:43:8f:26:ff:f7:a3:2a:c6:4c: 3e:f7:e0:05:4f:b3:6f:c7:9d:d7:f5:b1:9c:d3:a5: 66:f9:ba:65:eb:19:fa:55:9d:d3:9b:76:52:da:dc: 7b:ff:b0:61:ec:72:de:2c:9d:0b:cf:88:92:e5:74: 22:57:72:5e:45:e1:a7:d4:2d:6e:48:22:03:27:ad: c3:71:db:d8:83:90:0a:d3:9e:25:a1:ad:6e:a8:6c: 01:5c:50:b7:72:0c:8d:92:42:86:22:6d:05:8c:55: f7:f6:c0:25:e0:01:87:67:e0:0f:aa:51:f1:61:65: 40:b5:fd:63:54:3f:61:3f:1f:14:4a:86:1c:8c:7a: 0e:19:22:62:a0:b9:c4:b9:b0:2c:02:d8:72:b6:69: 92:b5:6a:24:13:78:66:bf:8b:26:0e:77:8f:67:96: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AC:57:27:60:3A:92:90:90:01:A1:25:0A:29:37:2B:F5:89:06:7C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/44 Signature Algorithm: sha256WithRSAEncryption 0b:27:b2:4a:75:af:ec:6a:24:aa:2f:65:9e:bd:09:b3:e3:a4: 3a:2e:e7:f3:b3:69:96:c4:78:5c:f2:15:11:10:27:01:34:0e: da:b5:20:58:3b:a2:da:b8:0b:57:7d:84:dc:cf:8c:29:c5:b8: 38:b3:44:35:92:59:77:00:18:0e:ca:53:98:93:7a:62:5c:99: 08:55:44:f6:27:a8:20:01:01:1c:fa:47:ed:08:59:38:ee:90: 86:41:a1:fc:43:3f:ca:87:8b:c6:e9:d2:5a:c2:43:df:11:07: 84:41:ca:8e:51:77:c5:5b:04:ec:3a:12:62:d0:41:3f:42:32: 18:57:f1:45:6d:c5:69:29:e3:4e:a8:c3:28:cb:8a:2f:e6:ff: 0c:87:72:f2:4a:ea:33:bf:05:e0:a3:1f:bb:64:86:98:93:3b: e7:08:17:67:08:a1:cc:a0:92:75:27:8a:68:2e:c0:b0:2d:ef: 27:cb:99:ca:00:a0:f0:cf:1d:01:14:fd:af:b1:3b:22:a0:f3: aa:2c:9f:5d:96:55:03:33:df:e1:e2:57:ec:aa:a0:d9:d2:dc: 06:6e:e7:8f:96:1e:e9:34:5d:00:dd:74:25:ee:29:8b:40:3d: a0:c8:2b:10:a8:f1:93:86:9a:da:08:ee:24:10:24:c4:8a:13: 43:7a:b7:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXKlLuoPrX0pbXaSQV14qUbIy9QwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDEyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWJkODAxNWIxN2IxZTk1M2Y1YTcyMGIzZDFmNDM0NDFi MzA0YTg1ZDJjNzYyNTQwMjRiZjllMWIxYmUzY2IxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUy0IKtJqtPFlInHrJ+Cq841LAsUFv5XRiD/U5UQ8bh1qZ d/Ln9kmwuAkR4LmA1DWXFKl3nPHb6ITk58+G7layHOKHXaN9ns+fuPalQ7JwlsBD kHEDzREfbaWRpUgVYUOPJv/3oyrGTD734AVPs2/Hndf1sZzTpWb5umXrGfpVndOb dlLa3Hv/sGHsct4snQvPiJLldCJXcl5F4afULW5IIgMnrcNx29iDkArTniWhrW6o bAFcULdyDI2SQoYibQWMVff2wCXgAYdn4A+qUfFhZUC1/WNUP2E/HxRKhhyMeg4Z ImKgucS5sCwC2HK2aZK1aiQTeGa/iyYOd49nlk9TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVaxXJ2A6kpCQAaElCik3K/WJBnwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NkNTQxNzYyLTg0YTAtNDA2My04OWY5LWRlMTQ4MTdkMjQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAAsnskp1r+xqJKovZZ69CbPj pDou5/OzaZbEeFzyFREQJwE0Dtq1IFg7otq4C1d9hNzPjCnFuDizRDWSWXcAGA7K U5iTemJcmQhVRPYnqCABARz6R+0IWTjukIZBofxDP8qHi8bp0lrCQ98RB4RByo5R d8VbBOw6EmLQQT9CMhhX8UVtxWkp406owyjLii/m/wyHcvJK6jO/BeCjH7tkhpiT O+cIF2cIocygknUnimguwLAt7yfLmcoAoPDPHQEU/a+xOyKg86osn12WVQMz3+Hi V+yqoNnS3AZu54+WHuk0XQDddCXuKYtAPaDIKxCo8ZOGmtoI7iQQJMSKE0N6tzQ= -----END CERTIFICATE-----Generated at Tue Oct 27 15:33:10 2026 by rpki-client