$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f86c4e27-f477-432e-bcb9-6211b5fb18c1.roa File: f86c4e27-f477-432e-bcb9-6211b5fb18c1.roa (raw, json) Hash identifier: FVY1bn+4MHyNx/oh/PoxxcJL8isARvi8RXqwIJwIhdk= Subject key identifier: D4:34:8D:75:50:CB:CC:D0:2D:58:48:11:8A:C3:F1:50:95:18:AB:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 53DA20A176C8F9CD57D3810E423786FF904E24F0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f86c4e27-f477-432e-bcb9-6211b5fb18c1.roa Signing time: Fri 16 Oct 2026 00:40:07 +0000 ROA not before: Fri 16 Oct 2026 00:40:07 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:da:20:a1:76:c8:f9:cd:57:d3:81:0e:42:37:86:ff:90:4e:24:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 16 00:40:07 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=0515c88a72dbb9bcec5735dd949f8657950da2676edf59aafd66032f66a078b9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:87:fc:1e:29:ff:93:87:c8:df:27:8b:c4: ff:f8:95:de:1b:77:1a:97:ee:7c:d6:f1:d9:15:d1: 6b:10:64:b3:af:6a:b7:c3:47:5d:cf:3e:e1:7f:2e: 39:72:1a:68:75:22:7b:21:a7:ae:6e:6e:d7:98:6a: f2:c6:1c:9a:be:2d:bc:27:cd:a2:0b:0c:f9:9d:ab: 33:5b:9f:6a:66:a4:6e:07:2e:6f:b7:2f:44:57:9c: 76:a7:10:9e:28:e3:a7:af:1e:cb:64:77:df:ed:61: 09:3b:1c:54:18:c5:cc:80:3a:0d:98:b2:ec:22:e5: 39:2e:ea:b1:9a:b0:0d:42:5d:db:41:e6:fc:0e:bd: 6b:01:72:34:12:4f:44:b9:57:63:06:f0:77:07:c0: af:70:db:82:0a:0d:96:4e:5d:4a:c8:10:64:25:51: 5c:fb:5a:7a:cc:8b:1a:25:42:07:fc:2a:41:50:28: b6:25:52:6c:82:76:79:85:ca:6a:df:e6:54:ec:8d: 10:7f:32:51:07:72:32:ce:10:b0:d8:df:9c:05:c7: 6b:0a:d9:64:54:e2:b1:8b:0f:0f:56:3f:f6:d3:5b: de:92:ea:f8:58:e4:dc:2d:cc:7b:db:bc:70:40:46: cd:2e:65:da:9a:12:4b:1a:bb:01:0e:93:99:f9:eb: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:8D:75:50:CB:CC:D0:2D:58:48:11:8A:C3:F1:50:95:18:AB:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f86c4e27-f477-432e-bcb9-6211b5fb18c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/47 Signature Algorithm: sha256WithRSAEncryption 4d:bf:60:fd:e1:7d:f8:40:bd:c4:e7:b4:fd:c2:b2:1f:ba:d3: 2f:e2:3c:94:1e:e8:c2:18:1b:18:37:b4:fe:03:71:d6:53:61: 9d:80:97:3d:3b:f6:2a:d8:c5:9e:ba:a4:57:3d:24:ed:c3:48: 47:d6:0f:76:d4:7d:69:ee:13:07:b2:6a:d0:f4:22:47:fd:79: 6b:2b:6b:06:e2:5d:da:84:c8:cb:20:a6:2a:3c:bd:96:30:7d: 44:a6:6b:33:d4:28:21:9d:70:29:67:ce:aa:9d:74:88:f0:19: f9:76:6f:64:b1:44:0e:ac:16:a7:0c:b3:5e:18:b2:5c:38:d9: 66:67:27:e3:7c:05:4d:ad:ae:52:cc:ac:cf:59:27:12:8e:2a: 12:f1:c2:bf:7d:82:5f:e1:0c:ec:1c:0b:68:be:8e:81:67:56: 32:06:14:8d:c5:1b:6c:8b:64:8a:13:61:c6:aa:2f:ea:c7:fa: af:71:2e:68:6e:83:d5:cb:1a:83:e8:4b:ed:c6:43:9c:f9:c5: d5:a2:42:42:d1:fc:65:68:9e:7c:8e:44:99:f0:ca:f0:1c:21: 66:5f:bd:c0:08:a0:5c:2c:1e:c8:39:26:b1:27:9f:f6:2b:c7: 6a:02:75:6b:9e:1f:65:93:25:17:3a:aa:80:fd:fe:8a:2e:b2: 6d:59:75:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU9ogoXbI+c1X04EOQjeG/5BOJPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE2MDA0MDA3WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTE1Yzg4YTcyZGJiOWJjZWM1NzM1ZGQ5NDlmODY1Nzk1 MGRhMjY3NmVkZjU5YWFmZDY2MDMyZjY2YTA3OGI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpOYf8Hin/k4fI3yeLxP/4ld4bdxqX7nzW8dkV0WsQZLOv arfDR13PPuF/LjlyGmh1Inshp65ubteYavLGHJq+LbwnzaILDPmdqzNbn2pmpG4H Lm+3L0RXnHanEJ4o46evHstkd9/tYQk7HFQYxcyAOg2Ysuwi5Tku6rGasA1CXdtB 5vwOvWsBcjQST0S5V2MG8HcHwK9w24IKDZZOXUrIEGQlUVz7WnrMixolQgf8KkFQ KLYlUmyCdnmFymrf5lTsjRB/MlEHcjLOELDY35wFx2sK2WRU4rGLDw9WP/bTW96S 6vhY5NwtzHvbvHBARs0uZdqaEksauwEOk5n567+TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1DSNdVDLzNAtWEgRisPxUJUYq8EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NmM0ZTI3LWY0NzctNDMyZS1iY2I5LTYyMTFiNWZiMThjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDycAAwDQYJKoZIhvcNAQELBQADggEBAE2/YP3hffhAvcTntP3Csh+6 0y/iPJQe6MIYGxg3tP4DcdZTYZ2Alz079irYxZ66pFc9JO3DSEfWD3bUfWnuEwey atD0Ikf9eWsrawbiXdqEyMsgpio8vZYwfUSmazPUKCGdcClnzqqddIjwGfl2b2Sx RA6sFqcMs14Yslw42WZnJ+N8BU2trlLMrM9ZJxKOKhLxwr99gl/hDOwcC2i+joFn VjIGFI3FG2yLZIoTYcaqL+rH+q9xLmhug9XLGoPoS+3GQ5z5xdWiQkLR/GVonnyO RJnwyvAcIWZfvcAIoFwsHsg5JrEnn/Yrx2oCdWueH2WTJRc6qoD9/oousm1ZdcQ= -----END CERTIFICATE-----Generated at Thu Nov 5 12:20:58 2026 by rpki-client