$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa File: a05fd272-e896-4327-ba78-a6cbca5483ef.roa (raw, json) Hash identifier: vgYto3cm8bnUWQHYzXvFHaCuxfdYMgjMAyrvfayLizY= Subject key identifier: 71:11:2A:65:2B:3C:FB:34:41:95:C1:1E:2C:70:5E:9E:60:EC:60:F6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 601676BD6B73950EA8AE7C5FB5F95325CBAC8E76 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa Signing time: Tue 27 Oct 2026 00:50:44 +0000 ROA not before: Tue 27 Oct 2026 00:50:44 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:16:76:bd:6b:73:95:0e:a8:ae:7c:5f:b5:f9:53:25:cb:ac:8e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:44 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=f3f7c18e4a3ef83cbaf896154140e0f05548d22b4c14bbe0fd0e51788c621fb0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:78:73:e5:75:a3:06:2a:1a:04:df:be:79: 34:c8:98:ff:37:0c:3b:73:3b:06:13:e1:e1:62:70: be:4b:fb:4e:16:f6:e3:57:0e:db:70:4d:7c:78:2a: 94:aa:1e:6e:1a:19:84:7c:09:39:22:5f:8f:7d:da: fd:c4:35:eb:68:c6:0b:51:a6:e4:e3:9c:aa:4f:e3: a8:9c:b9:dc:a2:dd:28:c1:6e:ca:86:c0:0c:69:da: 7c:72:76:3f:1f:93:13:c7:7d:59:ab:74:4d:ee:68: 1d:f7:ca:a3:c9:75:77:5b:af:41:4e:6e:3d:69:8c: eb:ab:2c:17:8b:ae:f2:dd:4e:96:77:93:a2:55:54: be:48:f6:6c:dd:d7:77:ab:ab:1d:d4:86:31:a3:47: 8a:4f:46:56:29:f4:a1:4f:e3:cb:b5:df:5a:49:9a: e2:c1:14:e1:07:5c:04:e2:bd:17:73:a2:0f:28:db: b8:88:e5:9b:01:40:9f:ae:7e:70:8a:9b:f5:15:32: 64:e1:f9:11:8d:69:04:84:a1:b3:8d:9a:b0:ea:9c: fd:c4:4c:e5:c5:4c:ae:74:da:8d:e7:9e:47:af:55: a0:b3:5c:1b:da:da:e3:f3:9a:54:c0:ae:4e:21:ba: b7:de:6d:bb:81:49:47:5b:59:0f:64:de:1a:83:05: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:11:2A:65:2B:3C:FB:34:41:95:C1:1E:2C:70:5E:9E:60:EC:60:F6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f109::/48 Signature Algorithm: sha256WithRSAEncryption 59:e7:96:69:44:4f:93:a2:ae:3f:5d:d2:e3:17:e1:42:71:66: 79:16:9d:a0:95:d7:4d:a5:ec:03:04:12:6b:83:9d:ae:70:77: 59:59:bc:b8:23:34:5e:e8:a3:5a:af:41:99:93:fd:13:0e:3f: 0b:4b:5d:4c:00:05:99:0f:aa:1c:b3:cc:ff:38:fd:3c:a4:dd: 29:ba:e8:6d:e3:ef:a2:63:bb:04:11:8e:33:79:08:5d:4e:e0: 21:0a:b4:2c:b5:4e:c3:4e:92:45:b5:07:ac:be:4a:c5:74:d7: 9f:6c:88:0c:44:3f:ff:5e:7c:d3:55:78:49:ac:e9:65:91:d3: e5:ef:e5:1b:58:35:38:1e:07:98:36:70:21:dc:15:9e:55:2a: 1c:7b:b8:ea:13:8b:f5:79:3f:17:5e:2e:08:3a:07:d0:e5:20: b9:21:c7:38:81:c4:1a:8a:26:b5:43:e0:56:9c:94:1e:ec:5f: 00:dc:70:fe:2c:f7:b1:31:27:ed:7a:57:71:a3:9c:72:96:76: 75:e1:4d:26:ab:fe:a7:b9:e9:e3:c2:12:8b:d0:86:b2:db:69: ec:31:81:78:ad:af:98:d2:f1:7e:57:c6:db:7a:20:52:e1:42: 29:f0:37:bf:f5:20:1a:fc:2c:c6:91:b5:84:99:6a:40:8b:7f: e5:34:d8:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYBZ2vWtzlQ6ornxftflTJcusjnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQ0WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2Y3YzE4ZTRhM2VmODNjYmFmODk2MTU0MTQwZTBmMDU1 NDhkMjJiNGMxNGJiZTBmZDBlNTE3ODhjNjIxZmIwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxnnhz5XWjBioaBN++eTTImP83DDtzOwYT4eFicL5L+04W 9uNXDttwTXx4KpSqHm4aGYR8CTkiX4992v3ENetoxgtRpuTjnKpP46icudyi3SjB bsqGwAxp2nxydj8fkxPHfVmrdE3uaB33yqPJdXdbr0FObj1pjOurLBeLrvLdTpZ3 k6JVVL5I9mzd13erqx3UhjGjR4pPRlYp9KFP48u131pJmuLBFOEHXATivRdzog8o 27iI5ZsBQJ+ufnCKm/UVMmTh+RGNaQSEobONmrDqnP3ETOXFTK502o3nnkevVaCz XBva2uPzmlTArk4hurfebbuBSUdbWQ9k3hqDBaqHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcREqZSs8+zRBlcEeLHBenmDsYPYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwNWZkMjcyLWU4OTYtNDMyNy1iYTc4LWE2Y2JjYTU0ODNlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QkwDQYJKoZIhvcNAQELBQADggEBAFnnlmlET5Oirj9d0uMX4UJx ZnkWnaCV102l7AMEEmuDna5wd1lZvLgjNF7oo1qvQZmT/RMOPwtLXUwABZkPqhyz zP84/Tyk3Sm66G3j76JjuwQRjjN5CF1O4CEKtCy1TsNOkkW1B6y+SsV0159siAxE P/9efNNVeEms6WWR0+Xv5RtYNTgeB5g2cCHcFZ5VKhx7uOoTi/V5PxdeLgg6B9Dl ILkhxziBxBqKJrVD4FaclB7sXwDccP4s97ExJ+16V3GjnHKWdnXhTSar/qe56ePC EovQhrLbaewxgXitr5jS8X5Xxtt6IFLhQinwN7/1IBr8LMaRtYSZakCLf+U02NY= -----END CERTIFICATE-----Generated at Thu Nov 5 15:21:50 2026 by rpki-client