$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: hP2w92MiIqsOMDmiOzzi/Vv6OL5BHS7AeU5yuBa4Zgg= Subject key identifier: 87:20:F3:C2:CE:4C:91:CD:EB:78:DF:FB:20:8D:99:42:02:0C:55:04 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0B27431530EF27602C195AAB7284E653126AC7E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Mon 26 Oct 2026 04:20:38 +0000 ROA not before: Mon 26 Oct 2026 04:20:38 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:27:43:15:30:ef:27:60:2c:19:5a:ab:72:84:e6:53:12:6a:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:38 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b7a7694bed53c551d53feafd8eeb90897974b2f673bbbaafdbcf5f5552c13738, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:d9:12:6f:08:c7:19:ec:b9:f1:9b:74:cc: e4:71:2d:c1:3d:44:56:4d:e8:44:7b:16:1d:5d:a7: 44:1f:ed:d6:f8:f1:a8:2a:69:8b:7e:a0:49:c3:a4: 6c:14:51:7d:3a:82:78:51:9a:9b:a0:15:ec:89:55: 0f:18:b4:61:36:15:c0:89:44:55:73:de:a9:3e:84: 57:b2:58:41:b8:27:c6:1b:e6:40:5c:a3:62:54:c8: dc:e7:34:3b:92:30:57:6a:3d:17:0f:48:aa:70:c1: 84:12:5a:4f:77:0f:33:69:66:e4:29:a6:52:af:12: 05:5e:84:76:ee:b9:06:2c:4e:89:b1:64:32:22:5e: f1:49:43:12:6e:0f:82:14:c7:8d:13:8e:85:62:4b: 8d:51:06:ac:32:27:78:67:e0:fd:ee:c0:ce:9e:2f: ff:c3:bb:f8:1a:1a:04:d1:84:32:97:9b:83:12:d9: 3c:2d:60:0a:47:d2:59:31:c8:eb:f0:d3:b2:32:f5: 18:15:92:2f:71:c7:a3:ae:6e:10:d5:e4:ea:2a:c8: f2:10:96:30:55:b4:90:e8:48:ae:73:d9:65:9e:e1: 83:51:05:80:2e:36:9f:b4:fa:b2:21:d4:d6:05:02: eb:b6:43:1a:34:16:89:73:03:d4:c3:76:56:f8:e7: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:20:F3:C2:CE:4C:91:CD:EB:78:DF:FB:20:8D:99:42:02:0C:55:04 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 9e:78:16:87:3a:c7:3a:d8:57:2d:e1:83:f9:bb:b0:5a:55:f8: b9:5e:7a:eb:6a:a1:62:f5:85:f4:45:76:60:2d:40:a7:39:ab: 8f:50:16:4a:9a:d8:ea:22:f2:eb:69:f1:76:8d:67:a8:76:10: 1b:b2:a8:17:6f:ce:5f:38:6f:ad:23:52:9f:42:39:35:bf:14: c3:f2:12:a0:81:bf:77:df:ed:c2:bf:5e:25:1d:3d:41:a4:51: 4c:01:45:72:dc:15:64:30:71:a9:c9:ef:54:86:5c:29:e0:e6: c1:d3:f2:25:4b:b8:f5:de:05:d3:9a:1f:41:41:2f:05:6a:a9: 7b:9f:a4:81:a5:a6:07:c5:84:0c:35:ec:cb:4b:c4:79:4c:d9: 19:60:ca:a4:57:d1:b1:67:b8:4b:31:f0:00:6f:06:38:93:dc: 20:19:48:c9:40:ad:56:2b:ce:66:4f:21:d5:a5:be:02:78:ff: c5:ba:b2:a4:80:9c:ba:95:cb:f2:46:b5:b1:ef:56:38:a8:f3: 31:85:24:11:0f:25:eb:87:fe:71:cc:58:09:80:66:5e:46:12: ef:ae:15:43:4d:3b:f7:4b:5a:0d:0c:a9:93:4c:2b:65:cf:ca: 13:d0:06:72:36:62:31:a3:52:46:08:02:18:ba:e3:fd:91:d8: c8:fb:c6:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCydDFTDvJ2AsGVqrcoTmUxJqx+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDM4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2E3Njk0YmVkNTNjNTUxZDUzZmVhZmQ4ZWViOTA4OTc5 NzRiMmY2NzNiYmJhYWZkYmNmNWY1NTUyYzEzNzM4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHGNkSbwjHGey58Zt0zORxLcE9RFZN6ER7Fh1dp0Qf7db4 8agqaYt+oEnDpGwUUX06gnhRmpugFeyJVQ8YtGE2FcCJRFVz3qk+hFeyWEG4J8Yb 5kBco2JUyNznNDuSMFdqPRcPSKpwwYQSWk93DzNpZuQpplKvEgVehHbuuQYsTomx ZDIiXvFJQxJuD4IUx40TjoViS41RBqwyJ3hn4P3uwM6eL//Du/gaGgTRhDKXm4MS 2TwtYApH0lkxyOvw07Iy9RgVki9xx6OubhDV5OoqyPIQljBVtJDoSK5z2WWe4YNR BYAuNp+0+rIh1NYFAuu2Qxo0FolzA9TDdlb454WFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhyDzws5Mkc3reN/7II2ZQgIMVQQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAJ54Foc6xzrYVy3hg/m7sFpV +LleeutqoWL1hfRFdmAtQKc5q49QFkqa2Ooi8utp8XaNZ6h2EBuyqBdvzl84b60j Up9COTW/FMPyEqCBv3ff7cK/XiUdPUGkUUwBRXLcFWQwcanJ71SGXCng5sHT8iVL uPXeBdOaH0FBLwVqqXufpIGlpgfFhAw17MtLxHlM2RlgyqRX0bFnuEsx8ABvBjiT 3CAZSMlArVYrzmZPIdWlvgJ4/8W6sqSAnLqVy/JGtbHvVjio8zGFJBEPJeuH/nHM WAmAZl5GEu+uFUNNO/dLWg0MqZNMK2XPyhPQBnI2YjGjUkYIAhi64/2R2Mj7xjY= -----END CERTIFICATE-----Generated at Tue Oct 27 00:57:44 2026 by rpki-client