$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa File: 9eac186e-c426-418a-82c6-9034de5c9843.roa (raw, json) Hash identifier: 4WzPWDa7z5/3dKtwllkY2FUJJhkWeeP06hEfnZNT0Ec= Subject key identifier: 91:64:B2:FB:35:FD:E9:CF:F9:47:39:78:44:70:83:93:12:B8:7F:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1FD3299BB3C901F32E4E61BD4C54F32436DA5690 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa Signing time: Tue 27 Oct 2026 00:50:13 +0000 ROA not before: Tue 27 Oct 2026 00:50:13 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d3:29:9b:b3:c9:01:f3:2e:4e:61:bd:4c:54:f3:24:36:da:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:13 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=758a717ebb0529b7d6e29295ef6deb80926febae522fa44e9ae28e09b3caf753, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:e3:bc:01:06:b7:4c:49:03:c6:60:e7:45: 4e:da:bf:46:88:81:76:92:ec:d5:65:83:3a:03:a5: 05:fc:2e:c8:b2:85:3b:77:08:bd:c8:ed:83:70:45: 91:8e:7a:62:58:26:e8:c3:98:15:68:b3:34:5f:b5: 38:8c:1e:dc:8a:00:7f:ef:ce:1a:fd:72:5e:aa:b6: da:40:fd:2a:b1:00:24:db:6f:c7:19:83:a8:6c:c5: e0:db:c8:4d:de:68:19:20:e8:44:f4:94:ca:3c:53: b5:c9:e5:ca:e4:26:db:ed:2b:d3:58:c8:92:bf:5a: f5:6e:2e:c4:c0:a6:b0:37:05:1d:5f:d4:c0:05:bf: 73:16:6c:fd:58:e7:96:f8:7f:9f:73:8a:2e:b8:eb: 48:28:56:5a:82:94:ca:48:49:79:41:a1:80:c5:35: 24:b3:e7:51:32:51:1f:37:e4:b3:13:93:7f:bd:aa: 97:8a:e4:3d:04:5a:1d:02:6f:91:5d:98:55:f1:8e: 89:48:e1:94:7b:c6:6c:22:3b:83:b2:6e:89:a2:2f: 40:72:ec:a6:a9:c3:75:eb:cc:91:f5:b9:94:0b:62: 4a:fc:ea:7d:5c:c1:84:7b:3c:f6:6c:6d:e1:6e:ce: 64:87:14:94:bd:5f:6e:39:95:3c:b0:c3:32:0b:54: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:64:B2:FB:35:FD:E9:CF:F9:47:39:78:44:70:83:93:12:B8:7F:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10d::/48 Signature Algorithm: sha256WithRSAEncryption 98:6d:b5:8e:d1:8b:16:f1:fd:7b:6a:e9:2b:9a:6e:44:f5:fb: 00:c2:96:ed:f6:6b:11:4a:68:4e:ab:43:6e:b6:79:d3:f1:ef: 8e:91:4b:f4:65:98:01:4d:6d:ae:82:b3:71:5c:47:2b:27:cb: 92:ec:2e:a0:6e:a7:59:f9:74:04:4f:fc:63:b9:f2:e6:53:b4: b8:21:35:6e:4c:97:22:91:b5:8b:77:dc:4e:d4:4f:d2:f2:c0: 68:4d:6c:65:07:d1:c1:49:99:ad:d5:60:4a:df:e1:f7:7d:9f: aa:3e:a8:8b:dd:a9:23:d8:59:58:59:b7:54:be:3f:38:81:51: 6d:94:27:98:b8:e1:e9:71:3f:15:24:2f:90:d5:ad:e1:bf:18: 56:94:52:18:15:78:5f:d6:29:88:83:bc:85:cb:76:c4:ae:35: bb:a3:63:66:4e:d3:f4:2c:e9:2b:67:9b:5e:28:8b:ef:5d:88: 36:24:1c:95:7c:d1:fd:b3:1a:3e:58:6c:8c:93:7d:0c:8a:3a: 35:48:7c:33:15:77:6a:38:50:ff:a3:80:44:0e:4e:9a:86:18: b0:0d:5e:1e:89:3b:41:fd:06:8b:8a:3a:5b:09:79:52:71:fb: 13:83:53:47:60:90:a8:3f:70:75:b9:5e:d0:4a:6e:5a:9d:0b: 6f:a0:5b:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH9Mpm7PJAfMuTmG9TFTzJDbaVpAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDEzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NThhNzE3ZWJiMDUyOWI3ZDZlMjkyOTVlZjZkZWI4MDky NmZlYmFlNTIyZmE0NGU5YWUyOGUwOWIzY2FmNzUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNleO8AQa3TEkDxmDnRU7av0aIgXaS7NVlgzoDpQX8Lsiy hTt3CL3I7YNwRZGOemJYJujDmBVoszRftTiMHtyKAH/vzhr9cl6qttpA/SqxACTb b8cZg6hsxeDbyE3eaBkg6ET0lMo8U7XJ5crkJtvtK9NYyJK/WvVuLsTAprA3BR1f 1MAFv3MWbP1Y55b4f59zii6460goVlqClMpISXlBoYDFNSSz51EyUR835LMTk3+9 qpeK5D0EWh0Cb5FdmFXxjolI4ZR7xmwiO4OybomiL0By7Kapw3XrzJH1uZQLYkr8 6n1cwYR7PPZsbeFuzmSHFJS9X245lTywwzILVO+XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkWSy+zX96c/5Rzl4RHCDkxK4f0IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzllYWMxODZlLWM0MjYtNDE4YS04MmM2LTkwMzRkZTVjOTg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q0wDQYJKoZIhvcNAQELBQADggEBAJhttY7Rixbx/Xtq6SuabkT1 +wDClu32axFKaE6rQ262edPx746RS/RlmAFNba6Cs3FcRysny5LsLqBup1n5dARP /GO58uZTtLghNW5MlyKRtYt33E7UT9LywGhNbGUH0cFJma3VYErf4fd9n6o+qIvd qSPYWVhZt1S+PziBUW2UJ5i44elxPxUkL5DVreG/GFaUUhgVeF/WKYiDvIXLdsSu NbujY2ZO0/Qs6Stnm14oi+9diDYkHJV80f2zGj5YbIyTfQyKOjVIfDMVd2o4UP+j gEQOTpqGGLANXh6JO0H9BouKOlsJeVJx+xODU0dgkKg/cHW5XtBKblqdC2+gW+s= -----END CERTIFICATE-----Generated at Thu Nov 5 14:31:08 2026 by rpki-client