$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: /3Jlx8+8wOp2Rhx7hkTYIQihYiFP8B4o2F7AO8kGIZU= Subject key identifier: 67:1C:5B:2A:6E:B6:14:12:F8:60:3A:B5:80:86:21:9E:61:53:59:5B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 775B6BF32F901AB588F98687549780DFBA453C3B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Sun 11 Oct 2026 15:08:11 +0000 ROA not before: Sun 11 Oct 2026 15:08:11 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5b:6b:f3:2f:90:1a:b5:88:f9:86:87:54:97:80:df:ba:45:3c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:11 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=a50f7de2ceaacfa2335197e46b5466cc902d9230edcf69547317b478b736c068, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:90:74:23:4a:c2:f8:17:3e:63:39:aa:ae: d5:10:33:b1:4c:18:d4:f7:02:8d:d1:7e:7a:ef:29: fc:bf:90:30:df:47:96:3d:d7:16:f9:4a:1b:33:5a: 93:05:79:0a:16:d9:e3:90:19:82:2a:de:1a:ad:73: 11:f1:8e:cb:e4:84:e2:d7:6b:41:6f:a4:00:bc:1f: b2:89:b8:70:c9:51:bb:ed:86:f2:4e:6d:03:69:8c: 56:8b:80:01:49:8f:bc:5b:fa:bf:fa:52:1d:b7:0f: e4:a2:e2:0a:0c:10:3a:7f:4b:4f:fd:f0:cb:b2:29: 13:60:77:a6:67:3d:20:ff:67:c4:97:31:f4:5a:c2: 67:04:b6:7c:72:75:5f:0a:83:7a:09:84:d3:19:67: db:cc:63:99:36:d5:67:85:f8:80:7c:41:8f:55:88: 43:52:bc:66:a5:e8:59:74:e5:46:9c:2d:33:7b:0d: d7:3f:65:a7:f1:10:86:35:93:65:b5:4d:07:4d:ad: 13:6b:3e:1d:f8:f6:f8:08:d1:aa:8a:f6:f2:3c:0a: 82:15:5e:99:53:c2:f5:8b:f2:f9:0d:fb:2b:68:21: 9b:b0:3d:6e:42:60:e4:f9:aa:c1:63:8d:15:f2:07: dc:24:93:9d:30:97:80:6e:5e:e8:2a:39:9e:89:b6: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1C:5B:2A:6E:B6:14:12:F8:60:3A:B5:80:86:21:9E:61:53:59:5B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 5d:51:29:88:72:3e:4b:b9:56:f4:e4:2a:5c:fa:23:3f:2c:38: b2:63:75:4a:ff:ad:22:77:7a:04:f6:3f:b3:dc:20:18:8e:29: bb:31:b0:de:77:c7:f1:09:2c:b1:dc:fe:ce:3e:aa:6a:b5:98: e1:81:39:03:51:22:a6:37:34:15:4c:02:ee:c7:90:7e:0c:2c: af:69:b2:1c:c7:d5:d3:54:0e:60:13:32:3e:dc:19:c8:35:f7: 42:8a:34:60:ce:62:72:87:df:27:b0:2f:09:d0:3f:f4:90:62: 11:0f:0f:77:6c:f5:31:5d:d5:b6:f9:3c:54:54:bd:85:bf:9c: c9:60:c5:04:a6:0a:c6:66:33:ca:05:46:e8:5f:e5:90:00:c5: 0b:66:28:d9:e0:43:2a:0c:5a:b4:1e:97:b0:f9:e8:5a:2a:ca: 0a:db:3d:2b:fa:37:69:61:7e:30:c6:e5:a5:30:8f:f9:67:ef: 04:c7:9d:70:66:bb:d2:ec:cd:8a:a2:08:e0:ce:49:04:93:f3: 5a:f7:1a:e4:d5:79:72:21:e9:de:dd:bf:0f:b4:e3:eb:c5:cd: 10:1c:a7:a7:96:9d:7a:be:8d:c8:e4:98:e0:ae:71:27:db:97: 4f:77:cb:a4:2b:b5:e2:a1:23:b6:69:08:1e:75:fc:25:19:e3: 4b:ad:77:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd1tr8y+QGrWI+YaHVJeA37pFPDswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODExWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTBmN2RlMmNlYWFjZmEyMzM1MTk3ZTQ2YjU0NjZjYzkw MmQ5MjMwZWRjZjY5NTQ3MzE3YjQ3OGI3MzZjMDY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZZZB0I0rC+Bc+YzmqrtUQM7FMGNT3Ao3RfnrvKfy/kDDf R5Y91xb5ShszWpMFeQoW2eOQGYIq3hqtcxHxjsvkhOLXa0FvpAC8H7KJuHDJUbvt hvJObQNpjFaLgAFJj7xb+r/6Uh23D+Si4goMEDp/S0/98MuyKRNgd6ZnPSD/Z8SX MfRawmcEtnxydV8Kg3oJhNMZZ9vMY5k21WeF+IB8QY9ViENSvGal6Fl05UacLTN7 Ddc/ZafxEIY1k2W1TQdNrRNrPh349vgI0aqK9vI8CoIVXplTwvWL8vkN+ytoIZuw PW5CYOT5qsFjjRXyB9wkk50wl4BuXugqOZ6JttvhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZxxbKm62FBL4YDq1gIYhnmFTWVswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAF1RKYhyPku5VvTkKlz6Iz8s OLJjdUr/rSJ3egT2P7PcIBiOKbsxsN53x/EJLLHc/s4+qmq1mOGBOQNRIqY3NBVM Au7HkH4MLK9pshzH1dNUDmATMj7cGcg190KKNGDOYnKH3yewLwnQP/SQYhEPD3ds 9TFd1bb5PFRUvYW/nMlgxQSmCsZmM8oFRuhf5ZAAxQtmKNngQyoMWrQel7D56Foq ygrbPSv6N2lhfjDG5aUwj/ln7wTHnXBmu9LszYqiCODOSQST81r3GuTVeXIh6d7d vw+04+vFzRAcp6eWnXq+jcjkmOCucSfbl093y6QrteKhI7ZpCB51/CUZ40utd7s= -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:19 2026 by rpki-client