$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa File: 73712e14-51d5-41db-bcf2-73aa504e6eab.roa (raw, json) Hash identifier: EkTRThWwwKS9dYT2JUwM0suWe1H/XCkmmxV8wfZ+1DA= Subject key identifier: 5B:E5:6B:4B:28:B2:EC:EB:2E:FF:00:8D:01:41:76:45:19:39:6C:25 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 09F9FCD68CB8D005EDCDB3C45646F00AF8D5E24A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa Signing time: Mon 26 Oct 2026 04:10:07 +0000 ROA not before: Mon 26 Oct 2026 04:10:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f9:fc:d6:8c:b8:d0:05:ed:cd:b3:c4:56:46:f0:0a:f8:d5:e2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c6173c2adfbad88bd096d5fa112ae1bf507a7e0d14a15968b2305d01aee1bcc0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:d3:af:41:e5:68:94:c2:db:5f:88:d6:58: f8:6a:26:34:c1:8a:5b:57:a0:32:00:fa:e2:82:b7: de:f3:9b:59:c8:5d:77:9d:5c:ff:1d:49:f1:bb:84: 14:7b:19:12:18:e4:61:a4:44:39:56:f2:d5:ef:3c: 25:b3:ac:5f:5b:3f:7a:64:99:09:eb:e2:4b:c5:3a: dd:3a:d9:49:a5:dd:c8:af:d8:bb:2a:81:b5:db:31: 57:e3:10:e8:13:21:f3:f6:5c:af:df:58:5a:4c:30: 7e:72:7a:9b:2a:46:ec:c9:be:9d:bd:60:28:93:72: d8:43:8b:27:7a:98:8a:82:5a:a9:8f:02:ef:28:f2: 21:13:f6:21:71:0b:c2:17:28:57:8f:f9:dd:d4:32: 92:9c:a1:b6:bd:74:ed:5d:e0:13:c1:f5:27:49:eb: 75:e2:4e:84:2e:f3:59:0e:1b:f5:32:fe:12:99:e9: e6:f1:9c:e4:f7:6e:04:f1:4e:eb:25:b0:5d:9c:13: 04:ee:76:ba:9b:ba:24:43:72:98:63:c3:01:23:94: a0:58:5b:56:4f:68:4a:22:6b:fb:fe:0b:21:7b:90: 14:80:02:5a:ca:b6:33:4d:4b:d4:61:77:a6:1e:04: 90:2e:4f:18:da:6a:68:96:30:7e:4c:d8:bb:5b:37: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E5:6B:4B:28:B2:EC:EB:2E:FF:00:8D:01:41:76:45:19:39:6C:25 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:80::/48 Signature Algorithm: sha256WithRSAEncryption 2b:23:24:9f:05:00:c3:fa:2a:fa:d2:37:94:93:b7:c6:be:87: 97:c9:1c:82:b6:8c:0d:12:fc:d5:ad:3e:8a:7e:f3:11:55:1c: b0:b7:b1:33:eb:54:d4:5b:27:4d:7f:de:e8:da:f8:b2:e1:98: 3e:f0:8d:0a:1b:3c:7b:82:4b:7a:85:b8:90:a9:78:44:a8:d9: 02:56:60:f2:6f:f5:11:a4:e5:aa:4f:a1:cf:b6:c1:2e:f9:5f: f0:2c:af:64:50:82:ce:0e:9a:e0:8f:34:04:70:3d:4b:96:d9: 09:ec:ee:b3:76:73:ce:4d:6b:9d:75:b4:28:42:6b:83:77:fb: 45:fe:1a:f0:e4:81:58:59:51:3b:83:18:3f:03:65:ae:49:e4: 6d:52:ba:ad:3d:1c:c7:59:03:f3:14:17:61:52:0b:2c:61:a2: e4:08:c6:12:86:e5:d2:4b:a1:55:1f:64:b9:77:f2:2f:28:4c: 37:14:3e:6c:f7:f0:34:b2:06:9f:d6:62:ef:fe:b0:ae:1b:0c: ab:0b:53:80:c6:49:49:64:a0:58:3c:a2:f8:ea:5d:fe:01:e2: 7f:77:40:33:ff:ff:eb:4e:fe:76:34:51:d9:70:c9:9a:13:44: 84:a0:48:85:5e:27:6d:3b:49:18:b8:46:a2:5e:cb:c0:f3:5c: 6a:6c:fa:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCfn81oy40AXtzbPEVkbwCvjV4kowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjE3M2MyYWRmYmFkODhiZDA5NmQ1ZmExMTJhZTFiZjUw N2E3ZTBkMTRhMTU5NjhiMjMwNWQwMWFlZTFiY2MwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnCtOvQeVolMLbX4jWWPhqJjTBiltXoDIA+uKCt97zm1nI XXedXP8dSfG7hBR7GRIY5GGkRDlW8tXvPCWzrF9bP3pkmQnr4kvFOt062Uml3civ 2LsqgbXbMVfjEOgTIfP2XK/fWFpMMH5yepsqRuzJvp29YCiTcthDiyd6mIqCWqmP Au8o8iET9iFxC8IXKFeP+d3UMpKcoba9dO1d4BPB9SdJ63XiToQu81kOG/Uy/hKZ 6ebxnOT3bgTxTuslsF2cEwTudrqbuiRDcphjwwEjlKBYW1ZPaEoia/v+CyF7kBSA AlrKtjNNS9Rhd6YeBJAuTxjaamiWMH5M2LtbN96PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW+VrSyiy7Osu/wCNAUF2RRk5bCUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzczNzEyZTE0LTUxZDUtNDFkYi1iY2YyLTczYWE1MDRlNmVhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAIAwDQYJKoZIhvcNAQELBQADggEBACsjJJ8FAMP6KvrSN5STt8a+ h5fJHIK2jA0S/NWtPop+8xFVHLC3sTPrVNRbJ01/3uja+LLhmD7wjQobPHuCS3qF uJCpeESo2QJWYPJv9RGk5apPoc+2wS75X/Asr2RQgs4OmuCPNARwPUuW2Qns7rN2 c85Na511tChCa4N3+0X+GvDkgVhZUTuDGD8DZa5J5G1Suq09HMdZA/MUF2FSCyxh ouQIxhKG5dJLoVUfZLl38i8oTDcUPmz38DSyBp/WYu/+sK4bDKsLU4DGSUlkoFg8 ovjqXf4B4n93QDP//+tO/nY0UdlwyZoTRISgSIVeJ207SRi4RqJey8DzXGps+rA= -----END CERTIFICATE-----Generated at Tue Oct 27 23:00:19 2026 by rpki-client