$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa File: 942359be-660a-411d-a2eb-7723143d6fd3.roa (raw, json) Hash identifier: 6SXi1eX8XJpx2E8RoHXPXAzze4SJdJvEQL8S5tG/T8A= Subject key identifier: BA:03:E6:8F:20:A0:99:BD:AD:4C:FF:3F:47:C0:B1:28:AC:A5:8E:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05B084FB1831BD26090107E062F5B85D2F7CDE18 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa Signing time: Sun 11 Oct 2026 15:08:49 +0000 ROA not before: Sun 11 Oct 2026 15:08:49 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b0:84:fb:18:31:bd:26:09:01:07:e0:62:f5:b8:5d:2f:7c:de:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:49 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=79c76bc9550cee02ee6aaf14cd9ae11d3d8123a8dd425ebb0b704637a27a660f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:49:37:e7:1c:2b:56:78:7b:bd:ef:a0:5c: c1:79:43:96:7d:cf:32:4a:c7:70:f6:3b:2d:72:fd: 01:77:5c:7c:cb:9d:e2:43:cb:df:b5:89:ee:ed:73: 54:24:69:77:a5:19:b8:09:ef:12:54:ed:cf:a1:2a: 5f:29:5b:31:24:a1:83:41:71:50:ab:99:09:c9:c0: ec:52:c2:3e:25:66:92:7f:29:32:c9:89:bc:d1:49: 60:3e:0b:13:0b:81:2f:16:b1:70:f1:0f:c6:a2:b6: fd:9c:d9:3d:f5:08:b9:78:e3:55:2d:05:a1:97:11: c5:56:23:d7:b6:11:2b:42:49:20:26:e8:ba:4b:89: f6:9a:08:84:e0:7e:cc:f0:f3:f4:8c:0b:06:46:73: fb:de:41:c8:d8:7e:47:56:6a:dd:ac:8f:3c:3b:c1: 16:ef:11:4a:6f:2b:d8:3e:ec:cf:c7:6f:90:57:23: 36:e4:f0:1b:5c:bd:8c:b6:99:96:a4:fc:b4:1a:22: 21:eb:0b:aa:1b:e2:32:9a:f6:44:45:c7:c4:a0:dc: 02:4e:30:85:7d:48:62:04:5a:a3:d1:bf:7a:51:17: 4d:b1:4f:c9:57:d2:8e:33:a4:e4:7f:b6:09:09:10: 55:0e:ba:ec:41:a1:c6:2f:08:ad:82:83:59:2c:01: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:E6:8F:20:A0:99:BD:AD:4C:FF:3F:47:C0:B1:28:AC:A5:8E:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 5c:6a:5b:7a:22:fc:04:2d:88:aa:47:d9:7a:8e:c2:8d:e6:49: 38:e7:ec:00:5b:2b:4b:35:b1:25:6d:66:a9:66:ae:b6:ba:93: 31:df:d5:5b:37:66:ce:b4:fe:c1:b6:a1:e9:9d:61:26:82:fc: d0:88:2b:75:cd:bc:7a:5d:49:97:f4:1f:3f:35:7c:0c:ba:cc: ab:8a:61:86:6a:73:96:9c:bd:b2:39:c0:05:1a:81:2c:65:85: fc:70:a0:fc:e2:da:b6:60:b9:01:b3:3e:dc:df:88:e6:3e:a1: 60:2e:af:36:7d:fd:9e:81:1a:9d:40:b2:4f:f4:85:b8:12:45: cc:c5:42:94:28:90:d1:c1:6d:8c:02:06:04:68:78:04:79:f4: 01:81:3c:cd:c2:2e:23:54:9b:a8:55:f5:b6:56:da:04:dc:df: 99:44:67:5e:6f:89:c7:91:72:c4:88:25:27:bc:03:13:6c:5c: 74:47:e0:d1:6a:ab:e6:10:9d:bf:ce:16:d4:e1:20:33:01:58: 3c:e4:17:db:86:be:a6:a3:c3:9d:01:07:cd:69:fc:bb:23:b5: 6b:91:f8:e6:f0:21:a7:9a:71:f0:7e:5f:f5:06:c1:4a:5e:06: 2c:e8:72:cb:a4:ab:02:6a:41:bb:b6:8c:ec:a0:22:05:60:98: e9:fe:ac:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBbCE+xgxvSYJAQfgYvW4XS983hgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODQ5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWM3NmJjOTU1MGNlZTAyZWU2YWFmMTRjZDlhZTExZDNk ODEyM2E4ZGQ0MjVlYmIwYjcwNDYzN2EyN2E2NjBmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm3Uk35xwrVnh7ve+gXMF5Q5Z9zzJKx3D2Oy1y/QF3XHzL neJDy9+1ie7tc1QkaXelGbgJ7xJU7c+hKl8pWzEkoYNBcVCrmQnJwOxSwj4lZpJ/ KTLJibzRSWA+CxMLgS8WsXDxD8aitv2c2T31CLl441UtBaGXEcVWI9e2EStCSSAm 6LpLifaaCITgfszw8/SMCwZGc/veQcjYfkdWat2sjzw7wRbvEUpvK9g+7M/Hb5BX Izbk8BtcvYy2mZak/LQaIiHrC6ob4jKa9kRFx8Sg3AJOMIV9SGIEWqPRv3pRF02x T8lX0o4zpOR/tgkJEFUOuuxBocYvCK2Cg1ksAY0LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUugPmjyCgmb2tTP8/R8CxKKyljqgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk0MjM1OWJlLTY2MGEtNDExZC1hMmViLTc3MjMxNDNkNmZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBAFxqW3oi/AQtiKpH2XqOwo3m STjn7ABbK0s1sSVtZqlmrra6kzHf1Vs3Zs60/sG2oemdYSaC/NCIK3XNvHpdSZf0 Hz81fAy6zKuKYYZqc5acvbI5wAUagSxlhfxwoPzi2rZguQGzPtzfiOY+oWAurzZ9 /Z6BGp1Ask/0hbgSRczFQpQokNHBbYwCBgRoeAR59AGBPM3CLiNUm6hV9bZW2gTc 35lEZ15viceRcsSIJSe8AxNsXHRH4NFqq+YQnb/OFtThIDMBWDzkF9uGvqajw50B B81p/LsjtWuR+ObwIaeacfB+X/UGwUpeBizocsukqwJqQbu2jOygIgVgmOn+rO8= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:45 2026 by rpki-client