$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: 1OeWMsCgQr4+BhbuvPGzVFaL4rKi/2JlRRHYEe0U6sU= Subject key identifier: 59:06:3D:E8:23:32:9B:2A:78:DF:86:6C:3D:9C:FF:06:7C:8E:27:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B1D2CBB5B40A46D56B10AD9DEBD5AF243CBB48C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Tue 27 Oct 2026 00:50:41 +0000 ROA not before: Tue 27 Oct 2026 00:50:41 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1d:2c:bb:5b:40:a4:6d:56:b1:0a:d9:de:bd:5a:f2:43:cb:b4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:41 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=af10127fed9e96e5b4af2d92d9f79f54b8d08c51acd1c9dbed1659bd3a2d57b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:d4:c5:b4:d1:fe:ea:e1:02:c8:8e:df:6e: 80:09:d8:84:06:da:ae:c9:af:d5:80:57:57:bb:6a: 7d:20:3d:8e:8c:c3:30:f1:b9:c2:c9:69:34:9a:e6: 42:c8:03:e9:d5:37:7d:bc:b8:db:b3:6b:bd:25:05: 8b:4f:40:7a:69:17:de:83:bb:03:a2:8f:6f:47:70: 8c:2a:2c:a2:f1:c8:85:97:26:71:ab:80:7b:f2:7b: ec:46:ae:f4:59:54:68:ae:49:c7:d9:fc:51:af:e8: 62:16:93:02:5e:eb:80:aa:aa:86:1a:33:d8:74:a2: bb:8c:de:1b:63:47:a5:b4:10:6a:3e:9a:14:7b:66: cd:32:76:b5:99:7f:ca:85:c4:c8:ce:58:0e:5a:fc: fc:c0:b2:18:eb:ec:76:e3:e8:82:ac:92:26:67:95: 8b:5d:5e:dd:e5:d5:9c:5a:42:a5:a4:ae:2f:fc:f5: 82:26:09:62:28:fe:0e:f2:80:b2:26:f2:c1:d9:a6: f4:6d:e4:8c:8d:63:68:88:89:e1:c6:61:9c:8c:ff: cf:22:7f:52:41:95:53:cc:9e:46:00:93:36:7b:70: 25:c4:58:68:fa:da:99:99:99:73:34:0b:a2:12:0f: 91:bb:4b:7b:0e:b3:3b:46:93:24:75:a1:22:88:ef: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:3D:E8:23:32:9B:2A:78:DF:86:6C:3D:9C:FF:06:7C:8E:27:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 98:8c:c2:83:57:7d:0c:0c:44:77:5e:3c:7e:4b:10:e4:d0:8c: 6d:63:d3:6f:a4:71:fa:50:5d:36:a3:49:f7:d6:ba:7f:c4:e5: 0e:1f:a5:3b:33:24:a2:db:01:a3:d0:7c:0f:3f:47:d1:f5:72: ea:c9:39:15:53:2e:24:7e:e1:b0:7b:79:19:b6:6d:13:ef:66: 75:ff:5c:68:c1:fc:57:8f:16:c9:f6:01:0d:ad:c1:b9:46:b0: a9:74:58:18:c5:2a:7a:9e:fc:d5:1c:95:0a:39:cf:83:b8:a5: e6:a7:d1:d9:1f:1c:19:9d:c7:5e:bc:22:31:ef:de:9d:6a:c5: 45:6c:7f:f6:bc:83:8d:7d:67:0a:b8:26:a2:14:0e:c7:2d:1c: 47:15:ed:14:ce:31:74:f4:4b:b2:88:15:c5:ed:29:76:df:51: 01:45:b4:d2:89:ee:4a:4c:96:f9:17:bb:fb:fa:fc:63:94:87: 44:5e:bc:6a:df:17:a2:85:dc:a0:16:52:d0:ec:67:3c:57:71: 52:c4:47:22:e9:1f:16:93:b0:d2:dd:c2:06:fc:56:8a:67:12: 5c:ca:00:84:92:47:4f:e8:38:32:bb:19:6d:80:ed:09:ff:13: 61:80:8d:c7:d4:0c:75:74:23:93:56:67:a1:34:ef:f7:73:d6: 38:ef:71:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSx0su1tApG1WsQrZ3r1a8kPLtIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQxWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjEwMTI3ZmVkOWU5NmU1YjRhZjJkOTJkOWY3OWY1NGI4 ZDA4YzUxYWNkMWM5ZGJlZDE2NTliZDNhMmQ1N2IyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvvdTFtNH+6uECyI7fboAJ2IQG2q7Jr9WAV1e7an0gPY6M wzDxucLJaTSa5kLIA+nVN328uNuza70lBYtPQHppF96DuwOij29HcIwqLKLxyIWX JnGrgHvye+xGrvRZVGiuScfZ/FGv6GIWkwJe64CqqoYaM9h0oruM3htjR6W0EGo+ mhR7Zs0ydrWZf8qFxMjOWA5a/PzAshjr7Hbj6IKskiZnlYtdXt3l1ZxaQqWkri/8 9YImCWIo/g7ygLIm8sHZpvRt5IyNY2iIieHGYZyM/88if1JBlVPMnkYAkzZ7cCXE WGj62pmZmXM0C6ISD5G7S3sOsztGkyR1oSKI7ypBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWQY96CMymyp434ZsPZz/BnyOJ6gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAJiMwoNXfQwMRHdePH5LEOTQ jG1j02+kcfpQXTajSffWun/E5Q4fpTszJKLbAaPQfA8/R9H1curJORVTLiR+4bB7 eRm2bRPvZnX/XGjB/FePFsn2AQ2twblGsKl0WBjFKnqe/NUclQo5z4O4pean0dkf HBmdx168IjHv3p1qxUVsf/a8g419Zwq4JqIUDsctHEcV7RTOMXT0S7KIFcXtKXbf UQFFtNKJ7kpMlvkXu/v6/GOUh0RevGrfF6KF3KAWUtDsZzxXcVLERyLpHxaTsNLd wgb8VopnElzKAISSR0/oODK7GW2A7Qn/E2GAjcfUDHV0I5NWZ6E07/dz1jjvcRk= -----END CERTIFICATE-----Generated at Thu Nov 5 09:03:56 2026 by rpki-client