$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa File: 976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa (raw, json) Hash identifier: DtKXaZJIsbcJn3/bOXp7uNgqjMMsytXgBgEsHfBoirw= Subject key identifier: 6E:9B:17:F3:96:D7:73:07:C9:DE:06:07:E1:D5:52:D3:D1:47:6A:C9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 318EC5B96A6AE05769585C64A36BF1ECC66C2C2E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa Signing time: Mon 26 Oct 2026 04:20:40 +0000 ROA not before: Mon 26 Oct 2026 04:20:40 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8e:c5:b9:6a:6a:e0:57:69:58:5c:64:a3:6b:f1:ec:c6:6c:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:40 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d85f2f8e071370d13d8b196c7e144e68c69d998c2f184e77f36a614158217374, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:6d:89:f7:34:3a:1c:e7:25:ec:ea:48:72: 4c:f3:3b:ef:99:cd:f2:6f:13:5c:e4:96:80:0a:ab: 93:42:06:dc:aa:b1:5b:6b:a3:8c:0b:2e:80:9f:87: 55:70:cc:2b:f8:9f:5a:b6:27:fa:49:c8:a0:28:bf: 4d:71:14:70:34:e1:dc:35:6a:bc:82:f3:72:29:b8: 28:2d:b6:91:15:3c:95:9c:e5:c1:86:5a:b4:7b:38: f5:eb:2f:30:c9:ab:9a:f7:ed:99:9b:35:96:4e:02: bb:cf:85:16:42:5b:a0:a2:28:bb:f0:39:0a:67:2e: f6:1a:ba:ff:b8:79:94:64:21:32:33:10:a4:39:8d: 94:dc:7f:1b:29:bb:6d:ce:71:58:7e:97:75:f4:35: ef:7e:2c:67:78:7e:45:03:bb:7c:18:0c:53:8e:fc: e8:4d:df:46:e3:b3:2e:d7:8e:67:0e:77:8d:c7:c0: 12:5e:d6:eb:6e:62:b8:36:86:f1:41:32:6a:92:65: 62:45:68:04:52:7c:f3:47:0c:e9:3d:e4:02:02:9a: 23:06:91:1b:e5:1e:de:68:21:07:96:5d:52:1f:72: e3:97:c9:26:c0:0f:c3:bc:1a:41:fd:46:a8:18:3d: 0b:90:7d:d8:bb:56:a5:ec:bc:13:45:d5:50:68:30: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:17:F3:96:D7:73:07:C9:DE:06:07:E1:D5:52:D3:D1:47:6A:C9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:f00::/48 Signature Algorithm: sha256WithRSAEncryption 5c:fc:21:fe:23:ec:8a:eb:d8:5c:9a:b9:77:e6:6e:c6:42:2f: 8f:e9:48:27:6b:9d:d9:5e:bd:32:17:e5:83:19:4b:04:b2:e8: 03:f3:62:35:64:5e:6e:af:5f:1b:85:14:60:8b:2d:95:c6:e4: 01:a8:fc:ab:f6:e6:59:33:91:d5:0c:0f:e9:f3:43:a9:33:2a: ae:09:35:5d:be:9d:f4:76:5e:0b:7e:12:ff:55:53:2a:49:1f: 9b:c3:0c:85:6d:e7:86:f9:d6:f3:6e:23:eb:cf:09:61:eb:fc: 35:f9:0f:0e:7b:c5:f8:ab:cd:9c:d8:38:1f:08:7b:36:90:35: 75:3c:c7:21:99:43:8d:e1:52:86:3e:ac:c0:01:9a:66:87:a1: 8e:97:84:df:f9:e6:12:92:a3:3a:6d:49:7d:34:ae:d3:78:e8: bd:fc:c4:a1:63:6f:98:4a:04:20:1c:ac:a0:23:24:0d:f1:99: 0d:60:59:70:17:bd:44:70:b9:25:bc:86:7b:65:af:43:87:61: bc:51:1e:a5:fe:58:ad:98:0f:56:ae:7b:d6:90:05:bc:c7:24: 23:ca:df:07:b1:e2:c8:ae:89:49:61:b4:37:fd:78:2a:4c:67: c8:22:95:2f:e7:6e:c5:e4:bc:cd:1c:95:86:94:98:e7:91:ac: 80:3e:61:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMY7FuWpq4FdpWFxko2vx7MZsLC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDQwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODVmMmY4ZTA3MTM3MGQxM2Q4YjE5NmM3ZTE0NGU2OGM2 OWQ5OThjMmYxODRlNzdmMzZhNjE0MTU4MjE3Mzc0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC33m2J9zQ6HOcl7OpIckzzO++ZzfJvE1zkloAKq5NCBtyq sVtro4wLLoCfh1VwzCv4n1q2J/pJyKAov01xFHA04dw1aryC83IpuCgttpEVPJWc 5cGGWrR7OPXrLzDJq5r37ZmbNZZOArvPhRZCW6CiKLvwOQpnLvYauv+4eZRkITIz EKQ5jZTcfxspu23OcVh+l3X0Ne9+LGd4fkUDu3wYDFOO/OhN30bjsy7XjmcOd43H wBJe1utuYrg2hvFBMmqSZWJFaARSfPNHDOk95AICmiMGkRvlHt5oIQeWXVIfcuOX ySbAD8O8GkH9RqgYPQuQfdi7VqXsvBNF1VBoMBnbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbpsX85bXcwfJ3gYH4dVS09FHaskwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3NjYyM2FkLTBiNWEtNGE1Zi1iNGEzLTYwNjgxZDJlYWM3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwDwAwDQYJKoZIhvcNAQELBQADggEBAFz8If4j7Irr2FyauXfmbsZC L4/pSCdrndlevTIX5YMZSwSy6APzYjVkXm6vXxuFFGCLLZXG5AGo/Kv25lkzkdUM D+nzQ6kzKq4JNV2+nfR2Xgt+Ev9VUypJH5vDDIVt54b51vNuI+vPCWHr/DX5Dw57 xfirzZzYOB8IezaQNXU8xyGZQ43hUoY+rMABmmaHoY6XhN/55hKSozptSX00rtN4 6L38xKFjb5hKBCAcrKAjJA3xmQ1gWXAXvURwuSW8hntlr0OHYbxRHqX+WK2YD1au e9aQBbzHJCPK3wex4siuiUlhtDf9eCpMZ8gilS/nbsXkvM0clYaUmOeRrIA+YXs= -----END CERTIFICATE-----Generated at Tue Oct 27 08:23:44 2026 by rpki-client