$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa File: 5839d967-961c-4062-bf2f-ef1c508fea8e.roa (raw, json) Hash identifier: bju7W9zeB45zqrgAR87/FrqpyZ02Ecu+WiwAQDmO/co= Subject key identifier: 16:F0:B2:2D:F2:0A:84:52:AE:A6:54:8E:58:21:F4:59:2D:AA:F9:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24FE807ADDB85ABAC5E1CE9DCB0D17F7AFB67F43 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa Signing time: Sun 11 Oct 2026 15:08:49 +0000 ROA not before: Sun 11 Oct 2026 15:08:49 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fe:80:7a:dd:b8:5a:ba:c5:e1:ce:9d:cb:0d:17:f7:af:b6:7f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:49 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=5fef0d3de056937dd1157671d185b5a4104b1cd15ae1f4d31a57cfd6272e0f18, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:e6:45:f1:dc:8d:3b:c0:7c:29:d7:29:22: a2:22:33:5b:57:9e:8a:bd:34:36:df:28:a9:bc:4f: 9e:6d:c9:64:ed:82:5b:02:84:2f:48:88:40:4f:0a: 1a:4b:df:29:36:ee:56:6b:49:cf:6c:48:b5:3f:86: 69:89:0d:07:b2:1d:2c:c1:cf:07:79:c2:5c:fd:42: 8c:3c:f8:9e:01:5e:59:dd:32:de:8a:c8:0d:00:f1: 82:0b:8a:16:21:9b:f1:df:cc:9e:e2:a1:3e:fa:92: 12:f6:5c:9b:43:f9:50:01:87:04:d0:61:76:3a:1b: 0f:a2:e3:56:58:28:db:b2:fa:f7:d8:e5:78:d7:06: 78:cf:c4:ba:0c:c7:8d:f2:58:c8:5c:47:7c:ce:5d: ef:34:4b:29:6e:e4:69:95:c8:42:dd:41:f3:f4:a1: 3b:b3:fe:0b:f7:9c:85:b7:0a:9b:02:92:1e:76:31: 9d:87:d2:0f:b8:c5:fb:04:5c:ae:4c:15:f5:03:15: 67:ef:48:22:ed:66:2c:05:20:c8:06:45:b3:2d:29: eb:70:d5:65:c3:49:a6:c9:7c:e7:20:f7:d6:18:b1: 34:64:1a:87:95:85:97:f4:b5:16:89:8d:37:45:4b: 90:7c:64:2f:2d:bf:8e:46:52:90:e4:cd:36:8a:83: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:B2:2D:F2:0A:84:52:AE:A6:54:8E:58:21:F4:59:2D:AA:F9:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 85:fa:f9:55:01:15:22:86:e6:50:1e:66:f5:f1:19:04:74:5f: 48:5f:48:b1:84:1d:f0:1f:b7:c9:af:71:26:15:e6:d6:53:92: c5:f3:e1:0a:ba:d4:30:6b:55:98:fb:2f:3e:a5:fa:f9:3d:42: 8e:44:69:91:5d:e8:a9:1e:44:0c:7e:73:04:25:bd:49:51:dd: 3f:43:e6:b4:10:fe:a1:ba:f3:fc:b0:ab:03:58:92:20:97:4c: d0:c1:68:30:18:3a:33:78:37:ed:8f:10:d3:bf:8f:ed:44:5b: 6e:ae:16:b7:0e:83:41:6b:36:4f:a8:bb:34:5d:6a:0e:17:ce: 16:64:43:ff:1b:44:04:2f:3d:ff:01:a3:7e:42:66:35:cd:ec: 35:19:d8:33:ba:97:8a:55:3b:67:9d:3b:af:a7:1e:56:2d:19: 36:df:cf:14:a7:72:fa:96:93:be:3b:1d:56:10:0f:46:58:b7: 8a:3b:c5:22:e2:5b:eb:f7:2f:09:d3:22:19:3b:59:5e:98:b8: 1d:21:13:45:1f:ed:2e:8f:91:dc:f2:6f:49:9b:0e:83:47:be: a7:85:36:ca:75:e4:b1:c5:4b:8b:e6:4c:05:c4:e4:62:4f:21: cf:14:81:64:11:db:b7:d0:c4:86:1f:46:67:5f:22:27:93:bf: ac:e2:f3:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJP6Aet24WrrF4c6dyw0X96+2f0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODQ5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmVmMGQzZGUwNTY5MzdkZDExNTc2NzFkMTg1YjVhNDEw NGIxY2QxNWFlMWY0ZDMxYTU3Y2ZkNjI3MmUwZjE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC15eZF8dyNO8B8KdcpIqIiM1tXnoq9NDbfKKm8T55tyWTt glsChC9IiEBPChpL3yk27lZrSc9sSLU/hmmJDQeyHSzBzwd5wlz9Qow8+J4BXlnd Mt6KyA0A8YILihYhm/HfzJ7ioT76khL2XJtD+VABhwTQYXY6Gw+i41ZYKNuy+vfY 5XjXBnjPxLoMx43yWMhcR3zOXe80Sylu5GmVyELdQfP0oTuz/gv3nIW3CpsCkh52 MZ2H0g+4xfsEXK5MFfUDFWfvSCLtZiwFIMgGRbMtKetw1WXDSabJfOcg99YYsTRk GoeVhZf0tRaJjTdFS5B8ZC8tv45GUpDkzTaKg+BHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFvCyLfIKhFKuplSOWCH0WS2q+YUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU4MzlkOTY3LTk2MWMtNDA2Mi1iZjJmLWVmMWM1MDhmZWE4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBAIX6+VUBFSKG5lAeZvXxGQR0 X0hfSLGEHfAft8mvcSYV5tZTksXz4Qq61DBrVZj7Lz6l+vk9Qo5EaZFd6KkeRAx+ cwQlvUlR3T9D5rQQ/qG68/ywqwNYkiCXTNDBaDAYOjN4N+2PENO/j+1EW26uFrcO g0FrNk+ouzRdag4XzhZkQ/8bRAQvPf8Bo35CZjXN7DUZ2DO6l4pVO2edO6+nHlYt GTbfzxSncvqWk747HVYQD0ZYt4o7xSLiW+v3LwnTIhk7WV6YuB0hE0Uf7S6Pkdzy b0mbDoNHvqeFNsp15LHFS4vmTAXE5GJPIc8UgWQR27fQxIYfRmdfIieTv6zi80A= -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:56 2026 by rpki-client