$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5caf9b2f-4fee-4f04-afd7-b2c122b6b5bc.roa File: 5caf9b2f-4fee-4f04-afd7-b2c122b6b5bc.roa (raw, json) Hash identifier: wWgDQVeprzkmhrvRVQmfRyOOtBEk7/CQwoRSwWeq4Yk= Subject key identifier: 5F:C5:D5:CE:11:57:9F:D4:54:5D:D4:E6:3C:40:19:A3:2C:AF:6D:3F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5AA90169520253D87B29542DEACA701FB1A4D845 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5caf9b2f-4fee-4f04-afd7-b2c122b6b5bc.roa Signing time: Fri 30 Oct 2026 19:32:44 +0000 ROA not before: Fri 30 Oct 2026 19:32:44 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4304::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:01:69:52:02:53:d8:7b:29:54:2d:ea:ca:70:1f:b1:a4:d8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:44 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=34aa4c1d0b318c0afd5f968cd8ff32e828af67b56302b76af5fc23954aed892f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:28:64:94:76:43:99:ef:e5:d0:b7:bf:d4: 8d:94:7e:86:ad:a4:95:79:77:8b:49:83:b6:49:93: 98:84:c1:49:30:e3:f9:e5:b9:34:2e:72:56:4f:40: 7c:8b:8c:fc:6a:c0:5d:bd:23:17:12:71:8f:c8:16: 76:d9:f0:e0:a7:a7:32:62:a1:09:bb:a6:a9:c3:a9: b6:f8:c4:bb:90:63:21:71:b6:e3:6c:98:71:71:bc: 2b:c1:a9:54:69:2b:c1:c9:74:8c:e8:ee:fb:52:42: 2d:96:6a:46:d2:4f:57:5e:fa:98:e7:0c:17:d6:6a: 4f:c8:b0:5d:23:c9:91:b6:6c:54:b4:0f:a7:1e:5b: 03:1c:d9:c6:57:5f:e5:61:cc:8f:6e:e0:36:a2:80: 0c:2b:22:19:28:bb:49:c5:a0:20:27:4b:f0:f4:ff: 58:d8:0b:d7:8b:9a:91:1c:c8:02:de:d1:02:30:b3: 81:ba:fc:0e:c0:3f:50:4b:d6:ae:6c:38:91:25:a1: ee:00:b0:c7:b3:f7:e0:79:79:c1:0f:d8:34:b6:77: ca:09:e8:4b:58:8f:4c:28:d0:4e:37:6f:4d:51:b4: 2a:6b:ab:9c:0a:a1:1f:17:e1:c2:57:cb:67:f5:aa: 17:4d:38:c0:5c:22:21:0b:be:73:00:a8:61:86:d6: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C5:D5:CE:11:57:9F:D4:54:5D:D4:E6:3C:40:19:A3:2C:AF:6D:3F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5caf9b2f-4fee-4f04-afd7-b2c122b6b5bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4304::/46 Signature Algorithm: sha256WithRSAEncryption 3b:8d:33:1b:54:20:e3:1e:0c:6f:7c:0c:f7:66:37:ca:1a:ce: 1b:2e:e6:58:2b:57:30:a3:3a:4a:47:04:67:d7:01:4f:a3:b8: 9e:1f:15:82:e5:29:14:9f:44:b8:2e:f2:2a:cf:29:3c:05:2c: 92:2c:dc:92:1f:9d:40:e3:12:a2:a5:56:78:c1:ee:fe:03:4d: 67:ef:ce:66:36:de:43:ff:83:34:b8:f0:54:96:3b:f1:bd:f8: c9:a7:68:20:88:8c:49:bc:32:77:b1:49:20:01:94:98:42:a7: 6c:35:ca:8d:8f:63:d8:57:41:9e:23:58:94:d6:2a:b9:34:71: 73:fd:eb:46:77:8a:2f:79:ec:0f:db:a3:c3:06:ff:ed:a9:cc: c8:29:c9:50:d3:c3:38:d1:93:49:3c:dd:ef:77:d1:6c:05:a4: 5a:7a:9c:74:45:35:03:bd:af:4a:fe:ea:dd:fd:40:37:cb:2a: b6:e1:2a:ed:c9:5d:15:bd:ba:72:4f:ac:98:21:db:e8:34:86: 31:44:17:40:6f:76:92:65:3a:02:d5:2d:c9:6a:58:4a:0c:8e: 4a:df:83:9e:fa:13:09:1d:3c:c4:e7:0d:19:87:03:99:5b:07: 40:87:eb:8f:74:0c:f6:80:2c:17:fa:00:ad:04:c5:5d:48:a5: e5:10:4f:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWqkBaVICU9h7KVQt6spwH7Gk2EUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ0WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGFhNGMxZDBiMzE4YzBhZmQ1Zjk2OGNkOGZmMzJlODI4 YWY2N2I1NjMwMmI3NmFmNWZjMjM5NTRhZWQ4OTJmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4lChklHZDme/l0Le/1I2UfoatpJV5d4tJg7ZJk5iEwUkw 4/nluTQuclZPQHyLjPxqwF29IxcScY/IFnbZ8OCnpzJioQm7pqnDqbb4xLuQYyFx tuNsmHFxvCvBqVRpK8HJdIzo7vtSQi2WakbST1de+pjnDBfWak/IsF0jyZG2bFS0 D6ceWwMc2cZXX+VhzI9u4DaigAwrIhkou0nFoCAnS/D0/1jYC9eLmpEcyALe0QIw s4G6/A7AP1BL1q5sOJEloe4AsMez9+B5ecEP2DS2d8oJ6EtYj0wo0E43b01RtCpr q5wKoR8X4cJXy2f1qhdNOMBcIiELvnMAqGGG1kF/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX8XVzhFXn9RUXdTmPEAZoyyvbT8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVjYWY5YjJmLTRmZWUtNGYwNC1hZmQ3LWIyYzEyMmI2YjViYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQwQwDQYJKoZIhvcNAQELBQADggEBADuNMxtUIOMeDG98DPdmN8oa zhsu5lgrVzCjOkpHBGfXAU+juJ4fFYLlKRSfRLgu8irPKTwFLJIs3JIfnUDjEqKl VnjB7v4DTWfvzmY23kP/gzS48FSWO/G9+MmnaCCIjEm8MnexSSABlJhCp2w1yo2P Y9hXQZ4jWJTWKrk0cXP960Z3ii957A/bo8MG/+2pzMgpyVDTwzjRk0k83e930WwF pFp6nHRFNQO9r0r+6t39QDfLKrbhKu3JXRW9unJPrJgh2+g0hjFEF0BvdpJlOgLV LclqWEoMjkrfg576EwkdPMTnDRmHA5lbB0CH6490DPaALBf6AK0ExV1IpeUQT7U= -----END CERTIFICATE-----Generated at Tue Nov 3 22:21:12 2026 by rpki-client