$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa File: 320ac659-3ec0-4c68-b834-ada37188b990.roa (raw, json) Hash identifier: uTHDPWCv8zF2dil74b7MxvWkeU/4amddIL0QoZ5xXMc= Subject key identifier: 3E:A5:81:2E:19:84:EF:0B:0C:11:76:AA:37:E3:6E:6A:6F:E9:7C:82 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 381D99D8E5DFC8E75140AA8FB472799B93DE7433 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa Signing time: Sun 11 Oct 2026 15:08:51 +0000 ROA not before: Sun 11 Oct 2026 15:08:51 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:99:d8:e5:df:c8:e7:51:40:aa:8f:b4:72:79:9b:93:de:74:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:51 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=604220087f4511ee7f68731b2a7f7964b7e5c50eab61109bceb328eb4114f8a1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:be:77:6b:ef:aa:51:4a:74:43:74:f7:f1: bc:90:cf:45:ea:52:26:31:bd:07:12:eb:06:9a:89: e4:bd:21:56:e9:c0:79:75:fc:b5:04:6a:28:a2:3a: f7:72:e0:12:4e:ea:26:ec:55:d5:2f:46:ef:a3:e6: 31:c4:73:23:e6:2f:e2:5a:5b:82:05:fc:d9:c5:13: ea:d1:c7:4c:57:fa:56:33:16:a1:7c:96:5c:d1:b4: 1b:a1:c9:9e:a8:f2:db:4f:40:36:9a:dd:96:5f:3c: f0:5a:dd:e5:9d:2e:f6:c7:c0:6a:e7:28:0b:c9:f6: 64:10:5d:4d:00:db:4a:f8:4f:55:6c:f0:ef:c7:2e: d4:a0:f6:8c:17:f3:70:65:7a:da:80:cd:2c:60:42: 44:1a:f3:fd:af:bf:bf:ef:81:4c:91:a1:76:ae:9a: 63:75:2e:16:c1:5e:87:cd:ac:f5:69:e2:88:2c:e1: fe:fe:6c:30:b0:b5:99:b0:12:6b:30:74:e8:b2:c5: ea:03:92:b5:27:4d:14:5d:1a:11:9c:33:da:6a:c7: ce:7e:fb:dd:19:bb:ef:94:aa:05:6d:b4:d0:6e:7b: 72:56:15:0b:aa:8d:20:75:26:d3:20:d0:50:77:d4: 3a:15:7f:fd:a0:3b:6d:7a:18:cd:22:48:49:05:97: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A5:81:2E:19:84:EF:0B:0C:11:76:AA:37:E3:6E:6A:6F:E9:7C:82 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610e::/48 Signature Algorithm: sha256WithRSAEncryption 6f:b0:eb:33:3a:55:28:45:b1:29:bf:e4:db:7c:c0:bc:78:ab: e6:18:e2:4c:da:bb:8d:87:e2:a4:bb:07:13:9b:a4:75:f3:8d: 35:db:4b:77:2e:c8:a8:42:a8:77:df:e4:ba:1b:ba:95:19:40: 86:17:39:50:d5:a2:87:19:e0:94:77:06:c6:ac:8e:58:29:fe: 63:fa:44:2f:c5:a1:f5:e5:c7:03:bb:58:ea:08:e3:1a:a5:db: d7:4f:56:6b:eb:6e:66:2d:42:06:91:aa:4b:f1:47:fd:02:60: fc:09:a1:d4:4f:10:ce:f2:2a:76:0b:5c:ca:2a:9c:ec:cc:f0: a5:cc:82:fb:a9:da:25:e3:44:72:a1:ab:1f:e0:4d:12:fa:79: 91:f7:d3:7a:a2:54:5a:bd:0d:d9:ab:63:18:11:50:3e:68:04: 89:43:19:81:f0:8e:ca:6f:19:31:8b:c4:d2:84:22:04:40:b4: 51:88:10:e3:a7:17:b3:55:4e:96:35:1f:8f:10:a5:78:2e:a2: 57:83:bd:b2:dc:25:b6:a2:6d:ec:03:8e:b2:37:e4:76:f4:11: 88:a2:20:ac:af:ed:e7:70:89:d0:bf:e6:cd:d2:39:f9:f6:83: a0:a6:33:0f:3b:c1:3d:aa:ec:a1:68:cb:36:d3:b0:f6:0c:6b: 26:14:22:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOB2Z2OXfyOdRQKqPtHJ5m5PedDMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODUxWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDQyMjAwODdmNDUxMWVlN2Y2ODczMWIyYTdmNzk2NGI3 ZTVjNTBlYWI2MTEwOWJjZWIzMjhlYjQxMTRmOGExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFR753a++qUUp0Q3T38byQz0XqUiYxvQcS6waaieS9IVbp wHl1/LUEaiiiOvdy4BJO6ibsVdUvRu+j5jHEcyPmL+JaW4IF/NnFE+rRx0xX+lYz FqF8llzRtBuhyZ6o8ttPQDaa3ZZfPPBa3eWdLvbHwGrnKAvJ9mQQXU0A20r4T1Vs 8O/HLtSg9owX83BletqAzSxgQkQa8/2vv7/vgUyRoXaummN1LhbBXofNrPVp4ogs 4f7+bDCwtZmwEmswdOiyxeoDkrUnTRRdGhGcM9pqx85++90Zu++UqgVttNBue3JW FQuqjSB1JtMg0FB31DoVf/2gO216GM0iSEkFl+oRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPqWBLhmE7wsMEXaqN+Nuam/pfIIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMGFjNjU5LTNlYzAtNGM2OC1iODM0LWFkYTM3MTg4Yjk5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ4wDQYJKoZIhvcNAQELBQADggEBAG+w6zM6VShFsSm/5Nt8wLx4 q+YY4kzau42H4qS7BxObpHXzjTXbS3cuyKhCqHff5LobupUZQIYXOVDVoocZ4JR3 Bsasjlgp/mP6RC/FofXlxwO7WOoI4xql29dPVmvrbmYtQgaRqkvxR/0CYPwJodRP EM7yKnYLXMoqnOzM8KXMgvup2iXjRHKhqx/gTRL6eZH303qiVFq9DdmrYxgRUD5o BIlDGYHwjspvGTGLxNKEIgRAtFGIEOOnF7NVTpY1H48QpXguoleDvbLcJbaibewD jrI35Hb0EYiiIKyv7edwidC/5s3SOfn2g6CmMw87wT2q7KFoyzbTsPYMayYUItI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:31:58 2026 by rpki-client