$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa File: 2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa (raw, json) Hash identifier: dckxDfn8VnsGZkoiQOcqj8X9z3Qu2xM4b2OQTzKpJ8c= Subject key identifier: 10:1B:50:AA:7B:14:06:36:06:0B:02:57:D5:4E:4A:8B:C6:85:26:3C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E18AE64EE766814C694ED4A90A4987E3D2B32E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa Signing time: Thu 15 Oct 2026 03:20:22 +0000 ROA not before: Thu 15 Oct 2026 03:20:22 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:18:ae:64:ee:76:68:14:c6:94:ed:4a:90:a4:98:7e:3d:2b:32:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:22 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=40d3481a81a1d91074bce68cd07a351feb819474e51cbd4fe00813ac61f46bd3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:19:0a:82:da:7a:da:74:1c:0d:59:fe:79: cf:b8:a9:00:be:d5:23:41:9b:98:a4:0d:5e:18:1d: e2:c5:8d:37:2d:81:be:17:6f:2c:04:7e:c2:10:c6: 7c:dd:b0:44:38:45:c0:d7:21:a7:ea:bb:0e:f8:3d: 19:34:e5:07:f7:e7:0e:59:bd:3c:e5:44:b1:24:0f: 67:d4:0a:95:d0:6f:71:89:44:9f:93:67:3c:37:07: d9:2b:87:79:20:60:a7:a2:f7:d1:d4:1a:3c:03:2b: 39:04:d8:a1:c1:26:94:72:30:0a:a1:f8:6c:2f:ef: 40:da:af:6d:26:bf:47:24:da:38:6c:bd:d8:36:8b: dd:d4:4e:d3:23:ff:55:7f:c7:64:d5:4f:dd:3a:7d: 25:1a:1c:99:9d:39:9d:eb:74:2a:fb:b1:2e:38:73: dc:dc:8f:78:7a:db:d2:5b:49:28:53:91:02:bb:31: c7:86:a8:7c:5c:57:a0:73:00:37:09:7e:05:16:54: b1:57:3b:8c:e7:22:23:f5:5b:22:bd:93:f2:a9:f0: a9:71:3d:84:a9:50:ca:ca:5b:75:58:c5:74:1d:16: 4f:25:fe:59:fd:bf:16:f1:8d:79:ee:85:0c:cd:34: f0:61:7a:1b:7b:ef:ba:93:14:04:0b:e2:e2:ca:f7: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:50:AA:7B:14:06:36:06:0B:02:57:D5:4E:4A:8B:C6:85:26:3C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 90:7f:bc:4d:ed:bf:e0:35:49:5a:30:c5:44:ec:0a:88:ea:b4: 43:aa:12:b9:c7:77:22:10:ea:a5:40:65:73:55:d1:4d:46:8e: 40:bd:76:97:cf:bd:36:80:ba:36:f8:52:27:46:16:1c:bc:1e: 80:1b:79:aa:6b:95:d4:e0:fd:8a:34:57:38:a1:68:3e:af:bf: bc:36:39:fe:ba:91:bc:6a:51:5e:a4:fe:d9:16:78:69:1b:32: 87:39:df:52:94:8a:07:92:45:5f:dc:01:12:9d:57:2b:b6:35: 7e:df:1d:b7:73:14:e3:00:b8:d1:fc:0a:e9:32:a7:d9:a6:01: d0:9b:88:64:9c:af:ab:1a:05:50:b8:26:f4:7d:ef:ef:c8:40: ff:44:4d:96:7f:a8:91:41:32:ec:de:64:50:33:cf:4d:2c:46: a2:52:0d:ce:48:23:36:2a:73:ae:92:b4:73:ad:89:7f:8f:82: 3f:50:8a:f2:57:a9:7b:4c:81:b3:54:c5:e1:9c:32:90:28:03: 24:08:bc:17:94:83:90:17:39:01:8f:63:4d:a8:9c:be:42:47: 21:8e:f0:b0:4d:86:2e:5a:f3:b2:10:4b:43:a0:ab:60:d5:4a: 58:f9:a9:4c:80:fb:2f:6c:5b:f3:47:ec:8f:be:68:86:4b:06: d1:cd:88:40 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPhiuZO52aBTGlO1KkKSYfj0rMugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDIyWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGQzNDgxYTgxYTFkOTEwNzRiY2U2OGNkMDdhMzUxZmVi ODE5NDc0ZTUxY2JkNGZlMDA4MTNhYzYxZjQ2YmQzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChCRkKgtp62nQcDVn+ec+4qQC+1SNBm5ikDV4YHeLFjTct gb4XbywEfsIQxnzdsEQ4RcDXIafquw74PRk05Qf35w5ZvTzlRLEkD2fUCpXQb3GJ RJ+TZzw3B9krh3kgYKei99HUGjwDKzkE2KHBJpRyMAqh+Gwv70Dar20mv0ck2jhs vdg2i93UTtMj/1V/x2TVT906fSUaHJmdOZ3rdCr7sS44c9zcj3h629JbSShTkQK7 MceGqHxcV6BzADcJfgUWVLFXO4znIiP1WyK9k/Kp8KlxPYSpUMrKW3VYxXQdFk8l /ln9vxbxjXnuhQzNNPBheht777qTFAQL4uLK9/s/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEBtQqnsUBjYGCwJX1U5Ki8aFJjwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiMmZkMzhjLWU1ZWQtNGQ3NS04MDUzLTRlYjAzMTgyNjhlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEAkH+8Te2/4DVJWjDFROwKiOq0 Q6oSucd3IhDqpUBlc1XRTUaOQL12l8+9NoC6NvhSJ0YWHLwegBt5qmuV1OD9ijRX OKFoPq+/vDY5/rqRvGpRXqT+2RZ4aRsyhznfUpSKB5JFX9wBEp1XK7Y1ft8dt3MU 4wC40fwK6TKn2aYB0JuIZJyvqxoFULgm9H3v78hA/0RNln+okUEy7N5kUDPPTSxG olINzkgjNipzrpK0c62Jf4+CP1CK8lepe0yBs1TF4ZwykCgDJAi8F5SDkBc5AY9j TaicvkJHIY7wsE2GLlrzshBLQ6CrYNVKWPmpTID7L2xb80fsj75ohksG0c2IQA== -----END CERTIFICATE-----Generated at Thu Nov 5 12:52:03 2026 by rpki-client