$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa File: 644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json) Hash identifier: 2z0tq55ITTWr2DCPT8MjCmI6nwVXIOQGYGYDKN8Grdk= Subject key identifier: 41:F0:8D:BC:1C:48:AC:C7:B3:72:51:49:01:FF:64:F9:57:5A:EC:8F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0F5B5CCA65EE834F2D5FA16670C08EF44AC4FCA1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa Signing time: Mon 26 Oct 2026 04:10:51 +0000 ROA not before: Mon 26 Oct 2026 04:10:51 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5b:5c:ca:65:ee:83:4f:2d:5f:a1:66:70:c0:8e:f4:4a:c4:fc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:51 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=9d26b1b111a0b4f27b30d18a8e97d0f79db348a94c38cb23898e903fb480b612, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:46:3d:60:13:97:94:15:05:89:df:c9:49: 42:81:3e:a9:31:bd:b6:ee:7a:17:77:86:96:60:e4: f6:8d:95:7c:4f:49:3d:f2:d7:c7:9f:85:d9:0c:f9: 23:53:39:76:62:38:cc:29:35:a4:11:b1:20:f0:5c: c5:dc:8f:3c:e8:ee:d3:24:5a:34:0d:38:0f:ad:72: 1a:22:89:60:91:3d:dd:6f:ca:7d:e7:a1:f3:b9:29: 40:d5:d2:0a:9d:58:5d:ab:68:db:63:b9:bc:fd:df: 15:ed:8c:d5:ab:0a:68:05:0e:93:df:46:83:08:fd: b9:de:ee:9e:5e:b7:73:d6:29:5c:c5:66:30:d2:e0: fb:10:25:4b:b5:11:4a:6a:57:4e:70:c7:96:82:45: e5:34:48:d5:2b:13:cc:c6:b2:7d:d1:22:4b:81:eb: 51:7d:9e:89:16:1d:7d:a4:1e:8a:f6:bc:31:80:4a: 5e:ff:f9:8c:76:65:e9:f6:d8:b2:48:5f:5a:8c:29: 2a:5d:a8:86:7e:73:47:92:66:45:4e:59:a0:50:45: 09:af:8e:f6:25:b8:58:9e:3c:d9:2e:ae:3f:cc:d4: ca:96:94:f4:a5:3c:ae:de:fb:85:af:eb:78:fd:20: d3:b7:87:a9:47:48:7e:f2:69:a7:7a:79:09:40:73: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:8D:BC:1C:48:AC:C7:B3:72:51:49:01:FF:64:F9:57:5A:EC:8F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/40 Signature Algorithm: sha256WithRSAEncryption 40:da:cc:ff:44:bf:3b:e6:8f:9c:b1:d7:2b:d6:6f:d4:0c:82: 39:0e:8d:fe:f2:be:8d:9f:2c:65:9f:96:ac:2f:cb:d9:eb:b2: 79:09:b1:4e:56:d3:7f:6c:bb:83:a2:5e:10:a8:fd:fe:84:a1: 83:af:a6:f7:2a:8d:6c:a3:a1:e4:fb:68:0f:bd:24:e1:bb:5f: 60:e8:14:93:ca:cb:26:09:85:b3:ac:72:66:a1:8d:5e:f5:be: 68:c3:0b:76:0b:45:0e:73:98:a5:07:64:18:08:36:cd:02:29: aa:02:64:cb:95:49:34:06:78:b1:fb:98:83:68:b6:60:d4:ac: 8d:5d:25:75:75:de:d7:fc:8e:8d:ae:14:d2:3c:41:bb:ee:61: 57:96:72:5b:ff:3e:ac:7a:f0:e2:35:bc:50:2d:53:9d:ce:b5: 33:9f:47:04:dc:f4:de:b1:d3:77:03:8d:69:a7:df:8e:48:2d: 65:c5:50:a6:3d:92:63:b9:e9:7f:44:ff:ce:d8:dd:44:d5:51: 04:15:79:87:82:83:66:bf:70:24:56:12:68:e5:1e:1f:bb:c6: a3:34:bb:6a:26:36:5e:cd:1a:18:89:ba:26:61:71:56:52:42: 02:8e:2f:a7:87:7d:28:ca:49:f0:a0:f2:74:ce:f8:4d:2e:84: 3c:49:a3:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUD1tcymXug08tX6FmcMCO9ErE/KEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDUxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDI2YjFiMTExYTBiNGYyN2IzMGQxOGE4ZTk3ZDBmNzlk YjM0OGE5NGMzOGNiMjM4OThlOTAzZmI0ODBiNjEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn60Y9YBOXlBUFid/JSUKBPqkxvbbuehd3hpZg5PaNlXxP ST3y18efhdkM+SNTOXZiOMwpNaQRsSDwXMXcjzzo7tMkWjQNOA+tchoiiWCRPd1v yn3nofO5KUDV0gqdWF2raNtjubz93xXtjNWrCmgFDpPfRoMI/bne7p5et3PWKVzF ZjDS4PsQJUu1EUpqV05wx5aCReU0SNUrE8zGsn3RIkuB61F9nokWHX2kHor2vDGA Sl7/+Yx2Zen22LJIX1qMKSpdqIZ+c0eSZkVOWaBQRQmvjvYluFiePNkurj/M1MqW lPSlPK7e+4Wv63j9INO3h6lHSH7yaad6eQlAc/flAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQfCNvBxIrMezclFJAf9k+Vda7I8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGY4ODJhLWQ0MmMtNGM3Ni1iYjcwLTg4MjgzOGY2ZTNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAQNrM/0S/O+aPnLHXK9Zv1AyC OQ6N/vK+jZ8sZZ+WrC/L2euyeQmxTlbTf2y7g6JeEKj9/oShg6+m9yqNbKOh5Pto D70k4btfYOgUk8rLJgmFs6xyZqGNXvW+aMMLdgtFDnOYpQdkGAg2zQIpqgJky5VJ NAZ4sfuYg2i2YNSsjV0ldXXe1/yOja4U0jxBu+5hV5ZyW/8+rHrw4jW8UC1Tnc61 M59HBNz03rHTdwONaaffjkgtZcVQpj2SY7npf0T/ztjdRNVRBBV5h4KDZr9wJFYS aOUeH7vGozS7aiY2Xs0aGIm6JmFxVlJCAo4vp4d9KMpJ8KDydM74TS6EPEmjTw== -----END CERTIFICATE-----Generated at Thu Nov 5 16:29:17 2026 by rpki-client