$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1eac19d1-dd8c-4ea2-a6c0-1e6ce419e665.roa File: 1eac19d1-dd8c-4ea2-a6c0-1e6ce419e665.roa (raw, json) Hash identifier: taeX9MO3QYP+tSB5mBbXQtSWFwKPWHExZl++lcG6FzA= Subject key identifier: 33:60:82:34:C6:1E:8F:E9:F9:DD:8B:10:99:1C:73:71:0B:97:A0:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 010104B5FBD1FFFE74C23C2D60EACA01BC5D1727 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1eac19d1-dd8c-4ea2-a6c0-1e6ce419e665.roa Signing time: Wed 30 Sep 2026 00:00:05 +0000 ROA not before: Wed 30 Sep 2026 00:00:05 +0000 ROA not after: Tue 29 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5504::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:01:04:b5:fb:d1:ff:fe:74:c2:3c:2d:60:ea:ca:01:bc:5d:17:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 30 00:00:05 2026 GMT Not After : Dec 29 23:59:59 2026 GMT Subject: serialNumber=b10b676d184af91d23259165f979ea4cdc4b8dc3e5bbcfda7bc28330cbd21e23, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:b2:a1:ae:19:30:05:53:65:2a:67:4a:a6: 90:36:16:1a:be:8b:cb:c8:f0:51:8b:05:ca:2b:f1: d2:02:9f:9e:9e:63:35:42:ac:b2:78:56:28:55:e6: 6b:48:3a:e8:f2:ea:50:84:2f:c8:43:a9:f5:43:44: bb:7c:ea:11:6f:04:8e:9d:07:b0:d4:cf:74:d7:2e: 4b:2f:0b:9d:eb:02:40:f0:7e:89:24:9d:b4:38:ee: 66:69:ec:35:0d:a6:d2:83:2f:1b:7d:99:18:54:e8: 65:b7:92:54:72:2c:9a:3a:0f:ca:36:ce:ac:f4:0e: 1b:7b:f1:f4:0e:77:80:61:62:b5:23:2c:61:3f:08: 21:c5:34:99:d9:6a:7a:9c:cc:7b:84:78:96:80:27: 7d:e5:00:18:ab:dd:e9:2e:0f:30:0d:44:2a:0d:c1: 3b:c3:a3:1c:21:05:a4:53:44:f1:44:29:fe:b5:e1: c2:8f:ea:26:5d:2d:f8:be:97:9b:d7:f5:02:d3:cd: 3a:f8:9c:a1:38:ce:69:8d:bc:76:56:39:bc:56:aa: dc:88:33:e6:69:5e:64:7f:39:5f:41:2e:5e:a4:73: 47:bf:d1:2d:98:60:74:50:20:b1:a4:6e:83:2d:2b: f7:c4:18:0a:80:f7:0b:2f:df:de:e5:33:e6:76:8d: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:60:82:34:C6:1E:8F:E9:F9:DD:8B:10:99:1C:73:71:0B:97:A0:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1eac19d1-dd8c-4ea2-a6c0-1e6ce419e665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5504::/46 Signature Algorithm: sha256WithRSAEncryption 23:80:f2:7b:68:65:2c:91:bc:62:f7:d3:81:60:b0:b7:c7:81: 64:76:8c:49:15:2c:4c:71:7d:6b:39:e5:17:ad:4c:eb:b7:44: f2:12:97:c3:f6:c9:4f:fa:c5:2b:a0:ef:f0:cd:0a:2f:56:f7: 03:97:4c:b1:d6:9e:7d:7b:51:2b:db:4a:d1:33:65:1e:cf:b0: ec:cb:fa:60:91:4d:81:cf:4a:d1:f3:44:f0:61:44:a8:af:15: 7b:bd:17:3b:69:94:dd:b0:58:37:c5:c7:bb:71:a6:56:93:fc: d0:67:77:be:d6:a5:94:ee:71:1b:72:c3:d2:9e:24:03:57:08: b9:a7:18:ac:f6:0a:76:ef:69:c2:4a:29:fd:65:8d:5d:72:8e: bf:97:aa:b7:b4:10:96:25:b1:f1:d5:d0:70:f3:90:58:b8:89: 5e:86:0e:70:0c:d2:b3:07:7b:68:f0:10:cc:cc:0e:d7:1c:be: 03:5d:bc:63:ba:b0:85:9e:22:90:a1:d7:ef:5e:0f:70:3b:8f: 42:22:85:fa:6b:32:6f:41:e6:17:5b:fc:ad:ed:34:1b:13:95: 3c:6d:86:b1:dd:fc:d1:01:64:d1:c7:60:2b:52:ae:bb:ba:83: 52:37:97:c9:20:ba:82:4f:57:ab:05:e5:ff:aa:35:7c:57:cb: f2:f2:69:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAQEEtfvR//50wjwtYOrKAbxdFycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTMwMDAwMDA1WhcNMjYxMjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTBiNjc2ZDE4NGFmOTFkMjMyNTkxNjVmOTc5ZWE0Y2Rj NGI4ZGMzZTViYmNmZGE3YmMyODMzMGNiZDIxZTIzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQqrKhrhkwBVNlKmdKppA2Fhq+i8vI8FGLBcor8dICn56e YzVCrLJ4VihV5mtIOujy6lCEL8hDqfVDRLt86hFvBI6dB7DUz3TXLksvC53rAkDw fokknbQ47mZp7DUNptKDLxt9mRhU6GW3klRyLJo6D8o2zqz0Dht78fQOd4BhYrUj LGE/CCHFNJnZanqczHuEeJaAJ33lABir3ekuDzANRCoNwTvDoxwhBaRTRPFEKf61 4cKP6iZdLfi+l5vX9QLTzTr4nKE4zmmNvHZWObxWqtyIM+ZpXmR/OV9BLl6kc0e/ 0S2YYHRQILGkboMtK/fEGAqA9wsv397lM+Z2jbg7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM2CCNMYej+n53YsQmRxzcQuXoKEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlYWMxOWQxLWRkOGMtNGVhMi1hNmMwLTFlNmNlNDE5ZTY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwVQQwDQYJKoZIhvcNAQELBQADggEBACOA8ntoZSyRvGL304FgsLfH gWR2jEkVLExxfWs55RetTOu3RPISl8P2yU/6xSug7/DNCi9W9wOXTLHWnn17USvb StEzZR7PsOzL+mCRTYHPStHzRPBhRKivFXu9FztplN2wWDfFx7txplaT/NBnd77W pZTucRtyw9KeJANXCLmnGKz2CnbvacJKKf1ljV1yjr+Xqre0EJYlsfHV0HDzkFi4 iV6GDnAM0rMHe2jwEMzMDtccvgNdvGO6sIWeIpCh1+9eD3A7j0IihfprMm9B5hdb /K3tNBsTlTxthrHd/NEBZNHHYCtSrru6g1I3l8kguoJPV6sF5f+qNXxXy/LyaU0= -----END CERTIFICATE-----Generated at Thu Nov 5 14:26:01 2026 by rpki-client