$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/579d3087-6060-4a0d-b623-b91cce78806a.roa File: 579d3087-6060-4a0d-b623-b91cce78806a.roa (raw, json) Hash identifier: IJnqz4M0OBWxsFeRCddLo3vqwOF2R2iuCiCPVJ39H+M= Subject key identifier: 33:F7:35:5B:6D:66:E6:4F:7B:67:D6:C8:F4:FA:CE:3B:26:4A:69:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 064DA0C847B1B38255CCEDC29B0C7BC03D1C5EDF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/579d3087-6060-4a0d-b623-b91cce78806a.roa Signing time: Mon 26 Oct 2026 04:10:39 +0000 ROA not before: Mon 26 Oct 2026 04:10:39 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:a0:c8:47:b1:b3:82:55:cc:ed:c2:9b:0c:7b:c0:3d:1c:5e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:39 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=202b40fa58226d00835411cefb41186f26a2405879e79a0da24c38b30f79bd63, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:73:e3:42:29:95:4e:5b:e5:66:94:4a:1d: c0:6a:1d:6e:db:3a:fa:7a:7f:61:fa:19:3d:33:5d: 7c:ac:90:69:1b:4f:54:7a:6c:1a:e8:ae:9e:84:dc: 19:70:f2:05:bf:dc:6c:73:3e:73:e1:d1:e2:41:19: 11:83:20:cf:92:25:01:30:b5:c9:70:be:50:62:5a: f1:a0:84:dd:ff:b0:d7:18:31:31:e2:32:95:e2:7a: 5c:d6:5d:23:54:62:49:e1:3c:c6:ea:a4:65:12:44: a7:1c:a4:f0:c5:93:7f:73:eb:c8:0d:1f:d5:90:e0: 73:b7:ec:d6:75:ea:35:c9:6c:e1:92:3c:af:df:48: de:db:5d:14:a2:5c:34:f3:04:e4:71:da:b3:60:5e: 80:bd:82:5e:a6:20:df:3b:74:a4:00:a9:73:06:b7: 37:f3:1c:96:9e:41:6d:5a:68:59:9c:c5:4a:0a:07: 27:5d:08:93:01:23:b2:d1:b1:c2:ea:9d:cb:66:96: 5e:e9:9f:b5:7a:73:66:7c:0f:12:5b:42:21:e1:77: 3d:e2:e8:bf:48:22:3d:70:5b:cf:7a:0d:c3:9f:f8: 2d:a6:4b:cb:67:c9:a1:30:a1:3c:a5:81:36:e9:b9: 67:47:2f:0a:a4:41:aa:f5:f2:14:a5:31:42:31:b5: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:35:5B:6D:66:E6:4F:7B:67:D6:C8:F4:FA:CE:3B:26:4A:69:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/579d3087-6060-4a0d-b623-b91cce78806a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:4000::/34 Signature Algorithm: sha256WithRSAEncryption 87:3f:fa:bd:50:75:59:0c:43:ee:7c:a1:0a:84:5f:01:c2:44: be:7d:a1:c0:2b:39:57:ad:50:ce:a9:58:96:9a:a8:4f:84:62: 17:76:53:2c:a7:ab:28:18:81:8e:9f:92:de:ad:97:d8:ba:a6: fb:61:ee:13:3e:86:36:b5:25:ea:55:0a:e0:da:f8:56:93:77: 99:fe:ab:a8:52:2e:80:74:99:5f:1c:f1:c1:aa:f0:2a:f2:c0: 22:83:17:68:9d:12:02:5d:c0:2a:81:71:cf:fb:bd:26:48:f1: ac:20:d7:36:88:59:a9:79:2d:de:e4:ec:a9:6a:f4:9e:50:b9: c3:fd:ab:4c:eb:84:95:93:f0:dd:e3:ff:41:c2:f2:81:00:fd: 67:6c:f5:a9:44:9e:58:85:52:2f:12:c7:cf:ba:7e:6d:ee:b6: 2e:a3:08:10:ca:7a:26:b8:3c:ea:7f:91:eb:87:fe:1a:f8:77: d7:42:a5:cd:3a:98:39:2b:7f:7c:89:0c:1b:59:1b:1d:3d:79: 96:e7:4d:4a:d7:f8:fc:23:90:ca:60:e8:5c:b0:09:a2:7b:08: dd:c1:5f:cc:98:e6:44:12:23:6b:bf:d0:ff:e8:b2:97:ca:e9: da:4c:3f:2e:d3:fd:de:6d:c1:cd:09:58:1f:2e:b6:bb:42:2d: 47:d4:58:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBk2gyEexs4JVzO3Cmwx7wD0cXt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDM5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDJiNDBmYTU4MjI2ZDAwODM1NDExY2VmYjQxMTg2ZjI2 YTI0MDU4NzllNzlhMGRhMjRjMzhiMzBmNzliZDYzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGE3PjQimVTlvlZpRKHcBqHW7bOvp6f2H6GT0zXXyskGkb T1R6bBrorp6E3Blw8gW/3GxzPnPh0eJBGRGDIM+SJQEwtclwvlBiWvGghN3/sNcY MTHiMpXielzWXSNUYknhPMbqpGUSRKccpPDFk39z68gNH9WQ4HO37NZ16jXJbOGS PK/fSN7bXRSiXDTzBORx2rNgXoC9gl6mIN87dKQAqXMGtzfzHJaeQW1aaFmcxUoK ByddCJMBI7LRscLqnctmll7pn7V6c2Z8DxJbQiHhdz3i6L9IIj1wW896DcOf+C2m S8tnyaEwoTylgTbpuWdHLwqkQar18hSlMUIxtSUNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM/c1W21m5k97Z9bI9PrOOyZKab0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3OWQzMDg3LTYwNjAtNGEwZC1iNjIzLWI5MWNjZTc4ODA2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPDxQDANBgkqhkiG9w0BAQsFAAOCAQEAhz/6vVB1WQxD7nyhCoRfAcJE vn2hwCs5V61QzqlYlpqoT4RiF3ZTLKerKBiBjp+S3q2X2Lqm+2HuEz6GNrUl6lUK 4Nr4VpN3mf6rqFIugHSZXxzxwarwKvLAIoMXaJ0SAl3AKoFxz/u9JkjxrCDXNohZ qXkt3uTsqWr0nlC5w/2rTOuElZPw3eP/QcLygQD9Z2z1qUSeWIVSLxLHz7p+be62 LqMIEMp6Jrg86n+R64f+Gvh310KlzTqYOSt/fIkMG1kbHT15ludNStf4/COQymDo XLAJonsI3cFfzJjmRBIja7/Q/+iyl8rp2kw/LtP93m3BzQlYHy62u0ItR9RYdw== -----END CERTIFICATE-----Generated at Tue Oct 27 05:12:49 2026 by rpki-client