$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa File: 37cee73e-f60c-422c-8edf-fbb308bfb117.roa (raw, json) Hash identifier: 9TfTgX39EbSmIc/W/uErYaBiVsocYWul01NwgQGdJTU= Subject key identifier: 3A:85:D7:67:F2:4D:3E:F9:CE:95:48:81:7D:87:C3:89:FE:AB:46:66 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6094A043B974DA852045A0963408B02008DC1124 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa Signing time: Mon 26 Oct 2026 04:20:53 +0000 ROA not before: Mon 26 Oct 2026 04:20:53 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:94:a0:43:b9:74:da:85:20:45:a0:96:34:08:b0:20:08:dc:11:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:53 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8b4153c702dafa32ebbcbe19fb20702a9f00e7df8d148a4d021ce6229bdf6149, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:43:b2:81:b8:3b:fe:d3:b5:61:0e:46:ff: f5:ba:9a:4e:9d:4a:a6:35:be:f2:b1:f5:d4:25:8b: bd:77:5e:94:de:84:0b:6b:60:be:79:96:12:48:a3: eb:e9:d6:0e:91:1f:3b:3f:e8:c1:57:0f:71:a1:72: af:12:f4:71:bd:9a:0b:dd:a3:09:b3:a2:c7:83:32: 71:5f:6c:b8:75:a9:b0:a7:10:27:18:89:07:b5:68: 6c:67:75:ee:ff:36:75:e3:1a:ac:67:8e:0f:21:99: e9:8d:63:0c:92:2e:73:0b:73:28:c0:c4:c8:cb:0d: 4e:90:16:31:7b:36:73:a6:48:1c:f4:c2:d1:07:07: f6:82:a5:61:f3:75:d4:ea:25:7b:45:11:b2:d7:ae: 89:3e:dd:fe:e8:53:f3:fe:33:7c:14:13:ac:53:b8: 2d:28:88:23:37:31:72:21:7f:2c:69:62:05:d4:21: 3c:59:8d:0f:83:c0:4f:14:c3:f4:32:4d:96:a0:05: 92:00:4a:a8:9d:67:74:3e:52:57:f9:c2:66:cf:2b: 90:1a:89:fe:5b:30:1e:c2:9c:5e:ca:5e:df:fd:74: 73:52:31:d5:db:b5:3d:42:c4:cc:ed:c3:28:04:0c: 10:8c:ab:25:f0:8f:b7:9f:b2:37:13:45:26:80:4b: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:D7:67:F2:4D:3E:F9:CE:95:48:81:7D:87:C3:89:FE:AB:46:66 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/40 Signature Algorithm: sha256WithRSAEncryption 72:0b:a5:7e:df:ff:d4:41:54:76:8a:37:96:a7:d3:30:74:2a: b2:10:f3:f7:70:34:f6:0a:92:e5:10:ea:8a:59:9f:7c:46:48: 0f:14:2d:58:e8:b3:ba:68:81:f7:74:50:27:15:00:d4:20:fd: 06:e7:77:bf:6a:c4:dd:e0:6d:c7:dd:39:c1:77:6c:fc:06:01: bd:9a:e8:bc:fa:a6:32:31:7b:d2:59:54:ab:d6:a0:81:78:74: 87:a6:8c:cb:2d:c7:65:cc:60:8d:31:a9:8b:7c:56:6d:46:ef: 94:a4:3a:7c:ef:eb:12:b8:e7:28:0d:e4:13:db:31:18:24:78: ab:14:38:80:a3:1f:01:4e:e2:38:db:11:e6:a5:b0:4e:46:a5: 37:12:99:e3:b1:75:46:6d:4f:b9:96:d9:64:43:ec:23:5e:89: 6c:56:43:63:11:98:89:f2:f5:ad:a5:2e:bb:63:6e:cf:b3:a8: 10:f1:ac:0b:e4:a9:b3:94:e9:37:0e:e9:39:d8:28:c7:d3:0c: b3:bc:c5:b3:7b:8e:f3:6e:63:89:41:79:28:cc:c2:53:99:fd: 09:65:cb:75:ec:28:2d:30:01:89:3c:f2:3e:e8:de:0d:ee:63: 47:17:f0:7d:6c:74:32:12:6d:28:8d:54:ce:f3:58:7d:89:44: ce:fe:21:a1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYJSgQ7l02oUgRaCWNAiwIAjcESQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDUzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjQxNTNjNzAyZGFmYTMyZWJiY2JlMTlmYjIwNzAyYTlm MDBlN2RmOGQxNDhhNGQwMjFjZTYyMjliZGY2MTQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFHkOygbg7/tO1YQ5G//W6mk6dSqY1vvKx9dQli713XpTe hAtrYL55lhJIo+vp1g6RHzs/6MFXD3Ghcq8S9HG9mgvdowmzoseDMnFfbLh1qbCn ECcYiQe1aGxnde7/NnXjGqxnjg8hmemNYwySLnMLcyjAxMjLDU6QFjF7NnOmSBz0 wtEHB/aCpWHzddTqJXtFEbLXrok+3f7oU/P+M3wUE6xTuC0oiCM3MXIhfyxpYgXU ITxZjQ+DwE8Uw/QyTZagBZIASqidZ3Q+Ulf5wmbPK5Aaif5bMB7CnF7KXt/9dHNS MdXbtT1CxMztwygEDBCMqyXwj7efsjcTRSaASyHZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOoXXZ/JNPvnOlUiBfYfDif6rRmYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3Y2VlNzNlLWY2MGMtNDIyYy04ZWRmLWZiYjMwOGJmYjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAcgulft//1EFUdoo3lqfTMHQq shDz93A09gqS5RDqilmffEZIDxQtWOizumiB93RQJxUA1CD9Bud3v2rE3eBtx905 wXds/AYBvZrovPqmMjF70llUq9aggXh0h6aMyy3HZcxgjTGpi3xWbUbvlKQ6fO/r ErjnKA3kE9sxGCR4qxQ4gKMfAU7iONsR5qWwTkalNxKZ47F1Rm1PuZbZZEPsI16J bFZDYxGYifL1raUuu2Nuz7OoEPGsC+Sps5TpNw7pOdgox9MMs7zFs3uO825jiUF5 KMzCU5n9CWXLdewoLTABiTzyPujeDe5jRxfwfWx0MhJtKI1UzvNYfYlEzv4hoQ== -----END CERTIFICATE-----Generated at Tue Oct 27 04:36:36 2026 by rpki-client