$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0bdc1979-7849-448c-a848-b18ee3d19924.roa File: 0bdc1979-7849-448c-a848-b18ee3d19924.roa (raw, json) Hash identifier: nnSsOILDLGICZl/iNLtPeY0cc8ldBbIxr262trVpwhI= Subject key identifier: D8:05:9C:D8:36:3B:90:AF:1E:C0:22:ED:76:66:CF:41:CB:0C:42:30 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 54A51F84102E16DB25684E80B92B1990CBE1B95E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0bdc1979-7849-448c-a848-b18ee3d19924.roa Signing time: Fri 13 Nov 2026 21:54:48 +0000 ROA not before: Fri 13 Nov 2026 21:54:48 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:432c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a5:1f:84:10:2e:16:db:25:68:4e:80:b9:2b:19:90:cb:e1:b9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:54:48 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=2dbfe64317c7bc5e50cff66a966c3b0a3ac0348a105c0245e96c95af4710218f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:f9:b8:1e:3e:de:88:12:15:27:9f:97:48: 7c:ff:10:88:1e:78:c7:5c:a2:6c:5d:17:9a:00:15: b8:5b:1c:17:f1:2a:fc:11:ee:09:c2:d8:7d:61:ed: 4e:87:61:57:96:b5:9d:95:cc:e0:a5:28:c7:f1:bd: 3b:99:f5:68:29:65:ff:bf:9f:33:79:5b:1b:64:2a: 34:27:32:d6:ae:7b:92:93:88:5a:3d:41:79:db:83: 60:9f:9e:3b:ae:d5:fc:bf:2b:a7:be:0a:91:5d:55: 9a:84:64:81:b6:3f:82:89:65:2f:61:88:6b:8b:6a: ca:2f:a2:4a:b1:6e:1f:c9:f6:21:0a:ec:38:76:90: fe:f2:eb:87:d9:e9:7e:88:67:49:72:9e:9e:12:52: be:3d:0d:05:ee:e5:98:39:8e:79:44:cf:c9:57:24: 29:6e:22:7c:93:69:ea:e9:e3:22:c1:3b:7b:39:44: 5c:ce:6b:7a:08:e5:54:89:f6:ed:e1:c3:f0:1a:48: 0e:0e:5e:7e:c1:18:6c:f0:3f:f8:6c:90:49:eb:bc: 00:09:e7:c4:28:a0:a5:76:b9:58:d0:ea:6a:fc:d6: 40:07:5b:b2:88:05:53:2d:32:72:17:ae:fa:6a:42: 4a:aa:de:c7:bb:7e:29:ce:03:8f:44:07:fd:47:dd: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:9C:D8:36:3B:90:AF:1E:C0:22:ED:76:66:CF:41:CB:0C:42:30 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0bdc1979-7849-448c-a848-b18ee3d19924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:432c::/46 Signature Algorithm: sha256WithRSAEncryption 23:7a:93:7f:08:fa:f4:aa:b6:b5:4d:a0:03:ec:ac:ba:29:d7: 7e:33:db:85:41:03:3f:70:4d:5e:c3:e1:5d:3a:5f:81:d8:62: 63:b0:9c:0e:26:46:8c:e4:68:71:74:2e:ed:c9:f2:b8:77:73: 72:60:1e:84:ab:25:00:f0:3d:35:25:2f:e2:61:d7:d8:cb:b1: f2:a4:16:41:53:c3:4e:c5:a3:ba:46:41:c9:53:c0:ce:24:ee: 99:04:11:a4:51:7d:d0:48:a0:04:16:6e:1a:a2:4a:7e:28:91: d2:14:82:5d:83:c3:fc:d4:a7:c0:1f:59:a1:eb:65:af:34:ce: ed:e3:c2:3a:4e:fa:30:59:29:a3:8a:f9:9b:d8:68:7f:a0:14: bd:d5:9c:9b:f9:1c:33:c6:73:92:08:07:0b:d4:1b:d9:cb:f3: 82:18:36:ce:8c:05:a9:b9:f9:f8:02:25:72:9b:ea:71:83:b8: 07:43:60:9b:20:3a:fe:74:bb:bf:91:96:9c:bf:f2:44:af:3c: 9e:82:a6:78:da:5d:58:27:fa:0e:75:9c:49:b9:f6:3d:f2:53: 96:bb:92:b0:a8:8f:8c:21:79:8e:d1:7b:83:40:b8:4f:2e:81: c6:20:6a:af:44:da:78:3b:c6:29:f3:e7:d5:1f:e2:be:5f:52: 2a:f6:df:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVKUfhBAuFtslaE6AuSsZkMvhuV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjE1NDQ4WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGJmZTY0MzE3YzdiYzVlNTBjZmY2NmE5NjZjM2IwYTNh YzAzNDhhMTA1YzAyNDVlOTZjOTVhZjQ3MTAyMThmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2xfm4Hj7eiBIVJ5+XSHz/EIgeeMdcomxdF5oAFbhbHBfx KvwR7gnC2H1h7U6HYVeWtZ2VzOClKMfxvTuZ9WgpZf+/nzN5WxtkKjQnMtaue5KT iFo9QXnbg2Cfnjuu1fy/K6e+CpFdVZqEZIG2P4KJZS9hiGuLasovokqxbh/J9iEK 7Dh2kP7y64fZ6X6IZ0lynp4SUr49DQXu5Zg5jnlEz8lXJCluInyTaerp4yLBO3s5 RFzOa3oI5VSJ9u3hw/AaSA4OXn7BGGzwP/hskEnrvAAJ58QooKV2uVjQ6mr81kAH W7KIBVMtMnIXrvpqQkqq3se7finOA49EB/1H3bmJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2AWc2DY7kK8ewCLtdmbPQcsMQjAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiZGMxOTc5LTc4NDktNDQ4Yy1hODQ4LWIxOGVlM2QxOTkyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQywwDQYJKoZIhvcNAQELBQADggEBACN6k38I+vSqtrVNoAPsrLop 134z24VBAz9wTV7D4V06X4HYYmOwnA4mRozkaHF0Lu3J8rh3c3JgHoSrJQDwPTUl L+Jh19jLsfKkFkFTw07Fo7pGQclTwM4k7pkEEaRRfdBIoAQWbhqiSn4okdIUgl2D w/zUp8AfWaHrZa80zu3jwjpO+jBZKaOK+ZvYaH+gFL3VnJv5HDPGc5IIBwvUG9nL 84IYNs6MBam5+fgCJXKb6nGDuAdDYJsgOv50u7+Rlpy/8kSvPJ6CpnjaXVgn+g51 nEm59j3yU5a7krCoj4wheY7Re4NAuE8ugcYgaq9E2ng7xinz59Uf4r5fUir235M= -----END CERTIFICATE-----Generated at Sun Nov 15 05:43:25 2026 by rpki-client