$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa File: 720f42c5-101d-41af-abc8-bd64d6f08fe0.roa (raw, json) Hash identifier: l4ZThDo+1na9O+nqrhnEmK4UIaWOTbzL7VQ+rvrJ6UY= Subject key identifier: A1:1C:A9:E5:A3:17:6A:C0:D8:B7:9F:17:50:FD:C5:8D:03:23:FF:B4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 020078865891D36355DBC46E0923B4006779471A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa Signing time: Sun 18 Oct 2026 01:20:11 +0000 ROA not before: Sun 18 Oct 2026 01:20:11 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:78:86:58:91:d3:63:55:db:c4:6e:09:23:b4:00:67:79:47:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 18 01:20:11 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=d33386b65cd8f6939f8e98f8c9cfcd9c7eb72c83149ee1d20f1204ddba8286fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:6d:d2:aa:1f:cf:2c:b7:f7:f5:b0:9f:f0: 40:7d:8f:3c:21:de:a1:5f:d4:14:1f:b1:45:52:04: f3:f0:57:db:ac:97:e4:81:70:84:be:7d:6b:2d:db: 20:e1:75:3a:3d:dd:38:bf:32:fb:80:e0:ec:9a:4b: 43:e0:f1:cc:cd:69:a3:42:07:81:6b:28:3c:12:a8: e8:e3:c6:76:00:09:47:f6:b9:e4:a0:92:92:53:59: 51:87:1c:6d:4d:38:01:4c:dc:d9:af:42:fc:ca:37: f6:2e:27:48:37:eb:bf:ac:5d:e0:07:6d:3b:4e:eb: a2:c9:42:6f:f5:ed:41:96:f8:bb:fd:fe:74:f2:e3: 36:53:48:5e:67:e3:87:a5:7e:4e:a7:d1:2c:86:35: 04:41:aa:7b:ad:fb:14:73:64:b4:d3:32:db:35:f1: 9b:24:60:26:7d:43:1a:57:0c:d1:91:29:8c:54:7b: 29:98:36:a0:74:99:23:1b:3e:05:69:9e:ce:6f:a6: 37:cb:1d:bb:46:0d:1f:e8:5f:30:e0:e2:ac:23:17: 42:14:e4:4f:45:8f:4f:fa:9c:de:87:7e:19:82:b0: 3d:2f:f8:54:ba:d9:e7:2a:a4:67:1f:91:55:87:67: 1a:8f:ed:85:1b:a2:3a:37:cd:03:e1:71:14:d0:47: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:A9:E5:A3:17:6A:C0:D8:B7:9F:17:50:FD:C5:8D:03:23:FF:B4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 19:99:80:12:91:c1:45:7d:60:f5:22:35:f6:18:33:10:5c:4a: c5:cf:2f:e5:0b:16:f3:c6:72:8d:f0:af:80:d0:c7:31:cb:d5: 3b:55:a0:c7:36:f1:c1:5d:0e:38:bf:81:a2:b1:4f:7e:78:3c: 83:58:85:52:33:63:c2:bc:7d:d1:10:d0:88:a0:1a:b2:66:21: 04:3d:40:e4:6b:7a:9f:58:84:d7:59:eb:83:fe:b4:79:50:57: 63:cd:94:e5:76:89:01:e2:36:6e:14:a6:6b:59:ce:b9:4b:60: bf:68:c2:00:4a:d4:72:fd:ad:f6:54:59:bf:9a:3c:6a:b7:ee: b5:48:6a:cc:c7:6e:6a:d9:a8:89:76:bb:79:cf:77:ad:58:94: b4:29:8c:ae:39:b4:10:fe:60:52:f9:71:a8:71:72:eb:4a:c0: bf:3e:33:c2:fd:64:63:f0:15:10:6b:1b:47:63:34:e4:92:f0: 7b:f0:ed:4b:2e:07:c2:f2:41:11:28:f4:1b:71:6b:1f:d1:29: 04:c7:45:5b:a1:3c:97:7c:29:78:20:4c:0b:2a:ac:c3:d1:af: 24:a4:76:7f:a2:bf:b5:1c:f7:8a:c6:6e:81:90:24:4d:d7:2c: fc:44:ca:c8:0e:11:f2:a6:22:5f:2d:f3:96:0d:04:65:eb:8b: 6f:1e:86:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAgB4hliR02NV28RuCSO0AGd5RxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDExWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzMzODZiNjVjZDhmNjkzOWY4ZTk4ZjhjOWNmY2Q5Yzdl YjcyYzgzMTQ5ZWUxZDIwZjEyMDRkZGJhODI4NmZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOP23Sqh/PLLf39bCf8EB9jzwh3qFf1BQfsUVSBPPwV9us l+SBcIS+fWst2yDhdTo93Ti/MvuA4OyaS0Pg8czNaaNCB4FrKDwSqOjjxnYACUf2 ueSgkpJTWVGHHG1NOAFM3NmvQvzKN/YuJ0g367+sXeAHbTtO66LJQm/17UGW+Lv9 /nTy4zZTSF5n44elfk6n0SyGNQRBqnut+xRzZLTTMts18ZskYCZ9QxpXDNGRKYxU eymYNqB0mSMbPgVpns5vpjfLHbtGDR/oXzDg4qwjF0IU5E9Fj0/6nN6HfhmCsD0v +FS62ecqpGcfkVWHZxqP7YUbojo3zQPhcRTQR4aTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoRyp5aMXasDYt58XUP3FjQMj/7QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMGY0MmM1LTEwMWQtNDFhZi1hYmM4LWJkNjRkNmYwOGZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBABmZgBKRwUV9YPUiNfYYMxBc SsXPL+ULFvPGco3wr4DQxzHL1TtVoMc28cFdDji/gaKxT354PINYhVIzY8K8fdEQ 0IigGrJmIQQ9QORrep9YhNdZ64P+tHlQV2PNlOV2iQHiNm4UpmtZzrlLYL9owgBK 1HL9rfZUWb+aPGq37rVIaszHbmrZqIl2u3nPd61YlLQpjK45tBD+YFL5cahxcutK wL8+M8L9ZGPwFRBrG0djNOSS8Hvw7UsuB8LyQREo9Btxax/RKQTHRVuhPJd8KXgg TAsqrMPRrySkdn+iv7Uc94rGboGQJE3XLPxEysgOEfKmIl8t85YNBGXri28ehgk= -----END CERTIFICATE-----Generated at Wed Oct 28 15:33:48 2026 by rpki-client