$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa File: abbb9ed9-cd59-4312-980b-26a09589f144.roa (raw, json) Hash identifier: +pBcJrY49MerLrUV7+yR69tuHYbXXm+/g8HrQVcYZV4= Subject key identifier: BB:15:4D:AA:F9:D7:42:A0:D5:18:82:C6:FA:69:DE:5E:4E:14:6A:64 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0C81C452FF0239016B740D5DAEB39307C73686C2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa Signing time: Tue 27 Oct 2026 00:50:10 +0000 ROA not before: Tue 27 Oct 2026 00:50:10 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:81:c4:52:ff:02:39:01:6b:74:0d:5d:ae:b3:93:07:c7:36:86:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:10 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=d343e45f44c872665e2f37e56cafb51f5c9f71cff283e66531cda5bd90006623, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:32:11:c8:08:4f:61:dc:bf:41:65:8e:b7: e4:32:c2:8e:8c:df:75:c2:15:46:57:11:bf:e4:41: af:8d:f7:52:01:2d:eb:f0:42:b9:3f:46:d1:1e:2a: 01:24:8b:52:38:4b:af:d3:4b:33:55:3e:26:b7:3a: e0:f0:c6:73:40:f4:f0:07:e5:1e:92:03:b4:11:22: 2c:a8:6f:ea:72:ff:b4:cc:65:b6:83:b6:e5:3a:f8: 22:de:d9:50:e7:ff:d2:a6:99:49:09:ec:03:17:1f: fd:3f:be:72:16:d0:cd:f5:5e:b9:eb:7a:ca:90:69: 5b:b1:af:66:26:b0:c4:99:59:83:a7:96:e9:c5:d0: fb:0d:16:59:65:ef:09:f2:95:55:22:df:40:da:53: 29:f3:6c:f5:ad:1b:4f:58:84:77:36:11:2a:f3:63: 86:b9:eb:c6:93:29:94:09:54:ed:8d:37:49:d4:f7: b0:11:fd:fd:18:17:d2:41:43:f7:64:4d:4e:35:d1: e5:d6:9e:5b:d5:1c:88:99:fd:ff:cc:fc:4a:d1:05: 64:06:d5:fa:68:85:71:17:d0:b8:64:39:83:ed:e4: 63:17:21:fd:3f:3c:50:c7:6d:63:32:69:07:12:f7: 00:97:36:a4:61:7d:23:2e:64:f5:e8:96:ec:29:a3: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:15:4D:AA:F9:D7:42:A0:D5:18:82:C6:FA:69:DE:5E:4E:14:6A:64 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/abbb9ed9-cd59-4312-980b-26a09589f144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f110::/48 Signature Algorithm: sha256WithRSAEncryption 66:57:fc:c1:96:d9:9f:ea:a4:db:37:b1:be:5a:64:3c:53:a5: 1a:f8:f4:48:5c:9f:04:b5:f1:39:54:54:b1:d9:60:aa:a1:6f: c0:f2:3a:c7:3a:1c:bd:7b:07:68:9d:21:2b:e6:0f:8d:00:9c: 47:2b:5f:a4:45:15:59:e6:0b:43:85:f2:a1:98:1c:fb:7e:ff: a7:ee:b8:b7:e7:3c:d2:13:d5:f2:c6:c5:b8:bb:38:16:d9:8b: 57:b9:68:29:37:38:5b:f0:6c:76:26:32:15:5f:de:8f:a1:3f: 94:15:96:3d:d8:fd:d3:64:1f:48:61:e1:1e:97:c5:08:7e:02: f2:40:a6:ea:b0:81:7c:af:7d:1b:02:cb:87:c3:cd:6a:a8:ee: 36:21:64:fa:e1:6c:b0:00:2e:eb:56:04:55:ef:8b:ac:c4:41: 9c:5f:28:9d:a8:da:ab:f5:a6:80:7a:90:8f:03:19:e7:b1:0d: a0:38:3a:54:db:d9:fa:21:bf:9a:6d:0b:6d:35:1b:ea:3b:4d: cf:f1:27:15:8b:b6:01:21:ec:1a:21:51:d8:53:d4:35:35:19: 19:f5:ee:49:4b:48:1d:c7:4e:2d:7d:53:9d:b7:09:6b:4d:6c: 0b:8f:8f:5c:92:11:c9:d6:aa:7a:73:ee:ee:b0:44:ce:74:19: c3:df:98:ec -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDIHEUv8COQFrdA1drrOTB8c2hsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDEwWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzQzZTQ1ZjQ0Yzg3MjY2NWUyZjM3ZTU2Y2FmYjUxZjVj OWY3MWNmZjI4M2U2NjUzMWNkYTViZDkwMDA2NjIzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDReTIRyAhPYdy/QWWOt+Qywo6M33XCFUZXEb/kQa+N91IB LevwQrk/RtEeKgEki1I4S6/TSzNVPia3OuDwxnNA9PAH5R6SA7QRIiyob+py/7TM ZbaDtuU6+CLe2VDn/9KmmUkJ7AMXH/0/vnIW0M31XrnresqQaVuxr2YmsMSZWYOn lunF0PsNFlll7wnylVUi30DaUynzbPWtG09YhHc2ESrzY4a568aTKZQJVO2NN0nU 97AR/f0YF9JBQ/dkTU410eXWnlvVHIiZ/f/M/ErRBWQG1fpohXEX0LhkOYPt5GMX If0/PFDHbWMyaQcS9wCXNqRhfSMuZPXoluwpo3J5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuxVNqvnXQqDVGILG+mneXk4UamQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FiYmI5ZWQ5LWNkNTktNDMxMi05ODBiLTI2YTA5NTg5ZjE0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78RAwDQYJKoZIhvcNAQELBQADggEBAGZX/MGW2Z/qpNs3sb5aZDxT pRr49EhcnwS18TlUVLHZYKqhb8DyOsc6HL17B2idISvmD40AnEcrX6RFFVnmC0OF 8qGYHPt+/6fuuLfnPNIT1fLGxbi7OBbZi1e5aCk3OFvwbHYmMhVf3o+hP5QVlj3Y /dNkH0hh4R6XxQh+AvJApuqwgXyvfRsCy4fDzWqo7jYhZPrhbLAALutWBFXvi6zE QZxfKJ2o2qv1poB6kI8DGeexDaA4OlTb2fohv5ptC201G+o7Tc/xJxWLtgEh7Boh UdhT1DU1GRn17klLSB3HTi19U523CWtNbAuPj1ySEcnWqnpz7u6wRM50GcPfmOw= -----END CERTIFICATE-----Generated at Tue Nov 10 13:36:45 2026 by rpki-client