$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa File: d00edb39-49a5-44cb-9037-ad814c177b6a.roa (raw, json) Hash identifier: VHoYAjy9HguyCejCijRw1/w/fwiRCHs34NLETEfnyuw= Subject key identifier: 4F:15:D5:62:44:7B:B9:68:BE:21:55:BF:29:8C:80:C6:1C:7D:26:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4DF485CF337AD65815E5DF84E193BB1B74D5A141 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa Signing time: Tue 27 Oct 2026 00:50:09 +0000 ROA not before: Tue 27 Oct 2026 00:50:09 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f4:85:cf:33:7a:d6:58:15:e5:df:84:e1:93:bb:1b:74:d5:a1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:09 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=522adbea6ba377ae62d0fcb6992198089034a94a14063eda0d3ffe465e3b0a8a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e8:25:72:78:41:dd:95:55:7c:40:5e:7a:25: 4c:2c:ab:31:46:e3:c6:0d:36:5c:c2:cb:ca:a9:0d: 4d:55:4c:89:6d:77:6c:2b:b1:a8:14:3e:64:7a:89: e0:59:95:98:a3:56:b8:f6:ad:6e:09:cc:0f:ff:ff: a1:eb:1a:e9:10:ee:13:f0:e3:33:52:86:60:73:78: 2e:78:cf:d9:14:39:74:4b:89:80:fd:99:82:03:c4: 31:e0:1f:65:7d:49:e8:cb:7b:7d:61:3e:70:0f:49: dd:ca:5c:02:6c:c4:04:7f:56:f9:09:69:38:c1:ea: 3b:d2:b1:0f:b5:09:eb:f8:2c:40:57:5b:28:ce:a8: 77:4c:24:57:6a:12:df:59:39:10:cd:eb:bd:f9:84: ce:f9:0e:ca:96:1a:81:c5:bf:17:ec:0a:64:2a:a7: 9f:f6:12:f0:3e:6a:5a:a7:70:02:8a:60:12:cc:76: af:dc:22:65:e3:a8:b2:aa:3b:aa:6f:ed:61:91:a7: dc:62:7d:f3:23:1b:51:47:fa:dd:f4:83:24:1c:94: be:b2:20:bc:83:fd:23:9c:9b:3e:d6:42:47:c6:3a: d2:17:a5:9b:0f:06:8e:d8:72:30:51:e8:f7:90:74: 07:38:36:88:ac:71:5f:b0:c9:cc:3e:26:92:1e:85: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:D5:62:44:7B:B9:68:BE:21:55:BF:29:8C:80:C6:1C:7D:26:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 99:4c:a6:2c:12:11:bb:e6:d0:27:f0:4c:46:d6:a3:96:4a:5a: a5:47:b8:96:d8:16:6e:41:44:64:2f:d2:c4:db:65:58:f7:3d: bd:13:df:5b:76:16:0a:d9:8d:85:29:d2:07:55:65:f3:6a:38: c6:d0:90:d5:13:11:df:c4:2e:9e:2b:aa:97:a9:b9:48:c8:12: b0:64:e8:38:cc:1a:ca:65:39:cd:30:a8:da:2c:9e:74:94:85: cc:1e:62:b3:88:45:87:8f:8d:7c:11:fa:45:44:d8:b0:3f:9a: 97:4f:4c:e4:cb:b3:6a:ad:a3:65:66:03:2f:20:f0:0b:38:b0: 6b:ad:b7:96:a4:13:d7:9e:d4:59:cd:75:7c:11:12:2a:cf:e2: a0:ad:4e:1b:3d:c8:5a:10:b9:31:49:e8:c9:e9:58:1e:13:66: 7a:cd:e7:1f:f6:06:7b:55:fc:8d:16:20:2d:42:a7:c1:a0:95: 6a:b8:b8:e0:5d:1f:a9:a1:5c:42:64:af:aa:24:96:31:6c:11: ef:bb:18:c2:9c:53:f8:93:a2:b6:65:f7:3f:83:59:50:f1:49: 9d:81:7e:3d:b4:89:62:d2:f7:6f:0c:97:3a:af:6f:53:c9:91: f1:86:0a:70:22:b3:20:d7:31:55:58:9c:8e:41:a3:27:1b:cc: 78:cb:dd:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTfSFzzN61lgV5d+E4ZO7G3TVoUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDA5WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjJhZGJlYTZiYTM3N2FlNjJkMGZjYjY5OTIxOTgwODkw MzRhOTRhMTQwNjNlZGEwZDNmZmU0NjVlM2IwYThhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq6CVyeEHdlVV8QF56JUwsqzFG48YNNlzCy8qpDU1VTIlt d2wrsagUPmR6ieBZlZijVrj2rW4JzA///6HrGukQ7hPw4zNShmBzeC54z9kUOXRL iYD9mYIDxDHgH2V9SejLe31hPnAPSd3KXAJsxAR/VvkJaTjB6jvSsQ+1Cev4LEBX WyjOqHdMJFdqEt9ZORDN6735hM75DsqWGoHFvxfsCmQqp5/2EvA+alqncAKKYBLM dq/cImXjqLKqO6pv7WGRp9xiffMjG1FH+t30gyQclL6yILyD/SOcmz7WQkfGOtIX pZsPBo7YcjBR6PeQdAc4NoiscV+wycw+JpIehWVxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTxXVYkR7uWi+IVW/KYyAxhx9JpAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QwMGVkYjM5LTQ5YTUtNDRjYi05MDM3LWFkODE0YzE3N2I2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBAJlMpiwSEbvm0CfwTEbWo5ZK WqVHuJbYFm5BRGQv0sTbZVj3Pb0T31t2FgrZjYUp0gdVZfNqOMbQkNUTEd/ELp4r qpepuUjIErBk6DjMGsplOc0wqNosnnSUhcweYrOIRYePjXwR+kVE2LA/mpdPTOTL s2qto2VmAy8g8As4sGutt5akE9ee1FnNdXwREirP4qCtThs9yFoQuTFJ6MnpWB4T ZnrN5x/2BntV/I0WIC1Cp8GglWq4uOBdH6mhXEJkr6okljFsEe+7GMKcU/iTorZl 9z+DWVDxSZ2Bfj20iWLS928Mlzqvb1PJkfGGCnAisyDXMVVYnI5BoycbzHjL3VM= -----END CERTIFICATE-----Generated at Thu Nov 5 09:06:24 2026 by rpki-client