$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d083f93-33c1-463a-95da-70bfcbf61de0.roa File: 4d083f93-33c1-463a-95da-70bfcbf61de0.roa (raw, json) Hash identifier: qd4dzXuMukrOMXBn4FrF0amJt8v41Cdo71D5Gi92icg= Subject key identifier: BA:7F:C3:D2:58:DB:BB:85:33:37:69:32:B2:EA:7D:C9:55:6E:85:97 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 66CEF60AFEE991DD6F279D4C7460B87C03559974 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d083f93-33c1-463a-95da-70bfcbf61de0.roa Signing time: Fri 30 Oct 2026 19:32:43 +0000 ROA not before: Fri 30 Oct 2026 19:32:43 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4300::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ce:f6:0a:fe:e9:91:dd:6f:27:9d:4c:74:60:b8:7c:03:55:99:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:43 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=5b40d3a56ee10c319d9e820184646e7d73f1cc5ecf799471ae2b5f5b1b35123d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:5e:34:05:89:dc:34:a7:dc:07:6d:d3:4b: 80:c7:96:88:7c:28:25:a0:79:72:90:ba:98:f9:42: 6d:67:4a:00:8b:c0:7b:e1:ee:fb:cb:1c:68:c6:0a: 3f:77:28:01:9a:ed:7e:64:08:06:61:b7:df:64:c6: 7d:51:63:59:a8:ec:92:98:b1:21:ea:cf:6b:a1:96: 16:d3:cc:19:01:48:d0:95:e1:11:ad:3a:c6:54:1a: e1:c9:7d:52:22:04:fc:dc:08:82:87:3a:10:17:48: 1c:00:4a:34:fb:ef:74:a9:fb:ac:17:37:9d:5d:12: ce:f6:35:78:c4:a9:94:66:ad:42:fb:3a:89:63:5e: 58:84:f5:5c:ab:7a:6b:be:18:30:34:ed:f1:6d:3a: 2d:e1:50:02:94:73:96:cd:87:fd:3a:ea:66:39:ee: 7b:8e:f1:94:f7:a4:55:1d:51:0a:fb:09:40:7f:64: 1c:1d:e4:52:8b:70:5a:99:d5:0f:43:14:19:6c:5f: 40:24:3c:36:22:50:70:89:cb:b4:02:ad:53:87:68: 65:1e:0e:e1:45:3c:dd:a2:42:0b:64:43:2b:80:6b: fc:7e:37:3c:e0:09:83:0d:a8:b1:a5:f8:5b:6c:af: fa:79:00:88:ce:d7:fa:3b:ad:90:b2:7c:83:2d:6a: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7F:C3:D2:58:DB:BB:85:33:37:69:32:B2:EA:7D:C9:55:6E:85:97 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d083f93-33c1-463a-95da-70bfcbf61de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4300::/46 Signature Algorithm: sha256WithRSAEncryption 3f:df:4e:16:00:9b:93:0f:6e:16:cb:0f:fa:09:a2:4c:59:d1: fb:6a:d6:3d:af:e2:48:00:f5:9e:b9:6b:82:86:88:4a:65:fa: 67:6c:ee:d3:60:e5:44:a0:54:20:4b:9a:d2:12:e5:b1:39:b6: 02:2c:c3:66:60:2d:59:7e:dc:c0:81:ac:fe:81:a3:00:54:5d: c1:7e:1b:33:8d:7b:f9:e2:2f:06:6c:83:94:b8:2f:09:b3:1f: 04:08:3c:9a:b4:ee:df:bf:8a:b3:ed:b0:77:b8:e7:76:40:c8: 45:c2:fa:f0:85:ba:c4:fb:d7:c8:52:2d:6b:e9:be:60:7d:c3: 9d:e6:f2:64:e6:60:76:b8:28:f5:3c:68:ac:c7:02:84:61:d1: d7:69:bb:68:26:d1:9e:43:c1:e9:53:a5:f8:d5:79:a2:e1:e8: 4e:69:9c:42:03:3a:20:5f:83:f1:19:79:cc:76:5b:21:24:6b: b5:8e:32:9b:ae:55:8e:c7:e5:cc:fd:40:70:08:31:22:2a:9d: cf:9b:bd:e3:38:52:40:5c:55:4c:e4:89:56:71:85:3b:5a:77: f6:bb:ae:a1:34:98:cf:2d:57:23:5f:84:df:7b:41:30:79:d7: a3:bc:96:eb:cf:2b:b5:5c:dd:41:ca:12:d7:e4:a9:07:50:d9: b7:2f:fc:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZs72Cv7pkd1vJ51MdGC4fANVmXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQzWhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjQwZDNhNTZlZTEwYzMxOWQ5ZTgyMDE4NDY0NmU3ZDcz ZjFjYzVlY2Y3OTk0NzFhZTJiNWY1YjFiMzUxMjNkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIt140BYncNKfcB23TS4DHloh8KCWgeXKQupj5Qm1nSgCL wHvh7vvLHGjGCj93KAGa7X5kCAZht99kxn1RY1mo7JKYsSHqz2uhlhbTzBkBSNCV 4RGtOsZUGuHJfVIiBPzcCIKHOhAXSBwASjT773Sp+6wXN51dEs72NXjEqZRmrUL7 OoljXliE9Vyremu+GDA07fFtOi3hUAKUc5bNh/066mY57nuO8ZT3pFUdUQr7CUB/ ZBwd5FKLcFqZ1Q9DFBlsX0AkPDYiUHCJy7QCrVOHaGUeDuFFPN2iQgtkQyuAa/x+ NzzgCYMNqLGl+Ftsr/p5AIjO1/o7rZCyfIMtagFnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUun/D0ljbu4UzN2kysup9yVVuhZcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRkMDgzZjkzLTMzYzEtNDYzYS05NWRhLTcwYmZjYmY2MWRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQwAwDQYJKoZIhvcNAQELBQADggEBAD/fThYAm5MPbhbLD/oJokxZ 0ftq1j2v4kgA9Z65a4KGiEpl+mds7tNg5USgVCBLmtIS5bE5tgIsw2ZgLVl+3MCB rP6BowBUXcF+GzONe/niLwZsg5S4LwmzHwQIPJq07t+/irPtsHe453ZAyEXC+vCF usT718hSLWvpvmB9w53m8mTmYHa4KPU8aKzHAoRh0ddpu2gm0Z5DwelTpfjVeaLh 6E5pnEIDOiBfg/EZecx2WyEka7WOMpuuVY7H5cz9QHAIMSIqnc+bveM4UkBcVUzk iVZxhTtad/a7rqE0mM8tVyNfhN97QTB516O8luvPK7Vc3UHKEtfkqQdQ2bcv/PA= -----END CERTIFICATE-----Generated at Tue Nov 3 22:21:15 2026 by rpki-client