$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa File: 0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa (raw, json) Hash identifier: pVa0v17JT55134AiEsitXISHcmCw/WUgWGBAMGtO7ew= Subject key identifier: 63:46:B2:58:DF:A8:1B:83:30:19:22:E2:C8:CB:E6:EB:1F:5A:B0:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 501A8D668CA207DE6871B4EC141EAC5525559B4B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa Signing time: Mon 26 Oct 2026 04:20:07 +0000 ROA not before: Mon 26 Oct 2026 04:20:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1a:8d:66:8c:a2:07:de:68:71:b4:ec:14:1e:ac:55:25:55:9b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8e30a2261b1a8773b981c620d46b29e05654cdbfad0eb0490ec36d0480188ac4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:36:42:ad:ea:e9:27:18:dd:c7:7d:56:d3: b4:83:da:42:ff:43:8e:8d:4a:13:15:d7:80:8f:9a: 48:b9:df:1d:30:e3:10:d5:d7:84:c3:13:fc:15:c6: 40:25:48:58:bc:6a:7d:d2:74:8c:86:39:65:d2:de: b3:34:51:ba:56:ff:5f:d6:cf:d9:54:b2:e7:8f:25: b7:a8:ca:4f:80:dd:d0:71:c4:61:a9:e5:4c:32:83: 83:f0:86:ed:dd:84:e4:a3:48:4a:5e:9d:3a:6f:ec: 5a:67:8b:e4:25:47:8b:56:8b:da:50:ba:91:be:6a: 74:b1:f6:79:3c:1d:35:d7:99:8c:57:b7:a2:07:09: 64:78:8a:95:aa:da:dd:bb:ae:77:13:82:51:c3:5a: 58:0f:2d:03:85:7e:f7:1e:7d:65:bf:2d:7b:c2:34: d7:45:74:ab:d3:2e:10:43:88:1d:f2:1b:b1:8f:4f: b7:2c:d3:a0:40:d1:00:ad:68:9c:d6:fa:f6:dd:8e: 23:cc:53:75:a6:a5:f2:cb:7e:aa:ec:25:80:90:dd: c1:7b:eb:50:95:4c:79:8f:a6:5e:9a:fc:55:bc:ab: fd:27:12:06:e5:a0:f1:a1:9b:f2:72:4d:34:77:2a: cd:aa:36:a4:8c:8a:e4:2c:03:3c:8f:87:00:a4:28: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:B2:58:DF:A8:1B:83:30:19:22:E2:C8:CB:E6:EB:1F:5A:B0:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:20::/48 Signature Algorithm: sha256WithRSAEncryption 6e:5a:c3:b6:2a:a2:63:09:67:e2:d0:44:4b:f8:e1:50:a5:db: 86:7d:59:ae:85:f5:82:53:d4:5b:1c:b8:c7:15:1a:1f:15:80: ee:3b:21:a5:05:2c:40:5f:ff:b0:69:8a:a9:0f:42:3d:42:81: 0d:b6:43:23:8f:99:70:02:ff:15:a6:9a:37:79:e1:f6:ec:9c: fa:4d:6f:8e:bf:e2:91:96:e1:b6:cb:b5:14:bf:9a:cd:fd:19: e1:68:a4:a4:f7:c2:c2:94:f0:ff:44:a8:84:7a:1e:ad:ff:53: 6e:44:fa:c0:ad:42:2c:75:0b:c0:17:40:6c:ca:45:11:3a:63: 7c:8e:fa:71:cf:6b:6a:4b:1c:0d:37:b5:b3:76:10:1f:11:6c: d0:98:ba:04:ed:41:d9:08:38:43:81:a0:1f:04:0e:50:0f:22: be:59:92:ab:9c:4b:d6:d4:1e:e9:56:8f:16:9c:6e:c9:0f:d4: 57:1e:6b:82:21:a4:37:79:6d:c9:61:59:31:39:96:7b:e6:25: e2:f4:2f:76:62:12:20:38:b6:46:e0:e0:48:b6:7d:91:50:ae: 0e:66:af:7d:16:85:c9:8e:a7:86:fe:81:22:35:98:cc:c9:e7: 87:7f:b7:1d:27:66:e5:63:e7:17:3b:ea:b9:80:f7:28:ac:42: 3c:46:b8:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUBqNZoyiB95ocbTsFB6sVSVVm0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTMwYTIyNjFiMWE4NzczYjk4MWM2MjBkNDZiMjllMDU2 NTRjZGJmYWQwZWIwNDkwZWMzNmQwNDgwMTg4YWM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoxTZCrerpJxjdx31W07SD2kL/Q46NShMV14CPmki53x0w 4xDV14TDE/wVxkAlSFi8an3SdIyGOWXS3rM0UbpW/1/Wz9lUsuePJbeoyk+A3dBx xGGp5Uwyg4Pwhu3dhOSjSEpenTpv7Fpni+QlR4tWi9pQupG+anSx9nk8HTXXmYxX t6IHCWR4ipWq2t27rncTglHDWlgPLQOFfvcefWW/LXvCNNdFdKvTLhBDiB3yG7GP T7cs06BA0QCtaJzW+vbdjiPMU3WmpfLLfqrsJYCQ3cF761CVTHmPpl6a/FW8q/0n EgbloPGhm/JyTTR3Ks2qNqSMiuQsAzyPhwCkKJQBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUY0ayWN+oG4MwGSLiyMvm6x9asIUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiODljNGZlLTY3MzAtNGY2MC1iYzRjLWVhMTZiMTljMmMzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwACAwDQYJKoZIhvcNAQELBQADggEBAG5aw7YqomMJZ+LQREv44VCl 24Z9Wa6F9YJT1FscuMcVGh8VgO47IaUFLEBf/7BpiqkPQj1CgQ22QyOPmXAC/xWm mjd54fbsnPpNb46/4pGW4bbLtRS/ms39GeFopKT3wsKU8P9EqIR6Hq3/U25E+sCt Qix1C8AXQGzKRRE6Y3yO+nHPa2pLHA03tbN2EB8RbNCYugTtQdkIOEOBoB8EDlAP Ir5ZkqucS9bUHulWjxacbskP1Fcea4IhpDd5bclhWTE5lnvmJeL0L3ZiEiA4tkbg 4Ei2fZFQrg5mr30WhcmOp4b+gSI1mMzJ54d/tx0nZuVj5xc76rmA9yisQjxGuEc= -----END CERTIFICATE-----Generated at Thu Nov 5 19:21:42 2026 by rpki-client