$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa File: a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa (raw, json) Hash identifier: PgYFRhegbvUPf2LWNo7vcLCbLxBUm9m+XtZvQTWfi1I= Subject key identifier: C3:B2:7C:0A:6F:7A:E7:9B:6F:80:20:17:6E:CE:C3:08:7F:5B:56:4F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 07DD4C1E5574064DDBF3DD35822D545DF5EB3B41 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa Signing time: Sun 11 Oct 2026 15:10:15 +0000 ROA not before: Sun 11 Oct 2026 15:10:15 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dd:4c:1e:55:74:06:4d:db:f3:dd:35:82:2d:54:5d:f5:eb:3b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:15 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=ae6ebb348db217b0049a90753003bbcb921d3ff82307b3d4c7cac2de9b8e1156, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:94:ef:29:ef:c8:64:75:02:6d:85:07:66: d4:5f:69:43:7f:5e:f8:20:93:d8:15:f2:44:0a:a3: 93:86:a8:23:35:c6:69:ec:56:b3:a3:7f:87:bf:50: ce:95:7b:53:b2:79:21:e0:30:f2:16:a8:c7:45:16: 0b:09:1e:64:86:2c:e8:55:3b:05:97:9f:2f:3c:71: 6c:b3:90:9f:7a:f0:fa:e0:58:a8:0f:ab:f5:5f:5f: e3:c7:e6:42:d8:c5:cb:75:59:50:cb:52:42:84:9f: 54:1b:cb:bc:58:1f:07:a4:73:7f:69:43:17:b7:05: 5f:a3:10:2f:ac:9e:57:73:51:9b:75:d3:46:df:8c: fa:e7:12:36:55:42:31:c3:5b:01:bb:49:09:dc:f8: 57:8b:f3:f9:c8:ab:71:00:6b:29:36:10:e8:62:12: 82:0c:d0:8b:06:a5:09:ca:b6:61:a7:73:da:b0:e9: b7:53:56:15:02:f4:d1:dd:a7:6b:68:58:a2:a5:33: 50:f2:e3:f2:46:43:21:08:2e:4e:dc:2d:d8:14:3d: f9:35:37:6b:db:20:de:11:d2:68:8d:06:50:81:f4: f3:66:21:2c:e5:65:26:66:99:df:19:9d:70:42:a7: c3:7c:cd:db:c7:1a:02:ec:9c:1a:8d:69:aa:f9:20: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:7C:0A:6F:7A:E7:9B:6F:80:20:17:6E:CE:C3:08:7F:5B:56:4F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6116::/48 Signature Algorithm: sha256WithRSAEncryption 8d:fe:7a:33:1c:8e:44:40:27:97:c4:f3:10:17:4e:ea:7a:c1: 57:5b:4b:39:b8:e2:19:8c:a2:e7:7b:b6:4f:9d:ab:42:80:ae: fb:0f:7d:58:b0:6f:75:68:3a:bd:7b:41:8b:3c:d5:c6:12:70: 4c:67:57:83:86:8a:0f:55:e5:dc:a2:0c:5a:bf:be:f5:8b:42: 53:83:8a:73:52:1e:c5:da:2e:ca:07:af:2e:ee:89:2c:90:6f: 54:20:ef:98:0a:0c:3b:75:e5:b2:fb:27:19:e8:94:40:90:e2: f6:27:c7:cd:6f:2a:a0:0f:51:50:27:65:60:0d:ac:ec:b8:1e: 11:8e:73:b6:9c:c6:5a:29:83:d0:b1:81:19:ef:2b:57:69:db: e6:a5:5d:f8:fc:c1:35:be:d8:33:1b:43:43:8a:2f:3b:eb:3c: 67:3d:db:32:71:66:40:9f:58:29:52:59:ac:e8:35:0e:f5:0a: fc:61:a3:77:1b:13:37:7e:65:01:0b:81:8d:97:9d:52:48:76: ae:e2:6d:09:05:e8:22:88:6e:19:1b:b4:b8:3a:bf:7a:eb:c1: be:b5:7d:6f:ac:b1:f1:7e:da:6d:35:aa:ff:9b:bd:e5:83:9b: 73:d9:55:28:71:ec:23:84:f0:b9:21:b4:f8:fb:62:5f:cc:77: a4:f5:76:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB91MHlV0Bk3b8901gi1UXfXrO0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDE1WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTZlYmIzNDhkYjIxN2IwMDQ5YTkwNzUzMDAzYmJjYjky MWQzZmY4MjMwN2IzZDRjN2NhYzJkZTliOGUxMTU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQEpTvKe/IZHUCbYUHZtRfaUN/Xvggk9gV8kQKo5OGqCM1 xmnsVrOjf4e/UM6Ve1OyeSHgMPIWqMdFFgsJHmSGLOhVOwWXny88cWyzkJ968Prg WKgPq/VfX+PH5kLYxct1WVDLUkKEn1Qby7xYHwekc39pQxe3BV+jEC+snldzUZt1 00bfjPrnEjZVQjHDWwG7SQnc+FeL8/nIq3EAayk2EOhiEoIM0IsGpQnKtmGnc9qw 6bdTVhUC9NHdp2toWKKlM1Dy4/JGQyEILk7cLdgUPfk1N2vbIN4R0miNBlCB9PNm ISzlZSZmmd8ZnXBCp8N8zdvHGgLsnBqNaar5IFchAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw7J8Cm9655tvgCAXbs7DCH9bVk8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzMTJlYTJkLTY1ZjgtNGU0ZS04NzcxLTVlMGY3YTk5Y2Q0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRYwDQYJKoZIhvcNAQELBQADggEBAI3+ejMcjkRAJ5fE8xAXTup6 wVdbSzm44hmMoud7tk+dq0KArvsPfViwb3VoOr17QYs81cYScExnV4OGig9V5dyi DFq/vvWLQlODinNSHsXaLsoHry7uiSyQb1Qg75gKDDt15bL7JxnolECQ4vYnx81v KqAPUVAnZWANrOy4HhGOc7acxlopg9CxgRnvK1dp2+alXfj8wTW+2DMbQ0OKLzvr PGc92zJxZkCfWClSWazoNQ71Cvxho3cbEzd+ZQELgY2XnVJIdq7ibQkF6CKIbhkb tLg6v3rrwb61fW+ssfF+2m01qv+bveWDm3PZVShx7COE8LkhtPj7Yl/Md6T1duI= -----END CERTIFICATE-----Generated at Wed Oct 28 23:07:17 2026 by rpki-client