$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa File: 6ccba569-7caf-468c-b996-e7a0034a48e4.roa (raw, json) Hash identifier: HjfQDA/zmSJeiQE/eAk32L8cIAsOJVJbQxIJQVncJxQ= Subject key identifier: 17:1B:D3:70:21:CD:29:58:5D:45:77:8F:F0:02:FD:4A:78:2E:90:64 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 570BA5D17E2B21697F934370C524A3D858162C45 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa Signing time: Sun 11 Oct 2026 15:08:09 +0000 ROA not before: Sun 11 Oct 2026 15:08:09 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0b:a5:d1:7e:2b:21:69:7f:93:43:70:c5:24:a3:d8:58:16:2c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:09 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=ee0fe5366f998b2dd1d4279c3bac740905cfcec6f83daf4245124b22f7003f34, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:b5:3a:36:f3:fd:44:d3:e6:ec:f3:5f:8c: 44:c3:41:4d:62:8f:89:fd:a6:75:32:d6:65:d8:7c: f4:9a:3f:04:10:93:49:e3:1b:0f:5a:8d:b3:e8:ff: c6:26:74:b7:50:08:61:8c:af:98:b4:d7:09:9c:76: 96:c8:a4:8e:d8:d2:fa:b8:42:b2:da:7d:1c:ed:67: a1:bf:cd:1d:ed:ab:09:9a:77:ee:5d:a8:75:a2:4d: c2:08:be:08:86:7d:44:08:de:51:8f:3c:72:f5:dc: 81:76:8a:bf:8c:96:ad:1b:ec:80:ad:7f:56:77:0b: 84:dd:00:9d:2f:2a:0a:9a:97:d2:62:c6:b7:08:08: c2:7e:0a:e1:9c:2b:cb:49:b4:2a:db:e6:11:a4:90: 35:83:30:4e:9d:27:49:5d:d8:92:6e:0b:bd:8f:9b: 25:0e:59:ab:32:0e:ed:55:30:5e:74:1e:af:2b:f1: ea:1f:29:3e:59:1a:1a:99:7f:2b:b6:87:15:77:49: cd:81:54:63:39:8e:ff:38:a2:a1:a0:d4:70:d1:f4: f5:4c:4d:31:7c:c6:11:4d:6f:6d:65:ad:e0:9e:d9: 99:ba:6a:62:cb:d4:c4:b9:9c:3a:48:a0:ef:36:63: db:75:37:3f:ff:c0:08:67:8a:22:49:9b:e2:35:91: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:D3:70:21:CD:29:58:5D:45:77:8F:F0:02:FD:4A:78:2E:90:64 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption 40:88:99:6f:9d:1d:1c:9e:9b:34:f7:ea:37:9a:d4:1a:01:50: 86:6f:e4:2f:6d:99:0f:3b:91:07:84:05:9b:db:28:95:85:99: 3c:a2:98:cd:78:66:04:98:86:d6:bb:ec:1d:d9:22:91:6b:e5: cf:9a:b5:81:51:f0:b0:01:a2:da:8c:65:b4:20:94:4d:28:a7: 94:29:94:88:84:74:6c:e4:31:78:94:0e:90:da:61:e9:c1:81: 01:92:a4:1c:ca:e4:b1:f6:fa:04:52:54:6a:17:2a:d5:f1:40: 37:6a:e4:66:53:0e:79:f9:a3:70:ec:a2:aa:35:df:80:09:55: 62:f4:d2:77:15:e3:87:b7:cb:ba:ec:58:b8:e4:7f:d4:65:6f: 53:e5:12:b5:80:96:fb:ec:0e:75:b9:d2:19:0b:c5:f1:55:dd: f9:8e:32:10:a9:7b:4e:5d:33:00:f7:ee:ea:d9:c3:14:ae:33: b3:7e:70:20:ee:a8:f2:04:39:e9:6b:26:84:5d:4a:58:5a:70: 3c:28:a9:20:26:6b:87:84:10:31:d9:9d:0f:fc:f1:b1:a6:0f: 78:6b:ae:00:da:3c:9c:bb:52:ab:02:8f:e1:3f:d2:26:9f:df: c8:2d:49:53:a3:62:a9:de:9a:1e:fd:af:d0:7a:36:f3:dc:a4: 17:ab:6b:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVwul0X4rIWl/k0NwxSSj2FgWLEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODA5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTBmZTUzNjZmOTk4YjJkZDFkNDI3OWMzYmFjNzQwOTA1 Y2ZjZWM2ZjgzZGFmNDI0NTEyNGIyMmY3MDAzZjM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/rLU6NvP9RNPm7PNfjETDQU1ij4n9pnUy1mXYfPSaPwQQ k0njGw9ajbPo/8YmdLdQCGGMr5i01wmcdpbIpI7Y0vq4QrLafRztZ6G/zR3tqwma d+5dqHWiTcIIvgiGfUQI3lGPPHL13IF2ir+Mlq0b7ICtf1Z3C4TdAJ0vKgqal9Ji xrcICMJ+CuGcK8tJtCrb5hGkkDWDME6dJ0ld2JJuC72PmyUOWasyDu1VMF50Hq8r 8eofKT5ZGhqZfyu2hxV3Sc2BVGM5jv84oqGg1HDR9PVMTTF8xhFNb21lreCe2Zm6 amLL1MS5nDpIoO82Y9t1Nz//wAhniiJJm+I1kRYLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFxvTcCHNKVhdRXeP8AL9SngukGQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZjY2JhNTY5LTdjYWYtNDY4Yy1iOTk2LWU3YTAwMzRhNDhlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAECImW+dHRyemzT36jea1BoB UIZv5C9tmQ87kQeEBZvbKJWFmTyimM14ZgSYhta77B3ZIpFr5c+atYFR8LABotqM ZbQglE0op5QplIiEdGzkMXiUDpDaYenBgQGSpBzK5LH2+gRSVGoXKtXxQDdq5GZT Dnn5o3Dsoqo134AJVWL00ncV44e3y7rsWLjkf9Rlb1PlErWAlvvsDnW50hkLxfFV 3fmOMhCpe05dMwD37urZwxSuM7N+cCDuqPIEOelrJoRdSlhacDwoqSAma4eEEDHZ nQ/88bGmD3hrrgDaPJy7UqsCj+E/0iaf38gtSVOjYqnemh79r9B6NvPcpBera4g= -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:53 2026 by rpki-client