$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa File: a188fe83-6643-4c1d-a083-434d151a0315.roa (raw, json) Hash identifier: oDvfeKQTun1oB/h9FPjhIneyUahXYWFdLKuaTcaMqw4= Subject key identifier: 27:3C:96:7A:82:1B:1B:C6:05:7A:37:3E:9D:99:F3:12:1D:B5:82:0A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 360F667365B6B04CA1D9CABE89F9AAE6917E9945 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa Signing time: Sun 11 Oct 2026 15:08:34 +0000 ROA not before: Sun 11 Oct 2026 15:08:34 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0f:66:73:65:b6:b0:4c:a1:d9:ca:be:89:f9:aa:e6:91:7e:99:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:34 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=c026c0f55e378cea02eb037806117a40fddde8e6fb3db012640a8c0ab31f68f7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:ce:9f:d9:c3:80:8d:ea:55:f5:d8:d8:3c: 4d:e5:4d:35:91:af:7a:96:bd:d7:09:14:b7:d2:49: 9e:83:6c:63:ea:4d:cd:72:a5:67:28:24:81:db:d1: 5f:fc:db:a4:93:55:e0:ab:ae:e8:8b:2b:c6:9d:dc: 01:ce:9b:66:1e:28:a8:3c:43:fc:18:38:57:a8:7e: 27:61:30:7f:bd:e7:42:83:f1:f8:8e:41:80:42:5d: 60:41:1e:af:cc:86:d7:ac:d9:ee:cd:bb:ca:75:e1: 4d:9f:98:fc:bd:7e:89:36:38:78:21:81:3b:23:15: 45:63:ae:8e:1b:55:85:55:f5:57:bf:3c:a6:c3:43: 2e:c8:98:39:08:4a:b2:fa:99:ee:5a:15:bf:bf:f0: 1f:06:60:b9:74:06:a3:0a:56:d3:9b:e4:32:5e:13: 42:a7:1e:76:13:ae:18:db:5b:20:1a:c7:70:ea:1d: 1a:4b:03:d0:81:1b:bc:c2:d5:39:36:b7:02:d7:0c: fa:58:d3:c8:4b:13:4a:a3:9d:39:15:59:bf:07:f9: c0:91:a9:28:37:59:67:0b:5c:f4:c3:f1:4e:16:6b: 19:17:86:f1:1d:15:d7:85:b6:8c:eb:ee:aa:f2:51: e1:bb:3a:8a:5a:bc:97:de:1a:9a:5c:6b:59:75:d5: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3C:96:7A:82:1B:1B:C6:05:7A:37:3E:9D:99:F3:12:1D:B5:82:0A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6121::/48 Signature Algorithm: sha256WithRSAEncryption 79:e0:15:84:4a:ba:72:6e:4a:cb:4c:e6:40:99:28:ae:ce:be: 29:0b:84:81:8c:a7:6c:62:0f:72:dd:f6:76:44:cd:7a:fd:a9: ef:1b:9d:d6:5b:73:33:ba:38:d8:da:2c:7e:fa:d8:2f:54:91: ac:b9:fa:42:a9:f2:4a:0c:d8:65:a1:d3:bc:de:2c:75:49:0a: 1c:aa:d2:a7:3a:96:3d:80:03:c9:50:74:f0:24:76:16:ea:9b: e3:67:a6:8b:d8:1f:a6:f0:4f:1e:2c:b4:67:df:65:e3:77:90: c0:f5:11:ac:0a:8c:3e:63:c2:c1:2d:03:d4:99:21:d5:06:ac: 4e:2a:1f:41:a3:ef:ad:b4:67:5c:12:6f:b8:2f:0a:f4:11:2f: e7:43:1c:b9:a8:fc:47:f8:45:ce:37:d2:82:6f:67:28:4d:9b: 28:0a:ae:d5:c2:5d:0b:cf:0d:bf:37:e4:ad:03:58:e0:59:d7: f8:88:68:55:f1:fc:d3:22:9e:fc:56:d7:13:9f:11:ca:5e:cb: f4:55:22:ac:18:9d:2a:7e:75:9d:91:c1:d7:04:15:ed:01:37: 0d:63:ab:86:67:5f:6e:ea:1e:39:6c:45:4a:b1:f5:57:7c:ef: 99:e4:11:f3:4b:13:c4:f2:37:c1:d5:7b:66:c8:4d:14:07:c0: 5f:f1:cc:8c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNg9mc2W2sEyh2cq+ifmq5pF+mUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODM0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDI2YzBmNTVlMzc4Y2VhMDJlYjAzNzgwNjExN2E0MGZk ZGRlOGU2ZmIzZGIwMTI2NDBhOGMwYWIzMWY2OGY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiF86f2cOAjepV9djYPE3lTTWRr3qWvdcJFLfSSZ6DbGPq Tc1ypWcoJIHb0V/826STVeCrruiLK8ad3AHOm2YeKKg8Q/wYOFeofidhMH+950KD 8fiOQYBCXWBBHq/Mhtes2e7Nu8p14U2fmPy9fok2OHghgTsjFUVjro4bVYVV9Ve/ PKbDQy7ImDkISrL6me5aFb+/8B8GYLl0BqMKVtOb5DJeE0KnHnYTrhjbWyAax3Dq HRpLA9CBG7zC1Tk2twLXDPpY08hLE0qjnTkVWb8H+cCRqSg3WWcLXPTD8U4WaxkX hvEdFdeFtozr7qryUeG7OopavJfeGppca1l11cJpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJzyWeoIbG8YFejc+nZnzEh21ggowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExODhmZTgzLTY2NDMtNGMxZC1hMDgzLTQzNGQxNTFhMDMxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBAHngFYRKunJuSstM5kCZKK7O vikLhIGMp2xiD3Ld9nZEzXr9qe8bndZbczO6ONjaLH762C9Ukay5+kKp8koM2GWh 07zeLHVJChyq0qc6lj2AA8lQdPAkdhbqm+NnpovYH6bwTx4stGffZeN3kMD1EawK jD5jwsEtA9SZIdUGrE4qH0Gj7620Z1wSb7gvCvQRL+dDHLmo/Ef4Rc430oJvZyhN mygKrtXCXQvPDb835K0DWOBZ1/iIaFXx/NMinvxW1xOfEcpey/RVIqwYnSp+dZ2R wdcEFe0BNw1jq4ZnX27qHjlsRUqx9Vd875nkEfNLE8TyN8HVe2bITRQHwF/xzIw= -----END CERTIFICATE-----Generated at Tue Oct 27 05:59:16 2026 by rpki-client