$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa File: 91b85db6-7428-422a-85f4-a3d6732ec01e.roa (raw, json) Hash identifier: IFUBYRtwCr4EVrDpiNVrXrnZo2ZI1vGoN6Ctxmwdzd0= Subject key identifier: A2:C0:94:42:BB:CA:3D:3D:53:84:B6:1E:28:83:11:8A:57:74:97:7A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B9E2CBD5C9D8EF6F6FFEBE6DC99A917D01B14CC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa Signing time: Tue 27 Oct 2026 00:50:10 +0000 ROA not before: Tue 27 Oct 2026 00:50:10 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9e:2c:bd:5c:9d:8e:f6:f6:ff:eb:e6:dc:99:a9:17:d0:1b:14:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:10 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=f6e45bd3fd7d93019f936c3e207db5b43a0103302568dc0321c9f2216fb5b255, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:ee:06:09:21:1b:34:07:6e:65:e2:a4:ee: bd:f0:12:4a:2c:66:fb:11:fd:be:70:4e:89:54:b3: ea:ce:c9:21:5e:36:7d:1f:b9:49:a1:d1:d4:bd:e1: da:e5:6b:51:e2:5a:02:8b:4d:e7:dc:7b:99:e5:49: 3a:db:e2:d5:85:03:0b:bb:f4:39:fc:71:6d:a7:68: 95:a4:32:cf:9f:ad:fb:ce:10:4e:17:e3:b7:c0:b8: e8:ea:89:d7:2d:3e:c2:26:76:37:c7:a6:3f:bb:85: 6a:a2:96:74:e4:af:7f:bc:4f:d9:83:17:49:81:68: b9:5e:b6:06:68:06:df:81:14:6d:81:24:ba:1f:19: cd:36:c6:74:0b:1f:3d:01:f9:c5:cd:8a:63:cd:bb: 70:58:e4:f2:d3:0c:78:d2:b7:9a:cc:aa:13:2b:4f: 32:6e:fb:ad:02:27:b0:66:47:63:fd:72:1f:02:3e: fc:fb:93:cd:77:cb:69:e7:09:2c:6a:2b:5a:28:e6: 49:e8:58:08:a8:a2:ac:eb:9e:6f:00:c9:61:26:d8: 0d:ff:72:b3:7f:d1:a4:20:60:93:ca:d2:1f:9c:c4: e8:9a:1b:0a:c3:c5:57:38:7b:50:25:e6:0b:6d:26: 28:59:02:95:67:26:e6:37:12:87:08:c8:b4:9d:33: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:94:42:BB:CA:3D:3D:53:84:B6:1E:28:83:11:8A:57:74:97:7A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 91:f1:83:2a:4e:57:73:e8:57:8a:27:33:b4:12:13:a2:74:5e: 4f:3a:b9:9f:bf:a1:34:47:d1:40:1b:b7:cd:8a:90:4b:d9:b8: 18:df:38:d5:42:29:eb:32:ab:07:fe:5d:e7:7d:d4:f6:d2:58: 8d:54:47:b6:ab:08:4f:0b:c5:45:75:b9:b3:f1:c4:96:9d:d2: 58:2f:9e:f7:ff:b4:f2:a7:5b:f3:18:c4:f8:00:9e:99:40:fa: a1:1b:0e:f8:a8:50:7c:59:6a:13:65:f9:53:9d:4c:17:e4:ba: fc:67:7d:05:96:a6:7e:85:d5:fb:2f:6b:7b:ea:37:f7:99:e4: 5c:25:83:af:73:24:14:18:84:06:03:08:f1:57:97:bc:05:97: d2:2b:ea:4f:58:11:38:63:c0:4c:62:17:3b:57:53:ab:9b:3f: 88:a2:0b:50:f9:a3:b8:b3:ef:84:9f:0f:79:e3:c8:56:71:89: 62:cc:cd:11:66:e3:b5:3a:28:cb:fb:ea:ab:f3:bf:36:82:ab: 4d:18:ac:1c:32:1f:c5:c8:32:4e:bf:ec:7c:08:73:bb:ee:29: 53:a8:f0:26:ee:bc:c5:a2:ea:84:d9:a1:d5:e3:bc:23:70:93: a3:07:35:70:2c:80:79:6d:70:f6:08:ca:47:d9:72:54:55:39: 9e:80:1e:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG54svVydjvb2/+vm3JmpF9AbFMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDEwWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmU0NWJkM2ZkN2Q5MzAxOWY5MzZjM2UyMDdkYjViNDNh MDEwMzMwMjU2OGRjMDMyMWM5ZjIyMTZmYjViMjU1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUYO4GCSEbNAduZeKk7r3wEkosZvsR/b5wTolUs+rOySFe Nn0fuUmh0dS94drla1HiWgKLTefce5nlSTrb4tWFAwu79Dn8cW2naJWkMs+frfvO EE4X47fAuOjqidctPsImdjfHpj+7hWqilnTkr3+8T9mDF0mBaLletgZoBt+BFG2B JLofGc02xnQLHz0B+cXNimPNu3BY5PLTDHjSt5rMqhMrTzJu+60CJ7BmR2P9ch8C Pvz7k813y2nnCSxqK1oo5knoWAiooqzrnm8AyWEm2A3/crN/0aQgYJPK0h+cxOia GwrDxVc4e1Al5gttJihZApVnJuY3EocIyLSdM3/1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUosCUQrvKPT1ThLYeKIMRild0l3owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkxYjg1ZGI2LTc0MjgtNDIyYS04NWY0LWEzZDY3MzJlYzAxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBAJHxgypOV3PoV4onM7QSE6J0 Xk86uZ+/oTRH0UAbt82KkEvZuBjfONVCKesyqwf+Xed91PbSWI1UR7arCE8LxUV1 ubPxxJad0lgvnvf/tPKnW/MYxPgAnplA+qEbDvioUHxZahNl+VOdTBfkuvxnfQWW pn6F1fsva3vqN/eZ5Fwlg69zJBQYhAYDCPFXl7wFl9Ir6k9YEThjwExiFztXU6ub P4iiC1D5o7iz74SfD3njyFZxiWLMzRFm47U6KMv76qvzvzaCq00YrBwyH8XIMk6/ 7HwIc7vuKVOo8CbuvMWi6oTZodXjvCNwk6MHNXAsgHltcPYIykfZclRVOZ6AHlQ= -----END CERTIFICATE-----Generated at Thu Nov 5 12:19:16 2026 by rpki-client