$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa File: eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa (raw, json) Hash identifier: U0hDe7udnaO4ppoIReJPbJXQETEQ4inUjACyTsK7MlI= Subject key identifier: 84:96:BB:EC:36:43:8D:1F:3A:9B:CC:12:FA:27:08:1F:23:EC:4F:36 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62EFB08017A780CD119A021E9F614B445E5BD0A4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa Signing time: Tue 27 Oct 2026 00:50:23 +0000 ROA not before: Tue 27 Oct 2026 00:50:23 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ef:b0:80:17:a7:80:cd:11:9a:02:1e:9f:61:4b:44:5e:5b:d0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:23 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=4a46f2546c3904176250e44b25ec009a7b4b5a875da6302d2662a5afcc80fdc4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:70:a5:dd:3a:41:16:08:92:42:10:3e:9c: 61:be:82:19:05:37:db:9a:fc:c2:0c:fc:e4:49:fd: ff:73:f1:1f:e8:7c:12:81:ed:51:19:70:1d:54:7a: 16:2f:01:e5:6a:76:2f:53:2e:b2:1f:25:df:43:50: c3:50:2f:cd:c5:01:67:2d:a5:76:4f:03:d3:18:25: a4:a5:81:5b:5e:a0:43:dd:3c:f9:e2:ac:b4:c6:a9: 84:88:1a:26:01:aa:1c:00:a1:5d:64:0b:33:83:4d: c2:07:86:72:3f:23:12:3d:db:6b:0e:eb:39:74:84: 65:b7:c2:37:94:53:8f:1e:b6:f4:12:25:6c:df:43: 1c:75:75:64:80:86:f5:c7:26:68:29:b5:f5:55:35: 40:3e:4c:b8:d0:9d:8f:40:d8:bd:9b:47:cc:a3:d5: 67:8e:70:24:99:ab:92:64:94:cd:f4:81:d5:7c:4e: ee:54:56:c3:af:d1:63:67:fb:cb:d0:48:07:86:da: 0b:db:6c:3b:9f:fb:94:c4:54:a9:e2:06:77:b0:f3: 1c:c5:80:63:a3:37:e5:f8:d9:3b:5a:ca:bb:7a:ab: 3f:4c:d1:5f:f5:26:db:91:43:41:9a:be:90:17:23: 3e:49:c5:eb:59:93:f4:7d:8e:61:54:7a:5c:8c:0e: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:BB:EC:36:43:8D:1F:3A:9B:CC:12:FA:27:08:1F:23:EC:4F:36 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10b::/48 Signature Algorithm: sha256WithRSAEncryption 81:4b:4b:12:c9:05:1b:bb:ff:0b:68:aa:36:48:db:d3:c6:b8: 67:08:b8:2f:46:83:d6:12:12:5c:d9:62:07:27:40:76:46:16: 88:a3:fa:ab:1c:60:53:24:11:f9:5f:0c:2a:e8:80:e2:ad:6e: b7:ba:d7:f1:45:12:2e:10:cc:3c:4d:85:a9:3b:03:b4:8c:52: 77:18:a3:17:75:ab:85:49:cf:86:f9:df:3c:81:6c:d3:87:3c: de:0e:35:69:ad:e2:ea:7f:35:42:bd:32:dc:03:21:d1:4b:56: c2:24:22:39:8c:98:bb:f5:1d:a8:f0:50:89:5c:da:e0:95:a6: ec:f2:f6:3a:bc:b2:00:e5:60:38:a1:70:42:0b:92:6c:be:3f: c3:e8:da:69:62:32:c6:10:db:13:c6:af:80:06:b2:dc:a4:f4: 2d:8f:35:d5:52:a8:e3:ff:67:fc:85:6f:be:d4:ed:ee:9e:9a: 0c:87:5e:0c:dc:c1:0e:94:3e:bd:22:0c:25:0b:c1:23:53:21: 9d:20:ed:85:1d:2a:c7:fa:f8:1d:35:ba:f9:02:81:03:93:2b: e2:86:10:b9:86:e5:40:9f:d9:dd:d0:53:b5:26:8e:56:31:79: e3:be:2a:3d:a4:3b:45:60:b3:b6:9d:ea:4a:ff:3b:05:a7:56: 71:f2:98:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYu+wgBengM0RmgIen2FLRF5b0KQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDIzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTQ2ZjI1NDZjMzkwNDE3NjI1MGU0NGIyNWVjMDA5YTdi NGI1YTg3NWRhNjMwMmQyNjYyYTVhZmNjODBmZGM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIinCl3TpBFgiSQhA+nGG+ghkFN9ua/MIM/ORJ/f9z8R/o fBKB7VEZcB1UehYvAeVqdi9TLrIfJd9DUMNQL83FAWctpXZPA9MYJaSlgVteoEPd PPnirLTGqYSIGiYBqhwAoV1kCzODTcIHhnI/IxI922sO6zl0hGW3wjeUU48etvQS JWzfQxx1dWSAhvXHJmgptfVVNUA+TLjQnY9A2L2bR8yj1WeOcCSZq5JklM30gdV8 Tu5UVsOv0WNn+8vQSAeG2gvbbDuf+5TEVKniBnew8xzFgGOjN+X42Ttayrt6qz9M 0V/1JtuRQ0GavpAXIz5JxetZk/R9jmFUelyMDv2tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhJa77DZDjR86m8wS+icIHyPsTzYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VlZTg0MmZmLTcyNzQtNGIzYi05OGI5LTRlMDAwOWVhOGM2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QswDQYJKoZIhvcNAQELBQADggEBAIFLSxLJBRu7/wtoqjZI29PG uGcIuC9Gg9YSElzZYgcnQHZGFoij+qscYFMkEflfDCrogOKtbre61/FFEi4QzDxN hak7A7SMUncYoxd1q4VJz4b53zyBbNOHPN4ONWmt4up/NUK9MtwDIdFLVsIkIjmM mLv1HajwUIlc2uCVpuzy9jq8sgDlYDihcEILkmy+P8Po2mliMsYQ2xPGr4AGstyk 9C2PNdVSqOP/Z/yFb77U7e6emgyHXgzcwQ6UPr0iDCULwSNTIZ0g7YUdKsf6+B01 uvkCgQOTK+KGELmG5UCf2d3QU7UmjlYxeeO+Kj2kO0Vgs7ad6kr/OwWnVnHymPo= -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:24 2026 by rpki-client