$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa File: ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa (raw, json) Hash identifier: HHQsf7f6W815TdRdJ0CFPwxTnx29g1C+3qM9n9G4188= Subject key identifier: 06:63:65:00:A2:B9:1E:2B:D1:01:19:F9:52:3D:95:00:59:50:25:49 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 39308EFA2DFABE59BF604D1BA5B2A05CDF37F2B3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa Signing time: Mon 26 Oct 2026 04:20:24 +0000 ROA not before: Mon 26 Oct 2026 04:20:24 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e300::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:30:8e:fa:2d:fa:be:59:bf:60:4d:1b:a5:b2:a0:5c:df:37:f2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:24 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=9742761fd17e6e21309ff2b29713803d79b5676a19a37e20d028fd9c00839ec9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:09:3e:95:62:cd:1f:15:a3:e6:0a:dc:44: 66:68:94:65:5b:9a:2c:ce:f2:04:18:95:eb:db:1c: 9f:8d:8a:3e:e3:67:dd:8d:60:12:83:49:1f:05:cf: 6a:53:2a:80:a3:de:45:b8:aa:c3:30:35:22:26:18: 15:4d:e4:aa:d7:de:e1:b1:c0:e6:4d:9d:c1:4b:46: 24:8f:c2:c6:17:22:dc:18:03:4b:43:50:16:d6:6e: 82:7a:4b:79:03:f0:d9:61:54:a1:fb:9d:b3:68:16: 62:a6:e7:79:ce:53:ac:21:e8:a8:76:93:4e:92:4a: 14:da:90:a5:84:85:68:c7:72:1b:b3:07:f9:03:ef: 2a:4a:68:77:44:b1:ac:e0:3d:df:c4:19:7b:d6:0b: 44:73:01:98:f2:ca:dc:f1:7b:04:d2:e7:fb:2d:2f: dd:5d:2d:ec:62:ba:38:8e:bd:c8:f6:5d:d4:4a:ed: 43:8c:18:ac:f0:fc:e5:2f:8a:54:e5:90:58:d5:e1: 84:bc:1e:8b:92:c2:5c:52:d9:c1:57:74:59:f2:b7: 81:e8:3c:4e:67:ad:48:c7:10:8a:7f:59:41:52:1d: 52:fe:17:a0:8c:14:af:55:ff:b3:17:72:f8:e1:19: c7:61:8f:2c:ed:59:13:82:f5:d7:71:23:ae:64:e3: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:63:65:00:A2:B9:1E:2B:D1:01:19:F9:52:3D:95:00:59:50:25:49 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e300::/42 Signature Algorithm: sha256WithRSAEncryption 15:af:ce:af:7d:92:2c:74:ba:21:12:30:76:82:f4:f1:ac:be: fe:3c:02:95:fc:4a:99:1f:04:2b:93:95:e8:55:87:f9:1a:30: f7:02:20:73:70:c9:0c:d6:29:22:1e:88:30:38:99:91:4b:60: cb:e9:11:6f:16:12:5d:00:72:2b:1b:60:e8:48:6e:5e:06:8e: 2f:07:b0:4e:13:a0:0a:94:b6:b4:fe:f7:14:b3:da:a3:62:68: 41:35:43:98:b1:58:d1:d7:db:61:7a:a1:8e:d8:89:a8:f8:61: 4e:8c:f3:1d:cf:2e:7b:2d:a1:81:ee:e9:3f:d5:77:1d:3c:f2: 37:55:06:48:74:da:41:35:10:03:2f:dc:2b:cc:7e:96:9a:f5: 5f:ed:74:8e:2f:7f:32:d5:6a:50:9f:cb:28:85:a1:26:1e:5f: 2f:2d:80:60:8b:7a:68:6f:b4:e0:04:1d:d7:8e:f8:71:f9:00: 62:2c:d7:8f:a3:11:be:5e:00:6a:46:ea:ba:7f:f4:0c:d3:1f: 8b:2e:a4:91:a7:b2:86:68:36:14:76:c6:6d:1d:07:7a:f1:82: 65:72:2a:cf:47:50:78:9c:ed:6c:a0:da:68:ef:90:24:8c:5d: a5:d9:06:08:40:e8:4f:78:06:a0:ab:51:ed:1b:7a:6b:3a:ef: a0:6d:ba:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOTCO+i36vlm/YE0bpbKgXN838rMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDI0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzQyNzYxZmQxN2U2ZTIxMzA5ZmYyYjI5NzEzODAzZDc5 YjU2NzZhMTlhMzdlMjBkMDI4ZmQ5YzAwODM5ZWM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKZwk+lWLNHxWj5grcRGZolGVbmizO8gQYlevbHJ+Nij7j Z92NYBKDSR8Fz2pTKoCj3kW4qsMwNSImGBVN5KrX3uGxwOZNncFLRiSPwsYXItwY A0tDUBbWboJ6S3kD8NlhVKH7nbNoFmKm53nOU6wh6Kh2k06SShTakKWEhWjHchuz B/kD7ypKaHdEsazgPd/EGXvWC0RzAZjyytzxewTS5/stL91dLexiujiOvcj2XdRK 7UOMGKzw/OUvilTlkFjV4YS8HouSwlxS2cFXdFnyt4HoPE5nrUjHEIp/WUFSHVL+ F6CMFK9V/7MXcvjhGcdhjyztWROC9ddxI65k4xvZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBmNlAKK5HivRARn5Uj2VAFlQJUkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VmNDkyNDdmLWUxYmItNGUwZS05ZGYwLTZlZGI5NzQwNGY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74wAwDQYJKoZIhvcNAQELBQADggEBABWvzq99kix0uiESMHaC9PGs vv48ApX8SpkfBCuTlehVh/kaMPcCIHNwyQzWKSIeiDA4mZFLYMvpEW8WEl0Acisb YOhIbl4Gji8HsE4ToAqUtrT+9xSz2qNiaEE1Q5ixWNHX22F6oY7Yiaj4YU6M8x3P LnstoYHu6T/Vdx088jdVBkh02kE1EAMv3CvMfpaa9V/tdI4vfzLValCfyyiFoSYe Xy8tgGCLemhvtOAEHdeO+HH5AGIs14+jEb5eAGpG6rp/9AzTH4supJGnsoZoNhR2 xm0dB3rxgmVyKs9HUHic7Wyg2mjvkCSMXaXZBghA6E94BqCrUe0bems676BtuhI= -----END CERTIFICATE-----Generated at Thu Nov 5 08:57:04 2026 by rpki-client