$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0447c1c-ebbf-46f4-9865-049ee514aac1.roa File: a0447c1c-ebbf-46f4-9865-049ee514aac1.roa (raw, json) Hash identifier: Gyq74FFxQXjHgKQzu4Q/mdfNRks0oVhiPeY2bP/c9jg= Subject key identifier: 39:A1:13:07:DD:1C:8E:14:4A:03:4E:25:2D:E9:29:73:1C:EF:98:7D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 614A9A7D402779E3851C1A7D7AA63FAD85F02B2A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0447c1c-ebbf-46f4-9865-049ee514aac1.roa Signing time: Fri 13 Nov 2026 21:34:15 +0000 ROA not before: Fri 13 Nov 2026 21:34:15 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4314::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4a:9a:7d:40:27:79:e3:85:1c:1a:7d:7a:a6:3f:ad:85:f0:2b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:34:15 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=caac09a950aa6d65a1b5b2b23511dd571b99c993c769fa5e522c9a4c0c4b4dd7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:87:dc:9c:06:d4:84:13:bc:32:46:58:ff: f6:75:56:3a:70:14:c7:5c:67:c9:5c:79:96:e9:de: 4c:8d:0b:43:f3:55:01:73:44:2b:4c:58:f5:25:54: e4:f9:cd:13:2c:89:c0:50:59:a4:7c:05:62:4e:c5: 25:30:00:1e:15:8d:6f:0d:18:31:b8:99:0e:ed:e4: 95:46:e0:3a:48:23:dd:32:8e:25:52:d4:d1:02:6b: 64:c3:b0:ba:9f:89:aa:b1:8a:5e:42:1b:ba:53:72: a8:4d:81:38:39:c5:f8:e5:eb:d6:c3:1e:ff:8f:eb: 79:63:b1:66:74:bb:ae:52:5b:f9:07:44:d6:22:e3: 71:59:1e:08:bc:91:dc:95:75:67:66:a7:2b:95:64: f0:54:c0:9d:fb:fa:c1:02:65:f7:9d:8c:23:fe:ac: d7:03:24:04:12:24:b5:8a:8b:18:99:35:7e:b9:1d: 52:fc:8a:a3:a5:78:e2:1a:f7:56:3a:88:fe:6f:96: 65:da:29:e5:07:dc:07:1f:99:74:0c:f1:17:a6:ab: ea:35:96:ce:4d:23:ee:4d:0e:14:49:97:0d:53:aa: 52:a8:a3:c4:fa:b5:a7:a2:a5:eb:ef:4c:80:d5:ab: e8:c8:25:a5:db:bb:bc:f7:26:ac:01:09:39:3b:90: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A1:13:07:DD:1C:8E:14:4A:03:4E:25:2D:E9:29:73:1C:EF:98:7D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0447c1c-ebbf-46f4-9865-049ee514aac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4314::/46 Signature Algorithm: sha256WithRSAEncryption 53:f7:c4:5e:c2:cf:77:a4:d8:da:4c:6b:fb:bc:1a:a5:e8:e4: b3:94:25:84:cf:de:1b:87:b7:00:b0:44:fb:f4:60:46:35:4b: f4:3a:ad:0e:5d:bb:a6:7b:70:ee:eb:79:46:f6:73:4f:71:78: 46:1b:5a:ce:3c:62:48:53:61:a4:5f:d3:4a:09:31:52:17:68: 29:c4:83:98:8a:16:5d:97:55:e6:4c:bb:bb:e6:f3:ab:04:6c: b5:ba:4e:17:d9:b1:39:82:b2:09:24:8a:d3:8e:ac:1f:e8:76: 9a:77:b9:43:ec:63:26:e0:88:f5:16:b7:81:3d:68:ea:4e:e5: f5:33:9a:8d:b5:54:d7:d1:8d:6e:c4:fb:83:05:47:5e:ed:30: 7d:b8:5e:2f:89:12:9f:31:45:9b:dc:80:dc:05:7a:80:9d:5b: 01:94:29:36:23:f8:ee:1c:50:09:fd:9c:12:63:10:12:46:e5: f3:01:f0:9e:dd:ca:85:74:8d:63:95:28:7d:bd:00:83:16:54: 28:d4:e4:f3:89:8e:0f:57:bc:f3:a1:57:96:e9:6f:c4:6a:1d: 6d:33:21:2d:8c:1a:60:14:0b:e3:ff:0b:3e:ac:0e:d0:f3:93: 54:5d:aa:8f:55:66:cf:d1:55:63:a7:2a:47:4d:ae:1b:c9:22: 18:ff:f1:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYUqafUAneeOFHBp9eqY/rYXwKyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjEzNDE1WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWFjMDlhOTUwYWE2ZDY1YTFiNWIyYjIzNTExZGQ1NzFi OTljOTkzYzc2OWZhNWU1MjJjOWE0YzBjNGI0ZGQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfjYfcnAbUhBO8MkZY//Z1VjpwFMdcZ8lceZbp3kyNC0Pz VQFzRCtMWPUlVOT5zRMsicBQWaR8BWJOxSUwAB4VjW8NGDG4mQ7t5JVG4DpII90y jiVS1NECa2TDsLqfiaqxil5CG7pTcqhNgTg5xfjl69bDHv+P63ljsWZ0u65SW/kH RNYi43FZHgi8kdyVdWdmpyuVZPBUwJ37+sECZfedjCP+rNcDJAQSJLWKixiZNX65 HVL8iqOleOIa91Y6iP5vlmXaKeUH3AcfmXQM8Remq+o1ls5NI+5NDhRJlw1TqlKo o8T6taeipevvTIDVq+jIJaXbu7z3JqwBCTk7kJLbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOaETB90cjhRKA04lLekpcxzvmH0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwNDQ3YzFjLWViYmYtNDZmNC05ODY1LTA0OWVlNTE0YWFjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxQwDQYJKoZIhvcNAQELBQADggEBAFP3xF7Cz3ek2NpMa/u8GqXo 5LOUJYTP3huHtwCwRPv0YEY1S/Q6rQ5du6Z7cO7reUb2c09xeEYbWs48YkhTYaRf 00oJMVIXaCnEg5iKFl2XVeZMu7vm86sEbLW6ThfZsTmCsgkkitOOrB/odpp3uUPs YybgiPUWt4E9aOpO5fUzmo21VNfRjW7E+4MFR17tMH24Xi+JEp8xRZvcgNwFeoCd WwGUKTYj+O4cUAn9nBJjEBJG5fMB8J7dyoV0jWOVKH29AIMWVCjU5POJjg9XvPOh V5bpb8RqHW0zIS2MGmAUC+P/Cz6sDtDzk1Rdqo9VZs/RVWOnKkdNrhvJIhj/8ao= -----END CERTIFICATE-----Generated at Sun Nov 15 06:10:23 2026 by rpki-client