$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa File: 37e5da86-98ab-4d9c-889e-6ab6e277d866.roa (raw, json) Hash identifier: CgYeXj25eFr+EoSFvIaD2kns9eZ8j920tZVUqu2bvEA= Subject key identifier: 88:2E:8E:2D:AD:C6:CF:D8:2C:C2:E8:CB:7A:A9:43:0E:DC:96:E9:22 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CE199AEBAFDC3203870D2DB97C5D927EB8F42C2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa Signing time: Mon 26 Oct 2026 04:10:49 +0000 ROA not before: Mon 26 Oct 2026 04:10:49 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e1:99:ae:ba:fd:c3:20:38:70:d2:db:97:c5:d9:27:eb:8f:42:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:49 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=99de01f1a5f0b5e30dcd31589701c44ebbcc1343fd23498b0fe4ed3a9bceacb2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:24:f5:cb:98:56:96:94:2e:0c:5d:69:bc: 2e:4f:b4:71:53:ad:4e:26:45:0f:53:99:35:33:70: 9a:f8:a1:b7:86:2c:d7:7d:42:73:cb:53:37:b6:18: 5c:b4:99:d6:cd:5f:b0:06:7c:ab:a7:2d:af:9d:fa: e6:aa:a1:77:60:32:d5:5c:74:2b:2e:6c:64:cd:a9: 46:c2:82:ff:09:e3:cc:03:a7:f8:33:2f:e7:44:c0: 33:35:7b:fe:0b:b2:00:14:c9:c3:bf:13:f2:65:c5: 69:e7:a0:b9:9e:3f:30:a6:93:34:c3:6a:c1:9a:29: a1:3c:35:3e:ee:09:16:28:4f:e9:ae:44:61:72:86: 66:84:99:25:1b:b9:ca:6c:3c:79:ab:10:45:9d:47: b9:c2:84:40:9c:54:7a:15:27:b2:e4:d9:ec:38:b8: 77:5d:2d:68:2c:7f:8b:f0:b3:ac:6c:0e:a5:52:26: fe:b1:91:99:04:fc:e6:82:a3:72:41:0c:74:f7:c9: 91:13:28:24:39:b1:0e:d3:3c:bf:68:50:fb:9c:43: 95:35:cb:c7:2b:bb:c2:ca:ed:6c:27:2c:72:b5:a1: c8:39:81:67:d2:bb:04:95:bc:8d:4f:2c:98:21:fb: a9:e1:4b:93:99:6f:1b:80:52:b7:58:de:65:aa:30: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:8E:2D:AD:C6:CF:D8:2C:C2:E8:CB:7A:A9:43:0E:DC:96:E9:22 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1::/48 Signature Algorithm: sha256WithRSAEncryption 56:10:d3:99:c3:6b:3b:a7:27:03:48:2e:9e:c0:2d:1e:7f:dc: 29:c8:48:c5:2b:93:55:fa:14:ce:8f:4c:5d:d1:95:6c:43:4c: ab:39:4d:4a:34:d3:65:c2:b6:95:bb:34:07:30:f6:04:ea:13: ec:dc:a1:f5:29:d7:11:87:36:ec:37:33:4a:0e:66:7a:25:1f: 86:93:2c:17:66:bf:95:88:70:d5:60:f4:60:72:03:65:c2:73: 3a:a3:1c:aa:9f:39:7d:5f:ad:fa:ce:74:36:64:03:6a:33:8a: de:2b:38:10:58:bd:29:e6:5e:a2:c5:b3:ed:73:e1:7a:7e:66: 4e:1d:16:0a:41:7a:f6:71:bd:1e:61:74:a2:d5:75:25:ac:7f: 31:84:04:e0:55:46:78:a9:74:a4:55:15:df:0a:01:71:17:32: a6:fd:8b:35:6d:1c:fe:0e:b0:5c:e0:e1:40:c5:66:80:e4:25: 93:71:65:8f:01:fc:97:01:fe:aa:af:fb:6b:fa:bb:38:f9:6d: c0:f9:a8:b9:aa:21:9a:fa:ab:74:49:1f:63:19:2e:d9:11:e9: ef:b3:93:c9:ed:7d:0f:b4:65:c6:d5:3f:cb:be:e3:35:f9:7d: 49:a1:27:cc:26:18:80:c4:be:b1:77:6e:3b:f2:ba:2a:8d:ac: ab:bd:e5:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfOGZrrr9wyA4cNLbl8XZJ+uPQsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDQ5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWRlMDFmMWE1ZjBiNWUzMGRjZDMxNTg5NzAxYzQ0ZWJi Y2MxMzQzZmQyMzQ5OGIwZmU0ZWQzYTliY2VhY2IyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaIiT1y5hWlpQuDF1pvC5PtHFTrU4mRQ9TmTUzcJr4obeG LNd9QnPLUze2GFy0mdbNX7AGfKunLa+d+uaqoXdgMtVcdCsubGTNqUbCgv8J48wD p/gzL+dEwDM1e/4LsgAUycO/E/JlxWnnoLmePzCmkzTDasGaKaE8NT7uCRYoT+mu RGFyhmaEmSUbucpsPHmrEEWdR7nChECcVHoVJ7Lk2ew4uHddLWgsf4vws6xsDqVS Jv6xkZkE/OaCo3JBDHT3yZETKCQ5sQ7TPL9oUPucQ5U1y8cru8LK7WwnLHK1ocg5 gWfSuwSVvI1PLJgh+6nhS5OZbxuAUrdY3mWqMB2HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiC6OLa3Gz9gswujLeqlDDtyW6SIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3ZTVkYTg2LTk4YWItNGQ5Yy04ODllLTZhYjZlMjc3ZDg2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAEwDQYJKoZIhvcNAQELBQADggEBAFYQ05nDazunJwNILp7ALR5/ 3CnISMUrk1X6FM6PTF3RlWxDTKs5TUo002XCtpW7NAcw9gTqE+zcofUp1xGHNuw3 M0oOZnolH4aTLBdmv5WIcNVg9GByA2XCczqjHKqfOX1frfrOdDZkA2ozit4rOBBY vSnmXqLFs+1z4Xp+Zk4dFgpBevZxvR5hdKLVdSWsfzGEBOBVRnipdKRVFd8KAXEX Mqb9izVtHP4OsFzg4UDFZoDkJZNxZY8B/JcB/qqv+2v6uzj5bcD5qLmqIZr6q3RJ H2MZLtkR6e+zk8ntfQ+0ZcbVP8u+4zX5fUmhJ8wmGIDEvrF3bjvyuiqNrKu95b4= -----END CERTIFICATE-----Generated at Sun Nov 8 16:58:24 2026 by rpki-client