$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa File: 4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa (raw, json) Hash identifier: dqkrPUpqo+XxL9R8jhqOh+4BkYh9yBsYnkKu1MQluJw= Subject key identifier: 82:7F:B4:02:62:77:D8:AC:D2:E1:69:4A:AA:79:B1:E8:D0:FD:B6:96 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D37E0FB4D81D64BC38D3E5522632E1F62FA8C31 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa Signing time: Sat 17 Oct 2026 00:10:05 +0000 ROA not before: Sat 17 Oct 2026 00:10:05 +0000 ROA not after: Fri 15 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:e0:fb:4d:81:d6:4b:c3:8d:3e:55:22:63:2e:1f:62:fa:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 17 00:10:05 2026 GMT Not After : Jan 15 23:59:59 2027 GMT Subject: serialNumber=1373f2d9fbcd224e4c6b8ec66cbdb22ecc1fe92b991b930a9daca4f5a61b38b9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:02:71:21:7a:06:e5:5d:31:31:36:45:ab:6f: 35:2a:26:77:4f:64:66:2f:92:3d:17:ec:84:f5:2b: 50:58:e8:a2:d6:56:9b:69:24:22:2b:2d:37:d8:6e: 5b:2b:e0:0f:68:55:fd:d8:a3:18:1e:03:06:8c:55: c9:2f:e5:c4:5a:f9:9b:71:78:b1:3b:fa:6a:d7:98: e5:14:2a:9d:f4:c1:f1:9c:4d:1a:92:8b:f3:cb:8b: 8b:aa:ce:21:fb:53:f7:04:7b:19:58:8e:22:8f:29: 59:f1:28:38:20:de:d5:89:27:18:4e:04:a7:de:ae: b9:dc:c4:44:e3:77:34:9c:84:2b:fe:8d:84:77:56: a3:dd:4d:c6:3a:0a:4b:91:e8:a9:e0:ca:98:ac:f8: b7:cd:43:33:c6:2f:39:03:2a:6e:be:b0:c2:77:fe: 94:ac:f1:5b:89:bc:28:82:b3:30:ec:91:30:0f:9a: a8:17:17:a7:58:49:ff:41:7d:4e:57:4f:b3:2c:d7: 05:8f:10:55:89:b0:02:e1:a4:a4:b6:44:48:71:a2: 71:2f:d2:c5:b6:5a:ae:e8:b9:ea:78:2e:5d:55:ff: fc:0d:66:61:e0:4f:60:48:e3:fa:3d:f1:c5:a4:5e: 1a:c7:ce:f3:e9:8a:a5:38:e2:17:da:6b:dc:71:4a: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7F:B4:02:62:77:D8:AC:D2:E1:69:4A:AA:79:B1:E8:D0:FD:B6:96 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 97:66:e5:0d:ca:b4:1b:17:e1:65:e4:9e:5a:f0:8d:33:03:3e: cd:d2:97:74:83:02:4a:5a:e9:92:ac:2e:62:5c:9e:1e:b5:2a: 5e:00:9c:f9:9b:b2:04:49:8e:a5:31:bb:98:ec:df:b9:90:ef: 9b:ae:24:b7:c9:84:aa:98:84:d3:ad:2e:0a:95:05:b6:9f:f6: 25:2c:15:9b:41:07:d9:a7:f9:12:f0:57:4b:29:59:15:5e:1e: 8a:db:51:1e:55:51:41:3e:37:2d:7a:50:d5:e2:ca:f0:aa:6f: cc:0c:9d:98:b2:e2:96:43:36:6c:82:c5:38:e6:74:4c:ae:37: 37:07:66:8e:69:19:f1:9a:71:12:e0:44:78:48:53:e7:6b:c5: ca:60:0f:ae:51:90:6c:fe:a1:a2:2a:0d:05:d0:34:81:f6:1f: 31:63:72:82:a7:c5:11:60:95:fc:42:89:4b:da:ab:f0:29:cc: 95:6b:f9:2c:e3:b9:3e:58:2d:11:00:4d:9f:b6:d8:a2:d2:ea: c3:6b:17:e7:82:5b:b8:d0:2a:e9:42:f3:32:3d:ee:e3:34:0b: 26:43:01:9c:9d:d1:aa:b5:60:bb:eb:37:2d:6c:0b:6a:0d:a9: 5c:b6:ee:d8:3f:40:53:29:6e:7c:a4:9d:4b:1d:9c:75:28:d3: 3c:49:50:9f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfTfg+02B1kvDjT5VImMuH2L6jDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE3MDAxMDA1WhcNMjcwMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzczZjJkOWZiY2QyMjRlNGM2YjhlYzY2Y2JkYjIyZWNj MWZlOTJiOTkxYjkzMGE5ZGFjYTRmNWE2MWIzOGI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhAnEhegblXTExNkWrbzUqJndPZGYvkj0X7IT1K1BY6KLW VptpJCIrLTfYblsr4A9oVf3YoxgeAwaMVckv5cRa+ZtxeLE7+mrXmOUUKp30wfGc TRqSi/PLi4uqziH7U/cEexlYjiKPKVnxKDgg3tWJJxhOBKferrncxETjdzSchCv+ jYR3VqPdTcY6CkuR6Kngypis+LfNQzPGLzkDKm6+sMJ3/pSs8VuJvCiCszDskTAP mqgXF6dYSf9BfU5XT7Ms1wWPEFWJsALhpKS2REhxonEv0sW2Wq7ouep4Ll1V//wN ZmHgT2BI4/o98cWkXhrHzvPpiqU44hfaa9xxSvnBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgn+0AmJ32KzS4WlKqnmx6ND9tpYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQyNjFkMWQzLTg1M2MtNDRhMS1iZDBmLTlhOWE2NzNjNmU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAJdm5Q3KtBsX4WXknlrwjTMD Ps3Sl3SDAkpa6ZKsLmJcnh61Kl4AnPmbsgRJjqUxu5js37mQ75uuJLfJhKqYhNOt LgqVBbaf9iUsFZtBB9mn+RLwV0spWRVeHorbUR5VUUE+Ny16UNXiyvCqb8wMnZiy 4pZDNmyCxTjmdEyuNzcHZo5pGfGacRLgRHhIU+drxcpgD65RkGz+oaIqDQXQNIH2 HzFjcoKnxRFglfxCiUvaq/ApzJVr+SzjuT5YLREATZ+22KLS6sNrF+eCW7jQKulC 8zI97uM0CyZDAZyd0aq1YLvrNy1sC2oNqVy27tg/QFMpbnyknUsdnHUo0zxJUJ8= -----END CERTIFICATE-----Generated at Thu Nov 5 14:28:23 2026 by rpki-client