$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa File: 74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa (raw, json) Hash identifier: V42K0Z124CIftPVzY40Qwv3yplruvzOhsXLbsR7OxcE= Subject key identifier: 65:BB:FB:A5:C4:78:CE:F0:D2:27:5C:86:82:3E:C1:38:8B:54:77:77 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3B1D4F93B5539607EA90C0A24DBA3C6E6809BBBE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa Signing time: Wed 04 Nov 2026 00:02:31 +0000 ROA not before: Wed 04 Nov 2026 00:02:31 +0000 ROA not after: Tue 02 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1d:4f:93:b5:53:96:07:ea:90:c0:a2:4d:ba:3c:6e:68:09:bb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 4 00:02:31 2026 GMT Not After : Feb 2 23:59:59 2027 GMT Subject: serialNumber=f68bb2d4dd802e3597251cc7954653fe35134b224f9e0546ccacb50f30731a7a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:29:8e:bf:1b:26:ca:1f:a0:cd:ab:d1:a5: f8:a5:cd:d2:07:2e:02:52:76:f0:cf:c0:87:3c:b6: ad:c1:1c:e3:b5:16:07:d8:0b:d8:35:0e:6e:4f:03: b0:66:12:6b:c0:c3:66:45:a0:93:70:01:56:34:54: d1:dd:ff:a5:4a:5c:ab:89:2d:6a:51:28:be:15:18: e8:bc:54:93:f1:10:84:a5:e6:7f:93:2a:2d:78:c9: 89:48:d6:46:5e:77:b4:60:ef:37:30:66:01:bf:06: 41:ff:d7:44:17:a2:ae:bd:8d:2a:17:af:72:52:fe: 0f:b7:4c:61:91:fa:d1:9e:a7:ad:ae:9d:f8:18:f8: 50:26:3f:32:7d:ea:d5:48:6f:a5:37:66:ce:e0:b4: 16:b4:a0:d2:93:20:c4:ce:63:93:0d:7f:6e:87:db: 9e:68:f9:3d:d7:5d:ec:08:88:75:f7:34:22:58:0e: a7:2a:13:49:3e:fc:de:ea:d4:c9:b7:e4:4a:3d:50: e3:4e:ca:fc:ac:a9:e0:03:98:2d:8d:cc:47:99:a4: d6:54:60:72:99:3c:51:39:28:81:aa:79:97:9b:15: 96:65:2b:3e:45:64:51:e3:39:8a:c2:8b:e4:96:10: a0:46:41:f5:b1:be:e6:46:1f:6b:0f:39:d7:f0:bd: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:FB:A5:C4:78:CE:F0:D2:27:5C:86:82:3E:C1:38:8B:54:77:77 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74a3bfb3-3f14-495d-9015-8fb2d093a31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5::/48 Signature Algorithm: sha256WithRSAEncryption 96:4e:34:f6:25:c4:24:83:8b:d5:7e:00:d1:d9:97:da:c2:ea: f4:c9:29:c0:5f:a6:e0:ee:42:c0:c5:95:3b:fb:6a:5e:87:36: 01:3a:6a:25:35:54:3c:35:75:f4:d8:b6:5f:1e:63:f7:a8:6c: c3:25:76:13:48:4b:3d:e9:44:fe:4d:e6:b2:50:bc:7e:dd:9b: 6a:b5:7a:84:3b:98:85:ef:74:cd:a6:18:6c:9b:8d:a3:aa:32: 9d:ba:25:93:0f:68:8c:68:90:21:12:4d:46:4d:39:d5:35:f2: 0e:e8:47:04:e4:13:bd:49:42:58:6e:b5:9f:a3:44:68:b2:f5: eb:c6:6c:ea:ef:7a:49:93:4c:7f:cc:29:b2:6f:06:af:0d:4c: e3:7a:7d:ad:aa:93:93:46:c8:78:8d:2c:67:00:75:35:38:d9: 67:39:9f:2a:f4:e1:14:67:21:b6:02:97:97:bb:7b:29:38:06: 72:b0:e7:b3:83:43:a8:a8:9a:da:cd:b9:8d:88:86:37:bd:d8: 71:2f:1a:46:4d:81:be:f8:c4:5e:6d:ea:14:75:2d:b2:f8:61: 88:a4:38:ae:ed:59:99:5d:f7:87:f0:b2:71:3f:a9:f9:ff:10: 58:af:f4:17:c9:79:20:fe:c8:29:0a:d2:cd:9e:38:79:8a:58: 94:ba:e9:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOx1Pk7VTlgfqkMCiTbo8bmgJu74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTA0MDAwMjMxWhcNMjcwMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjhiYjJkNGRkODAyZTM1OTcyNTFjYzc5NTQ2NTNmZTM1 MTM0YjIyNGY5ZTA1NDZjY2FjYjUwZjMwNzMxYTdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyDCmOvxsmyh+gzavRpfilzdIHLgJSdvDPwIc8tq3BHOO1 FgfYC9g1Dm5PA7BmEmvAw2ZFoJNwAVY0VNHd/6VKXKuJLWpRKL4VGOi8VJPxEISl 5n+TKi14yYlI1kZed7Rg7zcwZgG/BkH/10QXoq69jSoXr3JS/g+3TGGR+tGep62u nfgY+FAmPzJ96tVIb6U3Zs7gtBa0oNKTIMTOY5MNf26H255o+T3XXewIiHX3NCJY DqcqE0k+/N7q1Mm35Eo9UONOyvysqeADmC2NzEeZpNZUYHKZPFE5KIGqeZebFZZl Kz5FZFHjOYrCi+SWEKBGQfWxvuZGH2sPOdfwvZGRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZbv7pcR4zvDSJ1yGgj7BOItUd3cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc0YTNiZmIzLTNmMTQtNDk1ZC05MDE1LThmYjJkMDkzYTMxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAUwDQYJKoZIhvcNAQELBQADggEBAJZONPYlxCSDi9V+ANHZl9rC 6vTJKcBfpuDuQsDFlTv7al6HNgE6aiU1VDw1dfTYtl8eY/eobMMldhNISz3pRP5N 5rJQvH7dm2q1eoQ7mIXvdM2mGGybjaOqMp26JZMPaIxokCESTUZNOdU18g7oRwTk E71JQlhutZ+jRGiy9evGbOrvekmTTH/MKbJvBq8NTON6fa2qk5NGyHiNLGcAdTU4 2Wc5nyr04RRnIbYCl5e7eyk4BnKw57ODQ6iomtrNuY2Ihje92HEvGkZNgb74xF5t 6hR1LbL4YYikOK7tWZld94fwsnE/qfn/EFiv9BfJeSD+yCkK0s2eOHmKWJS66bM= -----END CERTIFICATE-----Generated at Thu Nov 5 17:13:43 2026 by rpki-client