$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa File: 8979840e-82a9-441b-924a-93b9c7ea006b.roa (raw, json) Hash identifier: NUc4jG2W7VhtkfVoMlLEMmwNYrAIEtJRYO0EeuHudpE= Subject key identifier: 08:81:8D:8D:8C:94:2D:80:56:4F:DA:AB:EE:6F:78:61:37:7D:14:C0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 313167473191A2A4DF4329A16188B700B94AFED3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa Signing time: Mon 26 Oct 2026 04:10:25 +0000 ROA not before: Mon 26 Oct 2026 04:10:25 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:31:67:47:31:91:a2:a4:df:43:29:a1:61:88:b7:00:b9:4a:fe:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:25 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=52e83d298ab37090678905b182fbf290abe926301e6a76e7d46d369603f85d4e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:a3:a3:68:a3:61:f9:05:2d:de:70:03:98: 7a:21:df:78:f1:28:45:40:cd:be:27:3c:24:a7:a5: f9:d2:ab:b3:53:c0:79:80:b8:63:d3:af:10:e5:8d: f4:50:c5:a1:92:b1:95:29:62:cd:f2:4a:07:3b:da: b4:23:66:36:02:bc:61:0e:35:7b:92:d8:fc:40:c5: 1a:56:81:f9:f6:66:7f:cf:26:bd:ec:fa:4b:bc:71: db:f3:ea:a1:88:50:84:82:db:ff:c6:19:bd:b9:5c: 6e:b4:5c:bd:39:1e:4b:80:91:0c:04:b5:01:15:04: e7:a5:65:74:d7:0f:c5:67:1d:18:e4:dc:5c:72:39: e5:54:66:ab:c0:c8:30:7b:ca:b8:fd:b8:0f:cd:4d: d9:a8:84:ad:04:0e:21:28:74:fd:ae:f1:0d:93:e9: 0e:1a:f5:bb:d7:8f:92:c9:3e:8a:cd:66:f3:97:eb: 0d:d9:36:f9:01:73:f3:c4:df:d3:cf:44:f3:d4:ac: d4:8f:00:c5:31:dd:3c:d9:8d:7e:99:58:ae:da:81: 7b:92:a0:b3:3a:7d:79:bb:2a:d0:63:9e:47:be:c9: 37:2d:1f:c5:f0:62:b5:55:b9:da:2c:dd:25:21:e0: ac:81:0b:b1:66:dc:a2:58:65:84:f1:d8:0c:bd:c4: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:81:8D:8D:8C:94:2D:80:56:4F:DA:AB:EE:6F:78:61:37:7D:14:C0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:2::/48 Signature Algorithm: sha256WithRSAEncryption 41:4d:a5:6c:8d:ea:cd:67:86:84:1f:c0:d2:6c:1c:8d:31:73: 4a:3e:ca:b8:bf:9a:ac:65:04:cb:3b:70:c8:6a:73:e8:39:dd: dc:86:1c:9a:be:f1:a0:c4:f9:88:96:9d:57:db:38:84:ce:f8: 21:5c:74:52:cd:c6:03:81:bc:2a:7f:3e:ea:8b:66:d4:58:94: 4c:ee:fa:49:72:01:9d:a8:21:24:b1:01:6b:bc:a1:ea:20:b1: 71:08:1a:ca:26:41:8a:5e:f4:8f:be:07:cb:fa:58:41:72:64: 01:93:b8:6e:32:17:72:e9:15:d2:71:4f:37:73:57:45:3f:3e: 15:4c:1c:cf:e8:b9:5b:e5:ef:6e:75:fa:05:f7:44:94:10:6c: 33:4f:d1:2b:d1:18:f3:ef:e7:23:09:74:ad:ee:18:2c:81:28: 76:04:7e:d1:32:ed:d3:03:6d:61:1f:bd:50:e2:8e:23:b5:1c: 5a:c1:40:45:88:14:bf:1a:85:a4:36:dd:4f:46:c4:36:59:a7: ca:93:3d:1d:9c:19:18:b5:9e:13:0d:25:e2:2e:15:5f:71:4a: f1:37:49:43:88:b5:75:ca:d7:1e:b6:91:e0:d7:61:fd:27:f2: 01:e7:20:e7:c2:44:43:e2:27:19:6c:27:20:33:ad:c0:66:4d: 0c:e3:c1:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMTFnRzGRoqTfQymhYYi3ALlK/tMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDI1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmU4M2QyOThhYjM3MDkwNjc4OTA1YjE4MmZiZjI5MGFi ZTkyNjMwMWU2YTc2ZTdkNDZkMzY5NjAzZjg1ZDRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+aKOjaKNh+QUt3nADmHoh33jxKEVAzb4nPCSnpfnSq7NT wHmAuGPTrxDljfRQxaGSsZUpYs3ySgc72rQjZjYCvGEONXuS2PxAxRpWgfn2Zn/P Jr3s+ku8cdvz6qGIUISC2//GGb25XG60XL05HkuAkQwEtQEVBOelZXTXD8VnHRjk 3FxyOeVUZqvAyDB7yrj9uA/NTdmohK0EDiEodP2u8Q2T6Q4a9bvXj5LJPorNZvOX 6w3ZNvkBc/PE39PPRPPUrNSPAMUx3TzZjX6ZWK7agXuSoLM6fXm7KtBjnke+yTct H8XwYrVVudos3SUh4KyBC7Fm3KJYZYTx2Ay9xMNpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCIGNjYyULYBWT9qr7m94YTd9FMAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg5Nzk4NDBlLTgyYTktNDQxYi05MjRhLTkzYjljN2VhMDA2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAIwDQYJKoZIhvcNAQELBQADggEBAEFNpWyN6s1nhoQfwNJsHI0x c0o+yri/mqxlBMs7cMhqc+g53dyGHJq+8aDE+YiWnVfbOITO+CFcdFLNxgOBvCp/ PuqLZtRYlEzu+klyAZ2oISSxAWu8oeogsXEIGsomQYpe9I++B8v6WEFyZAGTuG4y F3LpFdJxTzdzV0U/PhVMHM/ouVvl7251+gX3RJQQbDNP0SvRGPPv5yMJdK3uGCyB KHYEftEy7dMDbWEfvVDijiO1HFrBQEWIFL8ahaQ23U9GxDZZp8qTPR2cGRi1nhMN JeIuFV9xSvE3SUOItXXK1x62keDXYf0n8gHnIOfCREPiJxlsJyAzrcBmTQzjwVI= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:18 2026 by rpki-client