$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa File: 35e17b2d-e386-449d-8b46-4deb40b06ad8.roa (raw, json) Hash identifier: o4/UM6DrMhjOJaZD3Npj5GKbqU1DaaDYQvKrKgGK6Q0= Subject key identifier: 7E:4E:2E:C2:70:FE:88:A5:D4:BF:15:A1:08:9E:DF:A4:73:3E:49:AE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1BA5F6016759E674DE71871B15C786AFD3328832 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa Signing time: Thu 15 Oct 2026 03:20:18 +0000 ROA not before: Thu 15 Oct 2026 03:20:18 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a5:f6:01:67:59:e6:74:de:71:87:1b:15:c7:86:af:d3:32:88:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:18 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=dc3425de6a5bf3bbc34e6f68cabead6587c14a3db9e10881ecc94d4c54c10278, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9f:46:ef:1c:59:75:d0:ff:da:9f:06:da:84: 72:de:92:79:10:41:c0:54:1a:49:5b:01:0e:6a:e9: 44:58:15:f6:70:f2:fb:4d:14:b3:c0:70:f6:49:e3: 69:ce:8e:64:0c:68:e9:8d:93:7c:4e:95:a3:4d:2d: c2:cc:90:87:14:20:e5:19:85:5c:f4:b3:4c:9e:ee: 5e:26:9c:2c:d1:25:83:fe:36:a0:f4:0f:26:af:ba: 1c:83:74:87:15:d7:fa:fe:6b:31:ec:53:b3:4d:e9: 3b:49:92:33:41:17:69:57:2c:de:d0:92:9e:ab:bb: b0:84:6b:6a:aa:3b:9b:18:34:55:71:9f:c2:a6:0b: 82:25:23:f1:ef:e0:41:a8:99:d8:db:96:f3:d5:1c: 75:58:30:bb:0d:90:b5:10:24:32:3d:3e:31:9f:81: c1:f3:7c:12:e5:fa:74:33:98:0f:ef:56:68:78:85: 0f:fd:e2:bb:54:77:ae:86:41:d8:f3:4b:7a:60:50: 3b:64:da:4d:9a:4c:21:f5:01:96:f5:fb:98:7f:02: 2c:af:10:ea:4c:45:9a:33:2a:21:2d:fa:e8:80:e5: fc:c8:04:b7:c4:87:c5:02:a3:8e:9f:52:78:5b:b3: e9:6b:1d:42:8e:1d:5d:ec:ef:8d:33:87:8b:8d:f0: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:2E:C2:70:FE:88:A5:D4:BF:15:A1:08:9E:DF:A4:73:3E:49:AE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:60::/44 Signature Algorithm: sha256WithRSAEncryption 1e:01:80:7e:99:49:5a:26:fe:a6:14:31:38:88:2b:94:17:6a: 4b:83:28:b7:57:6e:63:db:03:db:0e:ff:5f:98:aa:1f:b6:e7: 83:bc:56:fc:be:29:24:09:90:98:77:e7:3c:5e:15:e9:d1:a2: 56:c2:5a:98:11:9c:69:3d:8d:4c:5c:f3:82:b4:81:66:0a:14: f3:5a:7d:bc:ec:44:54:18:9f:e4:2b:5a:9d:13:7b:d1:a1:11: c3:60:f2:64:54:68:6b:0d:8f:61:b0:ad:d6:56:0e:80:05:7a: 27:b2:f9:9d:4c:f0:58:9c:a7:08:94:d0:5a:32:c9:ff:cf:f1: 8d:d2:5d:18:c2:6c:62:77:ff:e8:d7:0b:5f:79:b3:c1:3d:cd: fb:ef:e8:8c:e2:3e:ad:46:e3:af:22:9c:c8:25:ad:c0:b2:14: 2a:15:f3:27:ce:45:59:80:48:2b:4e:75:ab:ee:44:1f:0b:61: c9:cb:55:d8:ff:00:ff:fc:3e:49:06:95:af:50:0c:3f:7d:57: 1b:30:2e:a6:2a:95:22:42:cd:c6:28:b3:d0:97:cb:34:b9:4e: a6:bd:a3:d7:6a:c5:0e:c9:ea:04:a5:2d:35:1d:77:61:11:b0: 0d:61:d2:ac:a7:ba:da:12:24:29:73:71:c7:e2:08:11:5e:7d: 51:a8:4c:15 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG6X2AWdZ5nTecYcbFceGr9MyiDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDE4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzM0MjVkZTZhNWJmM2JiYzM0ZTZmNjhjYWJlYWQ2NTg3 YzE0YTNkYjllMTA4ODFlY2M5NGQ0YzU0YzEwMjc4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpn0bvHFl10P/anwbahHLeknkQQcBUGklbAQ5q6URYFfZw 8vtNFLPAcPZJ42nOjmQMaOmNk3xOlaNNLcLMkIcUIOUZhVz0s0ye7l4mnCzRJYP+ NqD0DyavuhyDdIcV1/r+azHsU7NN6TtJkjNBF2lXLN7Qkp6ru7CEa2qqO5sYNFVx n8KmC4IlI/Hv4EGomdjblvPVHHVYMLsNkLUQJDI9PjGfgcHzfBLl+nQzmA/vVmh4 hQ/94rtUd66GQdjzS3pgUDtk2k2aTCH1AZb1+5h/AiyvEOpMRZozKiEt+uiA5fzI BLfEh8UCo46fUnhbs+lrHUKOHV3s740zh4uN8O4zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfk4uwnD+iKXUvxWhCJ7fpHM+Sa4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1ZTE3YjJkLWUzODYtNDQ5ZC04YjQ2LTRkZWI0MGIwNmFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAGAwDQYJKoZIhvcNAQELBQADggEBAB4BgH6ZSVom/qYUMTiIK5QX akuDKLdXbmPbA9sO/1+Yqh+254O8Vvy+KSQJkJh35zxeFenRolbCWpgRnGk9jUxc 84K0gWYKFPNafbzsRFQYn+QrWp0Te9GhEcNg8mRUaGsNj2GwrdZWDoAFeiey+Z1M 8FicpwiU0Foyyf/P8Y3SXRjCbGJ3/+jXC195s8E9zfvv6IziPq1G468inMglrcCy FCoV8yfORVmASCtOdavuRB8LYcnLVdj/AP/8PkkGla9QDD99VxswLqYqlSJCzcYo s9CXyzS5Tqa9o9dqxQ7J6gSlLTUdd2ERsA1h0qynutoSJClzccfiCBFefVGoTBU= -----END CERTIFICATE-----Generated at Thu Nov 5 14:23:55 2026 by rpki-client