$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2bb2b637-18aa-4b1b-965c-314766b67523.roa File: 2bb2b637-18aa-4b1b-965c-314766b67523.roa (raw, json) Hash identifier: /aaJrq6TH3MyvEn+q+KgzHzHesDmIeaoUki4D0FxqWA= Subject key identifier: A2:67:21:FD:2B:34:25:34:F5:BA:B9:A3:1D:C0:64:B9:9E:69:89:10 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 78A78707C105B9037FDE0B382E08A75C35E49CF9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2bb2b637-18aa-4b1b-965c-314766b67523.roa Signing time: Wed 07 Oct 2026 21:01:50 +0000 ROA not before: Wed 07 Oct 2026 21:01:50 +0000 ROA not after: Tue 05 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7405::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a7:87:07:c1:05:b9:03:7f:de:0b:38:2e:08:a7:5c:35:e4:9c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 7 21:01:50 2026 GMT Not After : Jan 5 23:59:59 2027 GMT Subject: serialNumber=71965fd24df44fa81e499c6c1575ece4e6d34b9dfaded4c56c111e66e3f640bb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:01:e3:12:06:61:29:ac:29:8c:5a:a4:31: 04:36:24:0d:a0:45:4f:8c:fb:0f:93:aa:e3:82:3a: 23:f0:03:fc:44:68:94:d8:46:62:02:0c:37:9f:e4: db:f9:28:74:33:a7:65:16:34:90:8b:8a:f0:a0:cc: 87:c7:7d:e3:b5:e1:1f:19:68:4a:3d:fa:0a:1e:da: 7c:f3:7d:39:7c:ba:a3:93:05:52:c4:43:1f:6c:3a: d7:a7:4a:a8:42:6c:d9:7a:65:2c:8e:eb:a6:1e:37: 38:44:47:6c:f2:7d:b3:25:10:14:bd:4a:85:2e:46: a6:47:f0:66:4a:da:18:cb:8e:ec:cc:01:6b:a6:eb: ab:a2:28:d4:33:ea:7d:1c:1a:c4:61:c0:2a:32:a6: 27:23:dc:22:27:85:35:ef:3d:88:47:6f:b5:6e:de: de:a4:b9:0a:38:a2:0b:e8:51:66:f2:36:ec:51:c7: b9:18:d5:f9:53:63:93:1e:39:8f:df:9c:73:96:67: 9c:65:b6:43:d5:e1:03:55:d9:64:08:9b:f1:1f:8c: 93:c7:19:14:cc:5e:e8:6f:c0:98:13:e9:74:33:07: c7:8e:ca:3f:aa:ac:67:2c:a3:ee:75:7d:59:84:ef: ea:f4:81:ac:0e:f8:4e:fe:c5:4d:92:a1:4e:ac:9e: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:21:FD:2B:34:25:34:F5:BA:B9:A3:1D:C0:64:B9:9E:69:89:10 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2bb2b637-18aa-4b1b-965c-314766b67523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7405::/48 Signature Algorithm: sha256WithRSAEncryption 06:d0:b1:19:4e:f1:f3:9e:ca:f9:1d:f5:b5:4c:39:43:43:83: c5:5a:5a:36:3f:0c:f2:42:7e:1c:c6:92:44:1c:be:88:37:6e: e5:11:9b:8e:e6:e5:d3:2e:9b:d9:c8:c2:19:5f:9e:28:d4:d5: 80:6b:e7:5e:7c:ef:90:36:9e:fc:2f:f8:6d:93:cb:67:3e:8e: 25:7c:bf:ba:33:a3:1e:bc:37:6a:c4:a9:4b:50:0b:57:96:74: 18:3c:81:1f:dc:2e:af:d9:30:d6:c1:03:6b:46:1d:70:13:96: eb:7c:04:9b:00:1e:12:c5:40:1c:b2:20:a5:6c:2f:88:47:12: 88:21:3f:e3:9a:13:37:ca:02:a1:bb:ca:fd:58:7e:e4:7d:b9: 7f:f1:0e:92:ed:99:de:b7:db:13:43:ab:7e:31:6f:ba:48:8e: f1:59:99:1a:b7:5a:53:ed:b0:7a:45:f5:06:ca:59:41:d9:a3: 27:7b:57:cb:86:b6:82:7b:59:b5:ff:a5:ab:2f:18:db:3e:4e: 8f:0e:db:33:f9:50:94:21:86:c3:5e:7a:27:3b:8c:0c:22:5e: 12:c3:be:63:cb:e7:73:ab:8d:5f:e3:85:9e:67:06:dc:a0:91: a5:ef:81:64:9e:c3:51:cb:b3:94:65:3c:4d:cd:4b:1d:24:80: 5c:5d:ab:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeKeHB8EFuQN/3gs4LginXDXknPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA3MjEwMTUwWhcNMjcwMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTk2NWZkMjRkZjQ0ZmE4MWU0OTljNmMxNTc1ZWNlNGU2 ZDM0YjlkZmFkZWQ0YzU2YzExMWU2NmUzZjY0MGJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwawHjEgZhKawpjFqkMQQ2JA2gRU+M+w+TquOCOiPwA/xE aJTYRmICDDef5Nv5KHQzp2UWNJCLivCgzIfHfeO14R8ZaEo9+goe2nzzfTl8uqOT BVLEQx9sOtenSqhCbNl6ZSyO66YeNzhER2zyfbMlEBS9SoUuRqZH8GZK2hjLjuzM AWum66uiKNQz6n0cGsRhwCoypicj3CInhTXvPYhHb7Vu3t6kuQo4ogvoUWbyNuxR x7kY1flTY5MeOY/fnHOWZ5xltkPV4QNV2WQIm/EfjJPHGRTMXuhvwJgT6XQzB8eO yj+qrGcso+51fVmE7+r0gawO+E7+xU2SoU6snrqXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUomch/Ss0JTT1urmjHcBkuZ5piRAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiYjJiNjM3LTE4YWEtNGIxYi05NjVjLTMxNDc2NmI2NzUyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAUwDQYJKoZIhvcNAQELBQADggEBAAbQsRlO8fOeyvkd9bVMOUND g8VaWjY/DPJCfhzGkkQcvog3buURm47m5dMum9nIwhlfnijU1YBr515875A2nvwv +G2Ty2c+jiV8v7ozox68N2rEqUtQC1eWdBg8gR/cLq/ZMNbBA2tGHXATlut8BJsA HhLFQByyIKVsL4hHEoghP+OaEzfKAqG7yv1YfuR9uX/xDpLtmd632xNDq34xb7pI jvFZmRq3WlPtsHpF9QbKWUHZoyd7V8uGtoJ7WbX/pasvGNs+To8O2zP5UJQhhsNe eic7jAwiXhLDvmPL53OrjV/jhZ5nBtygkaXvgWSew1HLs5RlPE3NSx0kgFxdq/c= -----END CERTIFICATE-----Generated at Sun Oct 11 22:47:20 2026 by rpki-client