$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/886b677a-4d04-436d-9e9f-0685ff8097f9.roa File: 886b677a-4d04-436d-9e9f-0685ff8097f9.roa (raw, json) Hash identifier: k6SJ6Yb+K5Kdjd3JvrGA7orfLE3CKxl/NF+h7MlgHzY= Subject key identifier: FF:67:06:BE:1D:5B:26:A4:B2:EA:B7:04:69:99:C4:D1:F2:D3:20:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6B3E5BA5DFBFE3EEC08BACFD4FA065F100C93C24 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/886b677a-4d04-436d-9e9f-0685ff8097f9.roa Signing time: Fri 23 Oct 2026 03:22:36 +0000 ROA not before: Fri 23 Oct 2026 03:22:36 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2600:f0f0:c100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:5b:a5:df:bf:e3:ee:c0:8b:ac:fd:4f:a0:65:f1:00:c9:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 23 03:22:36 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=787aff36fc37c50d3c3ce8668ee5cb6b1747c8d6a5e6e28ac25f1bf4427a71c1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:c7:c4:35:34:8e:70:95:34:34:1b:dd:3d: 44:08:30:5b:66:bc:e9:dd:3d:60:82:95:cc:dd:0f: 71:87:02:d4:7e:29:bb:96:17:a2:bb:55:0a:76:99: 6d:4c:ed:47:d1:34:48:38:c3:92:ac:0c:58:1f:00: 58:d1:7a:8a:44:ed:2c:e3:30:29:dc:20:07:5c:a2: 40:ae:7a:c8:33:9f:54:80:6a:6e:ac:25:f0:87:ff: b3:7f:22:3e:c5:70:81:b5:18:d7:12:45:76:36:bf: b8:96:33:16:c8:fc:6e:d2:6d:d1:41:8b:80:26:79: db:63:f9:72:0e:8a:ec:99:fb:71:2d:d4:be:73:25: 9f:42:c9:01:78:8f:af:f1:b4:73:09:17:4f:2d:dd: 10:2b:b3:86:8a:2f:02:be:43:17:c2:eb:ad:a2:dd: 04:c2:b1:fe:86:3f:42:b5:1f:21:3f:77:dc:40:94: 03:24:2d:92:bc:f6:f7:b1:0f:ff:85:89:14:1f:32: d5:0d:3b:41:e0:c2:ba:7e:0c:26:4c:ae:11:25:0c: 4d:40:3d:39:83:6d:bd:02:bb:e4:95:b1:2e:30:64: 7f:1e:59:db:b9:ab:d7:d9:cf:ad:0b:e3:38:4e:30: fe:f1:a6:09:ce:08:20:9c:97:70:3a:ae:c2:de:d7: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:06:BE:1D:5B:26:A4:B2:EA:B7:04:69:99:C4:D1:F2:D3:20:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/886b677a-4d04-436d-9e9f-0685ff8097f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c100::/40 Signature Algorithm: sha256WithRSAEncryption 4d:1f:cc:36:9c:70:79:bf:89:a5:2d:ef:e4:da:80:d9:63:9d: 72:67:02:63:3a:1c:06:c5:c9:b7:7c:10:9b:48:60:d1:55:60: 1f:3b:34:08:5c:aa:82:86:88:99:66:d8:d2:91:44:c6:60:b7: e8:39:8b:f0:fa:7d:c0:9a:6a:5b:cf:96:6d:48:df:61:16:9f: 3d:72:95:f3:b4:5e:43:1a:2f:92:cb:c5:b4:25:c9:f0:1f:80: a2:0e:95:ec:34:19:45:70:c9:f9:c9:03:50:b0:f1:fd:02:af: be:a5:01:e4:c3:cd:3c:69:ad:c0:4d:43:62:a2:b7:5a:85:28: de:97:59:14:ac:fc:05:a9:a2:8d:1b:d6:c2:29:4c:49:e1:bd: 1d:06:c7:95:15:cf:e9:b9:da:bb:b6:66:c8:9d:fb:3e:26:58: cb:05:31:bb:c5:18:4d:42:07:86:9c:7f:41:03:14:6b:5a:ec: 47:4d:78:f6:d7:6a:9c:de:4f:73:e2:e8:a9:9e:8a:a0:7d:59: f1:cb:de:db:46:8a:99:ab:a1:2c:a0:3f:04:6e:03:34:0d:f0: fe:d5:35:6f:b1:79:5d:f1:08:63:20:b4:52:83:72:88:cf:f6: f6:1d:29:91:a7:99:a5:16:bf:50:7b:b0:5b:39:1d:f6:aa:f6: fe:b9:6b:dd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaz5bpd+/4+7Ai6z9T6Bl8QDJPCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIzMDMyMjM2WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODdhZmYzNmZjMzdjNTBkM2MzY2U4NjY4ZWU1Y2I2YjE3 NDdjOGQ2YTVlNmUyOGFjMjVmMWJmNDQyN2E3MWMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxncfENTSOcJU0NBvdPUQIMFtmvOndPWCClczdD3GHAtR+ KbuWF6K7VQp2mW1M7UfRNEg4w5KsDFgfAFjReopE7SzjMCncIAdcokCuesgzn1SA am6sJfCH/7N/Ij7FcIG1GNcSRXY2v7iWMxbI/G7SbdFBi4Amedtj+XIOiuyZ+3Et 1L5zJZ9CyQF4j6/xtHMJF08t3RArs4aKLwK+QxfC662i3QTCsf6GP0K1HyE/d9xA lAMkLZK89vexD/+FiRQfMtUNO0Hgwrp+DCZMrhElDE1APTmDbb0Cu+SVsS4wZH8e Wdu5q9fZz60L4zhOMP7xpgnOCCCcl3A6rsLe17bDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/2cGvh1bJqSy6rcEaZnE0fLTIEIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg4NmI2NzdhLTRkMDQtNDM2ZC05ZTlmLTA2ODVmZjgwOTdmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwTANBgkqhkiG9w0BAQsFAAOCAQEATR/MNpxweb+JpS3v5NqA2WOd cmcCYzocBsXJt3wQm0hg0VVgHzs0CFyqgoaImWbY0pFExmC36DmL8Pp9wJpqW8+W bUjfYRafPXKV87ReQxovksvFtCXJ8B+Aog6V7DQZRXDJ+ckDULDx/QKvvqUB5MPN PGmtwE1DYqK3WoUo3pdZFKz8BamijRvWwilMSeG9HQbHlRXP6bnau7ZmyJ37PiZY ywUxu8UYTUIHhpx/QQMUa1rsR0149tdqnN5Pc+LoqZ6KoH1Z8cve20aKmauhLKA/ BG4DNA3w/tU1b7F5XfEIYyC0UoNyiM/29h0pkaeZpRa/UHuwWzkd9qr2/rlr3Q== -----END CERTIFICATE-----Generated at Mon Oct 26 10:01:35 2026 by rpki-client