$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa File: 2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa (raw, json) Hash identifier: 6h44GxarXWEw/o/KIm2532YF4qIrtHwd6ywq0Npzt/s= Subject key identifier: 58:62:0D:F9:E4:41:E9:16:FE:51:F1:65:2E:43:5C:D3:F2:44:C4:70 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 51252F742ABE9AF6A45AB44F1B2ABE662A962621 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa Signing time: Mon 26 Oct 2026 04:20:39 +0000 ROA not before: Mon 26 Oct 2026 04:20:39 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:2f:74:2a:be:9a:f6:a4:5a:b4:4f:1b:2a:be:66:2a:96:26:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:39 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=0e3cb2d35f20ef14f3aeaf976a600816d67863ed59f205ab981fac9edffec240, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:3e:26:ad:46:7b:c1:af:60:4c:36:96:bc: e4:ae:ec:5d:ff:3c:95:33:d9:92:23:01:d1:bb:36: 59:b7:18:2b:67:be:5e:af:e0:51:27:03:dd:30:48: f9:7e:0c:b4:d4:f8:50:88:85:ab:31:7a:d8:90:cd: fe:b3:3a:d0:de:ff:e5:68:a0:a3:54:22:db:bd:60: 58:6a:6d:6f:2a:fd:9f:ae:d4:51:5f:2b:0c:5f:84: 6d:fc:4d:9f:ce:80:26:43:ba:ae:de:76:9c:ee:ef: 7b:9a:e2:69:ab:0c:dc:f9:03:ef:82:ec:3b:c6:ae: e5:ea:ac:9f:2f:ea:4a:b5:bc:1f:b1:ba:e7:42:00: 6e:a5:c4:59:01:35:66:cd:13:db:b1:70:c6:1b:da: a1:18:52:db:eb:9f:f7:c1:b8:f2:f7:d0:9d:b0:13: 06:06:ae:d4:3b:44:6f:13:6e:d0:6b:9e:6a:96:38: de:fe:e1:32:3f:80:da:25:63:88:cb:1b:1f:1f:f7: 3d:c0:e4:e2:a2:72:af:53:d4:dd:07:c5:5e:07:75: f6:b8:54:5b:16:27:93:2c:02:5c:d3:87:a1:1a:9c: 14:7f:7e:aa:fc:d6:0f:41:30:f7:8b:e3:96:31:0e: 1a:6f:7f:c0:3b:31:ee:06:de:93:85:81:8e:db:2c: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:0D:F9:E4:41:E9:16:FE:51:F1:65:2E:43:5C:D3:F2:44:C4:70 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/40 Signature Algorithm: sha256WithRSAEncryption 92:0d:01:0b:97:92:06:bc:b7:63:18:04:1c:ce:31:ab:95:b3: 73:85:38:3e:d9:1f:cf:63:d1:24:3d:93:5a:50:ff:0a:3b:d4: 32:83:37:b2:08:17:cf:b3:ae:39:22:fe:91:e0:c5:65:85:2c: 61:15:24:7c:fa:46:66:de:46:b9:7d:9d:68:35:7b:77:38:24: c5:e9:b8:d4:3e:c0:5b:d8:84:73:b5:52:04:46:5e:d2:e8:5b: e5:dc:1e:cd:bc:e3:55:eb:7a:5c:29:61:ff:b9:4c:b5:81:8c: fa:94:be:67:93:e1:e1:42:fe:22:75:ac:1f:54:c9:0c:a9:00: c4:f2:68:09:5d:e2:7b:fb:c0:42:d7:f7:df:d0:b0:26:fb:e9: 52:ec:04:38:eb:39:b4:1c:b2:59:fe:ed:36:09:c4:22:08:d6: 6e:dd:0a:60:35:1e:06:77:08:f4:79:31:1c:0f:aa:74:8f:9a: 6a:3e:fe:0e:8e:b5:51:ae:ca:d5:5e:18:90:88:97:3e:85:36: b9:ac:cd:09:c5:a9:03:a9:03:26:47:ba:d5:ca:2e:66:67:a4: 0c:f5:9f:f7:26:24:ad:7b:44:68:0f:7e:66:c7:6c:27:d6:0a: 53:04:d7:2f:16:27:bb:50:4a:e3:60:54:79:8f:23:35:c1:4a: 0b:fb:1a:46 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUSUvdCq+mvakWrRPGyq+ZiqWJiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDM5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTNjYjJkMzVmMjBlZjE0ZjNhZWFmOTc2YTYwMDgxNmQ2 Nzg2M2VkNTlmMjA1YWI5ODFmYWM5ZWRmZmVjMjQwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYnz4mrUZ7wa9gTDaWvOSu7F3/PJUz2ZIjAdG7Nlm3GCtn vl6v4FEnA90wSPl+DLTU+FCIhasxetiQzf6zOtDe/+VooKNUItu9YFhqbW8q/Z+u 1FFfKwxfhG38TZ/OgCZDuq7edpzu73ua4mmrDNz5A++C7DvGruXqrJ8v6kq1vB+x uudCAG6lxFkBNWbNE9uxcMYb2qEYUtvrn/fBuPL30J2wEwYGrtQ7RG8TbtBrnmqW ON7+4TI/gNolY4jLGx8f9z3A5OKicq9T1N0HxV4Hdfa4VFsWJ5MsAlzTh6EanBR/ fqr81g9BMPeL45YxDhpvf8A7Me4G3pOFgY7bLPGbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWGIN+eRB6Rb+UfFlLkNc0/JExHAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI5MTBiY2ZhLTRiY2ItNDEyNS1hNTZmLTRiYjk1OTZmNWFkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBTANBgkqhkiG9w0BAQsFAAOCAQEAkg0BC5eSBry3YxgEHM4xq5Wz c4U4Ptkfz2PRJD2TWlD/CjvUMoM3sggXz7OuOSL+keDFZYUsYRUkfPpGZt5GuX2d aDV7dzgkxem41D7AW9iEc7VSBEZe0uhb5dwezbzjVet6XClh/7lMtYGM+pS+Z5Ph 4UL+InWsH1TJDKkAxPJoCV3ie/vAQtf339CwJvvpUuwEOOs5tByyWf7tNgnEIgjW bt0KYDUeBncI9HkxHA+qdI+aaj7+Do61Ua7K1V4YkIiXPoU2uazNCcWpA6kDJke6 1couZmekDPWf9yYkrXtEaA9+ZsdsJ9YKUwTXLxYnu1BK42BUeY8jNcFKC/saRg== -----END CERTIFICATE-----Generated at Tue Oct 27 00:03:15 2026 by rpki-client