$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ce480e25-f1bf-4dbe-9001-c4977aeb303b.roa File: ce480e25-f1bf-4dbe-9001-c4977aeb303b.roa (raw, json) Hash identifier: gG/RgVGsOuVbicL8aBDGj5m+ipuRM9HN3f2ky9bCraM= Subject key identifier: 50:BB:E9:B6:53:4D:29:D3:8A:87:AC:9A:DD:FF:E1:B8:D4:D4:EA:3E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62862085CDCB81BDE2FE7A68C2408F5DF0AA8544 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ce480e25-f1bf-4dbe-9001-c4977aeb303b.roa Signing time: Thu 13 Aug 2026 00:00:11 +0000 ROA not before: Thu 13 Aug 2026 00:00:11 +0000 ROA not after: Wed 11 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:86:20:85:cd:cb:81:bd:e2:fe:7a:68:c2:40:8f:5d:f0:aa:85:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 13 00:00:11 2026 GMT Not After : Nov 11 23:59:59 2026 GMT Subject: serialNumber=34eb902035814aaae12feb29c7ee6424233fa6ac4563df5bd76c7bb3fdf6f577, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:84:6f:60:49:39:2e:15:ac:86:9f:a5:81: 7b:ae:a3:be:85:e6:8a:a9:49:1c:32:e2:a6:eb:62: ef:57:a6:c0:01:76:e7:dc:91:e0:12:27:c5:d4:1e: b4:ec:56:d1:cd:e6:91:d8:ba:2f:f9:bc:e7:c7:21: 40:4d:46:61:fc:c8:6c:9b:b0:36:c1:31:fb:c7:9e: 06:ef:ea:21:55:ec:ec:ae:a8:7f:26:9d:1f:da:5c: 1b:91:2d:f1:ce:c7:eb:b9:4d:3c:3c:b3:13:af:b1: 0c:42:79:fb:84:19:e4:a8:a1:3a:da:e4:7d:ab:24: 89:47:32:dc:ae:6b:26:84:78:05:6c:02:53:75:c7: 00:cc:43:dc:6f:20:73:63:de:91:37:02:c6:a7:b6: c9:64:d6:8b:22:0c:32:d8:23:75:4b:93:8a:d4:cc: 7c:29:e7:b5:22:91:37:1c:58:76:c9:f9:74:32:ad: 84:a4:04:4d:8e:c0:b5:31:d3:d4:ca:22:fb:00:06: c1:51:3f:e7:0f:b7:40:13:37:85:73:9a:56:bb:b6: f0:1c:44:27:2f:09:76:94:53:a2:41:54:bd:88:55: 13:70:a7:3b:d5:41:4a:0c:97:a6:0a:6e:de:5b:94: 1d:7e:7c:0e:81:27:23:80:93:7b:71:aa:57:37:cc: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:E9:B6:53:4D:29:D3:8A:87:AC:9A:DD:FF:E1:B8:D4:D4:EA:3E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ce480e25-f1bf-4dbe-9001-c4977aeb303b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f010::/44 Signature Algorithm: sha256WithRSAEncryption 0f:31:a4:bb:9c:ae:68:8d:71:2a:09:8a:b0:97:07:6e:ec:ca: 8f:d7:2a:18:73:d4:52:bc:55:6b:fb:8a:07:79:da:d5:b1:13: f1:b7:88:27:24:54:af:13:5c:16:c3:ae:70:c3:f2:1d:0a:29: fc:58:c2:78:7f:6a:cf:90:c4:3c:72:5f:46:51:96:8e:b4:0d: c6:5a:e6:cc:4d:96:53:1e:22:6f:25:aa:84:bd:01:1a:4a:5d: 3e:e6:a8:4f:b4:9b:cf:ff:e0:c6:c8:35:e2:5a:90:39:0e:b1: 0b:37:ab:1f:69:2a:18:4f:70:46:bb:98:6a:27:6b:de:0d:f4: 35:1f:8c:7c:8b:a1:e5:95:dc:7b:ec:bf:1c:5b:25:12:51:25: d2:d0:79:17:25:d2:63:7b:17:53:1d:cd:1d:db:3c:49:f3:59: 68:2a:b2:90:8c:ea:c0:91:1f:7f:c8:15:fa:96:3c:71:82:43: c8:e6:cd:35:27:6c:74:2c:c8:9f:3d:d0:a3:d4:77:00:f1:7d: 4e:c3:89:ac:36:2f:7f:fe:d8:f4:8d:2e:2d:20:99:83:bb:c3: a1:b7:33:6d:ad:d1:4f:0f:bb:b1:0c:4d:9a:2a:6a:3f:d4:4c: c1:3b:0e:22:76:70:85:c8:f1:25:d4:7e:df:76:de:ca:89:d4: 5b:7f:28:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYoYghc3Lgb3i/npowkCPXfCqhUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODEzMDAwMDExWhcNMjYxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGViOTAyMDM1ODE0YWFhZTEyZmViMjljN2VlNjQyNDIz M2ZhNmFjNDU2M2RmNWJkNzZjN2JiM2ZkZjZmNTc3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq+IRvYEk5LhWshp+lgXuuo76F5oqpSRwy4qbrYu9XpsAB dufckeASJ8XUHrTsVtHN5pHYui/5vOfHIUBNRmH8yGybsDbBMfvHngbv6iFV7Oyu qH8mnR/aXBuRLfHOx+u5TTw8sxOvsQxCefuEGeSooTra5H2rJIlHMtyuayaEeAVs AlN1xwDMQ9xvIHNj3pE3Asantslk1osiDDLYI3VLk4rUzHwp57UikTccWHbJ+XQy rYSkBE2OwLUx09TKIvsABsFRP+cPt0ATN4Vzmla7tvAcRCcvCXaUU6JBVL2IVRNw pzvVQUoMl6YKbt5blB1+fA6BJyOAk3txqlc3zMWfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUULvptlNNKdOKh6ya3f/huNTU6j4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NlNDgwZTI1LWYxYmYtNGRiZS05MDAxLWM0OTc3YWViMzAzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8BAwDQYJKoZIhvcNAQELBQADggEBAA8xpLucrmiNcSoJirCXB27s yo/XKhhz1FK8VWv7igd52tWxE/G3iCckVK8TXBbDrnDD8h0KKfxYwnh/as+QxDxy X0ZRlo60DcZa5sxNllMeIm8lqoS9ARpKXT7mqE+0m8//4MbINeJakDkOsQs3qx9p KhhPcEa7mGona94N9DUfjHyLoeWV3HvsvxxbJRJRJdLQeRcl0mN7F1MdzR3bPEnz WWgqspCM6sCRH3/IFfqWPHGCQ8jmzTUnbHQsyJ890KPUdwDxfU7Diaw2L3/+2PSN Li0gmYO7w6G3M22t0U8Pu7EMTZoqaj/UTME7DiJ2cIXI8SXUft923sqJ1Ft/KNA= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:55 2026 by rpki-client