$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa File: 9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa (raw, json) Hash identifier: KHasxd2xV7MYRL5+SXwvi86Muolg3/C96S9fmjLIqRQ= Subject key identifier: A0:D0:57:C4:5D:62:24:8B:A4:4C:20:B5:E6:DD:E7:6F:CD:82:9B:3D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 75E5A9CA084954CE61AA38F10223F5C718E72A49 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa Signing time: Tue 27 Oct 2026 00:50:45 +0000 ROA not before: Tue 27 Oct 2026 00:50:45 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e5:a9:ca:08:49:54:ce:61:aa:38:f1:02:23:f5:c7:18:e7:2a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:45 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=e16dc4f9e61fb20a8e7b65c18f99ed6c171ed438c9cfe946d426788c3113531e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:c5:eb:f7:46:a2:2e:da:11:c3:d4:c8:99: af:a8:05:ef:84:10:da:27:ae:73:d3:33:f5:e1:49: 7a:03:72:e9:de:5e:5a:3d:0d:4a:19:a6:63:08:fd: 96:c9:d6:88:3a:73:b4:28:bb:41:a2:95:2f:0b:cb: 1f:13:e5:f5:ee:15:34:e5:35:15:a1:99:12:d0:09: 91:a0:a3:45:fb:e7:40:45:03:e4:ea:c1:2e:02:8c: 19:15:e5:8c:2c:de:db:cc:c8:fb:3f:fb:11:e2:c2: 5c:81:f7:dc:d7:78:9d:85:a4:19:13:13:b5:d8:71: 5c:fe:99:95:e5:92:fb:e8:59:62:22:50:49:ed:db: 6e:68:a6:ab:57:ac:7b:27:1e:d1:72:c5:8c:24:03: a2:d7:0b:86:e4:e7:f5:0a:96:ad:6f:c9:6e:29:30: b8:f9:84:c8:94:73:51:a0:e8:53:7e:b3:c4:a4:51: 7f:f7:0b:bf:04:ac:77:ef:92:78:18:86:3e:2f:1c: a9:a7:1b:bd:08:b3:ba:11:a0:ee:96:c4:1d:88:74: f4:4a:ad:ff:fe:60:62:9b:24:07:84:96:38:79:83: 9d:8c:22:18:04:65:b4:78:95:9e:95:75:3d:42:7f: e2:7e:5b:3a:94:81:68:45:f5:b4:de:3a:18:25:95: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D0:57:C4:5D:62:24:8B:A4:4C:20:B5:E6:DD:E7:6F:CD:82:9B:3D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:e2:de:44:ed:31:19:08:a6:58:7b:50:9a:79:8a:89:8a:00: b8:49:ff:2c:5d:4b:cb:f6:cf:e6:76:69:35:d7:fc:ba:d7:c5: e8:9e:ca:62:86:b4:fc:f0:72:d0:6b:a0:90:28:9c:75:62:15: e6:05:80:41:62:ae:de:b4:03:47:0f:ba:ad:1d:c6:86:b3:39: bb:a5:05:8d:dd:f2:82:e8:91:6e:dd:ab:e6:4e:e8:4d:70:b2: 33:44:06:b7:66:84:b1:78:89:8c:73:66:15:67:14:45:58:3f: 8c:25:a4:b6:8f:ee:5f:a1:6a:d0:d0:0d:21:0e:82:47:4c:7b: 07:01:48:00:38:bb:75:44:29:a2:49:4f:79:68:20:a8:81:51: 45:6f:01:f2:ce:67:47:d1:0b:df:78:0c:92:0f:45:e2:53:cc: 8f:92:e4:90:ba:4f:ea:7c:37:42:15:cf:4a:39:8f:57:61:f4: 7d:a4:0c:f4:22:ee:c2:18:b2:cc:b4:9c:47:dd:c6:c2:e5:cf: b0:c3:4e:dc:cc:14:95:a5:c6:c9:a7:5f:18:9f:34:0d:44:c6: fd:93:eb:7c:8e:12:f7:9b:85:ed:6b:2f:69:64:0e:bf:f5:57: c4:7d:b8:ab:34:7c:d6:81:88:a2:02:a0:43:14:50:6e:ea:bb: 24:bd:74:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdeWpyghJVM5hqjjxAiP1xxjnKkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQ1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTZkYzRmOWU2MWZiMjBhOGU3YjY1YzE4Zjk5ZWQ2YzE3 MWVkNDM4YzljZmU5NDZkNDI2Nzg4YzMxMTM1MzFlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvQ8Xr90aiLtoRw9TIma+oBe+EENonrnPTM/XhSXoDcune Xlo9DUoZpmMI/ZbJ1og6c7Qou0GilS8Lyx8T5fXuFTTlNRWhmRLQCZGgo0X750BF A+TqwS4CjBkV5Yws3tvMyPs/+xHiwlyB99zXeJ2FpBkTE7XYcVz+mZXlkvvoWWIi UEnt225opqtXrHsnHtFyxYwkA6LXC4bk5/UKlq1vyW4pMLj5hMiUc1Gg6FN+s8Sk UX/3C78ErHfvkngYhj4vHKmnG70Is7oRoO6WxB2IdPRKrf/+YGKbJAeEljh5g52M IhgEZbR4lZ6VdT1Cf+J+WzqUgWhF9bTeOhglleG/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoNBXxF1iJIukTCC15t3nb82Cmz0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzllOWVhMWQ1LTdiZGItNDU2ZS1iZjQyLTRmMTJjNWQ2Yzg5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwDANBgkqhkiG9w0BAQsFAAOCAQEAXeLeRO0xGQimWHtQmnmKiYoA uEn/LF1Ly/bP5nZpNdf8utfF6J7KYoa0/PBy0GugkCicdWIV5gWAQWKu3rQDRw+6 rR3GhrM5u6UFjd3yguiRbt2r5k7oTXCyM0QGt2aEsXiJjHNmFWcURVg/jCWkto/u X6Fq0NANIQ6CR0x7BwFIADi7dUQpoklPeWggqIFRRW8B8s5nR9EL33gMkg9F4lPM j5LkkLpP6nw3QhXPSjmPV2H0faQM9CLuwhiyzLScR93GwuXPsMNO3MwUlaXGyadf GJ80DUTG/ZPrfI4S95uF7WsvaWQOv/VXxH24qzR81oGIogKgQxRQbuq7JL106Q== -----END CERTIFICATE-----Generated at Sun Nov 8 18:08:46 2026 by rpki-client