$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: c8gt7cDjyls/qY00twhwbj+s1PAYwjJ/L23jl3KqhOg= Subject key identifier: 1D:CD:AB:73:7B:EB:D5:05:A6:45:FD:BE:68:A5:29:43:D8:C1:80:6E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 64B62D9F02F622CC67B5684474FB85A89A60AD2D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Mon 26 Oct 2026 04:20:25 +0000 ROA not before: Mon 26 Oct 2026 04:20:25 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b6:2d:9f:02:f6:22:cc:67:b5:68:44:74:fb:85:a8:9a:60:ad:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:25 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ece31b46520f12347e3631427afbc5cd56e207f1b04fb179fb791ee234a37e9d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:c2:9b:97:96:67:11:cd:44:67:72:e8:b8: 59:7a:d2:bd:54:ab:ab:7b:21:a0:cb:e3:8d:b2:25: 4b:46:92:d8:18:c4:74:e5:49:e7:54:6d:0b:02:a4: e2:2f:50:2f:c3:eb:c7:af:94:4c:8c:b6:59:ff:cc: f1:cc:be:1e:71:3e:39:1e:5f:85:b3:28:f0:6c:c7: 4a:30:43:08:33:7a:8d:39:5d:9e:27:2a:c8:85:30: bf:f3:8f:42:1e:7d:cb:04:6e:c3:d7:73:43:1c:df: 87:76:81:8b:d3:2c:2d:b4:90:57:e7:25:e8:74:ce: b4:48:94:42:52:83:00:05:fe:bf:2a:10:0d:81:fc: 69:ea:cb:46:7e:e0:7a:6e:6b:f8:5f:20:b6:a4:83: 33:40:b7:44:11:04:ff:31:d6:e1:e0:5c:f2:fc:b7: 9b:b9:e3:d7:ca:04:50:e3:05:89:54:f5:fc:01:a4: c6:95:88:f1:fc:8a:25:1f:ff:be:7e:bc:dc:2a:7d: f4:ba:65:90:f1:8d:fa:a3:a1:9c:5c:68:49:02:a9: 99:3f:4e:1e:17:e8:8d:de:97:dd:88:7c:9d:31:60: 0a:4b:59:3b:b4:c5:1f:90:53:34:9d:fa:8b:6d:9f: 01:0d:8d:db:e0:c1:55:2d:c1:08:82:54:49:2c:dc: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:AB:73:7B:EB:D5:05:A6:45:FD:BE:68:A5:29:43:D8:C1:80:6E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 94:17:14:1a:c2:96:67:bb:35:f0:44:69:74:07:ef:b3:35:93: 99:6f:91:f3:4c:9b:8a:d6:44:d6:be:86:fd:d0:9d:2c:ee:ca: b3:a8:ca:c3:81:ae:87:a0:ce:0d:71:e4:47:a2:26:9c:74:76: 28:e1:d9:8d:40:52:cb:d7:3f:85:da:d8:af:14:0c:f2:49:11: 88:5b:f6:04:18:0b:d3:f2:29:71:86:14:6d:62:c7:bb:5b:56: ae:62:bf:ff:7f:2e:6b:d1:3d:72:19:b6:cc:e2:f0:80:1a:c5: 4f:ef:a2:80:f9:6b:26:d4:f2:fb:30:5b:89:7e:55:cb:c4:b9: 35:8b:b7:0e:d8:c0:bc:8e:fa:23:5e:d4:43:ab:e2:aa:54:c9: b0:13:b9:d2:98:91:df:1a:74:63:54:d3:75:0d:91:ec:63:47: 17:98:e6:89:ca:e9:b2:6c:17:6a:7c:e1:20:0f:9b:45:e2:ec: 0c:b6:ae:18:4a:eb:66:ba:ae:29:37:6c:ae:e4:c0:48:ea:ba: 5b:78:f6:f9:a9:6d:29:75:25:47:6e:4f:54:15:79:37:4b:b7: 45:91:f8:60:12:35:09:59:00:fb:ed:59:1f:32:76:1a:98:d4: 30:4b:76:db:75:c6:89:a9:e4:3f:bd:59:30:a8:f3:74:11:d1: 7c:4b:c7:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZLYtnwL2IsxntWhEdPuFqJpgrS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDI1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2UzMWI0NjUyMGYxMjM0N2UzNjMxNDI3YWZiYzVjZDU2 ZTIwN2YxYjA0ZmIxNzlmYjc5MWVlMjM0YTM3ZTlkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2S8Kbl5ZnEc1EZ3LouFl60r1Uq6t7IaDL442yJUtGktgY xHTlSedUbQsCpOIvUC/D68evlEyMtln/zPHMvh5xPjkeX4WzKPBsx0owQwgzeo05 XZ4nKsiFML/zj0IefcsEbsPXc0Mc34d2gYvTLC20kFfnJeh0zrRIlEJSgwAF/r8q EA2B/Gnqy0Z+4Hpua/hfILakgzNAt0QRBP8x1uHgXPL8t5u549fKBFDjBYlU9fwB pMaViPH8iiUf/75+vNwqffS6ZZDxjfqjoZxcaEkCqZk/Th4X6I3el92IfJ0xYApL WTu0xR+QUzSd+ottnwENjdvgwVUtwQiCVEks3G99AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHc2rc3vr1QWmRf2+aKUpQ9jBgG4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAJQXFBrClme7NfBEaXQH77M1 k5lvkfNMm4rWRNa+hv3QnSzuyrOoysOBroegzg1x5EeiJpx0dijh2Y1AUsvXP4Xa 2K8UDPJJEYhb9gQYC9PyKXGGFG1ix7tbVq5iv/9/LmvRPXIZtszi8IAaxU/vooD5 aybU8vswW4l+VcvEuTWLtw7YwLyO+iNe1EOr4qpUybATudKYkd8adGNU03UNkexj RxeY5onK6bJsF2p84SAPm0Xi7Ay2rhhK62a6rik3bK7kwEjqult49vmpbSl1JUdu T1QVeTdLt0WR+GASNQlZAPvtWR8ydhqY1DBLdtt1xomp5D+9WTCo83QR0XxLx5Y= -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:24 2026 by rpki-client