$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa File: 06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json) Hash identifier: 05NqYFSe7nIBSOZHeT2ejhdnYrwzx/H15SxoIjDe0h0= Subject key identifier: 99:7E:54:63:82:35:59:52:D9:AA:FA:77:BD:66:E5:C8:B5:F9:D1:C5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0E774C4F01395110C4239F0C3F2799C639048147 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa Signing time: Tue 27 Oct 2026 00:50:26 +0000 ROA not before: Tue 27 Oct 2026 00:50:26 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:77:4c:4f:01:39:51:10:c4:23:9f:0c:3f:27:99:c6:39:04:81:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:26 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=92a39ab6809809b44979117be0ff20539afa2a885244c125dcbf52679d360853, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:4d:76:43:6b:96:e5:cb:43:a2:ed:4f:1c: bb:c4:39:63:a0:6b:58:b0:fc:d1:57:6b:f4:89:85: cc:a1:f1:6f:8c:fc:15:9e:0d:84:13:25:a5:90:99: 18:10:d9:17:c9:5a:46:e2:fa:b5:06:da:ab:f9:a6: ca:1a:ef:3a:ed:05:17:38:98:7b:b8:53:a1:ca:f4: f8:2b:c1:83:a3:5a:61:3a:33:ea:74:0c:d3:d5:f7: 0a:5d:ce:75:98:7b:76:2f:78:09:c4:1b:5e:12:68: 34:d3:df:cc:fa:4b:56:42:19:5f:b3:c6:2b:1a:1e: 65:b7:49:63:e3:3c:15:bb:89:cc:68:a9:49:03:13: 33:3a:6c:17:99:69:c8:c2:86:bb:8c:c0:09:fb:0e: f7:53:e8:a9:9b:cf:9d:13:79:05:21:58:6a:b0:28: 3d:cf:2f:05:7f:e1:29:d9:5c:32:6d:06:25:57:13: 32:ef:8e:9c:29:b0:ec:81:4c:14:ba:80:09:bd:15: e8:e4:f7:4e:f9:ae:f7:42:01:9f:dc:0d:27:1d:d7: 37:4a:b0:93:11:0f:c8:e5:b5:8f:2b:2a:0b:2d:7b: 51:16:fb:7b:d2:d8:04:f9:23:06:d5:51:f7:75:9a: 3d:ac:bc:85:fe:f9:95:65:32:c1:56:bf:02:ce:ba: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:54:63:82:35:59:52:D9:AA:FA:77:BD:66:E5:C8:B5:F9:D1:C5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption 72:cb:18:e5:cf:0d:92:fc:06:72:0b:0c:ea:8f:c8:49:f8:67: 93:a5:1e:ff:1f:0c:88:92:ca:12:ce:85:cc:9b:23:79:e3:b4: 15:3c:2f:22:f4:fb:06:cf:63:4b:28:39:31:cd:e7:75:ef:b5: 37:b5:e3:be:3f:da:03:6e:2d:b8:32:d5:6a:a8:7b:c9:bc:d6: bc:e6:ec:fb:56:0d:b9:6e:8d:9f:fa:2a:ba:54:01:4a:b7:44: 99:76:f5:e8:cd:fc:0f:68:cf:f1:ba:ba:de:00:b0:b6:6b:ab: ca:f8:5f:17:cc:d1:45:d1:a8:85:fc:a5:d9:a4:49:30:4b:2c: 19:bb:cb:77:60:ca:69:0b:86:44:59:0c:d0:9f:98:e6:20:47: 58:1f:c8:f6:e8:d8:41:64:75:81:9d:c8:a7:e2:ec:42:ff:55: 11:45:06:41:c6:14:c0:1b:96:56:9c:94:ba:6e:22:b0:72:4d: 72:c7:09:7d:37:ae:16:f5:e5:31:ef:2e:15:47:1f:e7:d1:4a: 04:a8:0d:1f:fa:2c:dd:bb:03:95:cb:2b:87:8b:49:08:ce:d4: 00:d3:01:2e:f3:94:1e:8d:ce:a0:16:1e:28:c4:dc:6a:2a:91: d6:98:c9:eb:7d:0b:6e:fa:36:23:a2:dc:af:b1:24:b3:90:87: 3f:b8:74:69 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDndMTwE5URDEI58MPyeZxjkEgUcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDI2WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmEzOWFiNjgwOTgwOWI0NDk3OTExN2JlMGZmMjA1Mzlh ZmEyYTg4NTI0NGMxMjVkY2JmNTI2NzlkMzYwODUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi2k12Q2uW5ctDou1PHLvEOWOga1iw/NFXa/SJhcyh8W+M /BWeDYQTJaWQmRgQ2RfJWkbi+rUG2qv5psoa7zrtBRc4mHu4U6HK9PgrwYOjWmE6 M+p0DNPV9wpdznWYe3YveAnEG14SaDTT38z6S1ZCGV+zxisaHmW3SWPjPBW7icxo qUkDEzM6bBeZacjChruMwAn7DvdT6Kmbz50TeQUhWGqwKD3PLwV/4SnZXDJtBiVX EzLvjpwpsOyBTBS6gAm9Fejk9075rvdCAZ/cDScd1zdKsJMRD8jltY8rKgste1EW +3vS2AT5IwbVUfd1mj2svIX++ZVlMsFWvwLOugpzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmX5UY4I1WVLZqvp3vWblyLX50cUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2ZTBhOTdlLWI1MDAtNDM0Yy05NGI0LTNlYWRkMzRlNWQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAHLLGOXPDZL8BnILDOqPyEn4 Z5OlHv8fDIiSyhLOhcybI3njtBU8LyL0+wbPY0soOTHN53XvtTe1474/2gNuLbgy 1Wqoe8m81rzm7PtWDblujZ/6KrpUAUq3RJl29ejN/A9oz/G6ut4AsLZrq8r4XxfM 0UXRqIX8pdmkSTBLLBm7y3dgymkLhkRZDNCfmOYgR1gfyPbo2EFkdYGdyKfi7EL/ VRFFBkHGFMAbllaclLpuIrByTXLHCX03rhb15THvLhVHH+fRSgSoDR/6LN27A5XL K4eLSQjO1ADTAS7zlB6NzqAWHijE3GoqkdaYyet9C276NiOi3K+xJLOQhz+4dGk= -----END CERTIFICATE-----Generated at Tue Nov 10 02:19:27 2026 by rpki-client