$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/10fa2c5e-0bd1-4e74-81dc-2292c747dd2a.roa File: 10fa2c5e-0bd1-4e74-81dc-2292c747dd2a.roa (raw, json) Hash identifier: hjxFkTPqSKC1QyxYSJIm6dzGJVVH0OjPhcxC5XWxc3k= Subject key identifier: 43:08:8E:C7:5B:33:02:CE:08:FD:91:26:9A:A2:82:25:B7:77:48:3F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1566F219067BD4E845565B3DC164FB1AE276129C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/10fa2c5e-0bd1-4e74-81dc-2292c747dd2a.roa Signing time: Fri 30 Oct 2026 19:32:49 +0000 ROA not before: Fri 30 Oct 2026 19:32:49 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:431c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:66:f2:19:06:7b:d4:e8:45:56:5b:3d:c1:64:fb:1a:e2:76:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:49 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=5d430fa1178dfe8ca71325f144a1af6b30d593d5c18f597a37c4dbc7945a5c14, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:c3:bc:c2:31:1d:93:a5:e6:f1:78:b9:ae: 2d:34:58:f1:e5:2a:f2:de:75:41:b0:1f:1b:06:78: b7:43:de:2b:c2:2b:14:17:ef:83:20:b0:4c:0d:d0: 0e:67:df:4b:2f:de:1f:63:e5:cb:9d:48:49:79:df: dd:ba:bf:10:69:d0:6f:22:55:7d:c1:f0:6b:6a:e6: f5:36:d6:d2:7f:28:d4:ca:51:69:76:d0:24:96:f8: 2a:45:ac:81:8d:be:21:4e:eb:7d:ef:e9:27:58:97: 07:ca:9e:68:17:c7:49:90:97:a7:f7:17:3e:02:f0: 5e:af:36:85:30:ca:4c:ce:05:10:e1:ef:b5:e9:1f: de:1b:c3:38:16:e8:71:29:41:c7:b3:48:f9:62:4e: 35:1a:0e:0a:b0:4c:e0:7f:37:e8:33:bb:6d:58:32: 6f:84:21:99:a3:f9:91:18:a7:6b:c2:9c:3c:c1:dd: 59:a3:1f:dd:98:26:02:93:1a:dc:f3:d9:4b:40:2e: bb:ce:2b:bf:08:d0:ad:9b:c5:d1:43:1f:b3:8c:55: 3f:5a:17:14:a7:d6:6a:7d:31:10:6f:ec:1b:64:2a: 7a:50:28:e8:e7:19:6a:7a:94:8a:5d:f0:12:87:76: 58:d5:72:d8:de:05:80:83:b3:55:49:29:32:9c:41: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:8E:C7:5B:33:02:CE:08:FD:91:26:9A:A2:82:25:B7:77:48:3F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/10fa2c5e-0bd1-4e74-81dc-2292c747dd2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:431c::/46 Signature Algorithm: sha256WithRSAEncryption 88:9e:24:54:b6:7b:6c:1d:c1:6d:b6:99:89:73:23:0b:30:ef: 8f:8c:e6:d6:cd:84:e2:ab:2f:70:09:56:5a:9b:e5:83:cd:e5: f1:85:8c:2e:0a:3f:a5:3f:5b:6e:6f:31:98:7e:7d:11:c7:0e: a9:94:88:39:23:af:b4:94:4b:5c:84:7b:2d:12:f7:08:8c:83: d6:b3:f9:cb:b3:45:e7:ad:1d:47:7e:28:8a:a4:4b:63:6e:0e: 0b:97:ce:45:01:ce:44:b5:81:7d:98:81:46:43:df:d7:23:e0: 3a:8b:c1:40:17:3b:92:d5:8a:6c:3d:95:7f:6b:9b:4b:6b:31: 21:a9:7c:a7:0e:58:25:73:23:a6:a6:bd:8f:50:08:b9:63:04: d7:42:b0:35:a2:f8:76:e5:1c:28:44:a5:9d:c5:50:75:c4:a6: 62:f5:be:74:da:82:bf:26:fe:1a:c5:e5:60:24:8a:0d:8c:e2: ed:de:27:41:ff:3a:15:5e:88:f7:c0:50:09:cd:d4:fd:66:10: dc:df:18:bb:e7:72:8f:d9:a2:cf:d8:73:37:8a:e0:5c:e1:7e: 6d:c3:e0:66:9f:03:a7:b1:08:a2:10:08:c5:dd:0c:06:90:e4: b8:61:df:1c:13:08:96:b4:5d:2d:ef:3a:26:0a:d5:e9:29:94: 3f:d7:5d:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFWbyGQZ71OhFVls9wWT7GuJ2EpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ5WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDQzMGZhMTE3OGRmZThjYTcxMzI1ZjE0NGExYWY2YjMw ZDU5M2Q1YzE4ZjU5N2EzN2M0ZGJjNzk0NWE1YzE0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbicO8wjEdk6Xm8Xi5ri00WPHlKvLedUGwHxsGeLdD3ivC KxQX74MgsEwN0A5n30sv3h9j5cudSEl53926vxBp0G8iVX3B8Gtq5vU21tJ/KNTK UWl20CSW+CpFrIGNviFO633v6SdYlwfKnmgXx0mQl6f3Fz4C8F6vNoUwykzOBRDh 77XpH94bwzgW6HEpQcezSPliTjUaDgqwTOB/N+gzu21YMm+EIZmj+ZEYp2vCnDzB 3VmjH92YJgKTGtzz2UtALrvOK78I0K2bxdFDH7OMVT9aFxSn1mp9MRBv7BtkKnpQ KOjnGWp6lIpd8BKHdljVctjeBYCDs1VJKTKcQYE5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQwiOx1szAs4I/ZEmmqKCJbd3SD8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEwZmEyYzVlLTBiZDEtNGU3NC04MWRjLTIyOTJjNzQ3ZGQyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxwwDQYJKoZIhvcNAQELBQADggEBAIieJFS2e2wdwW22mYlzIwsw 74+M5tbNhOKrL3AJVlqb5YPN5fGFjC4KP6U/W25vMZh+fRHHDqmUiDkjr7SUS1yE ey0S9wiMg9az+cuzReetHUd+KIqkS2NuDguXzkUBzkS1gX2YgUZD39cj4DqLwUAX O5LVimw9lX9rm0trMSGpfKcOWCVzI6amvY9QCLljBNdCsDWi+HblHChEpZ3FUHXE pmL1vnTagr8m/hrF5WAkig2M4u3eJ0H/OhVeiPfAUAnN1P1mENzfGLvnco/Zos/Y czeK4Fzhfm3D4GafA6exCKIQCMXdDAaQ5Lhh3xwTCJa0XS3vOiYK1ekplD/XXZM= -----END CERTIFICATE-----Generated at Tue Nov 3 22:21:12 2026 by rpki-client