$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa File: 4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa (raw, json) Hash identifier: v6x+qjojmK1L47D5K+DJGhF0ezWnjdUBaXicErVtTpc= Subject key identifier: 2C:BC:03:9F:34:4C:9B:68:49:BF:8C:BE:E6:C0:47:6D:D7:4A:30:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E4212ED7D2C3A0933DF237B6CC4B36DFB534C95 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa Signing time: Mon 26 Oct 2026 04:20:26 +0000 ROA not before: Mon 26 Oct 2026 04:20:26 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:42:12:ed:7d:2c:3a:09:33:df:23:7b:6c:c4:b3:6d:fb:53:4c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:26 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=913463438b560eb6f3a1f77cb60c3de18b8ebd5c9a6e74b6a12c77407413ada5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:12:1b:5a:34:e5:d9:15:72:41:ba:03:03: d4:36:82:7e:c5:0b:6c:46:02:88:f8:8f:3e:89:df: 23:7a:15:c0:15:78:94:12:51:ae:0d:3f:69:b6:49: a5:41:f9:30:c3:c1:0e:6c:e0:7f:00:79:cb:15:d5: 13:13:1b:0e:5f:b2:9c:08:6d:b9:97:61:36:a0:53: 04:d9:ac:c6:2f:fc:fe:38:08:41:cf:db:e1:da:3b: 8a:63:12:66:98:00:f9:69:7c:27:fd:f4:b1:ec:96: 66:c5:7a:8d:9a:1c:0e:2d:d4:05:1b:b1:55:47:37: 1d:61:f8:30:91:ac:71:55:e6:ed:f2:8a:5e:0f:4a: e2:4a:7f:40:1e:fd:64:c0:4c:94:84:88:bd:44:f7: f6:cc:bc:39:62:83:8d:b1:83:b4:09:c8:3f:41:5e: 8e:c7:d7:25:1d:23:22:df:89:2e:7c:33:2a:26:1c: 44:c9:87:ac:3b:7c:aa:ad:c0:40:e7:67:8b:d4:e2: 70:f1:15:59:bf:83:ee:a9:4a:9e:db:d5:88:69:f1: 0f:4c:bc:25:68:1a:63:ec:9c:85:aa:64:b7:4a:2a: 2e:7e:6b:df:6f:07:65:d0:de:e9:5f:bd:93:f6:46: 5a:20:22:0a:27:a4:9d:da:0a:59:80:c9:9e:2d:0e: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:03:9F:34:4C:9B:68:49:BF:8C:BE:E6:C0:47:6D:D7:4A:30:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5520::/44 Signature Algorithm: sha256WithRSAEncryption 63:3e:03:4b:bd:ba:d1:78:cf:a5:7f:22:17:48:01:16:b0:0a: 81:58:23:4a:08:31:6f:c7:0d:d8:57:c8:7d:09:c3:a2:4a:19: df:37:4e:d0:4c:14:87:18:da:5b:f4:8a:db:09:63:9e:be:a7: c5:c0:02:b2:c5:aa:86:45:ee:62:7b:41:6e:35:2f:7d:15:11: 82:28:86:2f:f6:cc:f1:15:8a:24:10:1f:e7:25:fd:a6:90:b3: d6:c2:9f:9d:75:79:27:86:c1:64:00:0e:c0:8f:58:ac:af:f7: d2:ab:7e:fc:00:0c:97:36:ca:d4:9d:46:3e:fa:48:b7:92:d9: 0a:8c:e8:1c:f6:f6:a9:7d:46:1c:7d:d7:d4:9d:da:53:a2:59: 84:95:16:4b:5d:06:47:06:0c:89:81:85:c9:4f:aa:1b:85:f0: b0:f4:26:4b:5d:ed:74:5d:cc:68:76:79:21:fb:37:be:42:37: 74:54:6f:f9:9e:2f:94:c0:b9:08:ac:e9:e6:c0:de:3b:6b:c3: dc:42:85:33:58:22:9e:64:ba:eb:ba:3e:45:dc:24:75:af:c8: 02:ee:af:73:50:d7:2b:b9:0d:a9:59:43:0a:d1:30:d1:f0:4e: b2:c8:c7:d5:4a:81:d4:25:c9:f8:c6:03:f7:bd:20:1c:6b:41: 33:7c:27:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULkIS7X0sOgkz3yN7bMSzbftTTJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDI2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTM0NjM0MzhiNTYwZWI2ZjNhMWY3N2NiNjBjM2RlMThi OGViZDVjOWE2ZTc0YjZhMTJjNzc0MDc0MTNhZGE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1FRIbWjTl2RVyQboDA9Q2gn7FC2xGAoj4jz6J3yN6FcAV eJQSUa4NP2m2SaVB+TDDwQ5s4H8AecsV1RMTGw5fspwIbbmXYTagUwTZrMYv/P44 CEHP2+HaO4pjEmaYAPlpfCf99LHslmbFeo2aHA4t1AUbsVVHNx1h+DCRrHFV5u3y il4PSuJKf0Ae/WTATJSEiL1E9/bMvDlig42xg7QJyD9BXo7H1yUdIyLfiS58Myom HETJh6w7fKqtwEDnZ4vU4nDxFVm/g+6pSp7b1Yhp8Q9MvCVoGmPsnIWqZLdKKi5+ a99vB2XQ3ulfvZP2RlogIgonpJ3aClmAyZ4tDpkXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULLwDnzRMm2hJv4y+5sBHbddKMJAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjZGI0M2RkLTFiNDktNGYyMi05M2U4LWIyMTUzYzJjYWM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVSAwDQYJKoZIhvcNAQELBQADggEBAGM+A0u9utF4z6V/IhdIARaw CoFYI0oIMW/HDdhXyH0Jw6JKGd83TtBMFIcY2lv0itsJY56+p8XAArLFqoZF7mJ7 QW41L30VEYIohi/2zPEViiQQH+cl/aaQs9bCn511eSeGwWQADsCPWKyv99KrfvwA DJc2ytSdRj76SLeS2QqM6Bz29ql9Rhx919Sd2lOiWYSVFktdBkcGDImBhclPqhuF 8LD0Jktd7XRdzGh2eSH7N75CN3RUb/meL5TAuQis6ebA3jtrw9xChTNYIp5kuuu6 PkXcJHWvyALur3NQ1yu5DalZQwrRMNHwTrLIx9VKgdQlyfjGA/e9IBxrQTN8Jx4= -----END CERTIFICATE-----Generated at Tue Oct 27 00:05:19 2026 by rpki-client