$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa File: 5711ca9f-54b1-42ca-be68-93036263a87f.roa (raw, json) Hash identifier: aFaX3Ao9zgfTcRhLdExpj32F7hr+c2AdcHBPHULpcAE= Subject key identifier: 77:48:ED:74:1A:D4:39:0D:E1:6D:1D:F9:74:DD:76:54:DF:85:FA:50 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2B42E214FC5D746E788A34C5B81897800A03A50A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa Signing time: Tue 27 Oct 2026 00:50:13 +0000 ROA not before: Tue 27 Oct 2026 00:50:13 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:42:e2:14:fc:5d:74:6e:78:8a:34:c5:b8:18:97:80:0a:03:a5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:13 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=324aec2632e4e98bfbfa69402fa8d9bfc62696bb284bbc5ef6a2eb382834b195, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:bc:36:d0:2a:2d:16:72:75:4a:87:e1:fe: 96:b4:b8:65:68:40:f2:d2:89:a3:bb:0f:37:34:04: e0:be:1a:14:db:08:d6:16:bb:f5:f1:ac:ea:cc:02: d5:e6:dc:f0:e2:ef:30:47:bc:c8:ed:25:41:07:a4: 2e:46:14:85:b1:e6:a9:5b:8d:77:c3:39:8c:71:31: 3c:79:64:94:27:53:1d:9c:af:cd:db:0b:4e:46:e7: b1:7f:ea:53:5c:98:de:84:df:d8:40:2f:4d:9d:15: c6:98:9f:f8:e7:3c:9a:37:79:bd:36:84:7f:68:ee: 84:ae:29:54:1f:b4:ae:35:5b:2e:44:9e:ee:b4:a0: 85:46:4f:14:97:dc:8d:e6:36:39:10:3b:40:b4:7e: d4:d6:03:56:35:22:65:6c:a7:1d:a4:be:53:29:e3: 0e:1a:03:4a:5d:da:cc:b7:4a:e6:d5:64:ef:bb:f8: 94:13:33:e9:a2:3e:a1:c5:b2:79:2b:16:e1:87:b4: 8f:6c:20:70:96:ca:2f:97:39:71:fb:d5:07:23:4f: da:1c:c3:9e:88:3f:64:41:d1:13:44:7c:ed:18:94: b7:56:ca:1a:71:d0:3d:c6:ba:4d:5d:e2:fa:a9:ae: 31:58:48:75:82:68:6d:df:6e:30:63:c1:63:5e:69: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:48:ED:74:1A:D4:39:0D:E1:6D:1D:F9:74:DD:76:54:DF:85:FA:50 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10d::/48 Signature Algorithm: sha256WithRSAEncryption 6a:bd:f2:62:3e:2a:83:88:65:7d:6e:fd:3c:d8:0d:72:fe:3f: 4c:0b:f5:dc:d8:5a:bf:06:8d:b6:fb:05:12:b8:d4:94:b9:27: eb:b4:d5:0c:0b:6c:ef:e9:e8:28:fb:ea:97:5a:7c:a0:53:e1: f2:1f:ec:8e:45:29:d0:3c:88:a9:ad:be:1c:5c:e3:50:23:85: 46:96:25:d7:00:01:3c:7e:2f:7a:87:a7:63:78:ad:ce:bb:b1: 05:b3:82:17:1b:d1:60:67:48:49:d7:76:0f:9d:8a:94:86:80: ec:d3:f6:7b:6f:73:3a:81:8a:67:a1:f1:4d:77:06:14:6c:03: b9:69:0a:25:6d:a5:91:26:65:a1:74:b8:78:19:d2:37:fb:47: c9:1b:65:36:37:d8:07:6f:54:c9:d6:f3:c0:03:d7:db:e3:09: 50:a1:fe:bd:3b:2f:14:e6:ee:24:8d:e0:8a:d7:9e:d7:54:cf: be:da:9b:4f:01:21:b2:25:09:38:2b:0c:95:1b:8f:b1:61:60: 57:e6:be:22:81:17:85:0b:69:8f:ea:45:36:3d:69:46:5e:e1: 94:a0:3d:d5:bd:a5:9f:1e:62:88:17:cc:ab:a7:b4:d6:bf:31: 95:0d:b7:16:91:95:54:78:c1:73:7d:4a:6d:55:98:8e:93:f9: c5:b6:d6:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK0LiFPxddG54ijTFuBiXgAoDpQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDEzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjRhZWMyNjMyZTRlOThiZmJmYTY5NDAyZmE4ZDliZmM2 MjY5NmJiMjg0YmJjNWVmNmEyZWIzODI4MzRiMTk1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOmrw20CotFnJ1Sofh/pa0uGVoQPLSiaO7Dzc0BOC+GhTb CNYWu/XxrOrMAtXm3PDi7zBHvMjtJUEHpC5GFIWx5qlbjXfDOYxxMTx5ZJQnUx2c r83bC05G57F/6lNcmN6E39hAL02dFcaYn/jnPJo3eb02hH9o7oSuKVQftK41Wy5E nu60oIVGTxSX3I3mNjkQO0C0ftTWA1Y1ImVspx2kvlMp4w4aA0pd2sy3SubVZO+7 +JQTM+miPqHFsnkrFuGHtI9sIHCWyi+XOXH71QcjT9ocw56IP2RB0RNEfO0YlLdW yhpx0D3Guk1d4vqprjFYSHWCaG3fbjBjwWNeaYnBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUd0jtdBrUOQ3hbR35dN12VN+F+lAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3MTFjYTlmLTU0YjEtNDJjYS1iZTY4LTkzMDM2MjYzYTg3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q0wDQYJKoZIhvcNAQELBQADggEBAGq98mI+KoOIZX1u/TzYDXL+ P0wL9dzYWr8Gjbb7BRK41JS5J+u01QwLbO/p6Cj76pdafKBT4fIf7I5FKdA8iKmt vhxc41AjhUaWJdcAATx+L3qHp2N4rc67sQWzghcb0WBnSEnXdg+dipSGgOzT9ntv czqBimeh8U13BhRsA7lpCiVtpZEmZaF0uHgZ0jf7R8kbZTY32AdvVMnW88AD19vj CVCh/r07LxTm7iSN4IrXntdUz77am08BIbIlCTgrDJUbj7FhYFfmviKBF4ULaY/q RTY9aUZe4ZSgPdW9pZ8eYogXzKuntNa/MZUNtxaRlVR4wXN9Sm1VmI6T+cW21os= -----END CERTIFICATE-----Generated at Thu Nov 5 14:24:39 2026 by rpki-client