$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa File: f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa (raw, json) Hash identifier: 0IFK7WNh5xLR7432tRIc92rhXTrndXFnfhzqEGsJewE= Subject key identifier: 74:1B:B8:C9:68:D3:81:DA:38:F1:57:BF:17:21:A3:DE:65:15:51:B1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 090D8DA42869299A557AC3DF89F66C92EB5A485D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa Signing time: Sat 17 Oct 2026 00:10:05 +0000 ROA not before: Sat 17 Oct 2026 00:10:05 +0000 ROA not after: Fri 15 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0d:8d:a4:28:69:29:9a:55:7a:c3:df:89:f6:6c:92:eb:5a:48:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 17 00:10:05 2026 GMT Not After : Jan 15 23:59:59 2027 GMT Subject: serialNumber=0e505cd5c40ea3be5a737e2d34f8ffc2200c22ba782f1ec39de2287b3eceaf8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:4f:a2:c3:20:2f:7d:5b:a9:6f:f6:7e:68: ae:1d:d5:1c:db:e6:6d:35:72:36:62:a6:34:76:44: 3a:0f:16:90:54:ab:e6:ce:5b:07:22:13:09:f2:09: 37:e9:61:97:20:f0:a6:45:6b:c1:56:d2:ab:77:b1: 29:b6:67:20:fb:2d:b4:c3:57:f8:d6:ae:7b:a5:b4: e4:cf:28:77:07:67:63:3f:a5:ba:46:e3:4b:42:93: fb:22:b6:7e:93:99:a6:e3:6a:b8:d4:50:59:de:2a: c0:e9:04:6b:e0:18:31:e2:40:f5:72:f3:9d:ac:42: 04:81:d5:93:a3:a7:31:66:09:a8:41:90:af:fc:10: 0b:29:06:ee:cc:b3:c2:52:9e:bf:29:26:ce:37:1c: 70:65:2b:e3:01:28:02:db:ed:0d:e1:37:6b:de:45: fa:f5:0c:eb:70:17:06:10:5c:2e:47:d0:64:f9:cf: 8c:23:f7:71:c5:95:8c:41:4d:5f:85:b5:06:01:79: 1b:ff:9a:d5:1d:16:57:26:98:a5:62:fc:98:ab:14: e4:ef:05:60:65:e2:e6:1d:16:28:3a:83:11:5a:09: 51:66:fe:d7:a2:5d:59:d2:d8:4e:dd:7f:00:69:8e: f0:05:21:b7:16:be:19:d6:f9:68:8a:6f:d3:30:7f: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:B8:C9:68:D3:81:DA:38:F1:57:BF:17:21:A3:DE:65:15:51:B1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/47 Signature Algorithm: sha256WithRSAEncryption 26:df:65:d1:5c:74:ed:42:87:42:94:2c:7f:4d:e5:1b:cc:15: 28:ef:72:79:71:42:90:7d:f1:a8:6f:0f:6f:cf:58:92:3d:b7: 0a:21:47:e3:5a:c5:d1:aa:16:d4:c0:25:dc:58:a9:7b:cb:c6: fa:1d:da:22:9d:11:d7:cc:d5:4f:07:f0:f2:9a:7c:b2:d8:c7: 3c:8e:73:dc:52:9e:14:8f:08:46:7c:33:9f:84:da:c5:4a:08: 6b:17:bd:1c:51:71:16:f6:07:05:58:87:45:d2:95:89:e0:92: 9e:b5:f4:ca:83:90:b5:29:33:82:f2:68:8d:a2:80:c3:c1:a7: d0:e8:ec:16:b3:53:ff:fa:01:55:e5:21:a2:f5:48:fb:a9:30: 3d:53:e1:ff:85:79:e5:13:c0:e1:ba:9a:3c:43:e4:f9:f1:b2: 20:3e:a4:52:2c:6b:b2:a6:db:c4:e1:fa:95:6c:63:31:75:a0: 35:5a:02:b0:81:fc:a9:3a:5e:fd:67:d1:b3:b8:86:69:df:92: d9:5a:1a:3c:9d:a4:26:73:51:32:48:6d:80:79:13:43:e5:be: e1:40:9c:20:59:42:ba:ba:8a:80:7e:7b:58:bc:f3:90:68:5a: d4:e9:20:e7:03:84:92:84:9a:10:bf:f2:e8:82:bf:78:1a:dd: c7:e9:59:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCQ2NpChpKZpVesPfifZskutaSF0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE3MDAxMDA1WhcNMjcwMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTUwNWNkNWM0MGVhM2JlNWE3MzdlMmQzNGY4ZmZjMjIw MGMyMmJhNzgyZjFlYzM5ZGUyMjg3YjNlY2VhZjhjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt1U+iwyAvfVupb/Z+aK4d1Rzb5m01cjZipjR2RDoPFpBU q+bOWwciEwnyCTfpYZcg8KZFa8FW0qt3sSm2ZyD7LbTDV/jWrnultOTPKHcHZ2M/ pbpG40tCk/sitn6TmabjarjUUFneKsDpBGvgGDHiQPVy852sQgSB1ZOjpzFmCahB kK/8EAspBu7Ms8JSnr8pJs43HHBlK+MBKALb7Q3hN2veRfr1DOtwFwYQXC5H0GT5 z4wj93HFlYxBTV+FtQYBeRv/mtUdFlcmmKVi/JirFOTvBWBl4uYdFig6gxFaCVFm /teiXVnS2E7dfwBpjvAFIbcWvhnW+WiKb9MwfxRFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdBu4yWjTgdo48Ve/FyGj3mUVUbEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4MzcxNTI5LTVhNTItNGI5Yi1hZThiLWUwMGJhZTMwMzdhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPD78AAwDQYJKoZIhvcNAQELBQADggEBACbfZdFcdO1Ch0KULH9N5RvM FSjvcnlxQpB98ahvD2/PWJI9twohR+NaxdGqFtTAJdxYqXvLxvod2iKdEdfM1U8H 8PKafLLYxzyOc9xSnhSPCEZ8M5+E2sVKCGsXvRxRcRb2BwVYh0XSlYngkp619MqD kLUpM4LyaI2igMPBp9Do7BazU//6AVXlIaL1SPupMD1T4f+FeeUTwOG6mjxD5Pnx siA+pFIsa7Km28Th+pVsYzF1oDVaArCB/Kk6Xv1n0bO4hmnfktlaGjydpCZzUTJI bYB5E0PlvuFAnCBZQrq6ioB+e1i885BoWtTpIOcDhJKEmhC/8uiCv3ga3cfpWaA= -----END CERTIFICATE-----Generated at Sun Nov 8 16:43:55 2026 by rpki-client