$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa File: f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa (raw, json) Hash identifier: POn0LfRJLT6sRJGk+x2ZGz0Bg7WIXKz3j+xYg2rVkfQ= Subject key identifier: F8:23:40:00:BF:E6:7B:0F:D2:A9:66:FE:F7:C1:DA:14:E6:AB:7F:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 223C1DB7510AA641A99F3043EBACFCF1C20E200C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa Signing time: Sat 31 Oct 2026 00:02:44 +0000 ROA not before: Sat 31 Oct 2026 00:02:44 +0000 ROA not after: Fri 29 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3c:1d:b7:51:0a:a6:41:a9:9f:30:43:eb:ac:fc:f1:c2:0e:20:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 00:02:44 2026 GMT Not After : Jan 29 23:59:59 2027 GMT Subject: serialNumber=54bdcaf69263a09e45c59c25262b69c6f835de7fcedbae124fd47046f26e5648, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:ee:d7:62:7a:bf:af:e0:da:ff:01:b1:49: 61:9c:34:ff:26:0f:01:25:4d:ca:da:4e:d1:30:3c: 05:e6:e1:20:74:00:a0:a3:19:07:5a:09:84:81:f5: 0c:c1:04:33:cc:9e:55:28:82:c4:12:c6:fe:9d:91: e3:74:b3:19:84:ba:c5:ae:fc:25:ab:29:20:7e:2a: 35:c8:64:9e:5e:f2:8c:14:64:00:19:49:ab:93:35: dc:ab:42:4b:b3:c9:fa:c0:f7:0f:99:53:4b:41:ca: 29:82:36:82:5d:a4:b6:8e:d2:44:75:d5:b8:6b:02: b9:10:6c:a8:75:d7:db:2e:94:da:9c:20:17:61:24: 61:39:07:bc:f5:c9:bf:7c:6a:5f:40:07:7a:c1:21: b3:6b:cd:34:61:f4:17:64:e4:4f:9e:01:3d:d4:49: bd:b5:4f:58:90:11:09:7b:9a:c7:c0:92:05:ae:5e: 72:36:31:9d:31:54:b0:9b:00:23:ae:6a:68:26:92: 0b:f2:e9:5b:20:e0:70:53:bd:45:77:0a:98:43:b4: 92:56:0e:03:e4:7f:65:82:b7:b9:ec:b9:c1:ef:24: bb:55:47:6f:0b:71:6a:24:0e:21:5a:18:1d:7e:3b: 0e:fa:81:46:13:89:c8:60:c2:d8:49:be:79:37:a4: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:40:00:BF:E6:7B:0F:D2:A9:66:FE:F7:C1:DA:14:E6:AB:7F:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/40 Signature Algorithm: sha256WithRSAEncryption 19:3f:c3:52:69:fa:18:c4:3c:fd:5e:ab:89:30:fe:a0:d1:27: 6d:b7:7e:73:81:6e:65:89:ae:cb:c0:06:cc:cc:ed:74:a6:e4: b8:02:c8:36:44:7f:22:73:2a:95:44:1c:22:bc:ab:eb:2d:44: 56:a2:da:76:be:18:9d:84:9a:0b:a4:7c:ce:80:51:a3:37:a9: be:cf:21:9b:07:4f:1e:d2:77:4e:ca:ad:02:69:c0:99:a9:22: 13:c9:12:49:c3:3a:8f:6d:35:9d:13:ab:e5:0d:05:d7:5c:2a: 71:a0:92:0f:17:40:a3:42:41:9b:c6:9e:36:b9:31:35:6d:00: d8:a1:0a:cc:c8:75:75:2b:e3:df:e5:ba:cf:71:3d:89:7d:49: 6e:60:a6:b8:d5:03:33:7c:b7:9b:56:c3:4a:9d:71:2c:36:41: db:55:23:d5:f4:3b:03:40:23:4b:d7:be:7e:34:22:85:5d:7f: 22:4c:e9:a4:f4:5f:3c:f6:09:05:35:2b:cb:e1:1f:53:75:b0: bd:ff:2d:19:2d:5f:f3:4b:74:24:c4:66:90:d0:d9:4d:ed:86: 19:c1:8f:cc:ec:06:20:ed:fc:65:4e:0c:c0:a1:e6:ca:54:91: 88:4a:9c:0e:27:a7:be:17:b9:c9:cd:13:ce:1c:ab:21:c4:2d: 08:a8:63:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIjwdt1EKpkGpnzBD66z88cIOIAwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMxMDAwMjQ0WhcNMjcwMTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGJkY2FmNjkyNjNhMDllNDVjNTljMjUyNjJiNjljNmY4 MzVkZTdmY2VkYmFlMTI0ZmQ0NzA0NmYyNmU1NjQ4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8F+7XYnq/r+Da/wGxSWGcNP8mDwElTcraTtEwPAXm4SB0 AKCjGQdaCYSB9QzBBDPMnlUogsQSxv6dkeN0sxmEusWu/CWrKSB+KjXIZJ5e8owU ZAAZSauTNdyrQkuzyfrA9w+ZU0tByimCNoJdpLaO0kR11bhrArkQbKh119sulNqc IBdhJGE5B7z1yb98al9AB3rBIbNrzTRh9Bdk5E+eAT3USb21T1iQEQl7msfAkgWu XnI2MZ0xVLCbACOuamgmkgvy6Vsg4HBTvUV3CphDtJJWDgPkf2WCt7nsucHvJLtV R28LcWokDiFaGB1+Ow76gUYTichgwthJvnk3pBCNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+CNAAL/mew/SqWb+98HaFOarfwYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzODg1ZmZkLTI5NTktNDQ2Ni05NmNiLWQ2YjJkMWRjZmZhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwYTANBgkqhkiG9w0BAQsFAAOCAQEAGT/DUmn6GMQ8/V6riTD+oNEn bbd+c4FuZYmuy8AGzMztdKbkuALINkR/InMqlUQcIryr6y1EVqLadr4YnYSaC6R8 zoBRozepvs8hmwdPHtJ3TsqtAmnAmakiE8kSScM6j201nROr5Q0F11wqcaCSDxdA o0JBm8aeNrkxNW0A2KEKzMh1dSvj3+W6z3E9iX1JbmCmuNUDM3y3m1bDSp1xLDZB 21Uj1fQ7A0AjS9e+fjQihV1/IkzppPRfPPYJBTUry+EfU3Wwvf8tGS1f80t0JMRm kNDZTe2GGcGPzOwGIO38ZU4MwKHmylSRiEqcDienvhe5yc0TzhyrIcQtCKhj6A== -----END CERTIFICATE-----Generated at Thu Nov 5 11:21:47 2026 by rpki-client