$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa File: f37e75c0-e669-4410-b627-fae811cab6fc.roa (raw, json) Hash identifier: HJPmX4oWXKLPjDMOMZ+rLokKBkemvYzn4eb6nc6D2Z4= Subject key identifier: 33:FA:B4:A8:60:1D:78:01:97:D2:66:B7:5E:43:C6:4B:16:3C:FF:A5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3DF1E21F4991623BF4ABB3E41B86218F6439FCB9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa Signing time: Sat 07 Nov 2026 00:20:07 +0000 ROA not before: Sat 07 Nov 2026 00:20:07 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8a10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f1:e2:1f:49:91:62:3b:f4:ab:b3:e4:1b:86:21:8f:64:39:fc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 7 00:20:07 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=e46c16ca7694d1946215e090fd3820e32ef75e71dc3eaab2e6868c6b6ad762a9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:e9:b4:c8:26:d4:e3:6a:17:ae:03:60:e3: a3:98:f7:80:77:89:7a:79:76:8c:19:43:96:9a:13: 7b:05:67:6f:43:6e:d2:98:8b:d3:a5:0e:86:94:58: f8:50:9d:3d:12:d5:a7:ee:e1:96:a9:73:65:1d:9f: 8f:10:39:d7:37:c8:67:e0:99:71:24:27:24:dd:67: 84:8b:aa:4e:ea:70:ab:0a:d8:f0:61:48:d4:75:2e: 76:12:0d:98:7e:a1:7a:fa:9d:44:d8:d1:08:43:5a: 01:7b:82:5a:69:0b:9e:04:d9:66:89:f6:d7:65:e5: 3c:e7:99:fd:28:45:c4:1b:cf:49:ff:a0:5e:45:2a: 07:51:b8:cc:df:a7:be:66:50:eb:5d:79:ee:2b:7b: de:e1:86:80:16:f0:14:33:df:fc:e9:d7:6f:1e:09: f6:3e:82:d0:fd:af:14:9a:b7:63:b7:75:45:b7:5e: ad:80:44:9e:f9:83:f0:fe:ed:d0:76:57:12:15:23: 74:30:dd:19:81:68:cd:f7:2e:6e:d2:b8:7d:6e:5b: ed:bf:1a:72:4f:ce:87:48:39:63:4d:e8:49:26:dc: bf:01:30:b5:d6:20:8f:c3:c6:49:33:b9:e8:c7:16: 3e:3a:0f:a2:a8:3d:17:be:1d:66:d3:cf:2f:00:f5: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:B4:A8:60:1D:78:01:97:D2:66:B7:5E:43:C6:4B:16:3C:FF:A5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a10::/44 Signature Algorithm: sha256WithRSAEncryption 66:79:a2:b3:cf:97:f2:a7:26:33:9a:ff:e7:f8:93:c6:69:a6: 5e:c4:84:29:a8:9e:67:c2:f0:77:63:33:ed:94:cb:cb:c0:da: b3:80:30:c9:5c:29:74:e1:ab:b8:9f:9f:8c:07:42:48:d6:6b: e8:b0:e7:5d:13:27:99:a5:9c:ac:af:0c:1a:c1:5b:b6:6b:96: 81:6e:81:d5:bc:d9:c9:44:5b:61:78:93:91:49:04:dd:30:46: 53:05:01:0b:56:72:67:a6:f8:16:e3:79:06:c2:2b:0a:da:3b: f5:17:0e:16:0b:c8:39:16:8d:7d:26:2c:05:fa:b7:18:47:6c: 84:d5:0e:88:d5:a6:2e:97:d0:b3:af:ed:88:44:ac:bb:76:23: e8:76:90:c9:b2:19:e7:2c:54:7b:d6:b5:80:4c:9a:3f:f3:c3: 7b:73:ea:bf:73:49:e2:45:ed:b7:6e:51:a7:8a:35:d4:74:f7: 59:7d:27:63:94:ce:b5:98:09:c6:33:11:93:f3:92:00:75:66: 8d:d8:f5:0d:ae:5d:0e:04:61:b4:11:a9:4b:9a:d2:78:b3:ed: a2:ab:38:33:b7:90:50:33:b0:24:0f:01:a7:a4:6b:32:38:21: 91:3f:e6:08:3a:31:97:16:dd:ad:f3:c4:c3:6a:d0:86:d1:a8: 6c:23:e9:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPfHiH0mRYjv0q7PkG4Yhj2Q5/LkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTA3MDAyMDA3WhcNMjcwMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDZjMTZjYTc2OTRkMTk0NjIxNWUwOTBmZDM4MjBlMzJl Zjc1ZTcxZGMzZWFhYjJlNjg2OGM2YjZhZDc2MmE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiJOm0yCbU42oXrgNg46OY94B3iXp5dowZQ5aaE3sFZ29D btKYi9OlDoaUWPhQnT0S1afu4Zapc2Udn48QOdc3yGfgmXEkJyTdZ4SLqk7qcKsK 2PBhSNR1LnYSDZh+oXr6nUTY0QhDWgF7glppC54E2WaJ9tdl5Tznmf0oRcQbz0n/ oF5FKgdRuMzfp75mUOtdee4re97hhoAW8BQz3/zp128eCfY+gtD9rxSat2O3dUW3 Xq2ARJ75g/D+7dB2VxIVI3Qw3RmBaM33Lm7SuH1uW+2/GnJPzodIOWNN6Ekm3L8B MLXWII/DxkkzuejHFj46D6KoPRe+HWbTzy8A9Rf5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM/q0qGAdeAGX0ma3XkPGSxY8/6UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzN2U3NWMwLWU2NjktNDQxMC1iNjI3LWZhZTgxMWNhYjZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxihAwDQYJKoZIhvcNAQELBQADggEBAGZ5orPPl/KnJjOa/+f4k8Zp pl7EhCmonmfC8HdjM+2Uy8vA2rOAMMlcKXThq7ifn4wHQkjWa+iw510TJ5mlnKyv DBrBW7ZrloFugdW82clEW2F4k5FJBN0wRlMFAQtWcmem+BbjeQbCKwraO/UXDhYL yDkWjX0mLAX6txhHbITVDojVpi6X0LOv7YhErLt2I+h2kMmyGecsVHvWtYBMmj/z w3tz6r9zSeJF7bduUaeKNdR091l9J2OUzrWYCcYzEZPzkgB1Zo3Y9Q2uXQ4EYbQR qUua0niz7aKrODO3kFAzsCQPAaekazI4IZE/5gg6MZcW3a3zxMNq0IbRqGwj6So= -----END CERTIFICATE-----Generated at Mon Nov 9 11:21:53 2026 by rpki-client