$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa File: bdb829ba-87c3-4d1d-8abd-8291c956971f.roa (raw, json) Hash identifier: 7QLKl44+81wB0A2qPh0NOjlJSRQ50LDlxL0G9G6FStU= Subject key identifier: 69:9D:78:9E:A9:ED:F3:BC:55:91:5B:D6:37:E2:C6:23:0E:E4:37:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 16FC83DCA78E04E6BE750AE6998166D8B8587F61 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa Signing time: Wed 14 Oct 2026 00:06:22 +0000 ROA not before: Wed 14 Oct 2026 00:06:22 +0000 ROA not after: Tue 12 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:1c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fc:83:dc:a7:8e:04:e6:be:75:0a:e6:99:81:66:d8:b8:58:7f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 14 00:06:22 2026 GMT Not After : Jan 12 23:59:59 2027 GMT Subject: serialNumber=46d870287eeaaea52b7d4b0f929acbf685660784ee282c0fc7f23f9b038ce6bd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:f0:25:38:12:4b:e2:ef:21:3c:9d:08:61: e9:02:17:ff:bb:0d:8c:c2:f5:d2:e0:a5:df:8d:ef: f3:28:a4:80:d3:0b:49:16:d0:d4:58:2e:26:c6:0c: 0f:79:e3:0b:08:62:63:91:13:83:06:4b:06:ff:16: 30:c8:ec:62:60:4f:39:d2:18:fb:bb:ea:fa:a8:93: 1c:55:b2:c6:8e:35:8a:dd:d3:71:ed:71:cc:73:9d: 2e:74:95:39:16:45:79:6d:a2:cc:01:7c:4f:e1:bb: a8:07:e1:21:aa:aa:0b:b2:1a:84:bc:ef:f4:c0:3f: 5f:1c:08:6e:5f:ec:42:17:e2:23:ad:a6:3e:4e:6f: ba:91:05:3e:49:e3:a5:fe:3b:2c:ab:17:cb:ab:ab: fa:ff:33:e5:6a:30:3a:76:3b:d3:3d:a7:3b:7b:ba: 9c:6d:2c:99:8c:5a:7e:89:a6:79:cb:8b:21:ef:e1: 7a:e7:fe:e9:96:9b:94:94:38:fb:3f:65:08:61:2d: bb:d0:53:aa:f1:4a:6f:68:9d:f3:3f:b3:5c:b7:fc: 2a:39:a6:63:46:bb:46:dc:71:cb:ca:f6:61:39:7a: a7:9f:4f:8b:33:1d:76:04:20:48:e3:78:ce:0c:21: b7:e6:36:d4:86:3d:35:31:e3:d1:11:53:20:41:94: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:78:9E:A9:ED:F3:BC:55:91:5B:D6:37:E2:C6:23:0E:E4:37:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:1c::/46 Signature Algorithm: sha256WithRSAEncryption 21:f7:8f:91:6d:46:4b:b3:58:ef:89:45:30:1e:09:16:4b:34: 65:51:ff:8d:4c:5b:46:58:0a:d0:c7:de:82:42:74:92:69:9d: b8:51:39:cc:47:a9:d4:4f:53:6d:f2:d8:07:d3:5a:ae:1a:f2: 47:a3:ef:d7:dd:91:f9:8d:ce:26:05:b0:c0:53:3c:fc:db:72: 38:3b:3f:b6:48:9d:5a:4c:e4:06:9f:c6:96:a9:5e:b4:1a:44: 2e:b4:68:8e:f5:a0:fe:df:f2:62:90:d9:bc:51:49:17:15:4e: 14:51:cf:6e:40:06:e1:4f:c5:30:a9:5d:ee:52:5a:4b:9c:8b: 39:6e:d0:35:37:58:5a:90:de:ff:c9:49:3e:99:7c:4d:9c:aa: 80:d8:02:1f:e2:18:f1:f6:ca:42:08:94:c8:5d:f4:a5:bc:30: 57:1b:e9:7c:6b:11:9b:8e:e4:f1:b1:aa:c7:93:3b:ff:03:0b: 82:4f:53:0d:88:b0:06:2b:1b:6c:59:14:a9:6b:ab:25:fc:50: fe:ba:d1:2a:06:a7:ea:5a:98:b7:cc:28:37:47:cd:67:f2:c3: 30:af:03:79:75:5d:4f:d3:b4:7f:a8:32:dd:b0:4a:c1:36:d3: cc:ca:c6:8d:38:ab:b4:49:3e:b3:c5:44:6f:b0:ba:be:78:cb: 0f:62:90:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFvyD3KeOBOa+dQrmmYFm2LhYf2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE0MDAwNjIyWhcNMjcwMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmQ4NzAyODdlZWFhZWE1MmI3ZDRiMGY5MjlhY2JmNjg1 NjYwNzg0ZWUyODJjMGZjN2YyM2Y5YjAzOGNlNmJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiWPAlOBJL4u8hPJ0IYekCF/+7DYzC9dLgpd+N7/MopIDT C0kW0NRYLibGDA954wsIYmORE4MGSwb/FjDI7GJgTznSGPu76vqokxxVssaONYrd 03HtccxznS50lTkWRXltoswBfE/hu6gH4SGqqguyGoS87/TAP18cCG5f7EIX4iOt pj5Ob7qRBT5J46X+OyyrF8urq/r/M+VqMDp2O9M9pzt7upxtLJmMWn6JpnnLiyHv 4Xrn/umWm5SUOPs/ZQhhLbvQU6rxSm9onfM/s1y3/Co5pmNGu0bcccvK9mE5eqef T4szHXYEIEjjeM4MIbfmNtSGPTUx49ERUyBBlE7lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaZ14nqnt87xVkVvWN+LGIw7kNzcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkYjgyOWJhLTg3YzMtNGQxZC04YWJkLTgyOTFjOTU2OTcxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDxABwwDQYJKoZIhvcNAQELBQADggEBACH3j5FtRkuzWO+JRTAeCRZL NGVR/41MW0ZYCtDH3oJCdJJpnbhROcxHqdRPU23y2AfTWq4a8kej79fdkfmNziYF sMBTPPzbcjg7P7ZInVpM5AafxpapXrQaRC60aI71oP7f8mKQ2bxRSRcVThRRz25A BuFPxTCpXe5SWkucizlu0DU3WFqQ3v/JST6ZfE2cqoDYAh/iGPH2ykIIlMhd9KW8 MFcb6XxrEZuO5PGxqseTO/8DC4JPUw2IsAYrG2xZFKlrqyX8UP660SoGp+pamLfM KDdHzWfywzCvA3l1XU/TtH+oMt2wSsE208zKxo04q7RJPrPFRG+wur54yw9ikKk= -----END CERTIFICATE-----Generated at Thu Nov 5 11:24:36 2026 by rpki-client