$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c02fc96-49b6-490d-ab26-99a24189df66.roa File: 8c02fc96-49b6-490d-ab26-99a24189df66.roa (raw, json) Hash identifier: ArsyvmbuCVenggAjD4SZRMN1+Fgl+O2vYZ/O8qDB26s= Subject key identifier: 35:67:A5:04:4C:E4:7C:4A:CE:2E:C3:D1:00:F0:8E:4D:81:04:DD:EE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E1DCF60137187D8BF1BB6CE3E3DEBE43CEA3FE2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c02fc96-49b6-490d-ab26-99a24189df66.roa Signing time: Fri 30 Oct 2026 19:32:50 +0000 ROA not before: Fri 30 Oct 2026 19:32:50 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4320::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1d:cf:60:13:71:87:d8:bf:1b:b6:ce:3e:3d:eb:e4:3c:ea:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:50 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=d48b016e45899f71258bacb4d6806f367f9e3c408c2180a4b6739a4494274e48, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:26:b8:61:ff:02:9d:35:9f:e9:71:94:ec: a9:ee:14:65:2c:b9:8f:50:f5:ac:16:8c:68:0f:bc: 83:c4:3f:91:52:36:f4:13:8b:df:23:83:1a:5a:bd: 2c:cd:cd:15:2f:eb:d9:23:68:84:94:30:42:f2:e7: 52:ca:c0:33:fd:3b:7f:0c:51:60:0d:b5:23:3a:65: 21:c5:b9:32:02:d9:4c:aa:18:f3:22:9c:7b:e7:61: e7:7b:93:43:4d:31:b5:17:20:46:a9:14:d9:09:c9: 11:e3:e7:2e:d9:39:dc:49:cf:d6:13:d1:23:fb:1a: 89:89:bd:ec:bd:1c:4c:ba:36:39:0a:d1:b8:46:ec: 09:fc:13:e0:fa:c6:9d:d8:e9:41:9d:b6:90:9f:cb: 1a:07:08:e6:33:ea:6f:c6:39:92:c9:3a:50:1a:39: ce:a2:d8:69:af:95:dd:e5:6a:6a:c2:d6:83:d1:5a: 01:46:a3:0b:ad:a4:04:db:cf:ec:d6:24:f4:ea:eb: 14:1d:73:d3:4e:1e:bb:77:41:a8:4e:14:61:ef:2a: 43:fb:83:16:38:50:8f:e1:a2:ad:a2:00:47:1e:38: 9e:ff:f4:58:d7:06:76:e6:e6:bb:7b:0c:dc:32:0d: 34:2e:a6:16:02:39:fa:41:e7:94:cd:64:41:6d:fd: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:A5:04:4C:E4:7C:4A:CE:2E:C3:D1:00:F0:8E:4D:81:04:DD:EE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c02fc96-49b6-490d-ab26-99a24189df66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4320::/46 Signature Algorithm: sha256WithRSAEncryption 82:af:49:59:d0:87:01:76:11:fa:84:da:62:de:96:a7:ee:3d: fd:23:0b:ac:78:72:fe:21:a9:ff:6e:66:88:dc:76:3a:45:53: ab:7c:a9:05:24:3d:35:21:a6:01:6a:b9:09:75:05:0b:ad:25: dc:1b:40:af:40:52:84:ba:20:0f:da:46:29:98:e2:42:9a:76: 66:4f:40:08:5f:3c:12:5b:02:0e:cb:4e:e9:29:76:66:37:b1: 4e:6d:69:71:84:a0:56:9c:90:a6:a5:7c:87:a7:d6:ec:68:0d: 5b:72:ff:38:7a:97:0e:00:c2:af:87:d6:d0:fa:41:5f:f8:5e: 3b:2a:c3:ba:9e:a9:67:7d:d2:9b:f7:f6:25:69:60:15:2b:cf: 28:06:71:37:80:e1:fa:22:df:5f:72:52:f9:67:9e:5b:47:63: 37:32:34:31:a4:58:cf:e3:94:fb:d4:2e:bd:e3:a2:e5:03:cf: 6c:22:a9:9f:de:0b:42:91:05:63:73:75:61:53:cc:72:59:e8: 8a:79:a5:7c:8e:be:5e:8e:9a:d4:05:d0:84:84:28:4f:2c:13: 7d:7f:5f:4b:93:a6:16:32:ab:b4:0b:11:bc:0a:c0:d0:ef:60: da:c9:3a:c3:cd:36:e5:44:0f:02:3c:52:32:d2:8a:ee:76:0e: a7:06:e3:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPh3PYBNxh9i/G7bOPj3r5DzqP+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjUwWhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDhiMDE2ZTQ1ODk5ZjcxMjU4YmFjYjRkNjgwNmYzNjdm OWUzYzQwOGMyMTgwYTRiNjczOWE0NDk0Mjc0ZTQ4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJcya4Yf8CnTWf6XGU7KnuFGUsuY9Q9awWjGgPvIPEP5FS NvQTi98jgxpavSzNzRUv69kjaISUMELy51LKwDP9O38MUWANtSM6ZSHFuTIC2Uyq GPMinHvnYed7k0NNMbUXIEapFNkJyRHj5y7ZOdxJz9YT0SP7GomJvey9HEy6NjkK 0bhG7An8E+D6xp3Y6UGdtpCfyxoHCOYz6m/GOZLJOlAaOc6i2Gmvld3lamrC1oPR WgFGowutpATbz+zWJPTq6xQdc9NOHrt3QahOFGHvKkP7gxY4UI/hoq2iAEceOJ7/ 9FjXBnbm5rt7DNwyDTQuphYCOfpB55TNZEFt/WrnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNWelBEzkfErOLsPRAPCOTYEE3e4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhjMDJmYzk2LTQ5YjYtNDkwZC1hYjI2LTk5YTI0MTg5ZGY2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQyAwDQYJKoZIhvcNAQELBQADggEBAIKvSVnQhwF2EfqE2mLelqfu Pf0jC6x4cv4hqf9uZojcdjpFU6t8qQUkPTUhpgFquQl1BQutJdwbQK9AUoS6IA/a RimY4kKadmZPQAhfPBJbAg7LTukpdmY3sU5taXGEoFackKalfIen1uxoDVty/zh6 lw4Awq+H1tD6QV/4Xjsqw7qeqWd90pv39iVpYBUrzygGcTeA4foi319yUvlnnltH YzcyNDGkWM/jlPvULr3jouUDz2wiqZ/eC0KRBWNzdWFTzHJZ6Ip5pXyOvl6OmtQF 0ISEKE8sE31/X0uTphYyq7QLEbwKwNDvYNrJOsPNNuVEDwI8UjLSiu52DqcG4zA= -----END CERTIFICATE-----Generated at Wed Nov 4 23:47:05 2026 by rpki-client