$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa File: 0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa (raw, json) Hash identifier: 35wjHpSjrTPKmgBHXUkx6tfVDTAg8MtuxO5KdYOdGu8= Subject key identifier: 9F:48:CF:80:E5:B2:DD:D6:19:AE:DC:B2:84:BF:86:A6:5D:30:CE:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7991973645A6236A55B99319B30051565259F001 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa Signing time: Tue 27 Oct 2026 00:50:25 +0000 ROA not before: Tue 27 Oct 2026 00:50:25 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:91:97:36:45:a6:23:6a:55:b9:93:19:b3:00:51:56:52:59:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:25 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=42b37cd0aab1b1b462bd97a4585c30b7ec26248d04fe396201bc58f45646c83a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:4c:2c:e7:ec:ff:4e:24:10:cc:eb:fa:f1: c2:c1:1e:3f:67:35:f3:2a:0d:6a:95:6d:78:7c:34: 4e:93:06:53:98:ca:c9:95:b5:8a:e5:0e:7a:83:d2: 65:05:0f:24:33:0e:60:34:87:be:f6:40:12:4b:32: 76:3d:30:d5:84:28:57:a1:13:44:12:ed:d8:4f:65: fe:50:17:73:7c:7e:44:13:9c:c8:53:3f:db:ae:91: 2d:05:57:9e:10:57:6e:e8:1c:92:df:9c:71:90:7d: 71:fd:32:a8:5b:a1:0d:62:5a:a4:7c:ec:c9:ed:f6: f6:80:ef:5e:b3:92:e1:d9:df:4a:34:1b:a8:a5:c2: c5:4d:57:4d:0f:92:e1:2e:d1:64:0b:da:01:93:72: 21:1e:5b:6e:ab:2b:31:c3:26:3a:51:b3:cb:b3:5c: 87:81:e1:48:73:0e:13:cb:eb:81:28:a5:f2:89:59: 6d:22:e5:83:58:da:53:37:b3:dd:e6:1e:bf:29:d1: 44:2c:b2:be:d0:02:ed:33:1f:eb:96:07:af:b8:70: 14:d5:03:bf:36:26:97:73:78:15:48:bc:b3:15:a2: 5f:c7:2e:96:ef:71:0d:a1:73:e7:a8:f0:91:04:45: 73:b6:5d:28:81:0a:6c:e1:94:2e:36:6a:1d:86:f4: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:48:CF:80:E5:B2:DD:D6:19:AE:DC:B2:84:BF:86:A6:5D:30:CE:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption 40:9d:9c:36:c1:7f:74:da:2a:b1:f4:70:87:07:52:b9:8c:dd: 9e:7f:d0:0a:2b:3b:67:ac:f9:34:e4:c8:78:9f:f9:62:3d:4c: ba:a9:bf:ea:d1:18:f2:10:50:05:7b:4c:d8:10:c8:a0:91:4b: c1:cc:48:2d:5a:ac:7c:21:fd:39:4b:dc:39:84:e0:fd:61:a9: 7b:48:28:96:8b:27:4c:60:a7:ae:cb:f0:d7:79:60:b4:5b:f6: 9a:ce:aa:f7:6a:c4:7c:5b:52:16:10:86:43:13:8e:63:c0:d4: a1:d0:42:9c:18:c0:a9:d8:db:2b:59:46:8f:e3:8b:c0:a3:c1: e7:fc:4d:de:e4:45:a8:0b:d2:8c:67:26:30:be:09:15:f8:83: e3:50:80:ab:a1:ab:88:3f:1b:eb:7e:d4:5e:5c:db:8b:b6:cb: c7:28:fb:09:1e:ca:4d:95:9c:06:24:78:df:aa:50:ff:f6:81: 9d:10:52:db:19:8e:98:c9:ec:54:65:5b:f9:dc:b8:ad:56:8b: bf:12:dc:3c:af:89:6a:3a:a8:ed:fc:21:04:54:0c:04:05:4b: 02:9f:bc:e1:d2:43:95:5b:83:99:bf:e8:6d:be:4b:92:0c:13: b7:de:62:57:6e:f5:1c:49:f2:6e:58:d2:22:04:f6:6c:b3:19: 16:86:05:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeZGXNkWmI2pVuZMZswBRVlJZ8AEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDI1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmIzN2NkMGFhYjFiMWI0NjJiZDk3YTQ1ODVjMzBiN2Vj MjYyNDhkMDRmZTM5NjIwMWJjNThmNDU2NDZjODNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIpkws5+z/TiQQzOv68cLBHj9nNfMqDWqVbXh8NE6TBlOY ysmVtYrlDnqD0mUFDyQzDmA0h772QBJLMnY9MNWEKFehE0QS7dhPZf5QF3N8fkQT nMhTP9uukS0FV54QV27oHJLfnHGQfXH9MqhboQ1iWqR87Mnt9vaA716zkuHZ30o0 G6ilwsVNV00PkuEu0WQL2gGTciEeW26rKzHDJjpRs8uzXIeB4UhzDhPL64EopfKJ WW0i5YNY2lM3s93mHr8p0UQssr7QAu0zH+uWB6+4cBTVA782JpdzeBVIvLMVol/H LpbvcQ2hc+eo8JEERXO2XSiBCmzhlC42ah2G9N8tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn0jPgOWy3dYZrtyyhL+Gpl0wzsEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBlMjVmZjZiLWI4MDAtNDdiZC1iMjAyLTFmZmU1ZjQ0ZDlmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAECdnDbBf3TaKrH0cIcHUrmM 3Z5/0AorO2es+TTkyHif+WI9TLqpv+rRGPIQUAV7TNgQyKCRS8HMSC1arHwh/TlL 3DmE4P1hqXtIKJaLJ0xgp67L8Nd5YLRb9prOqvdqxHxbUhYQhkMTjmPA1KHQQpwY wKnY2ytZRo/ji8Cjwef8Td7kRagL0oxnJjC+CRX4g+NQgKuhq4g/G+t+1F5c24u2 y8co+wkeyk2VnAYkeN+qUP/2gZ0QUtsZjpjJ7FRlW/ncuK1Wi78S3DyviWo6qO38 IQRUDAQFSwKfvOHSQ5Vbg5m/6G2+S5IME7feYldu9RxJ8m5Y0iIE9myzGRaGBR8= -----END CERTIFICATE-----Generated at Thu Nov 5 19:22:14 2026 by rpki-client