$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa File: 43de5aff-1abc-4ba4-ac76-194395f6be8f.roa (raw, json) Hash identifier: 5Rg3yj3kr79LSiG4bhYzPjanDG/yO538NvTuNkvRmQo= Subject key identifier: C5:08:0E:25:A7:9A:78:38:3D:07:1A:9E:8C:7C:51:40:86:B0:51:B4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5E9530002C6943FE8AEF8FF15AD018038A0DDA80 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa Signing time: Thu 22 Oct 2026 00:30:14 +0000 ROA not before: Thu 22 Oct 2026 00:30:14 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:95:30:00:2c:69:43:fe:8a:ef:8f:f1:5a:d0:18:03:8a:0d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:30:14 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=359e914c02c8c4060105da1ad4a02719bc56fc8e43760b9d961f3e0708c29f58, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:6f:07:5c:04:b1:dd:45:e8:32:0a:61:29: 7b:9a:30:48:04:57:1a:1d:72:da:73:83:db:35:44: 06:64:16:c0:82:58:c8:a2:2d:a0:ea:e0:30:d8:f3: 37:5c:9e:d6:a5:2a:e8:fa:33:89:45:89:1d:8f:3b: e1:2d:60:74:dc:35:f5:00:a2:61:65:69:80:16:ee: fe:c1:9e:4a:03:c3:e5:fb:a2:a6:c4:43:59:9f:af: 44:3c:7f:61:01:17:e8:74:9e:55:4b:f2:24:cb:a7: 8b:f5:7b:58:4c:9d:48:ef:27:37:ba:da:57:41:a2: 19:e6:8e:4e:1b:f8:62:85:a2:f7:3f:31:90:60:89: 3c:29:02:4a:22:e8:9b:30:e8:81:a9:70:c9:7b:48: 23:48:97:5b:01:77:d9:e5:eb:12:ca:ee:3c:f8:80: 28:d9:67:43:0c:79:ea:05:c6:36:da:0c:04:f3:f1: 8c:f6:cc:9f:f0:7a:5d:1f:b4:86:4e:89:c5:28:8b: 6a:c8:96:af:04:a6:ab:19:d8:b9:48:ab:f3:76:34: d1:d7:51:ca:cc:d8:76:48:e5:f2:19:cb:9b:ac:ef: 7f:7b:ed:c9:b3:bb:60:3e:46:ba:73:ee:29:80:60: ed:20:88:7b:1a:d9:1d:ff:12:ee:02:b0:16:0f:73: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:08:0E:25:A7:9A:78:38:3D:07:1A:9E:8C:7C:51:40:86:B0:51:B4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b00::/48 Signature Algorithm: sha256WithRSAEncryption 21:2c:98:d1:8b:9e:f7:ce:0c:1e:d4:b2:4f:29:4a:4b:aa:9a: ad:d0:2a:d8:2f:02:45:72:00:25:a7:8d:de:23:7c:f8:17:7a: b7:7c:f2:f4:e9:8c:e0:77:03:09:c2:89:58:fd:8e:61:55:70: 26:61:dc:47:a1:ec:a6:ab:03:70:7c:1c:7e:18:2b:8c:ed:d8: de:4d:93:d2:f0:db:d4:cf:a1:0b:84:34:28:a7:4c:51:38:90: 5b:6e:34:de:22:6a:a4:c5:f7:ae:c1:e6:43:a2:f8:45:53:d1: 9a:82:3b:e2:66:ad:df:41:4e:3f:5a:56:9f:bd:e2:ad:37:4c: 6a:3d:a3:52:5b:f5:68:8d:92:cd:6a:b5:0f:22:4f:a7:b7:09: d4:4a:e2:60:1a:bd:89:79:78:a1:d7:32:d8:9e:36:d6:68:e1: a7:50:a6:34:be:c5:5b:54:30:cf:0e:f8:f6:58:b9:b7:c0:66: c8:ca:08:a7:2b:6d:9d:f1:d7:c2:95:ef:2b:b6:e6:74:4a:c4: 88:48:0f:44:a1:c0:fc:f2:81:51:fa:c2:13:d8:59:de:bc:df: 80:60:e5:7e:0c:9d:54:67:a9:4b:02:3f:8d:de:4d:ee:f3:c6: 63:19:b1:a5:37:38:0b:33:04:41:26:f2:13:1a:6f:20:a9:98: a4:03:f4:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXpUwACxpQ/6K74/xWtAYA4oN2oAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIyMDAzMDE0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTllOTE0YzAyYzhjNDA2MDEwNWRhMWFkNGEwMjcxOWJj NTZmYzhlNDM3NjBiOWQ5NjFmM2UwNzA4YzI5ZjU4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX528HXASx3UXoMgphKXuaMEgEVxodctpzg9s1RAZkFsCC WMiiLaDq4DDY8zdcntalKuj6M4lFiR2PO+EtYHTcNfUAomFlaYAW7v7BnkoDw+X7 oqbEQ1mfr0Q8f2EBF+h0nlVL8iTLp4v1e1hMnUjvJze62ldBohnmjk4b+GKFovc/ MZBgiTwpAkoi6Jsw6IGpcMl7SCNIl1sBd9nl6xLK7jz4gCjZZ0MMeeoFxjbaDATz 8Yz2zJ/wel0ftIZOicUoi2rIlq8EpqsZ2LlIq/N2NNHXUcrM2HZI5fIZy5us7397 7cmzu2A+Rrpz7imAYO0giHsa2R3/Eu4CsBYPc2Q/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxQgOJaeaeDg9BxqejHxRQIawUbQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzZGU1YWZmLTFhYmMtNGJhNC1hYzc2LTE5NDM5NWY2YmU4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwAwDQYJKoZIhvcNAQELBQADggEBACEsmNGLnvfODB7Usk8pSkuq mq3QKtgvAkVyACWnjd4jfPgXerd88vTpjOB3AwnCiVj9jmFVcCZh3Eeh7KarA3B8 HH4YK4zt2N5Nk9Lw29TPoQuENCinTFE4kFtuNN4iaqTF967B5kOi+EVT0ZqCO+Jm rd9BTj9aVp+94q03TGo9o1Jb9WiNks1qtQ8iT6e3CdRK4mAavYl5eKHXMtieNtZo 4adQpjS+xVtUMM8O+PZYubfAZsjKCKcrbZ3x18KV7yu25nRKxIhID0ShwPzygVH6 whPYWd6834Bg5X4MnVRnqUsCP43eTe7zxmMZsaU3OAszBEEm8hMabyCpmKQD9IU= -----END CERTIFICATE-----Generated at Mon Nov 9 11:25:47 2026 by rpki-client