$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: PpaiIZo1D7Cgx7BERoux4EDswKNp12K63NXLYMVsPOk= Subject key identifier: F4:B1:E8:FB:79:6F:A4:DA:6E:6F:25:A2:12:C8:FC:CA:BD:4E:18:FD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 43A98052FE8B52983B09833688BE849CB873220F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Mon 26 Oct 2026 04:20:08 +0000 ROA not before: Mon 26 Oct 2026 04:20:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:80:52:fe:8b:52:98:3b:09:83:36:88:be:84:9c:b8:73:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=0f47936d540dfd8422f0939f739b6ddde5c6ebcbecf8dce0e77bd2fc23afd05f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:b9:e2:99:41:4b:81:b3:14:e1:42:50:60: 90:dd:96:64:a0:37:c9:eb:bd:18:f4:56:af:ca:f0: 37:35:c0:b6:9d:e1:b8:06:cb:4f:af:37:49:5a:09: f4:6d:58:50:ca:32:40:8b:62:b5:5c:53:f9:a9:43: 84:e2:5b:30:ef:72:43:51:ae:54:ca:f4:51:f6:15: 0e:e8:ac:b4:eb:e4:90:cb:33:e6:8e:69:98:ee:9f: 66:2f:47:62:5a:4b:d8:c6:4d:a2:82:a7:00:ca:fc: 34:f5:35:25:c6:3d:2c:db:74:fe:dd:48:04:3f:11: 38:5b:0b:48:62:d9:9d:65:f3:83:99:f6:72:a3:be: 3b:bb:6b:bf:2a:7d:ae:fc:ab:2b:7e:ae:d6:d2:5a: cc:4c:cd:b7:13:c9:91:17:3f:fd:4b:28:3f:12:5c: 55:68:cc:bb:95:40:91:57:68:ba:38:aa:c9:bc:e1: 4e:a7:33:0b:45:c8:59:40:8c:b8:77:bf:30:84:2b: b0:67:54:1b:8d:b4:8a:ec:f0:36:ca:ed:b4:02:d5: fd:74:12:ca:76:87:c6:1e:99:a1:ea:6a:39:7b:81: f8:75:ac:cf:c8:26:85:ae:42:f5:dc:24:c1:bd:24: ea:9f:bb:34:6e:63:9f:18:65:fb:59:6c:2c:67:aa: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B1:E8:FB:79:6F:A4:DA:6E:6F:25:A2:12:C8:FC:CA:BD:4E:18:FD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 2b:9c:13:67:e3:97:51:47:b1:a2:33:a6:28:a6:eb:ed:71:25: ae:96:10:80:ef:92:0f:33:bc:a3:9f:df:e7:3c:ae:00:5f:e1: 86:b8:5f:9d:a1:ea:76:58:a9:3c:2a:04:bd:08:df:44:40:9e: 5e:ac:a1:39:e5:43:1f:52:45:9e:f9:37:60:6a:a4:10:89:7b: 67:b8:71:45:f7:56:63:de:de:92:18:cf:e8:bc:83:2d:67:07: a5:d6:4e:6a:3f:0c:cf:13:23:9e:c5:9b:2e:67:54:1d:48:82: bb:fb:71:8a:12:fa:7b:97:73:bb:41:78:73:60:f8:ba:dd:04: e9:75:b0:de:b7:a5:49:7b:7d:9e:b7:dc:b8:7c:40:76:46:5a: 00:16:a6:db:84:e3:57:65:93:1e:c3:e4:af:66:37:99:ef:88: 10:09:81:2e:9a:a0:7f:5e:3a:c9:50:00:86:9c:d9:6a:f9:8e: 89:ca:ec:c6:5c:69:86:eb:17:5b:06:82:e7:38:43:28:49:b6: e2:9f:de:c5:96:e4:5c:e5:5d:e6:5c:03:39:79:f4:cb:38:6c: 75:8c:9a:74:58:c5:9c:73:94:67:3f:ec:78:83:db:97:df:00: 6e:b2:57:cf:3a:2d:27:c5:7c:13:3b:79:b7:5c:5e:98:7f:d4: b5:3d:e5:1c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ6mAUv6LUpg7CYM2iL6EnLhzIg8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjQ3OTM2ZDU0MGRmZDg0MjJmMDkzOWY3MzliNmRkZGU1 YzZlYmNiZWNmOGRjZTBlNzdiZDJmYzIzYWZkMDVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ7rnimUFLgbMU4UJQYJDdlmSgN8nrvRj0Vq/K8Dc1wLad 4bgGy0+vN0laCfRtWFDKMkCLYrVcU/mpQ4TiWzDvckNRrlTK9FH2FQ7orLTr5JDL M+aOaZjun2YvR2JaS9jGTaKCpwDK/DT1NSXGPSzbdP7dSAQ/EThbC0hi2Z1l84OZ 9nKjvju7a78qfa78qyt+rtbSWsxMzbcTyZEXP/1LKD8SXFVozLuVQJFXaLo4qsm8 4U6nMwtFyFlAjLh3vzCEK7BnVBuNtIrs8DbK7bQC1f10Esp2h8YemaHqajl7gfh1 rM/IJoWuQvXcJMG9JOqfuzRuY58YZftZbCxnqgJbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9LHo+3lvpNpubyWiEsj8yr1OGP0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAK5wTZ+OXUUexojOmKKbr7XEl rpYQgO+SDzO8o5/f5zyuAF/hhrhfnaHqdlipPCoEvQjfRECeXqyhOeVDH1JFnvk3 YGqkEIl7Z7hxRfdWY97ekhjP6LyDLWcHpdZOaj8MzxMjnsWbLmdUHUiCu/txihL6 e5dzu0F4c2D4ut0E6XWw3relSXt9nrfcuHxAdkZaABam24TjV2WTHsPkr2Y3me+I EAmBLpqgf146yVAAhpzZavmOicrsxlxphusXWwaC5zhDKEm24p/exZbkXOVd5lwD OXn0yzhsdYyadFjFnHOUZz/seIPbl98AbrJXzzotJ8V8Ezt5t1xemH/UtT3lHA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:32:28 2026 by rpki-client