$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/560782dd-2faf-4172-aa1b-c706343a808d.roa File: 560782dd-2faf-4172-aa1b-c706343a808d.roa (raw, json) Hash identifier: YlHEuDOZQJMZwMK47bSvTcwc4Lzg85OoVZWCOfSJkY4= Subject key identifier: 70:B5:98:E6:17:4E:DF:1B:8E:CE:4C:EB:0F:67:16:B9:C8:AC:BA:FF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 580072BA40A8459E69C1402222AC42F20ED8D88F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/560782dd-2faf-4172-aa1b-c706343a808d.roa Signing time: Sun 25 Oct 2026 00:02:44 +0000 ROA not before: Sun 25 Oct 2026 00:02:44 +0000 ROA not after: Sat 23 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:00:72:ba:40:a8:45:9e:69:c1:40:22:22:ac:42:f2:0e:d8:d8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 25 00:02:44 2026 GMT Not After : Jan 23 23:59:59 2027 GMT Subject: serialNumber=6d12db817915dceaa88fc4f9ab883d86c9330b3cfcd0994ce949a48a9d32ecb1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:6f:70:ee:fe:e7:ec:51:7c:80:71:08:66: ce:ae:23:7c:65:3d:a7:e6:d9:d9:c1:cc:a2:bd:9c: de:30:7b:64:4d:79:0d:9b:6b:e2:db:8e:c4:d9:2e: d2:0f:f6:6a:97:cc:64:3e:8b:62:37:d0:d1:a6:03: c4:56:70:03:09:65:8e:ab:75:b6:81:21:81:48:c5: 48:47:cc:a5:c5:ce:48:76:c1:70:d7:40:f5:6d:25: 9a:72:76:02:8f:93:e6:c8:b5:b0:f8:6e:b2:c7:61: b2:3b:cf:9e:c5:a6:eb:65:85:39:72:8d:58:1e:05: 21:5a:91:4e:c8:6a:a4:d6:32:80:66:77:29:97:ee: ef:fe:d6:a3:35:e0:cf:6b:bf:af:b2:85:59:cd:5a: 04:29:95:15:df:bc:5d:b3:44:36:5d:a4:c2:aa:6c: 5d:2c:73:07:0e:dd:ff:39:46:65:4c:0f:47:36:9a: 50:f3:de:fa:1c:44:48:41:f6:72:96:ce:86:78:55: 9a:3d:3a:b4:a5:55:c1:44:7c:2a:08:0b:d3:d5:3b: 2f:2d:96:1f:e4:61:a4:45:67:be:65:67:ac:6f:b5: 83:80:fc:5d:42:19:eb:e3:6b:c1:96:3c:81:8a:b2: 97:4f:e1:25:23:3f:46:33:2e:fd:25:49:a0:b0:ff: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B5:98:E6:17:4E:DF:1B:8E:CE:4C:EB:0F:67:16:B9:C8:AC:BA:FF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/560782dd-2faf-4172-aa1b-c706343a808d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:c800::/48 Signature Algorithm: sha256WithRSAEncryption 3a:da:e7:0a:19:76:36:ee:2f:c8:3b:9f:f7:df:3e:1a:2c:49: e1:eb:0e:49:ee:75:6c:3d:98:03:d4:97:da:7c:f9:cd:20:2a: e5:22:97:ee:bc:f5:c8:a0:60:fd:c9:b2:70:33:13:50:14:93: a1:60:f7:79:59:22:51:11:a6:7f:50:f9:66:ff:7b:e9:a3:40: 6f:e3:43:60:a2:37:9f:bf:05:28:00:62:d6:2f:c0:ef:0a:48: 56:cd:28:9a:38:29:1b:95:49:d8:97:41:1c:fb:16:93:5b:55: f1:5a:ea:5a:b8:e4:f4:78:a4:a9:2a:17:18:7f:16:c4:86:db: 3b:72:64:bc:95:20:5b:1f:95:c6:15:0f:6e:ed:d9:22:75:d4: 08:7f:41:03:59:7e:88:d1:02:b2:e1:ca:c1:f1:bc:00:aa:99: a2:19:6e:bd:08:fd:22:77:5e:af:4a:ed:77:e9:c7:6e:09:fa: 1e:a6:82:c4:b6:7a:cd:be:dc:ea:e6:5c:42:c8:7d:6b:26:47: f9:76:38:de:5d:61:3d:e1:42:4f:9a:67:ba:80:46:19:17:cd: 99:50:ee:7b:47:ee:5d:db:c7:ed:61:80:bd:5d:d0:11:c9:c7: de:f8:9f:59:89:b5:1e:e7:f7:64:79:96:1f:15:ba:d8:57:c5: c8:33:dd:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWAByukCoRZ5pwUAiIqxC8g7Y2I8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI1MDAwMjQ0WhcNMjcwMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDEyZGI4MTc5MTVkY2VhYTg4ZmM0ZjlhYjg4M2Q4NmM5 MzMwYjNjZmNkMDk5NGNlOTQ5YTQ4YTlkMzJlY2IxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+mG9w7v7n7FF8gHEIZs6uI3xlPafm2dnBzKK9nN4we2RN eQ2ba+LbjsTZLtIP9mqXzGQ+i2I30NGmA8RWcAMJZY6rdbaBIYFIxUhHzKXFzkh2 wXDXQPVtJZpydgKPk+bItbD4brLHYbI7z57FputlhTlyjVgeBSFakU7IaqTWMoBm dymX7u/+1qM14M9rv6+yhVnNWgQplRXfvF2zRDZdpMKqbF0scwcO3f85RmVMD0c2 mlDz3vocREhB9nKWzoZ4VZo9OrSlVcFEfCoIC9PVOy8tlh/kYaRFZ75lZ6xvtYOA /F1CGevja8GWPIGKspdP4SUjP0YzLv0lSaCw/6H1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcLWY5hdO3xuOzkzrD2cWucisuv8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU2MDc4MmRkLTJmYWYtNDE3Mi1hYTFiLWM3MDYzNDNhODA4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD7yAAwDQYJKoZIhvcNAQELBQADggEBADra5woZdjbuL8g7n/ffPhos SeHrDknudWw9mAPUl9p8+c0gKuUil+689cigYP3JsnAzE1AUk6Fg93lZIlERpn9Q +Wb/e+mjQG/jQ2CiN5+/BSgAYtYvwO8KSFbNKJo4KRuVSdiXQRz7FpNbVfFa6lq4 5PR4pKkqFxh/FsSG2ztyZLyVIFsflcYVD27t2SJ11Ah/QQNZfojRArLhysHxvACq maIZbr0I/SJ3Xq9K7Xfpx24J+h6mgsS2es2+3OrmXELIfWsmR/l2ON5dYT3hQk+a Z7qARhkXzZlQ7ntH7l3bx+1hgL1d0BHJx974n1mJtR7n92R5lh8VuthXxcgz3bY= -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:31 2026 by rpki-client