$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa File: a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa (raw, json) Hash identifier: 1+XvndpC1g3Qqi6eMhRr6EUQKrV9e3ZI30yJbEQzV+s= Subject key identifier: 56:A8:7E:A2:A7:78:7C:6C:2B:49:4E:3A:01:38:62:4A:ED:3D:E0:23 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4792E968457877473381865064D3B3018FA7D0F3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa Signing time: Tue 27 Oct 2026 00:50:41 +0000 ROA not before: Tue 27 Oct 2026 00:50:41 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:92:e9:68:45:78:77:47:33:81:86:50:64:d3:b3:01:8f:a7:d0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:41 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=4fac5624b91d6aa4d021a9e81ee354d6c5b1e2d530b4a5f777a1cca4760d0f4a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:38:9b:03:34:c1:ce:32:08:5d:8a:a7:f6: 10:c3:b4:3d:3e:03:b6:52:97:2a:b2:fd:cc:db:ff: b1:86:6d:a4:e4:40:bc:7b:21:2e:f1:ef:2f:81:04: 92:c2:f4:5d:04:7c:83:85:d9:e8:2c:69:f4:69:8e: be:2f:ed:99:0a:20:1b:42:00:e8:66:fc:3b:03:63: bb:5d:d0:81:b2:02:36:77:8f:a7:76:83:9a:31:9d: 6a:1e:2e:15:87:24:22:e8:28:d6:9c:25:1e:f1:fd: ef:a0:66:30:cb:82:dc:d9:5a:a0:c8:fc:5c:74:39: 3f:e1:08:33:86:dc:25:0d:09:60:d3:61:ba:b8:21: 79:ef:ef:09:98:38:cb:6c:a4:55:f7:be:18:1b:69: fe:67:27:01:0b:7f:3d:c1:51:59:3a:26:0e:31:a5: 93:c5:a5:7f:a1:21:0c:fb:5f:a3:9e:87:55:ad:88: 84:c5:4e:cd:6a:08:e0:89:be:92:46:45:ee:3f:65: a1:62:8b:2d:0e:fd:e7:bb:33:87:98:f4:98:8b:37: 43:13:19:07:47:eb:2a:06:95:33:ed:35:48:35:38: c8:17:f1:d1:c9:fc:25:82:f4:84:0d:2b:9b:cf:ee: 93:fa:d7:06:61:e5:5c:7e:af:a6:66:ae:01:c0:e5: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:7E:A2:A7:78:7C:6C:2B:49:4E:3A:01:38:62:4A:ED:3D:E0:23 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 59:33:5d:65:f1:ea:7d:5e:a7:ad:ee:03:15:bb:c8:77:0b:b1: fa:d7:95:73:6c:63:cf:6a:b9:d0:bc:d8:19:38:c3:38:58:31: 33:85:a1:0e:ac:81:1d:5d:1e:36:6c:be:60:56:df:0e:78:c3: 2a:46:ee:b9:f8:98:dd:51:0d:26:fc:02:9d:de:99:99:85:59: b7:d1:87:76:b1:34:79:eb:9b:85:d8:e4:ee:09:b1:f5:45:8c: a8:bd:33:0b:2a:dd:74:05:71:0d:96:e6:05:11:e4:e0:13:b0: f6:c1:09:24:d2:ed:2c:51:c1:9a:5b:48:dc:da:a6:c7:f5:98: 78:28:c1:46:53:54:33:5f:21:16:5e:b1:c1:c4:ec:89:c5:e6: 98:02:1d:bc:8a:ac:be:c7:4d:ba:94:74:09:92:07:ee:0e:14: ac:93:fa:a9:f7:10:78:f3:ea:00:58:48:b6:d9:17:18:4b:c8: 20:54:0c:f0:67:28:ad:a5:c2:5d:83:e9:30:36:a2:c3:02:d9: 6c:56:a0:b2:cb:bf:c1:9a:1b:8b:2a:d3:66:8e:be:93:05:9e: a3:e2:ee:a5:e2:74:3f:6c:78:4e:24:f0:67:80:3e:31:a7:ae: d4:97:30:84:cc:1d:8a:37:b2:de:ff:59:84:04:9f:92:25:cf: 2d:fb:1d:a1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR5LpaEV4d0czgYZQZNOzAY+n0PMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQxWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmFjNTYyNGI5MWQ2YWE0ZDAyMWE5ZTgxZWUzNTRkNmM1 YjFlMmQ1MzBiNGE1Zjc3N2ExY2NhNDc2MGQwZjRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3IzibAzTBzjIIXYqn9hDDtD0+A7ZSlyqy/czb/7GGbaTk QLx7IS7x7y+BBJLC9F0EfIOF2egsafRpjr4v7ZkKIBtCAOhm/DsDY7td0IGyAjZ3 j6d2g5oxnWoeLhWHJCLoKNacJR7x/e+gZjDLgtzZWqDI/Fx0OT/hCDOG3CUNCWDT Ybq4IXnv7wmYOMtspFX3vhgbaf5nJwELfz3BUVk6Jg4xpZPFpX+hIQz7X6Oeh1Wt iITFTs1qCOCJvpJGRe4/ZaFiiy0O/ee7M4eY9JiLN0MTGQdH6yoGlTPtNUg1OMgX 8dHJ/CWC9IQNK5vP7pP61wZh5Vx+r6ZmrgHA5fTPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVqh+oqd4fGwrSU46AThiSu094CMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0ZjkwNjVjLTg5MjItNGQzZi1iOWFjLTgyYTZlZGQ0OTljOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAFkzXWXx6n1ep63uAxW7yHcL sfrXlXNsY89qudC82Bk4wzhYMTOFoQ6sgR1dHjZsvmBW3w54wypG7rn4mN1RDSb8 Ap3emZmFWbfRh3axNHnrm4XY5O4JsfVFjKi9Mwsq3XQFcQ2W5gUR5OATsPbBCSTS 7SxRwZpbSNzapsf1mHgowUZTVDNfIRZescHE7InF5pgCHbyKrL7HTbqUdAmSB+4O FKyT+qn3EHjz6gBYSLbZFxhLyCBUDPBnKK2lwl2D6TA2osMC2WxWoLLLv8GaG4sq 02aOvpMFnqPi7qXidD9seE4k8GeAPjGnrtSXMITMHYo3st7/WYQEn5Ilzy37HaE= -----END CERTIFICATE-----Generated at Thu Nov 5 16:27:03 2026 by rpki-client