$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa File: eddb8990-86be-4e35-823b-2b9b4245b4ac.roa (raw, json) Hash identifier: s8M5vwHdVEpuKDsPKqrhy8LZx9H0NnlnKcoWlACKjF8= Subject key identifier: 17:3E:2E:C2:CB:5F:06:79:C6:C1:BA:78:47:28:C3:1F:BE:77:18:CA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B993639D2FF5FB730D181F6F5C3B553EE7C41E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa Signing time: Tue 27 Oct 2026 00:50:27 +0000 ROA not before: Tue 27 Oct 2026 00:50:27 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:99:36:39:d2:ff:5f:b7:30:d1:81:f6:f5:c3:b5:53:ee:7c:41:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:27 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=9584c01f86188c49aa7794c7654941307944f8067e7a16bf664357c477db6de0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:72:56:d5:71:6a:41:0b:23:35:e8:e2:83: 92:8d:40:8c:20:de:df:70:79:e8:ff:dc:0c:64:05: 8e:83:f3:22:13:bc:a4:cb:ee:3e:5d:4e:32:71:86: 38:c6:25:a9:fe:f3:c2:92:6e:e1:dd:e0:45:be:6a: c2:df:59:e9:ad:8e:fb:31:5f:c8:8c:18:93:cf:37: 79:f4:b8:33:14:1c:3c:52:ee:ac:98:8d:18:98:a7: a7:eb:72:b3:41:bb:a9:43:e6:45:6d:30:05:c7:8f: d1:76:ff:c6:33:a2:2e:8a:38:5c:41:9a:f1:35:96: 54:e4:da:4c:12:e6:0d:eb:b5:90:d5:d7:88:2c:60: 57:91:41:5c:83:99:6d:22:4c:bf:bb:23:85:48:c0: d9:a3:9b:27:59:7a:0a:60:09:55:65:d6:b2:47:96: f7:bf:dc:62:0c:23:36:e0:ff:16:11:dc:8a:1a:24: 3d:a5:75:ab:07:9b:d0:ec:46:71:96:51:ca:07:87: f0:0e:38:c9:8a:61:0d:b8:8f:e7:8a:bb:ae:f2:e0: 8f:98:13:a9:8b:67:6a:b8:f6:e7:df:0d:56:7e:54: f6:83:78:3c:36:5f:84:0f:f4:2d:8d:8b:73:3d:ce: 20:0f:02:a9:28:81:15:7b:78:f0:bc:bb:3a:6f:1d: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3E:2E:C2:CB:5F:06:79:C6:C1:BA:78:47:28:C3:1F:BE:77:18:CA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6123::/48 Signature Algorithm: sha256WithRSAEncryption 49:3a:da:92:71:9f:c8:a6:0b:93:19:0a:45:29:9e:35:f5:08: 2f:8d:7c:db:bf:e4:63:ed:79:b1:35:ef:64:b6:21:87:ab:ac: 6a:89:a3:4e:92:62:cc:84:63:4d:86:69:59:26:d2:ed:c1:d3: 10:bc:1e:b7:54:bf:21:44:0a:dc:1f:88:c5:c6:49:4e:a1:23: 83:45:b8:ca:eb:2e:6e:d0:ee:99:5e:d0:07:fc:1d:d9:af:8f: e7:3f:b8:41:4a:36:7c:9c:bf:18:68:df:d9:9a:d6:f4:54:f0: 12:99:58:00:e5:28:13:7a:d8:60:12:60:30:75:15:b0:f4:c2: 64:6d:4a:76:3c:ae:9f:e4:80:d8:bf:3c:54:8a:8d:54:63:2e: 2f:af:f4:cc:3d:1c:4f:4e:96:85:e6:41:fc:04:cd:f2:8d:ff: 1d:24:13:be:37:a8:75:31:cb:c4:ee:38:10:56:6b:d4:d7:d5: 55:f8:9c:dd:47:c2:15:aa:7b:65:8e:cb:87:17:9e:bd:89:8c: 21:46:88:7d:8d:de:ca:51:24:02:d4:aa:1e:33:a0:30:da:0d: a4:6b:07:00:15:21:53:72:fb:37:7e:1f:91:dc:7b:50:03:85: e6:d3:9a:4c:6f:d3:91:ab:46:54:1f:33:a6:25:db:ab:6a:6b: 05:00:2e:6b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG5k2OdL/X7cw0YH29cO1U+58QegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDI3WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTg0YzAxZjg2MTg4YzQ5YWE3Nzk0Yzc2NTQ5NDEzMDc5 NDRmODA2N2U3YTE2YmY2NjQzNTdjNDc3ZGI2ZGUwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHkXJW1XFqQQsjNejig5KNQIwg3t9weej/3AxkBY6D8yIT vKTL7j5dTjJxhjjGJan+88KSbuHd4EW+asLfWemtjvsxX8iMGJPPN3n0uDMUHDxS 7qyYjRiYp6frcrNBu6lD5kVtMAXHj9F2/8Yzoi6KOFxBmvE1llTk2kwS5g3rtZDV 14gsYFeRQVyDmW0iTL+7I4VIwNmjmydZegpgCVVl1rJHlve/3GIMIzbg/xYR3Ioa JD2ldasHm9DsRnGWUcoHh/AOOMmKYQ24j+eKu67y4I+YE6mLZ2q49uffDVZ+VPaD eDw2X4QP9C2Ni3M9ziAPAqkogRV7ePC8uzpvHWo5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFz4uwstfBnnGwbp4RyjDH753GMowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VkZGI4OTkwLTg2YmUtNGUzNS04MjNiLTJiOWI0MjQ1YjRhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSMwDQYJKoZIhvcNAQELBQADggEBAEk62pJxn8imC5MZCkUpnjX1 CC+NfNu/5GPtebE172S2IYerrGqJo06SYsyEY02GaVkm0u3B0xC8HrdUvyFECtwf iMXGSU6hI4NFuMrrLm7Q7ple0Af8Hdmvj+c/uEFKNnycvxho39ma1vRU8BKZWADl KBN62GASYDB1FbD0wmRtSnY8rp/kgNi/PFSKjVRjLi+v9Mw9HE9OloXmQfwEzfKN /x0kE743qHUxy8TuOBBWa9TX1VX4nN1HwhWqe2WOy4cXnr2JjCFGiH2N3spRJALU qh4zoDDaDaRrBwAVIVNy+zd+H5Hce1ADhebTmkxv05GrRlQfM6Yl26tqawUALms= -----END CERTIFICATE-----Generated at Thu Nov 5 14:27:52 2026 by rpki-client