$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa File: 079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa (raw, json) Hash identifier: cusNW87zEqhSprIQ6pp2klBNohFkqrnUgKhJfDwgZjQ= Subject key identifier: DC:EE:D8:55:5F:C0:4F:AC:55:12:8A:98:37:52:05:1B:5E:FA:90:22 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2368662ED7962390AEB3D751D146C111023A1C5B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa Signing time: Thu 15 Oct 2026 03:20:24 +0000 ROA not before: Thu 15 Oct 2026 03:20:24 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:66:2e:d7:96:23:90:ae:b3:d7:51:d1:46:c1:11:02:3a:1c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:24 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=261608ae63ebc60276048ea6cb9167c75cc6d6b43e505bf0334ecfbd9786cc1c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:34:04:e6:65:a8:e6:6e:79:b6:39:d9:a8: da:e3:7e:bb:a2:f8:72:94:b6:7f:6c:8f:5c:3c:b0: 8d:b5:ff:17:7c:a6:0e:5b:59:de:75:48:18:02:25: 79:45:47:01:d0:18:bf:fd:dc:73:e7:fb:df:75:1b: e7:66:67:fe:0e:94:02:91:fe:c6:70:d4:56:5f:73: a2:72:db:be:55:93:84:67:48:a9:31:04:7b:a7:d2: c3:a0:02:82:69:08:f2:96:f8:00:7d:7b:e6:80:9e: 2f:6d:c1:2d:b5:e6:0e:eb:a7:d9:eb:e9:5e:c1:f5: 10:00:fd:ac:1a:21:a8:2b:39:ed:9f:0a:06:5c:df: 7f:5a:cc:15:43:60:92:ab:72:25:0d:b9:94:90:3e: 6e:9d:54:38:de:90:62:26:1a:d4:3f:de:11:7c:00: 15:3f:d8:cd:2e:e2:bf:f5:a3:9a:03:af:f4:c8:ad: 3f:8e:c7:7f:bb:7d:1f:d4:8a:a9:99:ab:3c:e2:7a: a1:b4:b6:4c:dc:61:e5:03:e4:37:c8:63:41:af:cb: eb:84:db:ef:03:a8:64:7c:01:39:c4:65:89:46:84: 7f:18:79:9d:19:ad:2c:2b:7a:9f:28:a2:36:ba:e9: a7:ef:da:14:03:bf:bd:54:85:06:78:59:65:22:79: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EE:D8:55:5F:C0:4F:AC:55:12:8A:98:37:52:05:1B:5E:FA:90:22 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:601::/48 Signature Algorithm: sha256WithRSAEncryption 12:2a:83:6e:89:0a:ed:85:65:65:50:dc:c3:3e:a3:8b:60:18: 67:10:83:ba:d4:8e:fa:ce:65:1d:8a:0a:ba:c7:83:3b:6f:0c: 90:11:f7:5a:9f:15:9e:a6:27:62:52:ea:b6:aa:29:a1:c3:ef: ce:81:dd:8d:5e:fe:36:48:24:dc:ab:72:25:e8:b1:45:81:98: b9:cc:79:71:71:17:d6:cb:4d:55:67:34:2e:cf:c0:ad:4c:91: ab:c1:d6:4b:f0:ce:db:0f:02:cb:f4:3d:c8:a5:b3:cd:27:10: fb:95:80:06:4f:19:67:cc:0b:a7:9d:4b:5d:3c:1c:f8:4e:ff: 3d:bb:60:e2:2a:96:7d:81:37:b7:ce:46:c1:23:b5:67:88:30: 42:bd:ed:0b:96:8b:6b:bd:6b:e3:f2:57:30:89:ab:4d:8c:d2: 3c:2f:8f:cb:87:6c:32:2a:0a:b3:54:a1:0c:e1:99:ab:65:65: c9:7b:04:7c:0b:89:0c:24:1d:25:2f:a7:24:31:41:10:44:16: 91:ba:24:b3:91:c1:83:d3:71:92:86:fb:f0:30:53:59:0d:92: d3:78:26:cd:d8:ac:3a:ce:38:68:e6:11:b2:56:1d:76:29:07: 96:3c:47:cf:c2:46:11:d9:e7:5c:5c:6c:cd:fd:c5:26:8c:52: 1d:0a:03:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI2hmLteWI5Cus9dR0UbBEQI6HFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDI0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjE2MDhhZTYzZWJjNjAyNzYwNDhlYTZjYjkxNjdjNzVj YzZkNmI0M2U1MDViZjAzMzRlY2ZiZDk3ODZjYzFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtvjQE5mWo5m55tjnZqNrjfrui+HKUtn9sj1w8sI21/xd8 pg5bWd51SBgCJXlFRwHQGL/93HPn+991G+dmZ/4OlAKR/sZw1FZfc6Jy275Vk4Rn SKkxBHun0sOgAoJpCPKW+AB9e+aAni9twS215g7rp9nr6V7B9RAA/awaIagrOe2f CgZc339azBVDYJKrciUNuZSQPm6dVDjekGImGtQ/3hF8ABU/2M0u4r/1o5oDr/TI rT+Ox3+7fR/UiqmZqzzieqG0tkzcYeUD5DfIY0Gvy+uE2+8DqGR8ATnEZYlGhH8Y eZ0ZrSwrep8ooja66afv2hQDv71UhQZ4WWUiedaTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3O7YVV/AT6xVEoqYN1IFG176kCIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA3OWI3YjIxLTAwYWEtNDZhOC04YzhhLTI4NjFiYjZjNTlkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgEwDQYJKoZIhvcNAQELBQADggEBABIqg26JCu2FZWVQ3MM+o4tg GGcQg7rUjvrOZR2KCrrHgztvDJAR91qfFZ6mJ2JS6raqKaHD786B3Y1e/jZIJNyr ciXosUWBmLnMeXFxF9bLTVVnNC7PwK1MkavB1kvwztsPAsv0Pcils80nEPuVgAZP GWfMC6edS108HPhO/z27YOIqln2BN7fORsEjtWeIMEK97QuWi2u9a+PyVzCJq02M 0jwvj8uHbDIqCrNUoQzhmatlZcl7BHwLiQwkHSUvpyQxQRBEFpG6JLORwYPTcZKG +/AwU1kNktN4Js3YrDrOOGjmEbJWHXYpB5Y8R8/CRhHZ51xcbM39xSaMUh0KA3k= -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:05 2026 by rpki-client