$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa File: a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa (raw, json) Hash identifier: aidcy06qNoOeMPxIcq417KhwnGJl5IBRZCSQyl81f6o= Subject key identifier: BE:D1:2C:2B:F3:A5:6D:9B:14:9E:5C:DA:A2:D6:25:DE:28:62:32:81 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3AB175A7F47AD6A44E36F12FC46A55029D31726C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa Signing time: Mon 26 Oct 2026 04:20:42 +0000 ROA not before: Mon 26 Oct 2026 04:20:42 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e600::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:75:a7:f4:7a:d6:a4:4e:36:f1:2f:c4:6a:55:02:9d:31:72:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:42 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=054f1dc07c304e35b9436f05fc8b51a495d74113ce30389d8341d351211ffea7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:77:9b:d7:7a:ed:8b:96:73:1a:f6:da:74: 9b:6f:15:d8:99:d0:28:78:20:0c:0a:ba:83:61:67: ad:f1:3f:a6:96:f4:c5:3e:88:cf:0c:7c:ba:10:51: 23:df:65:16:22:ba:32:5a:6e:d7:59:0d:85:61:71: 1e:95:6d:24:58:88:f9:62:25:25:59:16:21:e4:cb: a3:ad:74:35:36:72:b7:9f:13:6c:16:e4:45:ae:f9: 0e:a7:7c:23:08:f7:1e:b7:2f:74:ac:15:3c:ed:70: 61:ec:6f:44:fa:a3:8d:2b:cd:df:65:38:cc:a7:6c: 8c:e8:5c:86:60:c8:b5:8f:87:4d:03:d7:1d:e1:24: 74:0a:ce:09:73:c0:5c:b7:0b:17:85:9d:1b:ba:5a: 35:09:5b:84:d6:6a:1b:35:2a:ff:b6:da:06:07:d8: 19:92:80:f6:dc:5c:c9:5e:eb:c8:bb:f1:f6:a4:ed: 93:d3:f4:04:8f:6c:4d:c1:9c:26:e8:d6:59:bf:5c: b1:5d:1e:01:34:e5:79:c6:f3:68:b5:9f:17:d6:bc: 35:d8:a1:ad:bc:b8:18:28:81:41:6d:a7:62:db:36: 88:b0:f9:28:ef:f3:f7:2e:56:bc:9a:f5:0f:37:85: 1c:de:60:b8:f9:3d:b7:03:db:14:1c:8f:7b:06:5d: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D1:2C:2B:F3:A5:6D:9B:14:9E:5C:DA:A2:D6:25:DE:28:62:32:81 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/42 Signature Algorithm: sha256WithRSAEncryption 3e:9d:a5:90:b9:0b:2b:1d:56:cc:c3:31:98:29:13:0f:91:78: 2c:f5:e7:c7:65:7b:c0:01:13:07:7a:ca:d1:eb:48:16:0a:21: 0f:47:d8:af:2f:48:85:4e:37:3f:53:80:d7:50:dd:d7:87:f8: ce:36:ac:c4:93:24:4e:ba:a5:cc:da:e5:cc:50:d9:47:c3:e0: 1d:29:9a:2f:e5:9c:0e:d8:af:c6:54:36:70:94:8f:6c:5d:5f: 83:36:78:0f:94:07:df:77:4f:27:25:f7:f6:8b:be:f2:73:47: ca:60:a1:3d:c3:c4:b6:a5:af:01:cf:5e:6b:9e:69:c4:83:07: 5a:5d:3b:40:b0:8a:b5:89:d0:82:47:61:17:10:4c:fe:fd:c8: 6f:06:76:c6:a4:e4:07:4b:3b:65:eb:8b:a7:09:8d:7a:3c:4b: 5e:89:d8:41:11:19:ea:fa:05:73:b6:c6:64:d3:c8:99:3e:ff: e7:30:d6:e9:3b:2f:06:c6:6e:22:92:8e:30:78:7e:88:0d:8e: 41:e5:20:f2:e8:ca:a4:f0:2f:95:bf:ef:21:14:fd:c7:0b:1b: 6a:9f:92:9a:a9:38:5c:c8:79:b3:25:32:2a:ae:68:8f:2c:0b: 3e:c0:6e:35:26:4b:38:5b:83:d0:64:1b:ec:54:29:32:a6:ed: dc:30:06:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOrF1p/R61qRONvEvxGpVAp0xcmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDQyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTRmMWRjMDdjMzA0ZTM1Yjk0MzZmMDVmYzhiNTFhNDk1 ZDc0MTEzY2UzMDM4OWQ4MzQxZDM1MTIxMWZmZWE3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuTXeb13rti5ZzGvbadJtvFdiZ0Ch4IAwKuoNhZ63xP6aW 9MU+iM8MfLoQUSPfZRYiujJabtdZDYVhcR6VbSRYiPliJSVZFiHky6OtdDU2cref E2wW5EWu+Q6nfCMI9x63L3SsFTztcGHsb0T6o40rzd9lOMynbIzoXIZgyLWPh00D 1x3hJHQKzglzwFy3CxeFnRu6WjUJW4TWahs1Kv+22gYH2BmSgPbcXMle68i78fak 7ZPT9ASPbE3BnCbo1lm/XLFdHgE05XnG82i1nxfWvDXYoa28uBgogUFtp2LbNoiw +Sjv8/cuVrya9Q83hRzeYLj5PbcD2xQcj3sGXZvzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvtEsK/OlbZsUnlzaotYl3ihiMoEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzN2FmNmQ3LTBiMzEtNGE0Ni1iOGQ5LTA4ZWZjZjhmZWY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75gAwDQYJKoZIhvcNAQELBQADggEBAD6dpZC5CysdVszDMZgpEw+R eCz158dle8ABEwd6ytHrSBYKIQ9H2K8vSIVONz9TgNdQ3deH+M42rMSTJE66pcza 5cxQ2UfD4B0pmi/lnA7Yr8ZUNnCUj2xdX4M2eA+UB993Tycl9/aLvvJzR8pgoT3D xLalrwHPXmueacSDB1pdO0CwirWJ0IJHYRcQTP79yG8Gdsak5AdLO2Xri6cJjXo8 S16J2EERGer6BXO2xmTTyJk+/+cw1uk7LwbGbiKSjjB4fogNjkHlIPLoyqTwL5W/ 7yEU/ccLG2qfkpqpOFzIebMlMiquaI8sCz7AbjUmSzhbg9BkG+xUKTKm7dwwBn8= -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:28 2026 by rpki-client