$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa File: bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa (raw, json) Hash identifier: DdUIX2j2NTJIxo/WcVLH261hvvi36bbPk3NPwPu3JKY= Subject key identifier: 53:C4:EB:82:4E:79:0A:DF:B8:32:4B:12:07:28:A4:0F:27:21:5C:16 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 70B6828C1E1286384FDDCD947DB2553F1925A4DE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa Signing time: Tue 27 Oct 2026 00:50:48 +0000 ROA not before: Tue 27 Oct 2026 00:50:48 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b6:82:8c:1e:12:86:38:4f:dd:cd:94:7d:b2:55:3f:19:25:a4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:48 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=987f2e613846b69d35bc53e9e7d58f15064fa8e388f6c07320a9d1d35a429a1f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:bc:6b:00:79:b6:b1:55:0c:f9:42:93:99: 75:d2:0a:3a:8c:92:1b:79:c2:ee:38:a7:99:12:71: 96:1c:49:ba:65:05:47:83:d7:a4:a6:46:d2:7e:7b: 75:ae:65:d9:f1:7a:6d:eb:9d:38:1d:21:76:0e:33: db:a6:9a:62:95:e2:ad:c7:f0:2e:3e:07:63:62:3f: ef:e7:6f:49:58:fd:06:8e:55:9f:f6:19:72:60:a8: 16:13:21:ab:0e:9f:54:35:33:7b:1c:9e:5c:3e:61: 4d:9c:9f:95:c5:6a:ca:bd:b3:d3:59:3a:c5:bb:7b: d4:05:68:e5:8b:09:30:d5:27:99:98:8f:a0:58:a0: d3:3d:5b:85:64:18:71:97:ff:d6:6e:61:4a:ca:dd: c7:5e:08:27:e4:6d:47:20:86:36:2e:81:8f:d0:82: d5:2e:a8:76:9f:c8:6b:0c:4d:4b:65:28:81:cb:d5: 3e:2e:fc:b9:08:bc:95:b3:45:22:e7:3a:30:1f:c8: fb:d2:7a:56:be:5c:bc:2a:89:94:f0:18:98:4e:11: 31:ce:b3:29:d6:45:d1:93:cc:95:ac:b3:f1:6e:63: 77:29:4a:d2:89:e4:cd:3c:ae:e7:94:2f:3f:96:07: dc:31:ad:e9:11:79:78:7f:37:79:64:b8:9b:0d:fe: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:EB:82:4E:79:0A:DF:B8:32:4B:12:07:28:A4:0F:27:21:5C:16 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10c::/48 Signature Algorithm: sha256WithRSAEncryption 81:ad:bd:d2:dd:6c:4a:d3:15:b9:bb:e0:cd:4e:67:18:76:bc: 34:ce:1a:0e:1e:ed:e1:f3:61:66:da:ad:d1:0a:4a:4d:35:dc: fe:5e:e7:d6:4e:da:df:37:1a:c7:18:0a:5e:f5:0c:e6:80:1a: 93:eb:76:1c:49:0e:bb:33:5c:b2:7f:b3:44:b9:ea:ae:15:3f: 16:44:58:5e:d7:df:5c:2e:d6:7c:97:cb:78:1a:4b:d3:72:45: 2c:39:70:0d:03:3b:c4:1a:15:0d:c7:ea:31:38:e3:7b:af:ea: 34:83:28:1e:61:ad:0c:ed:2c:cf:6f:7d:8a:96:58:b0:83:6a: 7a:12:87:ea:3a:66:80:aa:f3:b2:8e:8c:17:b3:6d:5d:cc:d1: 82:e5:a4:22:ad:2a:7a:5b:a5:ad:59:54:9f:b6:fd:a1:7e:fd: 6a:ff:0d:11:33:9c:d3:a0:0f:36:69:9d:9b:24:3e:17:fc:9e: 76:27:e0:f1:94:68:20:16:d2:bb:e2:19:75:b7:49:dd:cf:34: 8e:6e:fd:65:be:7c:ae:1a:04:44:e3:70:62:bf:02:82:f8:49: b6:28:15:38:50:b1:b2:a0:c2:19:0b:56:8c:66:14:e3:91:85: d9:b8:87:d9:93:21:09:81:a5:4c:85:b2:a9:91:e5:f1:05:9f: b0:18:17:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcLaCjB4ShjhP3c2UfbJVPxklpN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQ4WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODdmMmU2MTM4NDZiNjlkMzViYzUzZTllN2Q1OGYxNTA2 NGZhOGUzODhmNmMwNzMyMGE5ZDFkMzVhNDI5YTFmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnn7xrAHm2sVUM+UKTmXXSCjqMkht5wu44p5kScZYcSbpl BUeD16SmRtJ+e3WuZdnxem3rnTgdIXYOM9ummmKV4q3H8C4+B2NiP+/nb0lY/QaO VZ/2GXJgqBYTIasOn1Q1M3scnlw+YU2cn5XFasq9s9NZOsW7e9QFaOWLCTDVJ5mY j6BYoNM9W4VkGHGX/9ZuYUrK3cdeCCfkbUcghjYugY/QgtUuqHafyGsMTUtlKIHL 1T4u/LkIvJWzRSLnOjAfyPvSela+XLwqiZTwGJhOETHOsynWRdGTzJWss/FuY3cp StKJ5M08rueULz+WB9wxrekReXh/N3lkuJsN/hJXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUU8Trgk55Ct+4MksSByikDychXBYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiMzlhNGQ1LWE3MjEtNDA5Ni1iYWM2LTE4ZDI5ZmE0YjdmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAIGtvdLdbErTFbm74M1OZxh2 vDTOGg4e7eHzYWbardEKSk013P5e59ZO2t83GscYCl71DOaAGpPrdhxJDrszXLJ/ s0S56q4VPxZEWF7X31wu1nyXy3gaS9NyRSw5cA0DO8QaFQ3H6jE443uv6jSDKB5h rQztLM9vfYqWWLCDanoSh+o6ZoCq87KOjBezbV3M0YLlpCKtKnpbpa1ZVJ+2/aF+ /Wr/DREznNOgDzZpnZskPhf8nnYn4PGUaCAW0rviGXW3Sd3PNI5u/WW+fK4aBETj cGK/AoL4SbYoFThQsbKgwhkLVoxmFOORhdm4h9mTIQmBpUyFsqmR5fEFn7AYF3M= -----END CERTIFICATE-----Generated at Thu Nov 5 15:19:14 2026 by rpki-client