$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa File: f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa (raw, json) Hash identifier: T2vEqoOYIKpajKzvjpamrn+T5jYf0qSc6SfA2ZJ8ZAY= Subject key identifier: 68:18:2E:78:F9:E0:1C:FD:B7:A1:D6:E7:DB:16:A3:7C:E1:B7:17:00 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 35070E1EB809D4A01F6B2FC8BC72950FE118A1D7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa Signing time: Sun 11 Oct 2026 15:08:51 +0000 ROA not before: Sun 11 Oct 2026 15:08:51 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:07:0e:1e:b8:09:d4:a0:1f:6b:2f:c8:bc:72:95:0f:e1:18:a1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:51 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=f657051d1c83fcc26d1bcaf484949b79f48a509b80b3445f5b7b789ee584da5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:89:ec:27:90:e3:e9:5a:ab:c3:86:1a:30: 0d:9a:ee:50:f8:69:4d:6b:b8:af:35:00:f2:74:37: 00:f8:9d:49:af:82:a8:b5:c4:41:5b:e0:35:ac:37: c4:41:ca:f7:34:af:28:e3:66:2c:ca:23:2c:9e:4e: 63:dc:f7:ee:4b:a6:c4:b7:01:bf:5e:eb:1f:77:44: 8b:89:b5:1e:0c:ce:a5:f2:ec:c7:3b:4a:cf:2d:38: 2a:85:a6:52:6a:58:3f:74:f7:44:9d:f7:50:30:84: cd:2a:a8:3f:ed:ed:f9:b2:8d:c5:ac:49:dc:86:21: e3:94:d6:96:80:f6:b4:44:aa:ad:bc:8c:b8:07:55: cb:0e:5a:a1:5d:95:ba:30:de:07:68:66:b3:00:97: 44:cd:93:82:c5:ac:a6:3d:fb:64:7d:2b:3d:ce:9b: da:8d:b0:1d:c7:86:47:b0:10:57:3b:15:b0:4b:dc: ab:dd:76:d3:41:c0:20:8b:cb:e1:e8:fd:8b:72:d5: b6:25:e1:f5:b7:43:f1:6b:9f:6d:7b:84:78:8c:e8: d5:3a:f5:a2:7c:07:65:d8:22:64:f2:ac:be:98:c0: ed:68:af:e6:f9:ef:02:67:e4:8a:8e:a0:59:7a:a1: fd:53:39:5f:04:85:55:ce:ed:5e:82:9c:a0:73:5b: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:2E:78:F9:E0:1C:FD:B7:A1:D6:E7:DB:16:A3:7C:E1:B7:17:00 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610e::/48 Signature Algorithm: sha256WithRSAEncryption 1e:98:c1:73:a1:28:72:43:cd:d3:8d:78:c8:74:da:10:e5:38: da:47:5b:87:21:4b:ff:a1:4c:62:3a:36:ff:f4:10:1a:af:66: 22:a2:65:99:d7:f9:f9:4a:fa:1e:d3:90:e5:e8:22:69:eb:79: 0a:6d:22:4e:45:b0:b1:0e:2d:68:93:39:ec:16:a3:1f:40:3d: d1:8b:b2:9b:53:9f:ea:5c:6a:0b:03:b8:6b:b8:b1:7b:ce:fc: a9:0c:60:fb:11:91:1f:2f:da:42:63:41:57:45:11:70:12:5a: 37:95:b5:97:d8:5d:ac:5e:2f:66:c1:70:da:f4:35:ba:42:1a: 17:7c:ce:70:50:a1:0b:00:90:97:f4:2f:46:de:2d:d4:ca:63: ce:c8:10:3f:46:c8:ec:e9:a9:fd:2b:45:c7:d2:6a:e7:a4:87: 6c:9b:4e:75:95:06:38:05:5d:8b:87:21:a2:26:8e:94:62:df: e8:dd:87:bd:5c:27:ba:e8:41:79:3b:5e:69:a6:77:2f:07:ff: 7b:19:57:68:1c:eb:f8:fe:68:da:b0:49:38:4f:86:a9:62:d3: 88:a4:a2:1b:6e:da:be:be:0d:14:69:bb:e8:6e:c1:74:9c:49: 44:40:7a:84:96:d8:ef:94:31:ce:5f:28:11:df:97:86:38:2d: dd:e5:81:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNQcOHrgJ1KAfay/IvHKVD+EYodcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODUxWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjU3MDUxZDFjODNmY2MyNmQxYmNhZjQ4NDk0OWI3OWY0 OGE1MDliODBiMzQ0NWY1YjdiNzg5ZWU1ODRkYTViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKlonsJ5Dj6Vqrw4YaMA2a7lD4aU1ruK81APJ0NwD4nUmv gqi1xEFb4DWsN8RByvc0ryjjZizKIyyeTmPc9+5LpsS3Ab9e6x93RIuJtR4MzqXy 7Mc7Ss8tOCqFplJqWD9090Sd91AwhM0qqD/t7fmyjcWsSdyGIeOU1paA9rREqq28 jLgHVcsOWqFdlbow3gdoZrMAl0TNk4LFrKY9+2R9Kz3Om9qNsB3HhkewEFc7FbBL 3KvddtNBwCCLy+Ho/Yty1bYl4fW3Q/Frn217hHiM6NU69aJ8B2XYImTyrL6YwO1o r+b57wJn5IqOoFl6of1TOV8EhVXO7V6CnKBzW3uJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaBguePngHP23odbn2xajfOG3FwAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4MTE4ZTllLTRkYTgtNGQyYS1iZjEzLTJmYWVmNGYxMzJkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ4wDQYJKoZIhvcNAQELBQADggEBAB6YwXOhKHJDzdONeMh02hDl ONpHW4chS/+hTGI6Nv/0EBqvZiKiZZnX+flK+h7TkOXoImnreQptIk5FsLEOLWiT OewWox9APdGLsptTn+pcagsDuGu4sXvO/KkMYPsRkR8v2kJjQVdFEXASWjeVtZfY XaxeL2bBcNr0NbpCGhd8znBQoQsAkJf0L0beLdTKY87IED9GyOzpqf0rRcfSauek h2ybTnWVBjgFXYuHIaImjpRi3+jdh71cJ7roQXk7Xmmmdy8H/3sZV2gc6/j+aNqw SThPhqli04ikohtu2r6+DRRpu+huwXScSURAeoSW2O+UMc5fKBHfl4Y4Ld3lgX0= -----END CERTIFICATE-----Generated at Tue Oct 27 15:21:24 2026 by rpki-client