$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa File: 5549fdb0-617d-43e3-951f-9747f0d27829.roa (raw, json) Hash identifier: J71bTK4ogmgESK3cvZI14+eXjAnlzYAjzI0PgmxY/84= Subject key identifier: 14:41:69:9D:14:95:C1:28:98:B9:CC:A2:65:27:54:8E:0B:08:4B:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68A69CE3D3DFF3E2369D6A773AE196806DC0F8A6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa Signing time: Sun 04 Oct 2026 00:30:14 +0000 ROA not before: Sun 04 Oct 2026 00:30:14 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a6:9c:e3:d3:df:f3:e2:36:9d:6a:77:3a:e1:96:80:6d:c0:f8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 4 00:30:14 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=2998f931e7e0baf020bca90c33fd06b4e99844354e71740982b9f15a38b9d625, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:64:5a:26:49:b9:b9:76:20:3c:f3:20:af: 55:04:1e:73:81:c3:a5:21:8a:8d:44:d3:3f:6f:9a: 31:9d:2d:ac:16:5c:fe:4a:87:15:49:7c:03:bc:73: 1b:7f:0f:e1:93:e3:52:98:5a:27:0b:b6:96:0e:25: 05:20:01:5e:0f:21:12:10:77:76:ea:e8:93:37:0e: 30:e2:f7:7e:de:c3:57:7a:70:cc:8d:ba:ae:be:28: 43:31:c9:fe:aa:ce:b5:a9:58:43:1a:b3:21:57:69: fe:8a:5e:0b:dd:bc:62:38:57:16:a4:c7:78:8c:7f: 80:03:26:7f:0e:7e:fd:c4:97:22:95:31:49:43:f9: ae:68:71:6d:61:26:20:36:4b:11:17:d7:28:0a:51: 49:27:77:61:85:7a:fd:41:bd:79:3e:a3:3c:05:8c: 0d:bf:b9:ba:c7:69:30:2f:7b:6e:30:2b:ae:ed:8a: 3a:15:ba:f1:80:72:80:30:ef:ed:70:49:ed:85:a5: 01:f5:c0:ab:e9:93:43:e4:06:e3:2d:be:12:5c:ec: b2:89:56:62:34:0d:a3:22:40:63:a6:a4:75:c7:7e: 72:fa:df:e1:6c:c0:6e:d1:80:65:48:d6:1c:92:c7: f9:58:e8:8d:99:ee:30:c0:8c:64:60:ee:a5:db:aa: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:69:9D:14:95:C1:28:98:B9:CC:A2:65:27:54:8E:0B:08:4B:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4140::/48 Signature Algorithm: sha256WithRSAEncryption 94:d8:c8:45:3f:56:fa:bc:35:a5:35:b0:76:07:69:94:e2:b5: 7e:09:0e:01:7c:70:40:01:9e:af:c5:19:eb:f2:f4:c5:82:72: 1d:9f:6b:ec:15:f3:5a:12:d1:a3:e1:ef:c9:87:93:25:e0:d9: ab:6d:ea:27:cf:1d:11:9b:0c:a1:7b:3e:e3:8f:b9:f9:9d:88: 03:b4:2f:ff:c3:f9:12:ff:5d:d6:b7:e1:7d:e0:f7:29:fd:82: 6d:ab:e0:5b:f3:b7:b4:51:e9:b7:ef:5b:f5:b0:26:92:10:bf: 7c:96:d9:4c:30:86:df:9a:64:78:1e:8b:34:02:19:a7:7d:f5: 8d:dc:c7:3a:db:54:81:b3:dc:c0:c3:13:f3:34:b3:ea:da:21: 37:54:57:a1:bf:4a:29:7a:4c:6a:67:14:f9:10:2d:05:cf:6f: 36:b8:10:54:c2:76:b4:c9:27:82:a0:fc:d5:e5:85:c5:6e:d2: 17:2d:91:80:18:ce:2d:2a:e6:04:bd:09:6d:1f:83:90:87:db: 78:81:84:b9:62:e6:15:da:4e:e2:2e:76:e9:33:c9:6c:7a:49: af:1f:51:d9:c9:e7:af:22:14:f1:5e:23:3f:bf:df:76:40:20: be:2e:65:11:2a:cf:50:5b:88:27:5b:64:07:2f:c0:25:26:a4: 73:fb:f3:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaKac49Pf8+I2nWp3OuGWgG3A+KYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA0MDAzMDE0WhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTk4ZjkzMWU3ZTBiYWYwMjBiY2E5MGMzM2ZkMDZiNGU5 OTg0NDM1NGU3MTc0MDk4MmI5ZjE1YTM4YjlkNjI1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjdmRaJkm5uXYgPPMgr1UEHnOBw6Uhio1E0z9vmjGdLawW XP5KhxVJfAO8cxt/D+GT41KYWicLtpYOJQUgAV4PIRIQd3bq6JM3DjDi937ew1d6 cMyNuq6+KEMxyf6qzrWpWEMasyFXaf6KXgvdvGI4Vxakx3iMf4ADJn8Ofv3ElyKV MUlD+a5ocW1hJiA2SxEX1ygKUUknd2GFev1BvXk+ozwFjA2/ubrHaTAve24wK67t ijoVuvGAcoAw7+1wSe2FpQH1wKvpk0PkBuMtvhJc7LKJVmI0DaMiQGOmpHXHfnL6 3+FswG7RgGVI1hySx/lY6I2Z7jDAjGRg7qXbqkmhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFEFpnRSVwSiYucyiZSdUjgsIS/swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU1NDlmZGIwLTYxN2QtNDNlMy05NTFmLTk3NDdmMGQyNzgyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQUAwDQYJKoZIhvcNAQELBQADggEBAJTYyEU/Vvq8NaU1sHYHaZTi tX4JDgF8cEABnq/FGevy9MWCch2fa+wV81oS0aPh78mHkyXg2att6ifPHRGbDKF7 PuOPufmdiAO0L//D+RL/Xda34X3g9yn9gm2r4Fvzt7RR6bfvW/WwJpIQv3yW2Uww ht+aZHgeizQCGad99Y3cxzrbVIGz3MDDE/M0s+raITdUV6G/Sil6TGpnFPkQLQXP bza4EFTCdrTJJ4Kg/NXlhcVu0hctkYAYzi0q5gS9CW0fg5CH23iBhLli5hXaTuIu dukzyWx6Sa8fUdnJ568iFPFeIz+/33ZAIL4uZREqz1BbiCdbZAcvwCUmpHP78+I= -----END CERTIFICATE-----Generated at Tue Oct 27 06:02:27 2026 by rpki-client