$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa File: 8098420f-108f-4bc5-8d8c-6d62621f83e9.roa (raw, json) Hash identifier: QQk9A99Cdbmo/KbpZN8tDq7zahIs5tHGPCJbZ7s8oVc= Subject key identifier: 64:0E:BB:0B:92:63:14:21:47:66:8B:1F:2B:9F:C9:70:AA:0C:FD:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 07811817A100ADAB3F40608C584BB90FC926AF92 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa Signing time: Sun 18 Oct 2026 01:20:12 +0000 ROA not before: Sun 18 Oct 2026 01:20:12 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:81:18:17:a1:00:ad:ab:3f:40:60:8c:58:4b:b9:0f:c9:26:af:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 18 01:20:12 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=66466d5cce71907439a4a96e49ee1627bcf8bc38fb749673ec693c3b458e8584, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:80:00:bb:11:99:25:d0:86:53:5e:b8:1c: ca:2a:8d:f9:74:59:88:0e:6b:a9:28:c0:63:c3:2a: bd:05:d1:c8:cf:37:51:c2:83:12:69:ae:f2:cc:ed: ab:18:50:aa:4c:d9:a8:6e:6a:3d:9b:64:ae:89:3c: d5:1c:37:0c:fa:c7:78:04:a1:f7:7a:47:b7:46:d9: a9:f1:07:b9:55:2d:0d:b0:85:29:d1:d7:de:75:94: 2b:b6:cf:f3:91:06:19:de:da:e8:0c:e4:9e:7c:37: 62:8d:3a:82:7e:38:7b:52:68:92:76:61:03:34:de: 5b:54:b8:76:f9:2d:98:d5:5d:36:f9:97:bc:d6:cf: f7:bb:a8:18:90:78:62:17:36:20:e0:71:5c:5a:31: c8:54:d3:1f:35:45:e3:ad:2d:f1:29:31:60:02:c8: cd:cc:c5:f3:53:bd:44:0f:f0:a7:22:71:d5:1c:46: cd:16:46:3e:1f:42:e1:f9:90:b5:81:ee:d0:19:06: 69:31:a1:86:7c:97:69:1d:4e:d0:dd:43:39:74:e1: c6:e4:41:f0:3e:c2:26:27:e3:28:e6:28:ba:96:18: 91:76:4b:96:c5:d0:b6:dc:f5:10:55:4b:69:5e:6e: 02:c2:ed:8f:c1:3d:53:b1:64:b1:22:41:06:ee:04: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0E:BB:0B:92:63:14:21:47:66:8B:1F:2B:9F:C9:70:AA:0C:FD:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7012::/48 Signature Algorithm: sha256WithRSAEncryption 31:51:a2:8a:dd:12:fa:9e:7e:d0:77:55:c0:6e:b5:da:a3:31: 30:a5:f3:57:00:df:fc:7f:e0:01:c1:85:a4:16:65:be:9d:74: 8a:e1:2a:9d:0a:a5:0b:46:24:ad:d2:47:68:8d:b3:c5:8d:3a: 7a:24:85:b6:da:83:b4:32:a7:0c:2e:78:ae:8a:31:42:3d:cd: c7:83:2b:4a:7b:33:da:e7:de:3a:09:9b:65:13:7f:7c:18:35: 5d:fa:fc:17:58:45:1e:e4:99:40:45:35:23:2f:0c:30:9e:dc: 6b:7d:03:9f:6f:43:ed:21:83:39:cf:9d:ef:c5:7a:72:79:1f: 70:28:93:59:30:44:10:2a:8d:5a:aa:99:a4:cb:44:bd:1d:7a: 76:a5:4d:bd:00:ab:e6:cb:62:c7:a6:38:4a:46:b6:7b:5e:e1: 44:39:e1:7c:2e:0e:ec:ad:fc:78:87:7b:f4:cc:f8:20:e4:7e: b6:e8:12:5b:24:52:50:e5:a9:de:d3:55:5f:6e:e6:ce:27:34: 42:26:c7:13:af:ad:5e:8c:a5:2d:b0:ea:b7:a1:ed:59:29:13: c0:5a:55:64:31:05:a4:b8:73:6e:62:78:19:27:05:ea:3e:ee: 7f:55:94:f1:b5:c0:ec:6d:3e:c2:9d:f5:9a:49:45:46:04:5a: 0c:81:3c:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB4EYF6EAras/QGCMWEu5D8kmr5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDEyWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjQ2NmQ1Y2NlNzE5MDc0MzlhNGE5NmU0OWVlMTYyN2Jj ZjhiYzM4ZmI3NDk2NzNlYzY5M2MzYjQ1OGU4NTg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC53oAAuxGZJdCGU164HMoqjfl0WYgOa6kowGPDKr0F0cjP N1HCgxJprvLM7asYUKpM2ahuaj2bZK6JPNUcNwz6x3gEofd6R7dG2anxB7lVLQ2w hSnR1951lCu2z/ORBhne2ugM5J58N2KNOoJ+OHtSaJJ2YQM03ltUuHb5LZjVXTb5 l7zWz/e7qBiQeGIXNiDgcVxaMchU0x81ReOtLfEpMWACyM3MxfNTvUQP8KcicdUc Rs0WRj4fQuH5kLWB7tAZBmkxoYZ8l2kdTtDdQzl04cbkQfA+wiYn4yjmKLqWGJF2 S5bF0Lbc9RBVS2lebgLC7Y/BPVOxZLEiQQbuBO43AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZA67C5JjFCFHZosfK5/JcKoM/cEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgwOTg0MjBmLTEwOGYtNGJjNS04ZDhjLTZkNjI2MjFmODNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBIwDQYJKoZIhvcNAQELBQADggEBADFRoordEvqeftB3VcButdqj MTCl81cA3/x/4AHBhaQWZb6ddIrhKp0KpQtGJK3SR2iNs8WNOnokhbbag7Qypwwu eK6KMUI9zceDK0p7M9rn3joJm2UTf3wYNV36/BdYRR7kmUBFNSMvDDCe3Gt9A59v Q+0hgznPne/FenJ5H3Aok1kwRBAqjVqqmaTLRL0denalTb0Aq+bLYsemOEpGtnte 4UQ54XwuDuyt/HiHe/TM+CDkfrboElskUlDlqd7TVV9u5s4nNEImxxOvrV6MpS2w 6reh7VkpE8BaVWQxBaS4c25ieBknBeo+7n9VlPG1wOxtPsKd9ZpJRUYEWgyBPA0= -----END CERTIFICATE-----Generated at Tue Oct 27 04:27:04 2026 by rpki-client