$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa File: 4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa (raw, json) Hash identifier: paEswsPm82szZPfaAe8l33ZO0VJFQfYgdSmBRCIz4bo= Subject key identifier: CA:91:D8:D1:A5:26:AD:44:B1:85:E5:04:96:A9:3E:B7:C2:C2:A9:14 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 61E5EEB20DCFE5521CD398B1D6057EDF8E568DAE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa Signing time: Mon 26 Oct 2026 04:20:11 +0000 ROA not before: Mon 26 Oct 2026 04:20:11 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e5:ee:b2:0d:cf:e5:52:1c:d3:98:b1:d6:05:7e:df:8e:56:8d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:11 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8d49398cd82044b15f3da6891ab0e1d964743c1b89c7042cd33e4872f2374af5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:41:39:12:83:69:4e:67:4d:9e:f0:87:cb: 8d:97:1a:31:a4:b6:eb:8d:ab:27:28:f6:f8:da:c6: 03:38:8f:6a:ae:38:c1:ab:f7:45:1e:4d:3f:cc:b7: 91:fb:45:5a:4c:50:8a:ea:1b:32:db:d8:a4:5a:c1: d1:ad:c2:52:6a:e7:49:a0:f8:29:04:9b:6d:5a:79: 4a:60:39:7e:1b:e6:86:1a:42:71:17:ae:4a:87:ec: a4:6c:d3:5f:0c:70:d3:81:dd:a6:ff:86:0f:a3:f2: c5:5b:5b:a0:46:19:fa:82:7d:bd:1c:72:d4:b2:db: ce:64:8e:0f:f1:06:4a:c5:88:d8:08:ed:86:b9:0d: 4c:7e:ee:bb:69:56:67:32:ec:0a:9b:f2:76:7b:35: 4c:97:d2:31:0e:16:9b:84:58:49:7c:c2:7c:ed:36: 3f:e2:b9:cd:fe:54:fb:19:e3:e9:6b:3b:e8:74:09: 8d:46:9d:df:84:54:ee:62:17:69:8e:38:7c:7c:36: c5:80:c3:c0:ec:b5:4d:d3:85:6b:ed:83:7c:7f:c3: 2b:d5:59:3a:b1:a8:37:ed:02:4e:5f:40:28:6f:66: 0e:e1:2b:4b:4d:7f:d4:79:e3:f9:ce:18:c6:16:b6: de:01:37:c6:3a:3d:ef:14:35:11:73:81:df:13:43: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:91:D8:D1:A5:26:AD:44:B1:85:E5:04:96:A9:3E:B7:C2:C2:A9:14 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption a6:38:88:f7:d2:8c:e7:0a:d2:18:fc:21:42:7b:93:2c:77:31: ca:ea:05:48:92:9f:49:69:a6:d5:7b:c6:c8:1e:df:45:8f:d0: 97:08:b6:2a:69:86:a9:e4:44:94:1f:c9:56:f2:c7:f6:b6:20: dd:93:46:e1:16:e8:51:da:1f:00:03:ba:5b:d6:ea:76:f0:b0: c4:4e:b0:c0:8d:28:e3:5a:07:91:19:6f:65:eb:9d:3c:fe:51: fc:a3:3f:c3:2d:22:1e:97:60:3a:8f:a0:f0:d6:2b:fb:6b:38: 4e:a5:12:47:54:22:23:a8:05:6c:89:56:fa:56:00:d1:c4:d3: 33:21:ce:95:b1:ab:e1:95:92:92:5f:f7:80:fa:e6:10:a4:d9: 70:94:28:a6:98:65:f5:bf:71:d2:44:9f:31:4b:cf:d3:df:2c: ad:b6:e5:12:0d:d7:c1:75:54:7c:82:2d:ad:bb:b5:59:e4:3e: 84:e2:e2:ea:47:ef:bc:58:46:86:be:12:d1:20:8a:fa:13:b2: a3:d7:24:51:cd:ea:2d:22:d9:f5:69:ce:40:cc:ff:3a:e9:39: de:8b:ce:df:b1:f1:6e:2c:93:e2:b6:2f:79:47:1c:e6:6c:b6: 91:7a:27:ca:84:2b:e8:40:c6:4f:d9:16:26:de:5a:e3:05:86: 9d:de:c2:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYeXusg3P5VIc05ix1gV+345Wja4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDExWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDQ5Mzk4Y2Q4MjA0NGIxNWYzZGE2ODkxYWIwZTFkOTY0 NzQzYzFiODljNzA0MmNkMzNlNDg3MmYyMzc0YWY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU30E5EoNpTmdNnvCHy42XGjGktuuNqyco9vjaxgM4j2qu OMGr90UeTT/Mt5H7RVpMUIrqGzLb2KRawdGtwlJq50mg+CkEm21aeUpgOX4b5oYa QnEXrkqH7KRs018McNOB3ab/hg+j8sVbW6BGGfqCfb0cctSy285kjg/xBkrFiNgI 7Ya5DUx+7rtpVmcy7Aqb8nZ7NUyX0jEOFpuEWEl8wnztNj/iuc3+VPsZ4+lrO+h0 CY1Gnd+EVO5iF2mOOHx8NsWAw8DstU3ThWvtg3x/wyvVWTqxqDftAk5fQChvZg7h K0tNf9R54/nOGMYWtt4BN8Y6Pe8UNRFzgd8TQ+kBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUypHY0aUmrUSxheUElqk+t8LCqRQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRhODYyM2M0LTEwYTAtNDZiNi1hNWY1LWM5NGU4NGM1Njg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAKY4iPfSjOcK0hj8IUJ7kyx3 McrqBUiSn0lpptV7xsge30WP0JcItipphqnkRJQfyVbyx/a2IN2TRuEW6FHaHwAD ulvW6nbwsMROsMCNKONaB5EZb2XrnTz+UfyjP8MtIh6XYDqPoPDWK/trOE6lEkdU IiOoBWyJVvpWANHE0zMhzpWxq+GVkpJf94D65hCk2XCUKKaYZfW/cdJEnzFLz9Pf LK225RIN18F1VHyCLa27tVnkPoTi4upH77xYRoa+EtEgivoTsqPXJFHN6i0i2fVp zkDM/zrpOd6Lzt+x8W4sk+K2L3lHHOZstpF6J8qEK+hAxk/ZFibeWuMFhp3ewsk= -----END CERTIFICATE-----Generated at Tue Oct 27 15:33:12 2026 by rpki-client