$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/066d0ec0-96f2-4943-b819-db1307e44361.roa File: 066d0ec0-96f2-4943-b819-db1307e44361.roa (raw, json) Hash identifier: 70HEwat7V83a4jeJtvPJRFksD/j5l7sm9uUUQBzQCLo= Subject key identifier: CE:10:01:2F:C6:3F:CD:F7:3D:2B:3C:19:5D:00:F0:F3:0D:9F:F8:B2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D6F95074F5E78AF2B68385304F92DE3A60817A2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/066d0ec0-96f2-4943-b819-db1307e44361.roa Signing time: Wed 07 Oct 2026 21:01:49 +0000 ROA not before: Wed 07 Oct 2026 21:01:49 +0000 ROA not after: Tue 05 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6f:95:07:4f:5e:78:af:2b:68:38:53:04:f9:2d:e3:a6:08:17:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 7 21:01:49 2026 GMT Not After : Jan 5 23:59:59 2027 GMT Subject: serialNumber=1b43e0cf865192476e35e1dd29cdc834b4056a1ef5b995266ae922e074e56b74, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:c0:b4:a9:95:a1:d6:9d:62:27:1f:94:37: 0b:20:6b:c4:b8:9e:b4:94:6d:e7:f5:39:5c:05:27: 86:a3:58:47:a6:4e:64:d7:1b:d7:a1:88:67:62:55: 45:73:50:0d:f5:6b:15:61:0e:38:dc:ac:d5:3c:7e: 41:52:ed:94:ea:48:05:3b:b9:4b:0e:43:a4:22:c4: ee:32:2c:6c:10:9c:f0:99:51:15:ce:a3:e5:3f:b0: 18:29:f2:50:76:a6:b8:24:98:9b:f5:90:6d:4d:a3: 50:6c:7b:66:b5:09:02:2f:d0:35:24:62:29:18:87: 05:57:15:b1:58:b4:66:c6:a9:4d:40:7a:32:53:76: 47:b7:b1:7a:84:ec:2f:86:5a:f4:a3:39:83:42:e5: 3c:aa:24:54:b8:db:23:56:d2:93:a0:ee:d4:c9:96: 03:70:e0:50:d6:1b:89:75:8d:b1:56:3a:9d:a7:16: 09:c5:b1:73:03:08:8f:8e:c9:8c:20:7c:ac:72:37: 5c:2a:80:ea:4e:2b:76:a3:4f:04:52:7c:86:84:0b: d2:4c:3a:a3:5d:f9:9d:9f:dc:a0:6d:bc:16:12:a1: ba:01:f2:09:80:86:aa:cc:15:59:8e:50:2d:ba:ca: b1:99:11:c9:85:98:ff:ee:07:4f:46:27:c4:77:79: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:01:2F:C6:3F:CD:F7:3D:2B:3C:19:5D:00:F0:F3:0D:9F:F8:B2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/066d0ec0-96f2-4943-b819-db1307e44361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7403::/48 Signature Algorithm: sha256WithRSAEncryption 4b:85:80:fa:27:b6:69:e2:33:9b:75:28:75:19:de:6b:47:51: 2f:1a:1a:2e:48:4f:6b:49:7e:c7:6a:d2:f8:30:b0:e6:7c:ab: b2:d3:64:f7:4f:24:c6:0b:a9:2f:63:7a:4c:26:b5:b6:7d:e3: 10:b4:5b:e8:1c:e7:e8:ed:b5:e9:e8:d4:a5:99:77:23:bd:f7: 4f:ec:4a:8d:5d:36:78:62:74:ef:9e:14:39:ce:75:6f:01:13: 25:f3:8e:ab:70:29:d2:b8:e9:3a:b7:92:a2:94:37:ca:b5:43: d6:40:12:d3:45:59:57:e7:d1:84:f2:74:73:1d:c5:cb:cf:1a: 0b:6d:e6:32:2e:3b:ea:41:53:4b:6d:8d:21:4c:62:02:6e:82: 07:1c:4c:70:ac:33:65:3e:ac:9c:92:93:f9:e5:cb:4d:07:5d: 73:02:43:66:d6:28:cb:a5:17:ad:ed:7a:1e:74:85:3c:54:70: fa:df:59:bc:de:30:b4:e8:e7:f0:ac:59:af:15:d4:ac:66:b5: a8:39:18:e7:3f:0e:ea:5f:d1:e9:06:16:c2:37:bc:1c:fc:64: 85:82:49:53:c8:4d:9d:41:bd:91:5e:83:18:ac:8b:ce:0e:f8: 13:5d:ca:65:79:6b:d1:0c:1d:ea:67:b7:48:3a:69:7f:a3:41: 6a:36:04:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXW+VB09eeK8raDhTBPkt46YIF6IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA3MjEwMTQ5WhcNMjcwMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjQzZTBjZjg2NTE5MjQ3NmUzNWUxZGQyOWNkYzgzNGI0 MDU2YTFlZjViOTk1MjY2YWU5MjJlMDc0ZTU2Yjc0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1bsC0qZWh1p1iJx+UNwsga8S4nrSUbef1OVwFJ4ajWEem TmTXG9ehiGdiVUVzUA31axVhDjjcrNU8fkFS7ZTqSAU7uUsOQ6QixO4yLGwQnPCZ URXOo+U/sBgp8lB2prgkmJv1kG1No1Bse2a1CQIv0DUkYikYhwVXFbFYtGbGqU1A ejJTdke3sXqE7C+GWvSjOYNC5TyqJFS42yNW0pOg7tTJlgNw4FDWG4l1jbFWOp2n FgnFsXMDCI+OyYwgfKxyN1wqgOpOK3ajTwRSfIaEC9JMOqNd+Z2f3KBtvBYSoboB 8gmAhqrMFVmOUC26yrGZEcmFmP/uB09GJ8R3eXRzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzhABL8Y/zfc9KzwZXQDw8w2f+LIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2NmQwZWMwLTk2ZjItNDk0My1iODE5LWRiMTMwN2U0NDM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAMwDQYJKoZIhvcNAQELBQADggEBAEuFgPontmniM5t1KHUZ3mtH US8aGi5IT2tJfsdq0vgwsOZ8q7LTZPdPJMYLqS9jekwmtbZ94xC0W+gc5+jtteno 1KWZdyO990/sSo1dNnhidO+eFDnOdW8BEyXzjqtwKdK46Tq3kqKUN8q1Q9ZAEtNF WVfn0YTydHMdxcvPGgtt5jIuO+pBU0ttjSFMYgJuggccTHCsM2U+rJySk/nly00H XXMCQ2bWKMulF63teh50hTxUcPrfWbzeMLTo5/CsWa8V1Kxmtag5GOc/Dupf0ekG FsI3vBz8ZIWCSVPITZ1BvZFegxisi84O+BNdymV5a9EMHepnt0g6aX+jQWo2BAc= -----END CERTIFICATE-----Generated at Sun Oct 11 22:47:20 2026 by rpki-client