$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa File: 9064d4f5-965a-4659-9876-beff899ab4b1.roa (raw, json) Hash identifier: y2UovvmteOtN8teD+H/C8LhiI9c/anmZ/nSFVjH8m3M= Subject key identifier: 2F:35:74:A3:BD:3A:BD:B9:6C:8F:BE:AA:7A:3B:51:E0:CB:93:E1:69 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05FE50C645CB168FFFCB63BF2E0F9103C1DE9544 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa Signing time: Sun 11 Oct 2026 15:08:10 +0000 ROA not before: Sun 11 Oct 2026 15:08:10 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fe:50:c6:45:cb:16:8f:ff:cb:63:bf:2e:0f:91:03:c1:de:95:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:10 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=6962f9e8afffd454404fea6691763557f9c4379eb9cf0eb40305a96f708b680e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:b3:53:94:6e:60:d4:8a:05:9f:1c:3c:9d: 8f:9e:73:61:0b:0b:c6:12:b4:1d:2a:fd:ec:42:c1: 54:1e:14:79:59:20:ab:cb:ca:05:50:23:dc:df:c4: 10:ff:d6:b4:cf:21:e2:5c:21:93:3f:c4:f6:a4:25: cd:a0:81:d2:bb:0a:93:cd:1a:01:a8:48:3e:40:12: c1:b0:e4:c7:a2:ee:21:d3:96:d6:54:9a:23:06:1e: 59:b4:87:c9:9e:31:9b:89:da:7b:7d:8f:62:1b:31: 7b:a7:57:d3:c8:50:4a:b9:28:41:ee:c9:e2:d7:73: 9a:28:f6:0e:47:4f:7b:82:26:8e:95:9b:7c:7e:86: e8:1a:f8:84:5e:42:2a:2c:f3:55:99:6c:81:0d:af: 84:13:fc:a7:50:b4:1c:8a:67:a7:34:62:79:78:ea: 8e:2b:da:95:f4:54:d8:3f:b7:89:86:74:e6:73:d1: 92:30:8a:fd:87:b2:c8:dd:13:1a:3a:81:28:20:f8: 4b:3e:f5:c0:db:c6:53:3d:4f:b8:7c:22:63:37:d2: 23:44:7c:22:18:51:dd:a6:03:c8:61:76:04:8c:29: 20:9d:29:2e:5b:75:9b:03:4a:2c:13:0d:d8:52:e3: d9:7c:96:0e:3c:23:47:32:c5:82:3a:8d:84:7b:86: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:74:A3:BD:3A:BD:B9:6C:8F:BE:AA:7A:3B:51:E0:CB:93:E1:69 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6114::/48 Signature Algorithm: sha256WithRSAEncryption 97:61:c4:0d:71:42:2f:61:31:6b:d2:5f:8c:df:6c:fb:64:52: b8:eb:f7:42:01:05:5b:f9:f5:c1:0a:59:11:a7:f7:67:f9:b9: 30:45:9e:5d:e5:d9:9f:6f:a2:62:b4:b3:c0:09:bf:90:5c:cb: d5:c4:f6:04:3e:ea:0f:48:34:47:7b:32:35:c6:51:af:ea:b2: fb:4b:bb:a2:46:75:65:53:4d:f6:8e:bd:88:f2:ac:16:5e:fb: a2:98:22:81:a0:17:2a:9a:52:0f:18:f3:de:2c:ec:c8:cf:ef: bc:ac:6d:24:8c:75:26:5b:f1:17:7b:b4:85:59:0c:3a:ed:37: 0d:13:af:5e:cf:aa:31:94:bb:6c:2c:ca:7c:43:15:16:31:3c: 73:d3:5a:36:9f:42:e4:84:61:e0:9d:52:4b:eb:be:e8:64:6d: 3d:91:48:50:73:1b:ff:ba:ad:d7:af:9b:1b:d9:c1:ba:42:81: 5a:78:dd:46:c5:81:40:66:2e:a1:f4:81:4f:dd:14:9b:36:2b: f1:86:dd:56:02:0b:7f:6e:21:ef:7a:22:64:c0:fd:56:3a:a4: a8:4e:7f:32:a4:7d:a0:f4:6e:7e:aa:f2:1e:69:2f:82:2f:cd: c7:ac:30:37:ed:dd:f6:34:ab:15:86:1c:3c:ce:8d:ba:b7:0c: 50:ef:30:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBf5QxkXLFo//y2O/Lg+RA8HelUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODEwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTYyZjllOGFmZmZkNDU0NDA0ZmVhNjY5MTc2MzU1N2Y5 YzQzNzllYjljZjBlYjQwMzA1YTk2ZjcwOGI2ODBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmp7NTlG5g1IoFnxw8nY+ec2ELC8YStB0q/exCwVQeFHlZ IKvLygVQI9zfxBD/1rTPIeJcIZM/xPakJc2ggdK7CpPNGgGoSD5AEsGw5Mei7iHT ltZUmiMGHlm0h8meMZuJ2nt9j2IbMXunV9PIUEq5KEHuyeLXc5oo9g5HT3uCJo6V m3x+huga+IReQios81WZbIENr4QT/KdQtByKZ6c0Ynl46o4r2pX0VNg/t4mGdOZz 0ZIwiv2HssjdExo6gSgg+Es+9cDbxlM9T7h8ImM30iNEfCIYUd2mA8hhdgSMKSCd KS5bdZsDSiwTDdhS49l8lg48I0cyxYI6jYR7hsg3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULzV0o706vblsj76qejtR4MuT4WkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkwNjRkNGY1LTk2NWEtNDY1OS05ODc2LWJlZmY4OTlhYjRiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRQwDQYJKoZIhvcNAQELBQADggEBAJdhxA1xQi9hMWvSX4zfbPtk Urjr90IBBVv59cEKWRGn92f5uTBFnl3l2Z9vomK0s8AJv5Bcy9XE9gQ+6g9INEd7 MjXGUa/qsvtLu6JGdWVTTfaOvYjyrBZe+6KYIoGgFyqaUg8Y894s7MjP77ysbSSM dSZb8Rd7tIVZDDrtNw0Tr17PqjGUu2wsynxDFRYxPHPTWjafQuSEYeCdUkvrvuhk bT2RSFBzG/+6rdevmxvZwbpCgVp43UbFgUBmLqH0gU/dFJs2K/GG3VYCC39uIe96 ImTA/VY6pKhOfzKkfaD0bn6q8h5pL4IvzcesMDft3fY0qxWGHDzOjbq3DFDvMPU= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:26 2026 by rpki-client