$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f173826-52a2-4dd1-abfe-89b90f569698.roa File: 6f173826-52a2-4dd1-abfe-89b90f569698.roa (raw, json) Hash identifier: gqJdlQs3mmNA7R2+EdM18MazGcU2bPoXW2bGK32eADA= Subject key identifier: E0:13:BA:67:11:43:4B:D3:28:26:18:6D:43:41:DE:91:56:B2:E1:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 06366227A04351591C99DE9A0268DEF334C2BC5E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f173826-52a2-4dd1-abfe-89b90f569698.roa Signing time: Fri 13 Nov 2026 21:54:47 +0000 ROA not before: Fri 13 Nov 2026 21:54:47 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:4328::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:36:62:27:a0:43:51:59:1c:99:de:9a:02:68:de:f3:34:c2:bc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:54:47 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=7e54044db310bb0050ed8a8683880d4969dffc436981f30ff9bf78598bb6c838, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:48:e2:bd:07:45:47:02:e9:f6:bc:7a:78: 81:8e:5e:2d:3d:d7:ac:5b:8d:5f:85:26:a9:c0:ea: 33:bb:4c:48:f9:e0:9e:69:73:e6:a6:56:dc:51:e2: 4c:c9:2e:62:48:65:a5:fc:42:f8:43:63:35:ea:91: d1:03:44:16:b2:56:7b:35:65:12:f7:73:b4:8f:02: c4:9d:cb:24:7e:61:cd:0a:bb:9a:11:d5:a3:e3:b8: d5:a1:da:ef:e0:ab:86:d8:12:4f:a0:2b:49:d0:64: 34:68:d0:5e:f2:e4:6c:d4:e8:41:80:a9:73:34:f5: 09:74:74:84:b9:3d:19:43:bc:9f:0e:9c:1b:67:be: c1:7f:83:fe:c2:87:7b:77:6b:e5:0f:7b:8c:59:48: 75:37:17:a1:c0:d2:df:16:0f:a2:41:3a:bf:f1:d8: ce:c1:c2:8d:eb:f3:d1:54:60:04:67:5e:52:3d:b1: e7:3e:3f:74:89:e7:1b:d7:b0:0e:fd:e1:0f:e3:d3: 6f:cb:08:85:6b:1a:7a:e6:29:5e:44:cd:b0:84:f7: e5:24:c8:4c:71:15:22:bc:2f:94:d1:bf:86:90:ea: a2:35:fb:44:4e:2f:89:a9:81:80:33:ce:2a:83:58: cb:9e:c8:66:9b:47:b2:20:b7:62:d7:a6:5a:69:00: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:13:BA:67:11:43:4B:D3:28:26:18:6D:43:41:DE:91:56:B2:E1:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f173826-52a2-4dd1-abfe-89b90f569698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4328::/46 Signature Algorithm: sha256WithRSAEncryption 93:bf:96:2f:0f:7b:cb:c1:4e:bf:1f:df:3e:7b:bb:09:c3:41: df:fe:23:08:4a:a8:9b:cb:3f:02:7a:05:8c:2a:92:78:19:dc: cf:60:9a:03:8f:a8:02:87:5a:3b:25:f8:8c:1c:8e:9b:4e:79: f5:92:df:79:b8:80:e1:2f:1c:c9:ba:8a:4a:1e:8b:ab:01:ea: 4d:1c:30:7c:3c:1d:a2:c9:7f:e8:13:cd:6b:7a:5e:e6:b0:8b: 7f:5f:5c:4d:9d:ea:cf:40:ec:e5:d9:01:08:ad:cd:88:3c:bc: cb:e7:ba:e8:bc:99:d6:0a:60:8c:52:56:7f:dd:f9:55:dc:c0: ed:2c:5a:4c:95:6c:27:e1:ac:55:aa:4f:ed:2a:4c:1f:c1:31: 24:3c:36:7a:39:78:d1:c4:25:9a:bd:c3:d7:bc:c2:18:a3:82: 71:58:72:0b:8b:66:d4:62:50:d6:99:09:8c:65:d0:11:1c:7e: 3a:f6:fc:fb:2b:20:4a:a6:b9:cf:2b:09:41:81:bf:03:a0:71: f8:5a:d2:6a:cd:d3:9a:f9:7b:2c:e1:3a:96:d5:4e:6a:9a:97: 6b:2c:e5:da:50:fd:da:ae:fb:40:a2:b6:ee:c8:d5:2c:60:a2: ec:cd:fe:c9:a9:4a:9a:dc:c3:1d:69:90:95:30:4d:80:25:99: d9:0d:a8:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBjZiJ6BDUVkcmd6aAmje8zTCvF4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjE1NDQ3WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTU0MDQ0ZGIzMTBiYjAwNTBlZDhhODY4Mzg4MGQ0OTY5 ZGZmYzQzNjk4MWYzMGZmOWJmNzg1OThiYjZjODM4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7NUjivQdFRwLp9rx6eIGOXi0916xbjV+FJqnA6jO7TEj5 4J5pc+amVtxR4kzJLmJIZaX8QvhDYzXqkdEDRBayVns1ZRL3c7SPAsSdyyR+Yc0K u5oR1aPjuNWh2u/gq4bYEk+gK0nQZDRo0F7y5GzU6EGAqXM09Ql0dIS5PRlDvJ8O nBtnvsF/g/7Ch3t3a+UPe4xZSHU3F6HA0t8WD6JBOr/x2M7Bwo3r89FUYARnXlI9 sec+P3SJ5xvXsA794Q/j02/LCIVrGnrmKV5EzbCE9+UkyExxFSK8L5TRv4aQ6qI1 +0ROL4mpgYAzziqDWMueyGabR7Igt2LXplppAMFTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4BO6ZxFDS9MoJhhtQ0HekVay4bYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZmMTczODI2LTUyYTItNGRkMS1hYmZlLTg5YjkwZjU2OTY5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQygwDQYJKoZIhvcNAQELBQADggEBAJO/li8Pe8vBTr8f3z57uwnD Qd/+IwhKqJvLPwJ6BYwqkngZ3M9gmgOPqAKHWjsl+IwcjptOefWS33m4gOEvHMm6 ikoei6sB6k0cMHw8HaLJf+gTzWt6Xuawi39fXE2d6s9A7OXZAQitzYg8vMvnuui8 mdYKYIxSVn/d+VXcwO0sWkyVbCfhrFWqT+0qTB/BMSQ8Nno5eNHEJZq9w9e8whij gnFYcguLZtRiUNaZCYxl0BEcfjr2/PsrIEqmuc8rCUGBvwOgcfha0mrN05r5eyzh OpbVTmqal2ss5dpQ/dqu+0Citu7I1SxgouzN/smpSprcwx1pkJUwTYAlmdkNqO4= -----END CERTIFICATE-----Generated at Sun Nov 15 05:43:20 2026 by rpki-client