$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa File: 657ed07e-fe87-4071-8960-e0b18e49fe3c.roa (raw, json) Hash identifier: itUQ8/dtL+xfbuCI9Z59sfRlU/MZJlWRmCdXmUiEjqM= Subject key identifier: C2:EC:B5:05:67:8A:3A:88:29:E0:D8:21:FA:35:B8:34:CA:C2:A4:4D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 452AA65CD35E7ECC016945330C59A5B2ABA960B3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa Signing time: Sun 04 Oct 2026 00:30:16 +0000 ROA not before: Sun 04 Oct 2026 00:30:16 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2a:a6:5c:d3:5e:7e:cc:01:69:45:33:0c:59:a5:b2:ab:a9:60:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 4 00:30:16 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=f8fd4863ccee1e595a4b2a6fce575a9d3ff7ef919f44f53acf135a536cfd96fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:f3:37:2a:2e:04:f5:85:1d:51:6d:5f:6c: 49:0f:92:5d:9d:67:9b:4a:66:a2:44:7b:46:1e:e1: ff:a7:ee:1d:17:8f:b7:e2:51:ce:f8:eb:2d:5e:37: 12:cb:66:e7:10:12:c7:80:11:db:7a:58:97:4b:d2: d5:24:ad:b9:98:b4:a5:5c:73:c8:3b:6b:9e:6f:0f: 2b:da:d0:ce:fb:f9:00:51:c7:75:7d:ad:4c:aa:68: e9:92:99:d6:94:9d:9f:0e:7b:fe:b9:74:8d:9d:b7: d6:36:03:ae:36:bf:25:85:ae:92:ab:2b:cf:82:96: c5:a1:d9:ec:4e:80:8b:92:7e:aa:b0:2c:df:51:ea: d7:7f:94:27:8c:da:19:e1:70:a9:eb:70:bd:30:b6: 24:83:a9:96:d7:06:fb:98:65:fa:9c:c2:66:91:35: 5f:39:81:ef:d9:61:1e:39:f4:5f:e2:b8:3e:1d:52: 4f:e9:2b:7c:fa:79:1f:53:ff:f3:a8:3c:5b:db:b7: 6a:df:9f:d4:b1:71:ee:c2:b9:28:e8:0d:b2:9d:5a: 26:74:c9:56:7d:d3:f2:63:fd:55:be:73:09:3e:77: 99:52:98:4c:d1:08:7f:b5:b6:8b:92:29:82:14:ba: df:85:fb:57:32:00:87:17:0d:6b:8a:a6:f1:23:27: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:B5:05:67:8A:3A:88:29:E0:D8:21:FA:35:B8:34:CA:C2:A4:4D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/40 Signature Algorithm: sha256WithRSAEncryption 8b:2f:16:ae:27:1c:59:0f:e4:b4:33:bc:d2:df:92:83:c1:a6: 3c:c1:11:11:ef:7b:2c:5a:97:34:b9:a4:2c:d8:17:f4:d6:82: 5f:69:f2:12:ed:aa:ac:fc:87:e1:09:81:f0:06:0e:5e:4d:cd: 30:04:da:30:b1:47:9c:1a:4f:ec:cd:5f:0a:e1:59:35:5e:f9: c0:86:52:16:ec:1d:6c:25:4e:cc:4d:60:97:a6:a3:ae:76:c5: c7:d3:28:d2:5d:fb:f6:a9:9e:fe:38:88:47:de:53:55:ae:4a: 99:79:8b:06:e8:01:58:57:6b:f9:fb:13:c9:c3:03:1e:49:51: c2:1b:c1:59:9a:d7:6b:8b:9d:08:4d:33:7c:00:3f:83:90:e9: 67:59:62:ab:b7:ee:59:f4:44:00:8f:fb:1c:c4:1f:e9:a3:e8: dd:06:70:21:69:9c:9f:e3:a8:15:26:7b:ec:f9:3e:96:31:b0: 9e:ab:63:1a:a2:43:c0:7f:28:25:02:a5:8c:37:71:34:d0:2f: fa:d0:27:bb:33:1f:52:41:71:c9:59:d3:c9:ba:af:38:07:92: c3:49:6d:db:4c:3d:84:c9:f2:7f:ae:b4:1a:c2:0d:6b:0b:24: bf:19:50:52:3a:41:92:30:5d:08:2f:be:17:d1:b7:b0:60:59: 10:7d:16:5f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURSqmXNNefswBaUUzDFmlsqupYLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA0MDAzMDE2WhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGZkNDg2M2NjZWUxZTU5NWE0YjJhNmZjZTU3NWE5ZDNm ZjdlZjkxOWY0NGY1M2FjZjEzNWE1MzZjZmQ5NmZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC95PM3Ki4E9YUdUW1fbEkPkl2dZ5tKZqJEe0Ye4f+n7h0X j7fiUc746y1eNxLLZucQEseAEdt6WJdL0tUkrbmYtKVcc8g7a55vDyva0M77+QBR x3V9rUyqaOmSmdaUnZ8Oe/65dI2dt9Y2A642vyWFrpKrK8+ClsWh2exOgIuSfqqw LN9R6td/lCeM2hnhcKnrcL0wtiSDqZbXBvuYZfqcwmaRNV85ge/ZYR459F/iuD4d Uk/pK3z6eR9T//OoPFvbt2rfn9Sxce7CuSjoDbKdWiZ0yVZ90/Jj/VW+cwk+d5lS mEzRCH+1touSKYIUut+F+1cyAIcXDWuKpvEjJ5oXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwuy1BWeKOogp4Ngh+jW4NMrCpE0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY1N2VkMDdlLWZlODctNDA3MS04OTYwLWUwYjE4ZTQ5ZmUzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQTANBgkqhkiG9w0BAQsFAAOCAQEAiy8WriccWQ/ktDO80t+Sg8Gm PMEREe97LFqXNLmkLNgX9NaCX2nyEu2qrPyH4QmB8AYOXk3NMATaMLFHnBpP7M1f CuFZNV75wIZSFuwdbCVOzE1gl6ajrnbFx9Mo0l379qme/jiIR95TVa5KmXmLBugB WFdr+fsTycMDHklRwhvBWZrXa4udCE0zfAA/g5DpZ1liq7fuWfREAI/7HMQf6aPo 3QZwIWmcn+OoFSZ77Pk+ljGwnqtjGqJDwH8oJQKljDdxNNAv+tAnuzMfUkFxyVnT ybqvOAeSw0lt20w9hMnyf660GsINawskvxlQUjpBkjBdCC++F9G3sGBZEH0WXw== -----END CERTIFICATE-----Generated at Sun Oct 4 17:03:26 2026 by rpki-client