$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa File: 97d95c79-c75b-4e23-b76f-f3c09c34947f.roa (raw, json) Hash identifier: sXlkLPXwq9sXyEusxUbO5OyhpN04zxpZNZh7HIWQ/dM= Subject key identifier: CF:7A:CB:AB:CC:DD:BF:37:08:A8:8B:BF:06:72:7A:D1:25:1A:09:29 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D4BD528CC7A627E18883259DA42433BB804ECAF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa Signing time: Sun 11 Oct 2026 15:10:28 +0000 ROA not before: Sun 11 Oct 2026 15:10:28 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7402::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:d5:28:cc:7a:62:7e:18:88:32:59:da:42:43:3b:b8:04:ec:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:28 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=eedb6cf7517097dafd730bd6844b7f9473b1672810f2024b8b23d9f3e5fc5261, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:41:48:66:df:44:fe:fa:0d:7d:e1:28:c7: 8a:4d:98:d7:b8:a1:b8:12:65:b9:b0:ea:1d:74:03: 08:f2:ec:bc:be:87:04:fb:73:42:30:e4:7e:85:b1: 1d:67:44:5c:1b:8e:0f:d0:aa:14:9a:de:b5:b0:a0: f6:af:19:8a:4c:cd:80:ab:45:6e:a6:28:98:1e:c6: 1f:b3:3b:67:fe:e6:58:39:66:91:54:bb:99:0c:c5: f5:15:d7:6d:19:d9:b4:c5:56:0d:e6:db:92:d2:dc: b8:ac:ac:27:21:3f:b8:fe:d7:e4:f9:79:37:e0:2f: 22:38:8e:65:97:4f:98:d1:e4:7d:e1:31:52:9e:a4: 8d:33:d5:d7:97:d9:ab:86:49:c7:5e:a3:6b:1d:f8: e1:ad:be:c7:ae:6c:39:08:99:75:15:60:b1:58:78: 25:ce:8f:96:ea:62:bf:d5:69:4a:c8:8c:86:89:0a: a3:ff:98:11:15:e9:cd:c2:33:32:45:f5:a7:2c:c0: 6a:7c:ad:3d:a7:71:ac:99:ea:0c:44:ea:26:0f:c9: a2:ef:42:9d:6b:65:e2:6e:f8:f7:59:ba:63:38:f1: cc:ac:4d:3c:65:b4:ed:95:36:16:2e:73:67:31:b7: 18:aa:e1:5d:90:b9:4a:6e:b7:9d:ff:7a:3d:47:7d: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:CB:AB:CC:DD:BF:37:08:A8:8B:BF:06:72:7A:D1:25:1A:09:29 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7402::/48 Signature Algorithm: sha256WithRSAEncryption 21:66:ea:ab:be:35:07:64:31:9c:e7:95:a3:ee:93:01:11:b5: 0a:c6:5b:c1:7e:59:ac:c1:22:9b:10:93:8d:3a:0c:18:ce:e5: c4:b8:c8:02:05:65:78:d1:f6:5e:ef:86:48:7f:29:e9:12:23: 1a:46:54:82:3b:f2:3f:27:e4:d6:e5:66:77:ce:70:f0:b6:05: 95:b1:c9:9f:2d:9f:26:c5:ab:49:25:54:0f:d8:df:5e:8e:4b: fd:88:6f:db:14:cc:89:87:17:e7:71:d1:db:2a:a2:55:0c:7f: 24:3a:2c:00:b6:1a:8c:94:de:90:01:58:dc:73:09:77:7b:5c: 6e:a4:76:86:aa:42:de:40:f5:1c:84:82:3f:e7:8c:f4:e4:0d: 33:13:fe:f8:20:c0:a4:62:2c:3a:ba:1f:50:00:70:bb:b3:6a: 36:d3:8d:60:93:c0:11:eb:f2:9e:79:36:3d:04:8b:e3:db:fc: 35:bf:b0:68:e5:4e:98:ba:1e:1e:e9:64:f9:a9:a4:fa:97:99: e1:33:7c:e4:81:a6:3d:bb:1c:ff:9d:fd:82:2f:26:3f:bd:ca: a6:9e:46:5b:71:aa:1b:16:17:2c:8e:72:32:4e:be:6d:f0:1f: a8:0f:8b:c7:ca:7b:a8:6b:34:7c:76:ff:82:6d:8c:41:d3:b0: d7:bc:26:33 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXUvVKMx6Yn4YiDJZ2kJDO7gE7K8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDI4WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWRiNmNmNzUxNzA5N2RhZmQ3MzBiZDY4NDRiN2Y5NDcz YjE2NzI4MTBmMjAyNGI4YjIzZDlmM2U1ZmM1MjYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpskFIZt9E/voNfeEox4pNmNe4obgSZbmw6h10Awjy7Ly+ hwT7c0Iw5H6FsR1nRFwbjg/QqhSa3rWwoPavGYpMzYCrRW6mKJgexh+zO2f+5lg5 ZpFUu5kMxfUV120Z2bTFVg3m25LS3LisrCchP7j+1+T5eTfgLyI4jmWXT5jR5H3h MVKepI0z1deX2auGScdeo2sd+OGtvseubDkImXUVYLFYeCXOj5bqYr/VaUrIjIaJ CqP/mBEV6c3CMzJF9acswGp8rT2ncayZ6gxE6iYPyaLvQp1rZeJu+PdZumM48cys TTxltO2VNhYuc2cxtxiq4V2QuUput53/ej1HfftPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz3rLq8zdvzcIqIu/BnJ60SUaCSkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3ZDk1Yzc5LWM3NWItNGUyMy1iNzZmLWYzYzA5YzM0OTQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAIwDQYJKoZIhvcNAQELBQADggEBACFm6qu+NQdkMZznlaPukwER tQrGW8F+WazBIpsQk406DBjO5cS4yAIFZXjR9l7vhkh/KekSIxpGVII78j8n5Nbl ZnfOcPC2BZWxyZ8tnybFq0klVA/Y316OS/2Ib9sUzImHF+dx0dsqolUMfyQ6LAC2 GoyU3pABWNxzCXd7XG6kdoaqQt5A9RyEgj/njPTkDTMT/vggwKRiLDq6H1AAcLuz ajbTjWCTwBHr8p55Nj0Ei+Pb/DW/sGjlTpi6Hh7pZPmppPqXmeEzfOSBpj27HP+d /YIvJj+9yqaeRltxqhsWFyyOcjJOvm3wH6gPi8fKe6hrNHx2/4JtjEHTsNe8JjM= -----END CERTIFICATE-----Generated at Mon Oct 26 12:39:27 2026 by rpki-client