$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa File: 8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa (raw, json) Hash identifier: sjxkPviRpXoCm8qb/PbKU3Zaam4FqsbwGldzXn09Kew= Subject key identifier: C4:78:55:8E:4D:DA:72:CA:97:55:AE:43:90:17:23:CE:C7:54:DB:24 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6B93F05A22865F9E347748635B970464E0A82887 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa Signing time: Mon 26 Oct 2026 04:20:37 +0000 ROA not before: Mon 26 Oct 2026 04:20:37 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:93:f0:5a:22:86:5f:9e:34:77:48:63:5b:97:04:64:e0:a8:28:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:37 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=dcdfa51400f0fd4f2e0491d9db9fbc44fe5b8e6603b802cafe4499487363eeb7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:b8:b2:a3:84:37:ee:49:25:45:3b:75:cd: df:f5:96:82:ea:d9:45:2b:8b:4d:a7:3a:16:cd:be: de:fd:c0:f2:37:33:73:91:bb:b7:6f:4f:aa:c0:28: f2:e8:2f:cf:ff:67:30:af:82:c8:c7:c1:44:16:97: a8:fd:a6:8c:5c:c4:24:86:ac:ea:c6:d1:fc:e2:b2: 48:9e:f3:a0:75:cf:a6:46:d4:a5:55:d7:14:21:c9: 82:63:0b:14:9c:dd:1b:b6:4d:a2:56:66:36:ad:19: 9b:6f:46:0a:56:2d:38:e6:0d:7b:4c:ff:c0:c4:06: 93:91:6b:60:82:99:8e:29:5d:b0:d1:21:f6:7b:94: 28:de:bb:a5:bb:c5:56:2f:3c:a2:9a:94:63:08:ea: 6f:1d:f3:2a:29:99:0e:ce:84:43:50:7e:3e:12:23: 38:e5:7f:0f:1d:ac:5c:06:29:93:1a:55:ad:24:4a: 25:12:4f:52:1c:62:40:3e:53:81:36:61:1d:8f:38: 44:ab:b6:1e:d8:0f:15:e6:cf:66:ac:42:5c:3c:14: 04:4c:93:15:99:33:41:15:f1:6f:bf:3f:c7:02:63: d2:96:7b:1b:cf:16:49:b5:00:92:92:04:0c:75:da: 39:94:c2:3b:67:2c:1d:73:86:0f:6e:3d:5e:83:30: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:55:8E:4D:DA:72:CA:97:55:AE:43:90:17:23:CE:C7:54:DB:24 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6::/48 Signature Algorithm: sha256WithRSAEncryption 39:ff:98:e9:df:bc:c8:10:41:aa:c2:a4:5b:66:c4:8b:97:40: 1a:a3:b6:b7:08:6c:2d:d0:a8:11:95:80:d6:4e:ad:4a:6c:12: a2:45:59:4b:bd:3a:22:d0:fd:d6:a6:ea:28:4b:e0:dc:cc:1a: e8:5e:4c:c0:d4:d4:ef:55:bf:74:5a:19:56:25:e7:5e:24:06: b7:4c:db:73:33:d4:80:19:6f:b7:fb:f1:0b:51:eb:b8:d8:8e: 42:7e:09:b1:41:70:47:19:4b:54:5d:a3:3e:a1:79:63:ed:2d: ee:4c:4e:a0:0d:05:47:53:ab:4d:45:cc:8a:98:19:41:0c:f8: 03:a3:56:55:5c:3e:52:b3:54:ca:2a:e8:52:8a:41:69:e6:f1: e7:a1:b9:ad:b5:50:52:08:6d:14:29:20:17:1c:f6:f8:d8:25: 0d:7c:dc:1a:00:5b:56:65:b4:71:b4:66:8d:8c:b0:64:50:c2: 0a:17:73:6d:5e:91:90:d7:2f:32:bf:0b:97:f0:48:d7:5c:08: 72:ff:3f:15:80:1a:42:ee:9f:d7:4f:06:4b:40:0d:26:3c:70: 18:26:ee:51:b4:79:35:ce:ab:0c:19:5f:62:3e:6e:19:65:6f: 0a:20:4b:fd:68:7c:4c:4a:55:b4:4b:97:e1:48:78:c0:71:a6: d1:2f:1d:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa5PwWiKGX540d0hjW5cEZOCoKIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDM3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2RmYTUxNDAwZjBmZDRmMmUwNDkxZDlkYjlmYmM0NGZl NWI4ZTY2MDNiODAyY2FmZTQ0OTk0ODczNjNlZWI3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUx7iyo4Q37kklRTt1zd/1loLq2UUri02nOhbNvt79wPI3 M3ORu7dvT6rAKPLoL8//ZzCvgsjHwUQWl6j9poxcxCSGrOrG0fziskie86B1z6ZG 1KVV1xQhyYJjCxSc3Ru2TaJWZjatGZtvRgpWLTjmDXtM/8DEBpORa2CCmY4pXbDR IfZ7lCjeu6W7xVYvPKKalGMI6m8d8yopmQ7OhENQfj4SIzjlfw8drFwGKZMaVa0k SiUST1IcYkA+U4E2YR2POESrth7YDxXmz2asQlw8FARMkxWZM0EV8W+/P8cCY9KW exvPFkm1AJKSBAx12jmUwjtnLB1zhg9uPV6DMFKxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxHhVjk3acsqXVa5DkBcjzsdU2yQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg0NzJlY2Y1LTVkM2QtNGU0Ni1iNjk5LWUyOTY0NGI0MmZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAYwDQYJKoZIhvcNAQELBQADggEBADn/mOnfvMgQQarCpFtmxIuX QBqjtrcIbC3QqBGVgNZOrUpsEqJFWUu9OiLQ/dam6ihL4NzMGuheTMDU1O9Vv3Ra GVYl514kBrdM23Mz1IAZb7f78QtR67jYjkJ+CbFBcEcZS1Rdoz6heWPtLe5MTqAN BUdTq01FzIqYGUEM+AOjVlVcPlKzVMoq6FKKQWnm8eehua21UFIIbRQpIBcc9vjY JQ183BoAW1ZltHG0Zo2MsGRQwgoXc21ekZDXLzK/C5fwSNdcCHL/PxWAGkLun9dP BktADSY8cBgm7lG0eTXOqwwZX2I+bhllbwogS/1ofExKVbRLl+FIeMBxptEvHRI= -----END CERTIFICATE-----Generated at Tue Oct 27 08:47:08 2026 by rpki-client