$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa File: 6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa (raw, json) Hash identifier: uPu2JFvncD/xaEsedWd65b0WCx+ZkLu0wIq/kwcVTPE= Subject key identifier: CD:D6:EE:E5:0E:A2:54:52:21:41:82:06:37:E8:EB:3C:57:F0:3B:D6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 402CBA3E9CE4DF98EA949916AC37E850EE1E0A80 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa Signing time: Tue 27 Oct 2026 00:50:14 +0000 ROA not before: Tue 27 Oct 2026 00:50:14 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2c:ba:3e:9c:e4:df:98:ea:94:99:16:ac:37:e8:50:ee:1e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:14 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=ab12a0315ddc1b4e9b780d4c9c4f9ae41a3a6a60e3f7b1d201e030531da0eeb0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:86:83:e9:14:e3:03:bb:ea:1b:fe:72:e6: 73:a6:11:3e:86:06:4e:b1:6e:1c:1e:c4:d1:69:fb: b5:14:5c:67:0a:11:1f:bb:9f:15:cb:82:60:71:bd: 6c:1e:56:e5:33:2e:e7:c7:1d:2d:5d:d4:15:33:e2: 55:ff:ef:2f:8e:da:59:8e:d2:45:1d:06:1c:e6:74: f5:42:5f:31:ff:94:21:cf:3b:df:0e:cc:57:90:1e: 20:b1:ff:e4:99:aa:bb:69:78:35:cd:23:ab:2a:e2: db:72:7d:d1:5d:48:a2:28:87:cd:58:32:e4:ed:21: 2f:cf:08:86:6b:00:ef:e9:3b:ec:9d:78:0a:ef:e9: ad:19:eb:d8:00:96:b1:63:75:0f:64:26:8f:38:89: 9f:39:fc:40:34:5e:60:ad:44:b4:9c:a4:b1:0f:ce: 1c:80:ba:72:c9:0e:c9:2e:fc:9e:44:2c:8a:37:1b: e8:b7:64:bd:12:b5:11:30:35:1f:f2:dc:61:3b:6f: 4b:91:3b:4a:2b:51:78:d3:00:f4:cb:d9:92:b6:89: b9:9d:65:a3:af:1a:9a:1f:19:fd:fc:1b:7f:6a:6c: 2d:d8:e5:65:e3:00:9a:18:9f:a4:bd:0f:1b:b7:dd: 75:59:d7:a2:14:1f:54:5c:02:be:44:38:e2:11:77: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:EE:E5:0E:A2:54:52:21:41:82:06:37:E8:EB:3C:57:F0:3B:D6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 1a:b4:8f:a8:7a:c4:19:b4:e5:73:c4:21:20:3c:de:3a:6d:c1: 0f:23:83:5b:1c:98:66:bd:37:10:90:30:53:41:b7:8b:67:1c: 78:f3:d3:46:a2:59:1d:b1:22:41:dc:99:0d:a8:17:c7:9f:7d: 1f:a2:6c:8d:ed:95:b0:91:2e:71:85:50:f0:e4:d4:dd:99:0c: 47:ca:82:5e:70:c1:e5:e4:ac:9b:f9:47:c3:69:7a:e3:06:50: 1d:2b:00:86:a8:13:7d:25:c2:5c:c0:99:d7:81:7a:6d:9c:4f: 4e:b6:d8:d3:ae:d7:b3:47:c3:f6:3b:1f:0b:ea:c8:91:b1:b0: d3:86:81:e1:fb:cc:9d:65:a0:e1:bd:00:81:a2:f1:4e:95:15: 47:d8:1e:c7:9d:be:40:0e:93:87:d5:57:58:f2:3c:28:a6:ee: ac:0c:d0:35:7a:a5:a3:77:92:1c:bf:bd:79:3b:63:4c:36:eb: 07:7f:83:93:7e:3f:b3:76:83:6f:57:be:8a:2d:dd:55:a9:91: 9b:8f:be:54:df:7d:26:41:c5:fa:f7:d5:db:21:07:87:b8:55: 37:16:90:a6:d7:4e:5f:5f:91:92:ce:82:91:3b:9b:5e:66:d1: 1d:99:0c:4e:95:67:a4:58:26:f5:8c:25:21:15:43:dd:e7:ce: ec:9e:8c:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQCy6Ppzk35jqlJkWrDfoUO4eCoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDE0WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjEyYTAzMTVkZGMxYjRlOWI3ODBkNGM5YzRmOWFlNDFh M2E2YTYwZTNmN2IxZDIwMWUwMzA1MzFkYTBlZWIwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEv4aD6RTjA7vqG/5y5nOmET6GBk6xbhwexNFp+7UUXGcK ER+7nxXLgmBxvWweVuUzLufHHS1d1BUz4lX/7y+O2lmO0kUdBhzmdPVCXzH/lCHP O98OzFeQHiCx/+SZqrtpeDXNI6sq4ttyfdFdSKIoh81YMuTtIS/PCIZrAO/pO+yd eArv6a0Z69gAlrFjdQ9kJo84iZ85/EA0XmCtRLScpLEPzhyAunLJDsku/J5ELIo3 G+i3ZL0StREwNR/y3GE7b0uRO0orUXjTAPTL2ZK2ibmdZaOvGpofGf38G39qbC3Y 5WXjAJoYn6S9Dxu33XVZ16IUH1RcAr5EOOIRd9G9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzdbu5Q6iVFIhQYIGN+jrPFfwO9YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGEzYmYzLTAyMmQtNGNhMS1hYjY4LWViNzNlZjM2NTU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBABq0j6h6xBm05XPEISA83jpt wQ8jg1scmGa9NxCQMFNBt4tnHHjz00aiWR2xIkHcmQ2oF8effR+ibI3tlbCRLnGF UPDk1N2ZDEfKgl5wweXkrJv5R8NpeuMGUB0rAIaoE30lwlzAmdeBem2cT0622NOu 17NHw/Y7HwvqyJGxsNOGgeH7zJ1loOG9AIGi8U6VFUfYHsedvkAOk4fVV1jyPCim 7qwM0DV6paN3khy/vXk7Y0w26wd/g5N+P7N2g29Xvoot3VWpkZuPvlTffSZBxfr3 1dshB4e4VTcWkKbXTl9fkZLOgpE7m15m0R2ZDE6VZ6RYJvWMJSEVQ93nzuyejLw= -----END CERTIFICATE-----Generated at Thu Nov 5 12:16:53 2026 by rpki-client