$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/86ea1f4d-2188-485c-8edb-a6cf89f14d1f.roa File: 86ea1f4d-2188-485c-8edb-a6cf89f14d1f.roa (raw, json) Hash identifier: qCVHA4oV7Qo42cRLEHcX66PV7WWHvxSZQGQFaUzzM5o= Subject key identifier: F5:D1:8E:CA:61:C1:CB:FB:93:06:94:F4:2F:95:B9:9A:E2:F8:6F:BB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0677B109535BB49543D8AEDC64787DABEB6A362A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/86ea1f4d-2188-485c-8edb-a6cf89f14d1f.roa Signing time: Wed 07 Oct 2026 21:01:51 +0000 ROA not before: Wed 07 Oct 2026 21:01:51 +0000 ROA not after: Tue 05 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7406::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:77:b1:09:53:5b:b4:95:43:d8:ae:dc:64:78:7d:ab:eb:6a:36:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 7 21:01:51 2026 GMT Not After : Jan 5 23:59:59 2027 GMT Subject: serialNumber=b2c7b368798fa46b6deb7b1d921e2d89239f3a256ac97d3005177fd5480846da, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:da:9e:4b:fd:58:10:79:ca:45:77:de:05: 8f:0d:c8:a8:19:25:bd:18:b0:52:a9:e2:06:50:76: c5:9a:8e:5c:0c:3b:2d:17:88:f7:f3:38:1a:d6:fe: 19:06:a4:dd:90:c3:69:6c:9d:41:ed:ae:b7:c3:60: 0e:7b:67:3a:a9:82:93:89:59:f5:21:94:7e:bd:f4: 9d:4f:67:24:7d:fb:90:2c:c0:5b:fb:c2:54:a8:da: 3c:7e:2d:09:bf:e4:66:19:2d:a0:47:d1:4d:4c:73: bf:4d:bc:51:b2:8a:b7:74:2d:94:8d:ac:a4:c2:cb: a5:5b:a9:b6:59:fa:a5:73:2a:28:a6:b8:13:96:6c: 93:c5:f4:9d:41:03:58:70:f0:9e:d7:18:e0:f7:48: a6:0d:3e:db:16:5c:84:52:2c:ad:44:fd:07:5e:91: 04:8c:87:5e:3e:41:81:71:08:b6:02:f3:ed:22:f6: 1d:34:42:52:0b:54:27:06:0b:5d:22:d3:86:16:44: 9e:82:df:47:2b:5f:24:34:17:72:f3:4e:83:89:c8: 8a:b3:ce:b1:91:b5:7f:70:aa:f0:10:08:f1:f1:b7: 8e:25:59:a5:64:b7:b3:57:65:a1:d3:fe:75:64:43: e7:2e:15:9e:b3:eb:f0:7c:83:ea:63:f7:05:be:d1: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:8E:CA:61:C1:CB:FB:93:06:94:F4:2F:95:B9:9A:E2:F8:6F:BB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/86ea1f4d-2188-485c-8edb-a6cf89f14d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7406::/48 Signature Algorithm: sha256WithRSAEncryption 6e:9d:12:3d:cd:30:05:23:7e:22:7d:43:f8:79:f0:a4:20:91: c7:c8:c1:fb:92:7a:90:a5:9d:de:67:b2:40:a0:88:d3:a2:b4: d2:f3:e1:dc:66:11:22:ee:80:be:a6:7f:4f:10:50:46:c2:c3: dc:58:4d:94:4d:9e:19:77:57:49:47:b6:ea:3c:fb:ad:d9:b7: 16:c2:33:eb:46:67:ea:8a:be:25:34:ab:ff:68:5a:18:a5:25: 0e:8f:13:aa:31:cb:6e:d0:ae:20:44:11:29:9c:30:05:8d:34: f1:26:37:7d:a2:8a:a5:ce:5c:e0:b2:1c:be:cf:f1:1a:e5:4a: e4:8f:8f:a2:47:e9:b6:e0:b1:33:f9:e6:b6:28:6d:b0:58:3e: 17:24:eb:1d:86:ae:b5:9f:ce:6a:f1:74:3f:a5:a8:02:7c:e6: ae:c4:e2:7f:2c:18:63:16:36:d7:e8:0a:38:8e:52:a1:dc:dd: ad:a1:4a:2f:23:fb:cf:e9:5d:1d:51:44:07:c3:36:b5:4c:7e: 1e:b7:87:bf:8b:64:56:70:1b:92:42:15:5f:c6:96:fe:c3:76: 99:19:e6:9f:f7:d1:a1:08:cb:26:d1:e3:e0:e8:cd:d0:bb:18: 2e:00:48:17:0e:6d:27:d8:8d:70:e6:6f:27:9f:71:80:49:39: 3b:f3:52:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBnexCVNbtJVD2K7cZHh9q+tqNiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA3MjEwMTUxWhcNMjcwMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmM3YjM2ODc5OGZhNDZiNmRlYjdiMWQ5MjFlMmQ4OTIz OWYzYTI1NmFjOTdkMzAwNTE3N2ZkNTQ4MDg0NmRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwfdqeS/1YEHnKRXfeBY8NyKgZJb0YsFKp4gZQdsWajlwM Oy0XiPfzOBrW/hkGpN2Qw2lsnUHtrrfDYA57ZzqpgpOJWfUhlH699J1PZyR9+5As wFv7wlSo2jx+LQm/5GYZLaBH0U1Mc79NvFGyird0LZSNrKTCy6VbqbZZ+qVzKiim uBOWbJPF9J1BA1hw8J7XGOD3SKYNPtsWXIRSLK1E/QdekQSMh14+QYFxCLYC8+0i 9h00QlILVCcGC10i04YWRJ6C30crXyQ0F3LzToOJyIqzzrGRtX9wqvAQCPHxt44l WaVkt7NXZaHT/nVkQ+cuFZ6z6/B8g+pj9wW+0dbVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9dGOymHBy/uTBpT0L5W5muL4b7swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2ZWExZjRkLTIxODgtNDg1Yy04ZWRiLWE2Y2Y4OWYxNGQxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAYwDQYJKoZIhvcNAQELBQADggEBAG6dEj3NMAUjfiJ9Q/h58KQg kcfIwfuSepClnd5nskCgiNOitNLz4dxmESLugL6mf08QUEbCw9xYTZRNnhl3V0lH tuo8+63ZtxbCM+tGZ+qKviU0q/9oWhilJQ6PE6oxy27QriBEESmcMAWNNPEmN32i iqXOXOCyHL7P8RrlSuSPj6JH6bbgsTP55rYobbBYPhck6x2GrrWfzmrxdD+lqAJ8 5q7E4n8sGGMWNtfoCjiOUqHc3a2hSi8j+8/pXR1RRAfDNrVMfh63h7+LZFZwG5JC FV/Glv7DdpkZ5p/30aEIyybR4+DozdC7GC4ASBcObSfYjXDmbyefcYBJOTvzUsc= -----END CERTIFICATE-----Generated at Sun Oct 11 22:47:11 2026 by rpki-client