$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa File: 710c8ea0-f6b4-4fbe-9653-22174e063099.roa (raw, json) Hash identifier: wXEn0Iy8/qwgviUT8WNmMpl0aabkU/2Lfp2UfemifeM= Subject key identifier: 0F:87:D2:AF:48:6A:3E:45:B1:CF:7E:50:48:21:97:91:93:59:C3:5E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6A0C311F8D8C446229795C2F87E6E77E9C11259D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa Signing time: Mon 05 Oct 2026 00:10:05 +0000 ROA not before: Mon 05 Oct 2026 00:10:05 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0c:31:1f:8d:8c:44:62:29:79:5c:2f:87:e6:e7:7e:9c:11:25:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 5 00:10:05 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=b7609bd22afd9b4d1311efaf85858e24e997b40579afefe0043f2b1babbb602a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:c3:18:a8:5e:16:01:1e:79:7c:70:b4:3d: 05:7d:8a:d2:5f:87:8e:e4:c4:03:d4:15:3d:33:99: c4:33:60:03:43:35:5f:63:53:dc:15:dd:da:e2:b1: 61:a6:9a:ad:ce:c2:3f:fd:d6:88:bc:71:76:04:c4: 9c:f1:2d:b4:ca:cb:e5:2b:90:f3:a5:dd:03:a1:d8: 76:c9:f1:46:40:b2:ef:33:0b:84:47:43:4a:16:dc: 2d:73:f8:be:37:80:3c:d3:3e:65:39:ef:23:78:a7: c7:1a:d4:cb:03:a6:cd:18:ad:56:5f:4c:ca:b5:1f: 0f:a6:7a:cf:4e:dc:71:07:0d:ad:40:f3:dd:72:fb: dc:89:6f:e1:aa:28:ff:2a:f3:f7:c4:81:cb:30:5c: 3d:2d:4d:91:1a:53:4d:10:f6:dd:8c:ae:fe:29:88: f5:d3:fe:b5:bb:83:a9:f1:94:f3:ca:b0:57:51:90: 1f:15:26:7e:2d:df:76:c5:9c:3c:74:83:f7:4f:4e: 24:f7:fd:70:da:fa:26:4b:f6:87:fa:81:72:09:0f: e8:b8:a5:de:61:ea:20:47:ad:49:be:62:fb:88:dd: 4e:4f:90:fc:d0:82:fc:59:20:20:9c:78:11:69:47: 44:96:84:f6:d9:e9:4d:3a:7b:b9:82:4f:19:2a:54: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:D2:AF:48:6A:3E:45:B1:CF:7E:50:48:21:97:91:93:59:C3:5E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:90::/44 Signature Algorithm: sha256WithRSAEncryption 4e:4a:44:1e:15:f8:f5:04:0f:0d:7b:7e:ed:ea:59:de:d3:2b: ac:7e:5e:9e:7c:4b:19:bd:da:cc:49:67:68:92:7a:aa:55:fd: 0d:88:2d:41:c1:42:ac:44:58:a9:97:b4:18:ef:52:60:c9:54: cb:7e:2f:8e:28:f6:5a:81:fb:0f:4d:87:a9:d2:64:0b:91:a3: fc:dc:aa:3f:89:9d:eb:e1:c8:39:27:8a:4b:dd:7d:c7:b2:f3: 99:e2:1b:39:9e:8f:6f:fa:57:a6:e3:16:f6:7b:bd:44:67:c9: f3:ba:b3:d4:0b:1d:e5:71:2c:65:f2:ec:75:56:c3:ac:00:ae: c4:a4:c4:99:81:17:ca:17:3b:cf:3d:59:24:b9:7d:bd:2d:94: 86:be:d6:8f:70:01:18:98:34:d0:13:47:e4:71:59:e0:26:1a: 54:e8:8d:98:f2:15:b2:9e:3a:a5:f6:bd:ae:c5:45:80:ed:c9: 92:7c:0a:5f:d5:c9:1d:2f:fc:f8:9d:fe:4d:ad:2f:dc:5f:2d: db:f3:99:53:2b:a1:ed:07:7a:9e:07:18:3b:7c:90:51:91:ab: 5c:eb:a6:3e:0a:24:57:8b:e9:4f:c5:e8:f0:b9:35:7a:fc:1d: 5c:a6:98:11:95:77:10:a7:b6:c2:e2:4b:2b:cc:01:15:fd:09: 32:53:03:15 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUagwxH42MRGIpeVwvh+bnfpwRJZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA1MDAxMDA1WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzYwOWJkMjJhZmQ5YjRkMTMxMWVmYWY4NTg1OGUyNGU5 OTdiNDA1NzlhZmVmZTAwNDNmMmIxYmFiYmI2MDJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOKcMYqF4WAR55fHC0PQV9itJfh47kxAPUFT0zmcQzYAND NV9jU9wV3drisWGmmq3Owj/91oi8cXYExJzxLbTKy+UrkPOl3QOh2HbJ8UZAsu8z C4RHQ0oW3C1z+L43gDzTPmU57yN4p8ca1MsDps0YrVZfTMq1Hw+mes9O3HEHDa1A 891y+9yJb+GqKP8q8/fEgcswXD0tTZEaU00Q9t2Mrv4piPXT/rW7g6nxlPPKsFdR kB8VJn4t33bFnDx0g/dPTiT3/XDa+iZL9of6gXIJD+i4pd5h6iBHrUm+YvuI3U5P kPzQgvxZICCceBFpR0SWhPbZ6U06e7mCTxkqVDQPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD4fSr0hqPkWxz35QSCGXkZNZw14wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxMGM4ZWEwLWY2YjQtNGZiZS05NjUzLTIyMTc0ZTA2MzA5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAJAwDQYJKoZIhvcNAQELBQADggEBAE5KRB4V+PUEDw17fu3qWd7T K6x+Xp58Sxm92sxJZ2iSeqpV/Q2ILUHBQqxEWKmXtBjvUmDJVMt+L44o9lqB+w9N h6nSZAuRo/zcqj+JnevhyDknikvdfcey85niGzmej2/6V6bjFvZ7vURnyfO6s9QL HeVxLGXy7HVWw6wArsSkxJmBF8oXO889WSS5fb0tlIa+1o9wARiYNNATR+RxWeAm GlTojZjyFbKeOqX2va7FRYDtyZJ8Cl/VyR0v/Pid/k2tL9xfLdvzmVMroe0Hep4H GDt8kFGRq1zrpj4KJFeL6U/F6PC5NXr8HVymmBGVdxCntsLiSyvMARX9CTJTAxU= -----END CERTIFICATE-----Generated at Tue Oct 27 01:38:53 2026 by rpki-client