$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa File: 3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa (raw, json) Hash identifier: OcYSjRpO1I0T6Ph52HALsd5oOcnpG3EzrTtaZcE4gT0= Subject key identifier: 08:E8:45:DB:3B:E0:6C:D5:81:7F:2A:32:E7:F0:8F:72:3B:34:B2:6B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2B3FDFBA9E7F4A3508C9EBD9220A48C4564BFA95 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa Signing time: Sun 11 Oct 2026 15:08:30 +0000 ROA not before: Sun 11 Oct 2026 15:08:30 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:df:ba:9e:7f:4a:35:08:c9:eb:d9:22:0a:48:c4:56:4b:fa:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:30 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=fcda1e25ec990ba65de03818ddf0cb8af215d8275ba29e2965e06637fe8a61d1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:3b:cc:ac:83:7b:83:1e:56:52:64:fd:17: 4f:fa:3a:3e:cc:2e:6c:10:cb:12:8b:75:7c:94:56: 4c:6e:73:56:c9:0b:90:e8:76:73:ba:d8:c2:ee:7d: 82:1c:2b:03:14:6d:79:c9:f2:37:12:ea:ad:6b:22: 10:2b:af:1c:14:fd:c2:f1:7c:9f:0d:eb:7f:c1:59: 3c:af:ba:6f:b7:d7:16:ca:b9:f3:13:34:1e:cc:f6: fc:80:f0:98:a1:1b:f8:34:da:69:94:06:c1:9d:15: 6e:c8:4a:9a:fa:f6:14:c4:a2:25:35:36:2f:f1:dd: 14:a1:da:b1:ae:2b:25:ea:4b:a5:05:f5:58:ed:7c: 48:f2:ed:90:5c:13:97:4f:aa:e7:81:57:95:8c:0a: 93:e2:ac:2a:cb:e2:96:e6:7c:0c:b3:ba:06:33:ff: 39:c8:d9:e5:25:4e:a3:ac:c7:60:6f:87:83:d4:ab: 52:a9:d5:35:b8:7f:44:f6:7c:e8:cc:11:72:38:2e: d9:87:72:cf:6c:5f:b1:5c:9e:05:fc:39:c9:02:30: 10:6b:a2:3b:f7:51:57:c2:42:3d:14:f5:bc:20:09: b3:e7:6b:06:67:a1:89:3b:9e:6e:6d:88:1b:c1:73: 00:54:9f:13:50:c4:f3:18:b4:5c:16:f3:b7:39:75: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E8:45:DB:3B:E0:6C:D5:81:7F:2A:32:E7:F0:8F:72:3B:34:B2:6B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption a0:a6:74:0b:46:e0:6b:2e:83:28:61:11:b5:71:86:b5:a0:b7: 42:b2:f9:08:3c:ba:43:cd:68:c7:c1:8c:b7:92:e0:7e:40:54: 90:65:c7:76:5f:45:f6:50:a0:74:f3:a5:d5:a0:f7:c8:30:e9: bc:fd:ba:49:c1:a8:57:05:02:49:9d:ef:1c:31:97:f7:cc:3e: 93:30:9e:ac:df:76:4e:6f:89:e9:14:3d:fa:34:e1:c8:29:24: 96:0c:19:16:d4:6d:33:41:8c:f9:08:da:97:c9:7f:18:d2:0e: 18:b8:5c:d0:34:ca:3a:ed:09:06:b9:b8:09:1c:d8:d5:ff:2d: 03:be:92:b7:44:dc:08:f6:40:95:a8:6a:69:44:8c:7b:c7:9d: 3d:c4:b5:95:e1:70:5a:17:b7:f5:f2:96:46:fc:a7:98:92:2a: d6:10:46:60:d4:7a:78:96:5c:0a:50:bd:a8:f3:cc:35:10:3b: 2c:bc:5b:46:f7:34:d7:d9:c3:f3:e4:b7:c0:8e:30:e9:75:00: bc:b5:38:b6:c8:87:8f:26:70:4a:78:83:5f:96:bb:67:2c:97: 47:5c:ca:b2:09:0c:45:a5:90:02:ac:ac:e3:c1:76:8c:f5:49: 8a:d8:12:22:55:fe:43:bd:92:37:1b:fd:86:bb:e9:e6:19:76: b8:8c:65:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKz/fup5/SjUIyevZIgpIxFZL+pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODMwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2RhMWUyNWVjOTkwYmE2NWRlMDM4MThkZGYwY2I4YWYy MTVkODI3NWJhMjllMjk2NWUwNjYzN2ZlOGE2MWQxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiNzvMrIN7gx5WUmT9F0/6Oj7MLmwQyxKLdXyUVkxuc1bJ C5DodnO62MLufYIcKwMUbXnJ8jcS6q1rIhArrxwU/cLxfJ8N63/BWTyvum+31xbK ufMTNB7M9vyA8JihG/g02mmUBsGdFW7ISpr69hTEoiU1Ni/x3RSh2rGuKyXqS6UF 9VjtfEjy7ZBcE5dPqueBV5WMCpPirCrL4pbmfAyzugYz/znI2eUlTqOsx2Bvh4PU q1Kp1TW4f0T2fOjMEXI4LtmHcs9sX7FcngX8OckCMBBrojv3UVfCQj0U9bwgCbPn awZnoYk7nm5tiBvBcwBUnxNQxPMYtFwW87c5dUNHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCOhF2zvgbNWBfyoy5/CPcjs0smswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNkNDYwMmMwLTk1OTktNDMyNS1iYThkLWRjOGIxOWM2YzI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAKCmdAtG4GsugyhhEbVxhrWg t0Ky+Qg8ukPNaMfBjLeS4H5AVJBlx3ZfRfZQoHTzpdWg98gw6bz9uknBqFcFAkmd 7xwxl/fMPpMwnqzfdk5viekUPfo04cgpJJYMGRbUbTNBjPkI2pfJfxjSDhi4XNA0 yjrtCQa5uAkc2NX/LQO+krdE3Aj2QJWoamlEjHvHnT3EtZXhcFoXt/Xylkb8p5iS KtYQRmDUeniWXApQvajzzDUQOyy8W0b3NNfZw/Pkt8COMOl1ALy1OLbIh48mcEp4 g1+Wu2csl0dcyrIJDEWlkAKsrOPBdoz1SYrYEiJV/kO9kjcb/Ya76eYZdriMZRs= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:50 2026 by rpki-client