$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa File: 868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa (raw, json) Hash identifier: +wyQASNyohsRAC+5GjrPBIOwrZzBNO0sQguKSf0Kccw= Subject key identifier: FA:2A:0C:B2:66:67:1F:A1:DE:1A:05:85:BC:0B:F9:12:BE:30:10:73 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 060C0C65F85B51A5E5D13EDFEDCF3D281A13792B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa Signing time: Tue 27 Oct 2026 00:50:15 +0000 ROA not before: Tue 27 Oct 2026 00:50:15 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0c:0c:65:f8:5b:51:a5:e5:d1:3e:df:ed:cf:3d:28:1a:13:79:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:15 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=204ea34345e6874b4b74fe4aecfd3e47dcd81645573041014a95eacaa954770d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:9f:8c:a9:a4:92:3d:1b:4a:8f:57:0a:e2: 2a:47:61:ad:88:f3:ff:f5:a8:aa:02:57:d3:fd:1e: 97:05:47:9a:6f:9c:0e:a7:ed:54:f2:21:38:e3:3a: 80:2e:d4:c4:db:6e:e7:14:22:e8:ee:9a:5a:eb:e8: c3:c0:a4:a1:44:1e:63:9b:e9:1e:c0:b0:de:df:ee: 48:04:e5:ec:10:09:2c:f7:b1:7d:b9:7f:ee:31:a2: 15:fb:cb:91:b7:4d:01:e7:be:d0:0c:07:86:13:0e: d5:6c:b2:a7:e5:10:4c:12:fe:a1:77:cc:b1:e0:06: 1b:86:ea:63:a1:0c:d7:d2:cc:a1:b1:11:b6:0d:ca: 2e:ab:a6:2f:22:c0:12:c5:b9:14:a3:db:12:e1:31: f1:4f:d3:18:a6:36:90:91:e4:1a:a4:53:9b:86:b6: ca:73:c3:e7:e1:7e:d5:4f:99:53:0f:8a:a6:a7:c5: f2:ec:4f:0c:88:03:35:34:52:8e:92:39:31:4e:18: c3:87:40:10:d1:35:a2:37:47:34:b3:2d:35:6d:f4: 61:64:52:05:09:70:74:78:98:18:01:ce:38:71:3f: f1:4a:e9:85:1b:0e:a4:ed:fd:cd:70:9a:8a:c1:13: db:fb:d7:91:92:5e:f3:ec:cd:77:06:fa:79:a8:2c: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:0C:B2:66:67:1F:A1:DE:1A:05:85:BC:0B:F9:12:BE:30:10:73 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 64:12:e7:de:39:15:dc:9e:23:9a:c1:69:05:aa:46:de:14:00: 73:1f:c0:16:d2:f0:e9:a8:0b:07:23:42:0f:c0:06:22:eb:e4: 4d:b0:ff:94:0a:38:66:5f:ad:1a:a4:4e:8a:95:49:c1:6a:c0: 4a:ef:94:75:45:d7:b2:0e:88:89:9b:51:5e:01:12:2a:53:73: b8:fa:75:52:a5:dd:f3:e6:f3:85:8b:a2:8a:72:45:61:15:91: 3e:09:df:4a:e1:94:60:32:01:9e:5d:c8:0b:eb:82:5d:35:eb: ff:7d:3b:59:da:66:b4:66:fc:c9:c9:cd:0c:21:c4:96:42:87: 64:de:64:47:49:5a:e3:30:c7:95:05:07:e2:68:cc:b9:da:69: ad:1d:54:34:06:9b:94:4e:d1:d9:0f:f8:37:93:61:9e:5d:5d: 76:56:81:69:e6:fc:a9:28:26:49:7a:f9:7c:dd:4b:9d:8b:ba: 99:fd:e6:b9:20:eb:18:33:c2:53:31:28:97:23:de:d7:73:57: 8b:5c:56:4b:12:60:12:90:4c:c1:ad:0a:e4:95:17:48:23:de: 37:47:8a:83:e1:33:40:47:a8:6b:58:6a:8f:f3:0f:d6:66:26: f3:60:a8:73:70:c3:6b:38:10:98:fd:0c:96:82:19:9c:8f:8f: 4e:ea:f9:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBgwMZfhbUaXl0T7f7c89KBoTeSswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDE1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDRlYTM0MzQ1ZTY4NzRiNGI3NGZlNGFlY2ZkM2U0N2Rj ZDgxNjQ1NTczMDQxMDE0YTk1ZWFjYWE5NTQ3NzBkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0pZ+MqaSSPRtKj1cK4ipHYa2I8//1qKoCV9P9HpcFR5pv nA6n7VTyITjjOoAu1MTbbucUIujumlrr6MPApKFEHmOb6R7AsN7f7kgE5ewQCSz3 sX25f+4xohX7y5G3TQHnvtAMB4YTDtVssqflEEwS/qF3zLHgBhuG6mOhDNfSzKGx EbYNyi6rpi8iwBLFuRSj2xLhMfFP0ximNpCR5BqkU5uGtspzw+fhftVPmVMPiqan xfLsTwyIAzU0Uo6SOTFOGMOHQBDRNaI3RzSzLTVt9GFkUgUJcHR4mBgBzjhxP/FK 6YUbDqTt/c1wmorBE9v715GSXvPszXcG+nmoLHnvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+ioMsmZnH6HeGgWFvAv5Er4wEHMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2OGZlNWEzLTNjMTgtNGQyYS1iZjk2LTBlMGE4NDAxMThlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBAGQS5945FdyeI5rBaQWqRt4U AHMfwBbS8OmoCwcjQg/ABiLr5E2w/5QKOGZfrRqkToqVScFqwErvlHVF17IOiImb UV4BEipTc7j6dVKl3fPm84WLoopyRWEVkT4J30rhlGAyAZ5dyAvrgl016/99O1na ZrRm/MnJzQwhxJZCh2TeZEdJWuMwx5UFB+JozLnaaa0dVDQGm5RO0dkP+DeTYZ5d XXZWgWnm/KkoJkl6+XzdS52Lupn95rkg6xgzwlMxKJcj3tdzV4tcVksSYBKQTMGt CuSVF0gj3jdHioPhM0BHqGtYao/zD9ZmJvNgqHNww2s4EJj9DJaCGZyPj07q+f0= -----END CERTIFICATE-----Generated at Thu Nov 5 14:24:34 2026 by rpki-client