$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa File: 7fef00dc-1a9a-497c-b857-792da38e532f.roa (raw, json) Hash identifier: BMdxG8bFc7HJYJ0jsidGUHznOSxPC+nFbFHTq0TYzuc= Subject key identifier: 1E:9D:8F:8A:28:2C:A4:32:10:2B:E6:7B:98:6C:E5:3C:25:28:70:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 15CA23EAF434BB83C06483CF899FA9C011DFF0E0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa Signing time: Tue 27 Oct 2026 00:50:35 +0000 ROA not before: Tue 27 Oct 2026 00:50:35 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ca:23:ea:f4:34:bb:83:c0:64:83:cf:89:9f:a9:c0:11:df:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:35 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=83418c6fcf628d6fe1b13027d695d08d404c63aaf9c276243b6871b0841bbcb5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:f0:ad:2a:93:f2:bb:f9:87:c2:66:7e:c3: c5:73:d0:62:3b:0a:4a:75:68:b2:83:82:11:55:fb: bf:98:c9:e3:98:fe:45:74:50:80:f7:f6:41:55:b9: 21:a4:d4:5f:70:b7:df:d8:a6:08:fb:08:58:dd:28: eb:6c:bb:da:15:e0:22:b4:1d:e8:c2:4a:11:1f:b8: fd:97:0b:26:5a:b1:5e:d0:79:1f:d1:24:a5:ca:1e: 13:96:30:47:69:62:72:e7:0e:e5:ca:bf:24:c3:04: 28:06:29:2b:5a:12:ae:4e:30:25:4d:07:14:24:97: 95:51:c6:f5:d2:d7:87:62:1d:c8:16:a3:5c:b6:06: 03:b0:30:f7:7e:f7:50:d8:62:92:d5:34:8c:18:05: dc:fe:99:48:e9:9e:9a:5b:be:89:62:b0:88:cb:23: 92:78:0e:b1:f9:8d:7b:5b:d0:66:49:02:7e:ec:43: ac:cf:01:e5:38:51:eb:e7:d1:bf:c7:a0:55:18:04: 8c:1e:a3:f6:f2:17:b6:5d:09:cc:48:35:2e:61:0b: f0:3d:fe:d6:70:65:f5:c2:27:e9:e7:09:72:25:b2: d7:15:32:f2:d6:a5:52:84:71:20:db:d9:22:51:43: db:de:ea:c9:5c:34:24:4f:39:7b:75:39:88:3f:f1: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:8F:8A:28:2C:A4:32:10:2B:E6:7B:98:6C:E5:3C:25:28:70:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5500::/48 Signature Algorithm: sha256WithRSAEncryption 16:f5:30:7b:83:77:fd:cb:59:b3:17:35:23:44:80:f1:5e:df: 3b:10:a9:14:7d:ec:34:ad:c2:75:42:18:38:c2:57:2f:31:1b: 88:30:e0:de:14:b1:08:df:42:05:be:52:f6:13:73:56:3b:de: 14:c2:b7:47:ea:bb:41:e6:2d:8d:fe:37:fe:d2:05:9e:c0:aa: 55:59:07:81:cb:68:71:ce:a0:88:63:d0:bf:da:3f:dc:10:de: 84:07:36:0e:84:be:a1:7b:21:84:ee:30:00:a2:06:2e:58:3c: 36:8c:dc:bc:0a:fa:5d:2a:17:22:ac:da:09:b5:c1:72:9d:82: f8:ea:64:05:81:dc:e8:07:43:77:ec:5c:fa:b7:52:ae:8c:7c: fa:68:6e:bc:56:b2:70:93:38:6f:89:4b:00:53:fb:37:dc:3d: b3:b2:3f:8f:1a:7f:c9:37:ee:6c:4c:61:3e:56:3d:c7:13:a2: 97:cf:85:db:ed:7c:c2:51:a8:d5:1f:35:78:aa:e8:d0:01:8f: 78:ec:bc:ee:7f:54:8d:88:4e:9c:9c:ee:b2:0e:10:df:e4:d5: f1:75:05:8b:f0:af:da:c6:7f:63:dd:50:d2:37:47:f2:4a:b3: 51:e1:a9:db:06:cd:94:48:98:9b:16:55:55:8f:7b:0e:23:ad: b2:95:b3:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFcoj6vQ0u4PAZIPPiZ+pwBHf8OAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDM1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQxOGM2ZmNmNjI4ZDZmZTFiMTMwMjdkNjk1ZDA4ZDQw NGM2M2FhZjljMjc2MjQzYjY4NzFiMDg0MWJiY2I1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ4fCtKpPyu/mHwmZ+w8Vz0GI7Ckp1aLKDghFV+7+YyeOY /kV0UID39kFVuSGk1F9wt9/Ypgj7CFjdKOtsu9oV4CK0HejCShEfuP2XCyZasV7Q eR/RJKXKHhOWMEdpYnLnDuXKvyTDBCgGKStaEq5OMCVNBxQkl5VRxvXS14diHcgW o1y2BgOwMPd+91DYYpLVNIwYBdz+mUjpnppbvolisIjLI5J4DrH5jXtb0GZJAn7s Q6zPAeU4Uevn0b/HoFUYBIweo/byF7ZdCcxINS5hC/A9/tZwZfXCJ+nnCXIlstcV MvLWpVKEcSDb2SJRQ9ve6slcNCRPOXt1OYg/8X2pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHp2PiigspDIQK+Z7mGzlPCUocDgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdmZWYwMGRjLTFhOWEtNDk3Yy1iODU3LTc5MmRhMzhlNTMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQAwDQYJKoZIhvcNAQELBQADggEBABb1MHuDd/3LWbMXNSNEgPFe 3zsQqRR97DStwnVCGDjCVy8xG4gw4N4UsQjfQgW+UvYTc1Y73hTCt0fqu0HmLY3+ N/7SBZ7AqlVZB4HLaHHOoIhj0L/aP9wQ3oQHNg6EvqF7IYTuMACiBi5YPDaM3LwK +l0qFyKs2gm1wXKdgvjqZAWB3OgHQ3fsXPq3Uq6MfPpobrxWsnCTOG+JSwBT+zfc PbOyP48af8k37mxMYT5WPccTopfPhdvtfMJRqNUfNXiq6NABj3jsvO5/VI2ITpyc 7rIOEN/k1fF1BYvwr9rGf2PdUNI3R/JKs1HhqdsGzZRImJsWVVWPew4jrbKVs3w= -----END CERTIFICATE-----Generated at Sun Nov 8 17:38:52 2026 by rpki-client