$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa File: 973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa (raw, json) Hash identifier: 9U1J2XbLaweE2BJLA7qFNwZl4EdzRKOVAr4A4gYZS04= Subject key identifier: 3C:47:CB:91:56:0E:80:73:76:A2:16:32:E1:3D:00:9A:8C:51:F6:EA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 69C8A7E0148017657B973AF99D18B24569F6AB43 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa Signing time: Sun 11 Oct 2026 15:08:10 +0000 ROA not before: Sun 11 Oct 2026 15:08:10 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:a7:e0:14:80:17:65:7b:97:3a:f9:9d:18:b2:45:69:f6:ab:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:10 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=2b079c45c7d3da7ccd8cb01b8fb2c7866f1c387ce199066f874bfdbfc8040c71, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:f9:aa:58:de:43:4c:6e:f6:17:b5:93:76: 97:f9:6e:a1:df:db:af:30:cd:fd:b0:a5:83:f5:45: d2:09:a2:69:d3:d6:42:bc:63:82:a0:6c:51:7e:b7: a5:3f:d9:58:2f:eb:c6:52:08:51:d0:da:b1:e8:77: ec:f2:07:99:db:5c:b1:55:39:19:79:a3:37:f9:ed: 64:2b:70:40:cc:a7:1f:a5:89:b4:a3:f9:80:22:86: 83:31:d3:3f:b2:02:5f:08:5a:a6:8a:c9:ea:50:85: ba:33:fb:09:9d:97:67:4b:8a:7e:fb:e1:76:86:65: da:c6:d9:31:bf:af:2e:dd:5a:55:de:d2:cb:41:47: c8:55:34:22:5e:7a:05:47:f8:a5:c6:01:ba:38:97: 0f:d0:57:52:35:15:0c:d1:63:ce:fd:63:31:a0:36: 1c:dc:88:e3:1e:7b:57:07:47:51:3e:80:32:42:06: ce:2f:78:0c:52:cc:7e:d3:03:6a:99:88:b0:a8:8e: 0a:49:95:73:91:fd:25:c4:08:47:c8:20:5e:35:b3: c2:0a:9d:fb:b0:67:4f:b9:bc:03:3b:95:62:cd:e6: 32:1a:d6:0d:43:00:5a:d0:43:bc:4f:d6:53:2d:22: e4:9e:f8:e0:92:99:25:b1:15:c3:2f:25:d2:21:6d: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:CB:91:56:0E:80:73:76:A2:16:32:E1:3D:00:9A:8C:51:F6:EA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 26:70:eb:d4:71:0e:11:c3:ee:b2:b8:2b:c5:ce:2b:15:85:d5: 6f:1e:6a:73:9c:48:cf:4b:8e:94:2b:73:26:18:96:c1:6d:ad: 83:b6:db:f7:e0:c1:c7:ce:b0:96:38:d0:47:a5:33:f1:e6:da: 43:29:9c:ac:9a:22:da:4e:48:53:ed:71:e7:1c:ba:7c:33:62: 40:26:d7:e6:ba:7f:bf:f5:58:f1:41:24:19:e1:a0:a3:05:2d: f5:fa:fa:ee:1d:97:c4:87:94:49:e2:1a:fd:bf:c6:a9:84:e8: 91:5b:6b:00:8e:7f:5a:d2:4a:4c:01:8e:81:d1:6d:d0:72:b8: ec:b8:43:86:28:d1:a2:3b:ee:1c:ae:2d:0f:8f:03:4d:db:7a: f3:1e:d5:9c:16:b9:42:00:11:e8:56:ea:39:ae:65:68:96:7d: 95:9d:19:47:b6:5b:8e:6e:c0:39:f1:ff:fa:3f:78:72:fe:89: 31:08:4b:82:9f:77:ec:10:73:f5:81:60:0f:ae:c8:b6:2c:36: ad:b6:b5:3a:4d:6d:5f:05:0f:4a:81:4f:d0:78:05:75:07:27: 4f:29:f3:fb:eb:4d:2a:f3:99:e0:e2:36:76:07:a4:22:2b:8d: 68:17:20:bf:52:79:12:cb:e4:80:7b:63:9d:ad:03:0e:23:77: a9:84:90:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUacin4BSAF2V7lzr5nRiyRWn2q0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODEwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjA3OWM0NWM3ZDNkYTdjY2Q4Y2IwMWI4ZmIyYzc4NjZm MWMzODdjZTE5OTA2NmY4NzRiZmRiZmM4MDQwYzcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF8vmqWN5DTG72F7WTdpf5bqHf268wzf2wpYP1RdIJomnT 1kK8Y4KgbFF+t6U/2Vgv68ZSCFHQ2rHod+zyB5nbXLFVORl5ozf57WQrcEDMpx+l ibSj+YAihoMx0z+yAl8IWqaKyepQhboz+wmdl2dLin774XaGZdrG2TG/ry7dWlXe 0stBR8hVNCJeegVH+KXGAbo4lw/QV1I1FQzRY879YzGgNhzciOMee1cHR1E+gDJC Bs4veAxSzH7TA2qZiLCojgpJlXOR/SXECEfIIF41s8IKnfuwZ0+5vAM7lWLN5jIa 1g1DAFrQQ7xP1lMtIuSe+OCSmSWxFcMvJdIhbVqhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPEfLkVYOgHN2ohYy4T0AmoxR9uowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3M2U4MjFjLThiMmMtNGMyYi05M2ZjLTJlMDBlZjcyMWZkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBACZw69RxDhHD7rK4K8XOKxWF 1W8eanOcSM9LjpQrcyYYlsFtrYO22/fgwcfOsJY40EelM/Hm2kMpnKyaItpOSFPt ceccunwzYkAm1+a6f7/1WPFBJBnhoKMFLfX6+u4dl8SHlEniGv2/xqmE6JFbawCO f1rSSkwBjoHRbdByuOy4Q4Yo0aI77hyuLQ+PA03bevMe1ZwWuUIAEehW6jmuZWiW fZWdGUe2W45uwDnx//o/eHL+iTEIS4Kfd+wQc/WBYA+uyLYsNq22tTpNbV8FD0qB T9B4BXUHJ08p8/vrTSrzmeDiNnYHpCIrjWgXIL9SeRLL5IB7Y52tAw4jd6mEkB8= -----END CERTIFICATE-----Generated at Tue Oct 27 16:19:54 2026 by rpki-client