$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa File: 11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa (raw, json) Hash identifier: r7SRC8CaKtELDEjKg5IVQITa//KnQt4f+b+fy2lF31Q= Subject key identifier: 50:6E:E7:37:3E:9E:D7:02:41:29:F7:64:0F:A4:DE:3A:14:7A:E0:F6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24F3ECFB5ED019C44A2E4946C5871A97137913DC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa Signing time: Mon 26 Oct 2026 04:10:24 +0000 ROA not before: Mon 26 Oct 2026 04:10:24 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:ec:fb:5e:d0:19:c4:4a:2e:49:46:c5:87:1a:97:13:79:13:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:24 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=673b862d28a636d5deb51c440b34897ad42077c8a19cbc58475e6212dd86c8c1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:ba:84:cf:bd:c9:ff:5a:71:b8:7a:e6:74: c9:c8:2f:36:73:65:43:b8:51:22:b1:87:16:40:e1: e3:38:d6:2f:c4:06:ca:52:35:ae:48:37:29:01:e0: 3f:29:83:79:9c:0b:8a:b0:4b:b1:9d:5d:60:f5:e1: a4:64:58:d4:8f:04:2a:1d:23:94:53:39:4f:40:f1: 70:c2:eb:be:38:2e:da:3d:1d:71:6c:96:da:9f:eb: 3a:96:1a:41:b2:63:7e:b6:1c:07:10:7b:9a:ae:50: 2e:8e:4b:88:95:51:6d:66:bd:54:52:00:37:c6:51: a4:8f:2f:8b:dd:6b:eb:0e:36:a0:3b:85:22:c6:07: 4e:fc:02:54:8b:32:b6:95:6b:5e:6a:2e:cf:40:c1: 23:65:ea:f2:22:a3:0a:2a:eb:95:d6:dc:97:08:c7: fd:ee:94:6a:18:63:ad:0e:4a:ba:90:0b:dc:8a:e3: 02:50:3d:75:70:c4:67:1a:06:f6:89:a3:32:cf:de: 9f:bf:9a:bf:17:eb:6b:48:3e:bf:e7:2a:52:f4:87: 4a:24:f7:a4:46:cd:81:7f:a7:79:6f:95:f3:f1:fd: 3e:12:25:96:52:05:f4:7f:45:02:3c:da:e7:53:b6: bb:cc:9f:be:5f:f9:22:52:1f:b5:95:bc:cf:49:81: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:E7:37:3E:9E:D7:02:41:29:F7:64:0F:A4:DE:3A:14:7A:E0:F6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption 40:7f:cf:44:1c:7d:7b:3f:d8:40:80:76:8c:ba:81:65:f1:b2: bf:63:4c:e4:b2:fe:69:79:7e:df:0e:58:0a:31:2c:e5:b0:54: 63:8d:71:c2:ba:e0:d1:66:fc:82:3b:fa:68:7e:7a:24:b9:f8: 65:bf:0e:3a:e1:35:0d:5c:23:88:a7:38:e9:5d:9a:4f:09:a0: d1:3a:b5:41:25:2f:0a:5b:25:ae:03:4c:4d:54:08:3b:ef:c6: db:35:80:4b:82:8f:4f:ba:fc:b5:37:3b:48:e1:7c:7d:fb:2c: 05:71:97:34:9b:50:f4:b0:c1:9f:e0:0e:e3:d6:6e:e3:d1:35: 2b:cc:ca:12:fd:85:0e:92:de:60:dd:ac:81:b4:48:6a:17:7f: ff:e9:20:26:46:5c:1b:c4:dc:2f:5d:44:0d:f1:8c:89:9f:1c: b6:e6:76:d0:9f:cd:f8:0f:f4:4e:d1:f3:7a:be:4c:c7:fb:7e: 7e:c4:f6:16:fe:7f:e3:31:c4:39:77:13:99:ef:5f:a0:8f:12: 64:c7:a2:f5:b7:41:b4:30:25:79:62:66:45:a8:7b:1b:9f:81: d2:cc:3c:04:9c:42:53:6c:7d:06:5b:a6:0f:12:bd:97:20:92: 94:e1:9e:b4:c4:76:bf:32:08:ef:d8:ac:85:18:22:87:4e:69: 73:ee:5c:2a -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUJPPs+17QGcRKLklGxYcalxN5E9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDI0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzNiODYyZDI4YTYzNmQ1ZGViNTFjNDQwYjM0ODk3YWQ0 MjA3N2M4YTE5Y2JjNTg0NzVlNjIxMmRkODZjOGMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtErqEz73J/1pxuHrmdMnILzZzZUO4USKxhxZA4eM41i/E BspSNa5INykB4D8pg3mcC4qwS7GdXWD14aRkWNSPBCodI5RTOU9A8XDC6744Lto9 HXFsltqf6zqWGkGyY362HAcQe5quUC6OS4iVUW1mvVRSADfGUaSPL4vda+sONqA7 hSLGB078AlSLMraVa15qLs9AwSNl6vIiowoq65XW3JcIx/3ulGoYY60OSrqQC9yK 4wJQPXVwxGcaBvaJozLP3p+/mr8X62tIPr/nKlL0h0ok96RGzYF/p3lvlfPx/T4S JZZSBfR/RQI82udTtrvMn75f+SJSH7WVvM9JgUZZAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUUG7nNz6e1wJBKfdkD6TeOhR64PYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzExZjg5ODE3LTdmYzgtNGQ5ZC04MGUyLTcyMmY4NjBmZjBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQBAf89EHH17P9hAgHaMuoFl8bK/ Y0zksv5peX7fDlgKMSzlsFRjjXHCuuDRZvyCO/pofnokufhlvw464TUNXCOIpzjp XZpPCaDROrVBJS8KWyWuA0xNVAg778bbNYBLgo9Puvy1NztI4Xx9+ywFcZc0m1D0 sMGf4A7j1m7j0TUrzMoS/YUOkt5g3ayBtEhqF3//6SAmRlwbxNwvXUQN8YyJnxy2 5nbQn834D/RO0fN6vkzH+35+xPYW/n/jMcQ5dxOZ71+gjxJkx6L1t0G0MCV5YmZF qHsbn4HSzDwEnEJTbH0GW6YPEr2XIJKU4Z60xHa/Mgjv2KyFGCKHTmlz7lwq -----END CERTIFICATE-----Generated at Thu Nov 5 09:02:41 2026 by rpki-client