$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa File: 14cb127f-8fa4-40c0-b06e-cd65866872dd.roa (raw, json) Hash identifier: 8oMGFbWm/kTanxpaADRlvpgXgn2uAdLRoBJGnfQilEA= Subject key identifier: FD:D5:0B:1A:C2:47:C5:B5:E8:7E:E3:A8:93:36:7B:9E:29:F3:E0:19 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 26B92FFAD6AE58E040F8117DE42D23D29E1FD6BD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa Signing time: Thu 15 Oct 2026 03:20:22 +0000 ROA not before: Thu 15 Oct 2026 03:20:22 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b9:2f:fa:d6:ae:58:e0:40:f8:11:7d:e4:2d:23:d2:9e:1f:d6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:22 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=8920fa2876ec006e9de5a684eb3b30d727edac630f33790793f0f7694d09afcf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:a7:54:20:b3:42:38:25:0e:47:86:5f:c9: f2:43:9a:2f:aa:7f:86:ad:88:cb:df:0e:69:b5:80: f5:3c:bb:1b:cf:e8:90:13:fa:59:15:ab:dc:02:00: b5:df:e2:ea:9b:4e:96:3d:1d:e2:83:e1:12:ec:f2: 71:2e:85:bd:6e:24:80:de:11:95:cf:ed:92:fe:11: 5d:85:21:c3:2c:22:c8:6c:f9:7a:8c:7d:1e:11:98: c9:2b:99:c2:3a:73:86:dd:53:19:08:7b:74:bd:ec: 2d:6f:37:1b:d2:f1:9c:61:ba:00:81:2d:7a:b4:f4: ee:1e:bf:ff:21:99:a3:4f:c9:9e:14:21:c2:03:5b: fb:dc:84:da:6d:97:1d:73:55:84:59:7e:d6:a5:89: e9:3a:a0:60:8b:fc:09:d2:0a:58:8b:e7:7c:93:8a: 04:54:fd:29:5a:7f:fd:c1:ce:48:84:23:8a:55:d9: e1:c2:ed:e4:59:f1:3a:96:3e:9b:ae:fe:32:f6:d2: 59:d5:d2:fd:53:66:ec:4b:0d:af:8f:61:a7:3a:69: 92:7f:72:f5:2f:7b:30:50:b3:f7:8a:fa:17:0e:3d: fd:82:5b:d1:5e:e2:19:b4:39:a4:14:8e:39:e6:46: fa:1d:b9:1a:b6:4a:9a:90:34:f2:4d:ab:2d:95:a8: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:0B:1A:C2:47:C5:B5:E8:7E:E3:A8:93:36:7B:9E:29:F3:E0:19 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 4a:5b:85:0e:28:17:df:17:4d:5e:90:69:51:3a:ef:43:09:9e: 1f:c6:91:79:5e:b6:51:09:22:64:3a:28:9e:38:d0:ef:c8:52: 41:11:85:81:95:39:dc:16:1e:31:e5:23:fc:b8:b8:14:8c:f4: 3c:82:c3:f5:1b:2b:f0:40:c1:76:dd:5b:31:46:b0:f6:a0:51: 4d:dc:89:48:a2:63:8f:f5:ab:18:d7:e4:b4:47:d5:25:5c:f4: 53:32:6f:4d:02:1e:f1:17:2b:fe:70:3b:33:81:ee:85:57:0d: c5:a9:5a:d5:eb:24:d3:8f:de:d6:08:63:39:8a:73:d9:fa:b3: 4b:85:33:53:8f:45:88:e1:ce:df:ca:e7:66:5c:88:73:3f:e3: 63:1b:17:00:9e:bc:48:fe:57:f0:c9:9a:69:2f:28:d6:d4:e7: 82:56:5f:5f:42:1c:7f:c3:c3:01:43:e0:96:a6:3f:f8:95:4e: 06:27:69:7f:85:78:f1:19:49:4d:90:47:e5:25:80:e2:2a:cf: 5e:fe:5d:7b:6b:48:ad:0d:df:60:74:31:96:da:4a:63:01:b9: 6f:03:c9:14:28:a4:93:5d:e6:17:f1:5e:2a:ba:ce:70:6b:96: b5:1e:74:29:51:d6:5e:63:ce:8a:c9:c1:9f:20:72:06:9d:e5: 53:23:8b:46 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJrkv+tauWOBA+BF95C0j0p4f1r0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDIyWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTIwZmEyODc2ZWMwMDZlOWRlNWE2ODRlYjNiMzBkNzI3 ZWRhYzYzMGYzMzc5MDc5M2YwZjc2OTRkMDlhZmNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClyadUILNCOCUOR4ZfyfJDmi+qf4atiMvfDmm1gPU8uxvP 6JAT+lkVq9wCALXf4uqbTpY9HeKD4RLs8nEuhb1uJIDeEZXP7ZL+EV2FIcMsIshs +XqMfR4RmMkrmcI6c4bdUxkIe3S97C1vNxvS8ZxhugCBLXq09O4ev/8hmaNPyZ4U IcIDW/vchNptlx1zVYRZftaliek6oGCL/AnSCliL53yTigRU/Slaf/3BzkiEI4pV 2eHC7eRZ8TqWPpuu/jL20lnV0v1TZuxLDa+PYac6aZJ/cvUvezBQs/eK+hcOPf2C W9Fe4hm0OaQUjjnmRvoduRq2SpqQNPJNqy2VqOMVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/dULGsJHxbXofuOokzZ7ninz4BkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0Y2IxMjdmLThmYTQtNDBjMC1iMDZlLWNkNjU4NjY4NzJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEASluFDigX3xdNXpBpUTrvQwme H8aReV62UQkiZDoonjjQ78hSQRGFgZU53BYeMeUj/Li4FIz0PILD9Rsr8EDBdt1b MUaw9qBRTdyJSKJjj/WrGNfktEfVJVz0UzJvTQIe8Rcr/nA7M4HuhVcNxala1esk 04/e1ghjOYpz2fqzS4UzU49FiOHO38rnZlyIcz/jYxsXAJ68SP5X8MmaaS8o1tTn glZfX0Icf8PDAUPglqY/+JVOBidpf4V48RlJTZBH5SWA4irPXv5de2tIrQ3fYHQx ltpKYwG5bwPJFCikk13mF/FeKrrOcGuWtR50KVHWXmPOisnBnyByBp3lUyOLRg== -----END CERTIFICATE-----Generated at Sun Nov 8 16:49:02 2026 by rpki-client