$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60768893-6ba9-464d-9028-0074e13282db.roa File: 60768893-6ba9-464d-9028-0074e13282db.roa (raw, json) Hash identifier: cNqYEnGEI8v1DPNoUZd3X9HQaDrPgGXez+X1sxEQMpU= Subject key identifier: A7:EF:F8:98:40:0F:19:0D:E3:8D:60:E0:E9:63:D3:24:AE:DD:86:E1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E1621B8532A6D5DA5EFE664158692594A18F038 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60768893-6ba9-464d-9028-0074e13282db.roa Signing time: Fri 30 Oct 2026 19:32:48 +0000 ROA not before: Fri 30 Oct 2026 19:32:48 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:431c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:16:21:b8:53:2a:6d:5d:a5:ef:e6:64:15:86:92:59:4a:18:f0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:48 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=cbc9a0f2ebe6a0f9f6a655d5f33601966d3e145dcd83c00c7e0f9223a63c16b7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:8c:84:05:a8:9a:75:40:2a:d1:72:f1:85: 5d:78:30:85:3c:78:4a:b6:ae:5c:26:01:ff:d4:94: 38:71:4f:56:f7:29:91:08:ce:ee:0f:c5:21:ca:ab: b2:1a:aa:27:4d:43:67:e2:e1:3e:03:0b:fb:ad:d2: f4:41:fd:77:ff:51:0c:e8:48:30:00:16:c2:c0:b3: f2:72:d1:97:4f:64:f7:3e:0a:d7:78:8a:99:c2:46: 8a:6a:85:13:db:25:24:f9:a5:38:41:2a:a3:e2:e6: 48:e3:56:10:7d:58:87:18:20:dc:2f:b2:a5:d0:b9: a5:3c:92:2f:f1:1b:75:4d:74:ab:54:3b:87:d7:e9: d1:3e:da:0f:26:72:e8:d8:e4:74:a7:e1:0f:d7:06: 35:8d:18:e0:bf:0b:c1:ad:86:79:8b:5b:ca:b5:cb: 49:df:55:1b:26:bf:70:7f:e2:f3:b8:16:c2:43:a8: f8:9b:8f:89:1c:dd:85:18:8d:ab:af:02:97:1c:bb: 9b:37:5e:f0:0a:b1:18:6b:20:7f:a7:85:3a:85:0e: c2:17:0d:42:30:6a:20:33:38:fb:15:b8:81:8e:9d: af:ac:6f:e9:01:96:d1:ef:9b:e4:29:63:4b:5b:52: 7b:92:f0:c9:cc:6f:b2:e8:21:de:7c:fc:4d:dc:71: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EF:F8:98:40:0F:19:0D:E3:8D:60:E0:E9:63:D3:24:AE:DD:86:E1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60768893-6ba9-464d-9028-0074e13282db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:431c::/46 Signature Algorithm: sha256WithRSAEncryption 4b:26:a5:05:12:2c:ae:44:c6:4e:1d:97:b9:99:fc:9e:f5:fa: d7:6d:3d:94:f1:a7:88:cb:9f:ce:f9:8b:9f:87:8f:04:49:f3: cd:b2:d5:15:6b:13:c6:5f:c7:eb:72:22:68:c8:56:ac:03:9b: d7:7c:fb:a2:08:33:83:52:38:73:0e:0e:8b:3f:ff:77:96:08: 90:e9:34:c7:50:1a:bc:58:a1:3c:8f:aa:73:f2:50:f2:a9:cc: 47:d3:e6:dd:b4:15:be:1d:93:9c:f5:b5:36:fd:76:6d:69:c2: 2c:ac:29:32:a1:41:8d:64:09:8a:11:59:c3:27:ba:ef:f0:80: 85:f0:3b:e4:e9:cf:2b:99:d3:ae:51:ef:11:0e:71:c9:90:35: 87:ee:1c:43:be:f5:ba:ce:ba:7b:ec:c7:91:7b:aa:04:9f:12: 75:c7:cb:29:ac:2e:ad:79:a7:b3:05:3f:ea:90:7c:bf:39:3f: ff:3a:74:5b:11:f4:2e:08:d8:d3:7c:c0:94:c1:96:1d:9a:de: c0:83:0a:d4:b7:39:67:2a:17:ce:43:c6:a9:da:5c:f1:3a:55: 46:a4:9a:50:a2:27:8c:d3:8a:ce:75:fc:c1:06:e9:0c:19:a1: 01:2c:e4:18:45:5f:45:94:21:f9:52:dc:45:b5:4e:be:76:74: 69:a7:28:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPhYhuFMqbV2l7+ZkFYaSWUoY8DgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ4WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmM5YTBmMmViZTZhMGY5ZjZhNjU1ZDVmMzM2MDE5NjZk M2UxNDVkY2Q4M2MwMGM3ZTBmOTIyM2E2M2MxNmI3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6OIyEBaiadUAq0XLxhV14MIU8eEq2rlwmAf/UlDhxT1b3 KZEIzu4PxSHKq7IaqidNQ2fi4T4DC/ut0vRB/Xf/UQzoSDAAFsLAs/Jy0ZdPZPc+ Ctd4ipnCRopqhRPbJST5pThBKqPi5kjjVhB9WIcYINwvsqXQuaU8ki/xG3VNdKtU O4fX6dE+2g8mcujY5HSn4Q/XBjWNGOC/C8GthnmLW8q1y0nfVRsmv3B/4vO4FsJD qPibj4kc3YUYjauvApccu5s3XvAKsRhrIH+nhTqFDsIXDUIwaiAzOPsVuIGOna+s b+kBltHvm+QpY0tbUnuS8MnMb7LoId58/E3ccSD9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUp+/4mEAPGQ3jjWDg6WPTJK7dhuEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwNzY4ODkzLTZiYTktNDY0ZC05MDI4LTAwNzRlMTMyODJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxwwDQYJKoZIhvcNAQELBQADggEBAEsmpQUSLK5Exk4dl7mZ/J71 +tdtPZTxp4jLn875i5+HjwRJ882y1RVrE8Zfx+tyImjIVqwDm9d8+6IIM4NSOHMO Dos//3eWCJDpNMdQGrxYoTyPqnPyUPKpzEfT5t20Fb4dk5z1tTb9dm1pwiysKTKh QY1kCYoRWcMnuu/wgIXwO+TpzyuZ065R7xEOccmQNYfuHEO+9brOunvsx5F7qgSf EnXHyymsLq15p7MFP+qQfL85P/86dFsR9C4I2NN8wJTBlh2a3sCDCtS3OWcqF85D xqnaXPE6VUakmlCiJ4zTis51/MEG6QwZoQEs5BhFX0WUIflS3EW1Tr52dGmnKI8= -----END CERTIFICATE-----Generated at Wed Nov 4 23:47:13 2026 by rpki-client