$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa File: 21659f7e-dfb0-401c-964b-6f52493a3df0.roa (raw, json) Hash identifier: g7ApVQoWMWs2B8bNM8CKS19Zo4TiiZiqDbMd7aU4u5s= Subject key identifier: B6:E3:9C:15:2A:9C:3B:45:FF:B1:D7:CD:40:FF:54:4B:CD:57:41:8C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0783CE620B8EAA388EC01B4B82AD1FBB17E49E80 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa Signing time: Sun 11 Oct 2026 15:08:29 +0000 ROA not before: Sun 11 Oct 2026 15:08:29 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:83:ce:62:0b:8e:aa:38:8e:c0:1b:4b:82:ad:1f:bb:17:e4:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:29 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=fbd818b1a9bb76588bb07ebfe9c0ed8984304c0cd3e0ff783d721bfc9cd79599, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:72:f6:ee:2b:8f:3b:1d:f1:57:53:f0:34: 03:d8:fe:b5:6f:95:2c:3a:89:05:0c:49:9a:c0:9c: 1d:0f:da:02:a1:08:d7:0a:7b:3c:0c:ec:e9:df:f4: 98:4a:03:ed:54:b7:4f:2b:bf:95:20:ae:b1:2b:77: e1:21:3c:d3:fb:dc:28:ff:21:3f:f9:db:51:fb:6d: 10:f6:3b:ad:78:59:a1:6d:24:02:7b:4c:e3:9d:d5: 19:97:ad:1c:22:43:c3:5c:6d:d2:ac:1f:ec:ba:0c: 91:1f:7b:56:7d:b1:9d:e9:50:77:28:aa:bb:be:31: 17:4f:66:22:47:c0:6e:ea:9f:3d:71:4e:a7:d3:7a: 5a:43:ba:a9:ae:0e:6a:61:54:3f:60:6f:fa:b3:36: 66:f9:43:e5:58:a1:1e:05:fe:9a:90:55:8d:ee:86: b8:56:14:69:90:4a:c7:2d:a4:ee:84:ea:4a:66:e3: 90:bb:64:78:f9:01:11:c7:0d:63:e6:29:01:4b:df: a5:7b:aa:1c:49:5e:3f:15:8f:22:ad:af:a8:35:d2: ce:59:51:ea:20:e4:70:f6:27:ae:88:fd:43:e4:1e: a4:b9:0c:6e:b6:4c:0e:32:e8:cb:da:ac:ca:66:52: 5c:47:8e:0c:cf:e5:2f:bd:89:54:47:19:4f:c4:5f: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:9C:15:2A:9C:3B:45:FF:B1:D7:CD:40:FF:54:4B:CD:57:41:8C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 44:4c:ac:cd:a1:6f:d5:79:4f:f1:c2:6c:d6:74:52:f6:95:f5: 14:d5:2b:ed:1b:de:01:cd:4d:e5:9d:06:9e:7d:f0:61:2e:27: ac:12:21:95:27:29:5f:b6:fe:e4:93:de:9b:0a:03:9a:a0:f3: 26:46:93:5a:63:e0:29:71:b5:4e:fa:21:15:a9:dc:96:52:fd: 32:4e:22:3f:d9:89:c8:0a:7d:28:bd:8f:3c:dd:41:aa:25:df: 98:6b:a2:09:a8:62:68:c6:82:a8:63:4c:6f:cf:ad:9e:06:14: a9:83:f9:98:8e:d7:f0:dd:fd:06:d8:5a:d8:77:ad:6c:ac:16: 27:cb:b9:bd:46:5e:35:3e:3a:a0:4b:b0:2d:a3:b9:66:39:5e: d6:42:11:e0:95:71:cd:56:85:36:3b:c3:8f:cb:71:fb:ef:e7: 99:3e:7b:8d:de:16:92:4b:70:36:f7:e9:68:b4:ce:03:87:79: 25:8b:0f:64:fc:39:22:1b:4e:64:02:3a:0f:28:46:d0:4e:08: f7:34:ae:6b:bd:fb:81:03:b9:63:2e:bc:5d:5f:82:4e:7c:13: 99:11:4b:b8:c4:22:bc:e0:d3:53:ae:32:39:eb:d3:64:5c:8a: 3a:7f:fd:21:e5:90:4c:6d:1b:d2:b1:83:ea:3a:f4:ab:9a:41: 5e:f5:e3:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB4POYguOqjiOwBtLgq0fuxfknoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODI5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmQ4MThiMWE5YmI3NjU4OGJiMDdlYmZlOWMwZWQ4OTg0 MzA0YzBjZDNlMGZmNzgzZDcyMWJmYzljZDc5NTk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbpHL27iuPOx3xV1PwNAPY/rVvlSw6iQUMSZrAnB0P2gKh CNcKezwM7Onf9JhKA+1Ut08rv5UgrrErd+EhPNP73Cj/IT/521H7bRD2O614WaFt JAJ7TOOd1RmXrRwiQ8NcbdKsH+y6DJEfe1Z9sZ3pUHcoqru+MRdPZiJHwG7qnz1x TqfTelpDuqmuDmphVD9gb/qzNmb5Q+VYoR4F/pqQVY3uhrhWFGmQSsctpO6E6kpm 45C7ZHj5ARHHDWPmKQFL36V7qhxJXj8VjyKtr6g10s5ZUeog5HD2J66I/UPkHqS5 DG62TA4y6MvarMpmUlxHjgzP5S+9iVRHGU/EX1/bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtuOcFSqcO0X/sdfNQP9US81XQYwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIxNjU5ZjdlLWRmYjAtNDAxYy05NjRiLTZmNTI0OTNhM2RmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBAERMrM2hb9V5T/HCbNZ0UvaV 9RTVK+0b3gHNTeWdBp598GEuJ6wSIZUnKV+2/uST3psKA5qg8yZGk1pj4ClxtU76 IRWp3JZS/TJOIj/ZicgKfSi9jzzdQaol35hrogmoYmjGgqhjTG/PrZ4GFKmD+ZiO 1/Dd/QbYWth3rWysFifLub1GXjU+OqBLsC2juWY5XtZCEeCVcc1WhTY7w4/Lcfvv 55k+e43eFpJLcDb36Wi0zgOHeSWLD2T8OSIbTmQCOg8oRtBOCPc0rmu9+4EDuWMu vF1fgk58E5kRS7jEIrzg01OuMjnr02Rcijp//SHlkExtG9Kxg+o69KuaQV71494= -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:51 2026 by rpki-client