$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa File: c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa (raw, json) Hash identifier: x1vxtq2G+hJEJg95ayAe853XcH0H4MxxQDXIjLVyCQs= Subject key identifier: C9:8B:BD:55:5F:14:CF:BD:E1:01:F4:C0:BD:67:54:E6:81:3B:DC:D8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 093809C50E2AC85B1D433A8ECFD71ECC067A29D4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa Signing time: Tue 27 Oct 2026 00:50:25 +0000 ROA not before: Tue 27 Oct 2026 00:50:25 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:09:c5:0e:2a:c8:5b:1d:43:3a:8e:cf:d7:1e:cc:06:7a:29:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:25 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=2f343d3347cdcba4045fe223b8eefeb0f98eba936b6dd235996c28bb491b9087, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:40:02:3b:12:64:cd:91:95:eb:dc:bc:d4: 18:6e:bb:3f:3b:1d:b6:f9:0c:06:f4:08:0e:e4:02: 7d:4e:af:5f:02:6c:6f:cb:e6:74:9d:07:5c:12:6d: fd:48:a7:c8:0d:1a:3d:53:76:6e:6d:e8:46:4b:a1: 4d:04:e0:1c:be:8c:72:ca:d0:1f:47:e7:bf:85:b2: 89:76:9e:af:ef:2f:19:63:63:7c:54:63:9c:0f:98: 43:bf:85:0b:1a:10:ef:55:79:e3:d0:83:f3:c5:da: a7:18:2d:67:fd:4d:7b:30:9d:f7:1b:85:5a:6b:d9: eb:5f:88:58:a0:fd:8a:15:0d:9b:74:94:d8:9c:85: be:b4:65:d1:67:5a:60:77:55:07:71:56:a0:ea:5f: 87:27:04:99:6e:43:96:52:57:14:ab:a9:54:bf:d5: f6:59:e9:7c:08:e7:94:99:38:a1:99:7e:f3:0d:09: cd:a7:0d:a0:5d:96:3d:1b:a6:37:fd:2e:cd:8d:d8: 45:af:f6:2e:0e:a2:92:5b:68:5d:60:10:80:7c:3f: 17:43:77:08:f9:20:12:ff:55:99:98:93:b9:24:3b: fc:60:ba:3e:a5:cf:61:f6:af:98:88:67:06:fb:3c: ba:fa:d0:aa:93:db:ac:d9:0c:3c:b8:61:97:0f:07: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8B:BD:55:5F:14:CF:BD:E1:01:F4:C0:BD:67:54:E6:81:3B:DC:D8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f102::/48 Signature Algorithm: sha256WithRSAEncryption 76:d2:fa:7e:40:03:9d:ab:52:20:b1:62:3c:ee:c0:c3:33:76: 09:24:8a:94:85:a7:05:81:35:f7:90:2e:44:23:c5:bf:29:60: 06:28:d0:1c:70:c7:fb:48:73:4f:8a:1b:ee:4d:74:96:31:86: c4:6c:95:fd:4b:9e:85:ae:a5:e3:9f:a0:bc:9e:f3:42:46:b1: fa:82:5b:09:70:12:df:8b:48:b6:17:57:3e:2b:2b:78:77:f9: 04:3c:b4:1d:ae:f8:f9:dd:4f:86:61:2d:fc:fa:43:b3:f7:e1: 0c:b5:82:85:29:76:90:ae:23:4c:9a:e3:d9:32:3b:91:19:11: fd:34:81:aa:71:5a:33:07:2c:98:dc:67:03:c6:14:dd:9a:27: 2a:53:c5:cb:31:2c:09:6c:09:9a:3b:03:14:f7:6f:32:5f:ac: dd:76:b3:33:8c:57:63:4c:8b:2a:13:a9:c3:1c:c8:21:ff:ef: 74:0c:5f:02:87:b2:98:ee:ff:13:ad:42:04:f0:ec:6e:54:25: f1:68:29:2c:6f:1c:d5:7c:eb:f7:f7:f3:33:09:36:50:b9:2e: b8:2b:06:f5:e1:e4:bb:74:7a:6d:ff:7e:c6:40:8b:c7:63:d6: 2f:20:61:27:71:6d:e8:4f:a5:d9:08:97:16:71:2e:c3:24:b6: 6e:41:14:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCTgJxQ4qyFsdQzqOz9cezAZ6KdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDI1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjM0M2QzMzQ3Y2RjYmE0MDQ1ZmUyMjNiOGVlZmViMGY5 OGViYTkzNmI2ZGQyMzU5OTZjMjhiYjQ5MWI5MDg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe/EACOxJkzZGV69y81Bhuuz87Hbb5DAb0CA7kAn1Or18C bG/L5nSdB1wSbf1Ip8gNGj1Tdm5t6EZLoU0E4By+jHLK0B9H57+Fsol2nq/vLxlj Y3xUY5wPmEO/hQsaEO9VeePQg/PF2qcYLWf9TXswnfcbhVpr2etfiFig/YoVDZt0 lNichb60ZdFnWmB3VQdxVqDqX4cnBJluQ5ZSVxSrqVS/1fZZ6XwI55SZOKGZfvMN Cc2nDaBdlj0bpjf9Ls2N2EWv9i4OopJbaF1gEIB8PxdDdwj5IBL/VZmYk7kkO/xg uj6lz2H2r5iIZwb7PLr60KqT26zZDDy4YZcPByiFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyYu9VV8Uz73hAfTAvWdU5oE73NgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MxYTQ3YTY5LTFkNTMtNGZhOC1iYWIyLTFiMWY2MGU3NDY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QIwDQYJKoZIhvcNAQELBQADggEBAHbS+n5AA52rUiCxYjzuwMMz dgkkipSFpwWBNfeQLkQjxb8pYAYo0Bxwx/tIc0+KG+5NdJYxhsRslf1LnoWupeOf oLye80JGsfqCWwlwEt+LSLYXVz4rK3h3+QQ8tB2u+PndT4ZhLfz6Q7P34Qy1goUp dpCuI0ya49kyO5EZEf00gapxWjMHLJjcZwPGFN2aJypTxcsxLAlsCZo7AxT3bzJf rN12szOMV2NMiyoTqcMcyCH/73QMXwKHspju/xOtQgTw7G5UJfFoKSxvHNV86/f3 8zMJNlC5LrgrBvXh5Lt0em3/fsZAi8dj1i8gYSdxbehPpdkIlxZxLsMktm5BFGw= -----END CERTIFICATE-----Generated at Thu Nov 5 14:26:07 2026 by rpki-client