$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa File: 8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa (raw, json) Hash identifier: yuBNd7uV0AcUSpXDqwh/EDStYPVqsLvIjJIDh2re24g= Subject key identifier: D9:31:64:1C:63:9A:0E:1A:E2:E2:A8:75:13:F9:E7:3C:86:85:6C:8D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 06E2EAB0034F1FF606F4FB72AFFC4EFC99B4306A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa Signing time: Thu 29 Oct 2026 00:20:09 +0000 ROA not before: Thu 29 Oct 2026 00:20:09 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:602::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e2:ea:b0:03:4f:1f:f6:06:f4:fb:72:af:fc:4e:fc:99:b4:30:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 29 00:20:09 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=df41dff0acb95632efd9556c3fc278b07d2dd2a535efc7f8e078f100650f962c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:71:c1:f5:d6:b2:fc:c9:92:d8:cd:39:86: 83:8f:4b:9e:86:30:5b:fe:30:e2:0c:53:38:4c:07: 2c:76:51:76:bd:f6:9f:02:a3:2f:9a:e2:22:9a:dc: 55:9a:01:4b:1e:6a:80:65:3f:95:c2:74:19:0b:d9: b6:0b:77:ce:0e:c1:0e:6a:41:a5:98:d3:83:09:1b: a4:01:19:3d:e5:a5:f3:71:f0:0e:f6:bf:34:5d:77: 80:ef:bd:dd:11:2a:6c:96:ae:58:f5:a5:72:7f:47: 79:94:d2:55:b0:42:e2:54:bd:6b:cb:ea:04:3b:b3: fd:d7:90:d4:07:12:b1:ce:f9:b9:f2:df:22:29:3c: fa:c3:5e:26:93:c7:6c:01:ec:f7:74:6e:ff:ba:ab: 03:20:e5:d5:2d:31:ba:50:26:5a:b6:5b:ab:90:6a: 58:34:7b:6b:79:8f:cd:51:24:db:2e:6b:c3:9d:7a: 4e:00:55:bd:44:c5:6f:4d:9d:ba:0e:84:3e:a9:6a: 11:fa:40:1e:3d:5e:11:5d:f5:c4:a2:5e:d7:26:59: c9:fb:c8:a3:9c:dd:aa:b7:89:a7:c9:f1:78:87:e7: 52:ac:bd:52:ff:c7:ae:13:09:76:50:67:db:d6:69: b1:82:55:85:d2:82:a1:22:0e:ad:40:70:f6:c7:c7: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:64:1C:63:9A:0E:1A:E2:E2:A8:75:13:F9:E7:3C:86:85:6C:8D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:602::/48 Signature Algorithm: sha256WithRSAEncryption 70:ba:1a:ac:6b:b2:2f:00:7f:b5:a9:c1:4d:91:56:49:97:ab: 96:1f:90:f3:e4:7a:54:d2:a6:1d:64:66:9c:fb:0b:36:de:3e: 5b:ce:fa:24:64:8b:96:60:12:39:4a:2f:6a:10:00:4c:8c:fe: f1:52:b3:89:12:4e:d8:4f:8a:27:b7:49:a8:25:35:df:af:fa: f4:b7:d3:d8:83:d9:24:5d:43:67:f3:75:ac:f0:4c:89:0e:53: 74:e7:cc:f7:3f:af:65:ef:71:f7:11:b9:79:01:a6:d4:e1:8e: 27:5e:db:5d:cd:e0:10:20:8c:08:c5:c5:0c:54:4e:b1:cb:d4: ca:03:c4:0c:19:e5:c4:66:ea:22:08:f3:08:a5:3a:5f:29:38: ef:62:5c:08:ec:aa:3d:84:88:00:e4:ed:82:b9:93:cf:3a:99: 42:ca:3c:74:4b:32:26:36:46:e7:e6:08:db:58:71:41:73:d4: 67:4d:3e:91:55:51:77:82:7b:c6:96:ec:8c:fa:a0:96:17:e3: 88:21:4e:46:98:0d:e9:82:c7:7d:ee:95:45:59:e6:f4:9c:eb: 21:4b:c9:1e:f4:1f:15:bd:ab:3b:0d:54:cd:ac:01:c0:4d:14: 98:ae:90:0a:5b:c3:a0:12:6a:89:1a:0a:a9:f7:d4:b7:0b:f8: c1:66:ad:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBuLqsANPH/YG9Ptyr/xO/Jm0MGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI5MDAyMDA5WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjQxZGZmMGFjYjk1NjMyZWZkOTU1NmMzZmMyNzhiMDdk MmRkMmE1MzVlZmM3ZjhlMDc4ZjEwMDY1MGY5NjJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1fXHB9day/MmS2M05hoOPS56GMFv+MOIMUzhMByx2UXa9 9p8Coy+a4iKa3FWaAUseaoBlP5XCdBkL2bYLd84OwQ5qQaWY04MJG6QBGT3lpfNx 8A72vzRdd4Dvvd0RKmyWrlj1pXJ/R3mU0lWwQuJUvWvL6gQ7s/3XkNQHErHO+bny 3yIpPPrDXiaTx2wB7Pd0bv+6qwMg5dUtMbpQJlq2W6uQalg0e2t5j81RJNsua8Od ek4AVb1ExW9NnboOhD6pahH6QB49XhFd9cSiXtcmWcn7yKOc3aq3iafJ8XiH51Ks vVL/x64TCXZQZ9vWabGCVYXSgqEiDq1AcPbHx22JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2TFkHGOaDhri4qh1E/nnPIaFbI0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3MTVjNGVkLTg1ZmItNDVlOC1hMmNjLTA5ZjAxM2I3MjllOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgIwDQYJKoZIhvcNAQELBQADggEBAHC6Gqxrsi8Af7WpwU2RVkmX q5YfkPPkelTSph1kZpz7CzbePlvO+iRki5ZgEjlKL2oQAEyM/vFSs4kSTthPiie3 SaglNd+v+vS309iD2SRdQ2fzdazwTIkOU3TnzPc/r2XvcfcRuXkBptThjide213N 4BAgjAjFxQxUTrHL1MoDxAwZ5cRm6iII8wilOl8pOO9iXAjsqj2EiADk7YK5k886 mULKPHRLMiY2RufmCNtYcUFz1GdNPpFVUXeCe8aW7Iz6oJYX44ghTkaYDemCx33u lUVZ5vSc6yFLyR70HxW9qzsNVM2sAcBNFJiukApbw6ASaokaCqn31LcL+MFmrbQ= -----END CERTIFICATE-----Generated at Thu Nov 5 19:24:17 2026 by rpki-client