$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa File: 60ba2726-e7de-4e0c-acfb-e096c701569c.roa (raw, json) Hash identifier: voVmESFacOO9oFTvNKJmmYsoAcK86diy1QI9Rs5LBJQ= Subject key identifier: 2C:E7:C3:38:E2:E4:41:FD:7C:5B:0E:2B:96:22:6E:00:C4:45:C6:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5A7ADCDA521DD0BCD1544AEF4EB1CD708DE3D975 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa Signing time: Mon 26 Oct 2026 04:10:22 +0000 ROA not before: Mon 26 Oct 2026 04:10:22 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 2600:f0f0:5501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7a:dc:da:52:1d:d0:bc:d1:54:4a:ef:4e:b1:cd:70:8d:e3:d9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:22 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d243826c2285488ac7f59e205167583e3243e2d0476e1e0ef07d1eb95a7afef2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:66:20:5d:cb:02:d0:c9:94:fb:1f:f1:68: 07:51:7e:4e:65:fe:35:15:20:d0:b5:4b:87:9c:44: ad:1e:ff:25:50:07:22:c3:59:6d:db:0f:43:51:47: 78:e6:a0:19:10:92:b0:c9:2a:8a:00:53:eb:c7:99: 4e:11:24:40:f0:22:bc:48:a6:82:62:b1:03:e6:6e: c9:7e:df:6a:3a:9e:32:7b:0a:95:32:40:09:84:c7: 6d:f3:2d:f2:37:89:2d:97:3c:c3:8e:eb:41:4c:35: cf:ac:04:e7:ec:e8:f4:f7:9f:5b:56:ac:43:fa:a6: fa:cb:52:1f:99:48:71:d7:38:3d:66:ae:57:68:2a: 5c:78:e7:bf:fd:4a:c0:09:98:91:41:5e:ca:4c:7a: 3c:60:e5:16:a3:8d:3c:a7:cc:bb:37:54:8c:d7:8f: 49:b5:e8:b1:0f:02:94:a4:f0:41:cb:9c:ae:4c:63: e8:ce:e4:08:82:78:46:39:e4:55:57:d2:6a:90:e2: dd:13:c0:2b:bd:ba:20:20:c3:33:a0:af:7e:3d:9c: 3f:00:bc:48:43:12:56:cd:15:a7:8c:76:a5:32:a5: ae:11:d0:aa:e2:23:d9:db:65:5f:e7:3e:9a:57:c8: fa:c2:e1:6e:c9:51:3d:09:1e:d7:91:62:85:1c:7e: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:C3:38:E2:E4:41:FD:7C:5B:0E:2B:96:22:6E:00:C4:45:C6:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5501::/48 Signature Algorithm: sha256WithRSAEncryption 8a:92:3f:37:43:23:df:97:94:18:c0:42:cc:ed:00:b1:b7:4c: 2e:59:5d:03:1c:0f:c9:f6:49:0e:b4:62:8f:5d:91:43:59:1f: de:99:09:1a:32:2a:52:34:16:af:2c:ef:b6:6e:e2:07:00:ab: ca:7a:09:10:44:14:44:38:e8:04:94:b1:80:58:4c:c3:c9:53: 94:40:66:6d:ec:4d:c6:72:23:bf:00:f8:69:e9:d1:df:70:a0: b0:66:ef:7f:29:27:35:01:a6:3d:bf:9b:f4:77:85:90:26:60: 24:29:64:d2:0e:0b:93:65:32:e2:e4:f9:4d:e6:31:a5:7e:f9: 06:f5:2a:14:2d:6f:7e:fb:a4:49:3a:a5:66:9e:a2:49:12:62: d3:39:0b:66:57:02:50:54:7d:51:c1:00:35:5b:a4:c9:82:b5: aa:b2:54:31:93:64:c0:86:0d:68:8d:57:15:08:5c:30:91:5d: da:c4:69:1e:71:22:49:5a:3b:b2:01:9b:d1:21:94:5d:8d:4b: ea:57:d2:93:f5:65:f2:87:1e:57:0c:2c:53:60:eb:ce:d3:87: 24:24:cc:2e:2d:4e:cc:71:ee:c5:dc:62:a4:f7:75:fa:98:48: 27:88:83:ad:50:dd:1a:eb:09:4b:ca:d1:c3:03:b1:74:83:ed: 5b:93:e3:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWnrc2lId0LzRVErvTrHNcI3j2XUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDIyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjQzODI2YzIyODU0ODhhYzdmNTllMjA1MTY3NTgzZTMy NDNlMmQwNDc2ZTFlMGVmMDdkMWViOTVhN2FmZWYyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6AmYgXcsC0MmU+x/xaAdRfk5l/jUVINC1S4ecRK0e/yVQ ByLDWW3bD0NRR3jmoBkQkrDJKooAU+vHmU4RJEDwIrxIpoJisQPmbsl+32o6njJ7 CpUyQAmEx23zLfI3iS2XPMOO60FMNc+sBOfs6PT3n1tWrEP6pvrLUh+ZSHHXOD1m rldoKlx457/9SsAJmJFBXspMejxg5RajjTynzLs3VIzXj0m16LEPApSk8EHLnK5M Y+jO5AiCeEY55FVX0mqQ4t0TwCu9uiAgwzOgr349nD8AvEhDElbNFaeMdqUypa4R 0KriI9nbZV/nPppXyPrC4W7JUT0JHteRYoUcftoBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULOfDOOLkQf18Ww4rliJuAMRFxqEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwYmEyNzI2LWU3ZGUtNGUwYy1hY2ZiLWUwOTZjNzAxNTY5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQEwDQYJKoZIhvcNAQELBQADggEBAIqSPzdDI9+XlBjAQsztALG3 TC5ZXQMcD8n2SQ60Yo9dkUNZH96ZCRoyKlI0Fq8s77Zu4gcAq8p6CRBEFEQ46ASU sYBYTMPJU5RAZm3sTcZyI78A+Gnp0d9woLBm738pJzUBpj2/m/R3hZAmYCQpZNIO C5NlMuLk+U3mMaV++Qb1KhQtb377pEk6pWaeokkSYtM5C2ZXAlBUfVHBADVbpMmC taqyVDGTZMCGDWiNVxUIXDCRXdrEaR5xIklaO7IBm9EhlF2NS+pX0pP1ZfKHHlcM LFNg687ThyQkzC4tTsxx7sXcYqT3dfqYSCeIg61Q3RrrCUvK0cMDsXSD7VuT49A= -----END CERTIFICATE-----Generated at Tue Oct 27 15:16:19 2026 by rpki-client