$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/36cbafb9-c0a3-4084-b564-14d6ec22edf8.roa File: 36cbafb9-c0a3-4084-b564-14d6ec22edf8.roa (raw, json) Hash identifier: msl/eLpsRSJyKgRnqPxqLqck6s6S5jLnRUIDJHF61FI= Subject key identifier: 68:AE:5F:A0:AA:94:F8:84:F8:5A:C3:E1:C6:86:87:0D:7D:05:7E:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CB2A459AD1495C0E52D020D07E31FAD9334141B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/36cbafb9-c0a3-4084-b564-14d6ec22edf8.roa Signing time: Wed 04 Nov 2026 14:42:43 +0000 ROA not before: Wed 04 Nov 2026 14:42:43 +0000 ROA not after: Tue 02 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f080::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b2:a4:59:ad:14:95:c0:e5:2d:02:0d:07:e3:1f:ad:93:34:14:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 4 14:42:43 2026 GMT Not After : Feb 2 23:59:59 2027 GMT Subject: serialNumber=4fc28d7eef0b6884edeed1ea5a68c62a844a611383c9c42d15156d91c1227ce7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:de:49:dd:ec:be:a4:e8:84:01:92:78:a2: 42:92:7a:cc:ab:36:38:cb:bf:74:91:25:28:00:fd: fb:da:8a:d2:e8:29:62:77:58:ad:50:60:87:51:04: e7:b8:de:d4:f3:54:74:1c:e0:7b:b3:d1:bb:6b:78: cb:10:ca:68:35:45:4b:f5:8e:20:3c:6d:88:1e:54: 97:07:1c:cc:fa:e2:ff:d6:ee:31:9f:73:64:04:e6: e7:d2:97:a7:ab:ff:43:31:e2:aa:6b:5c:d2:8c:5e: 8d:fb:7f:fd:de:3b:b5:63:a4:78:1f:e4:1b:79:1a: 09:f3:48:fc:3b:ce:2c:fa:3d:e6:46:2b:41:41:26: 7f:4b:d5:b1:d6:e2:3a:78:cb:5a:89:e7:31:ee:2d: c4:0f:a6:06:02:f0:39:67:ab:2c:20:9f:b4:cd:19: 0e:31:5b:bf:2c:3b:50:f5:de:0f:c7:74:8c:75:23: 0a:7c:f2:26:9e:ba:98:75:23:ef:92:c2:ac:e7:e4: 44:87:e0:ad:20:d6:53:7a:64:68:8e:b8:90:d3:d1: 7a:c0:c5:aa:5a:5d:af:69:0f:54:51:dd:05:91:8b: 1b:e8:1a:1e:9b:0c:af:98:32:5b:8c:38:2f:53:a8: ea:45:de:9a:ab:28:f2:dd:99:c7:88:50:ba:7f:84: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AE:5F:A0:AA:94:F8:84:F8:5A:C3:E1:C6:86:87:0D:7D:05:7E:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/36cbafb9-c0a3-4084-b564-14d6ec22edf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f080::/44 Signature Algorithm: sha256WithRSAEncryption 6b:2d:36:3c:d7:11:9e:a8:5b:3b:3c:9d:c8:79:67:88:9c:5f: 51:56:92:41:cf:00:2e:05:10:bc:a6:07:a7:7e:82:6a:6f:03: 4d:29:ee:cf:6e:69:f7:12:a1:f0:fa:73:c2:92:ec:45:6a:85: ef:c1:0f:29:77:cc:66:46:1e:03:57:7f:58:3f:51:35:4b:16: fd:dd:7a:cc:b7:7e:7d:0e:57:1b:67:0f:ee:a7:4c:94:97:4d: c5:da:3a:5b:0b:25:33:19:e8:15:42:72:39:fa:9a:ed:82:48: 77:1c:80:a5:d4:f5:5f:ba:ec:9b:93:83:97:42:40:b5:72:5a: 68:4f:ab:fe:da:69:f1:83:4c:34:3b:1b:ef:15:14:c5:27:66: 18:7a:c5:21:2e:f7:8e:66:7b:50:9b:f0:ec:ae:49:f9:f1:46: 6a:91:17:6c:be:fc:58:2b:fd:4d:40:a6:e6:7d:a1:63:f6:63: 1b:ec:61:3d:6f:89:75:e1:cb:41:4c:41:06:56:d9:5d:c5:ce: c5:97:3d:b6:74:8a:4b:10:69:21:0b:34:ec:bd:bd:94:23:cf: d9:f5:dd:13:41:1c:4d:ac:0e:fd:dc:9f:7c:b9:e9:ed:cb:82: 11:ea:78:01:a5:e3:96:a1:ad:0e:c1:50:8d:5c:6f:4a:55:b5: ea:46:6b:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfLKkWa0UlcDlLQINB+MfrZM0FBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTA0MTQ0MjQzWhcNMjcwMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmMyOGQ3ZWVmMGI2ODg0ZWRlZWQxZWE1YTY4YzYyYTg0 NGE2MTEzODNjOWM0MmQxNTE1NmQ5MWMxMjI3Y2U3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG4t5J3ey+pOiEAZJ4okKSesyrNjjLv3SRJSgA/fvaitLo KWJ3WK1QYIdRBOe43tTzVHQc4Huz0btreMsQymg1RUv1jiA8bYgeVJcHHMz64v/W 7jGfc2QE5ufSl6er/0Mx4qprXNKMXo37f/3eO7VjpHgf5Bt5GgnzSPw7ziz6PeZG K0FBJn9L1bHW4jp4y1qJ5zHuLcQPpgYC8Dlnqywgn7TNGQ4xW78sO1D13g/HdIx1 Iwp88iaeuph1I++Swqzn5ESH4K0g1lN6ZGiOuJDT0XrAxapaXa9pD1RR3QWRixvo Gh6bDK+YMluMOC9TqOpF3pqrKPLdmceIULp/hH2jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaK5foKqU+IT4WsPhxoaHDX0Ffs0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM2Y2JhZmI5LWMwYTMtNDA4NC1iNTY0LTE0ZDZlYzIyZWRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8IAwDQYJKoZIhvcNAQELBQADggEBAGstNjzXEZ6oWzs8nch5Z4ic X1FWkkHPAC4FELymB6d+gmpvA00p7s9uafcSofD6c8KS7EVqhe/BDyl3zGZGHgNX f1g/UTVLFv3desy3fn0OVxtnD+6nTJSXTcXaOlsLJTMZ6BVCcjn6mu2CSHccgKXU 9V+67JuTg5dCQLVyWmhPq/7aafGDTDQ7G+8VFMUnZhh6xSEu945me1Cb8OyuSfnx RmqRF2y+/Fgr/U1ApuZ9oWP2YxvsYT1viXXhy0FMQQZW2V3FzsWXPbZ0iksQaSEL NOy9vZQjz9n13RNBHE2sDv3cn3y56e3LghHqeAGl45ahrQ7BUI1cb0pVtepGa+A= -----END CERTIFICATE-----Generated at Thu Nov 5 15:01:34 2026 by rpki-client