$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa File: a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa (raw, json) Hash identifier: fhoZrYTr+IQQpYDQ+XtG/MHHPIin92SDnObTvZImoPs= Subject key identifier: ED:7A:22:98:F5:1B:08:DD:E0:3D:AD:68:6E:33:D7:E9:4B:D5:F8:C4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4478EE08F3D9DE2EF34F55B205ED0130470E5D7D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa Signing time: Mon 26 Oct 2026 04:20:40 +0000 ROA not before: Mon 26 Oct 2026 04:20:40 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:eb00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:78:ee:08:f3:d9:de:2e:f3:4f:55:b2:05:ed:01:30:47:0e:5d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:40 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=e97b39d431485d080de4e897edaeac96927cce5c98b3bb76aa1c51d2b71b8612, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:94:49:47:cb:61:36:6b:60:85:58:24:5c: 3e:62:0b:00:19:4d:16:3a:53:44:0b:1d:2f:24:ed: 02:f4:c1:df:a5:64:c0:df:38:83:ab:f6:61:8d:b9: 58:57:c0:44:17:c4:2a:db:95:c4:6e:c3:94:62:61: fc:ef:62:db:0e:a0:29:7f:19:11:fc:9f:8b:56:fe: 15:ec:ad:42:0a:98:cf:b5:32:1f:cf:8a:48:5c:0d: b1:4e:e8:b8:92:81:fb:0c:f8:1a:7b:61:92:c4:ef: 9b:e0:10:24:26:5c:52:b1:e3:09:09:c8:33:7f:2b: a0:ae:2c:d8:8c:33:d1:07:5e:ce:50:6a:f3:7f:69: 70:c9:f4:26:b5:4a:cc:8e:7e:0b:bc:8b:09:65:f0: 95:59:f4:14:e8:d9:5c:d3:df:f4:f5:af:9d:8d:25: 85:65:53:bb:1b:5d:cd:62:90:46:63:10:e2:2c:8f: 53:3c:36:c6:16:73:f5:f3:ab:d9:e9:28:3e:b5:f5: c4:78:6f:f7:69:c9:da:88:50:43:70:a3:f7:8d:33: 31:a9:c8:1c:8b:50:62:a4:45:ba:23:e9:04:38:8a: 5f:35:fb:aa:f3:7e:08:c5:3e:67:b2:73:9c:b2:3a: 8b:90:8d:02:c7:5c:64:bb:a6:59:29:b9:0a:6a:12: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:22:98:F5:1B:08:DD:E0:3D:AD:68:6E:33:D7:E9:4B:D5:F8:C4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a6c96c42-4344-44c8-a194-4c87f0ade3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:eb00::/42 Signature Algorithm: sha256WithRSAEncryption 20:06:7a:d1:23:82:ca:66:ce:ea:69:e5:93:2c:d0:7f:e2:0a: 96:d8:9f:54:5c:20:0e:2a:fb:7b:67:59:8c:8d:d8:b6:34:7b: 72:42:92:59:88:76:7c:ba:46:0b:19:90:de:8d:a0:d2:98:b8: 44:0b:67:7b:a4:28:03:93:3e:2b:49:b8:1f:a9:b9:eb:23:2c: b5:d3:8c:2d:ba:86:67:4a:cb:86:78:41:90:e7:ae:f1:00:0f: 5f:0f:f2:4c:3b:00:9e:7f:aa:c1:2d:68:7f:a3:33:0b:a7:26: 06:34:fd:00:54:18:b6:a3:d3:10:57:c5:ed:5e:34:a8:c1:e0: 50:9d:3b:91:4f:50:83:0a:cf:c2:9c:7c:b7:06:e0:ae:6b:ca: 63:4f:b5:3e:71:d4:08:0d:e1:a9:da:c4:f2:34:e9:17:8a:a3: b4:bb:ad:25:1c:f1:2a:0b:cd:24:63:00:d3:ba:e2:29:4d:36: 31:c6:65:92:19:cc:9a:7d:a6:34:b7:e0:b7:1f:a0:0c:20:bf: 24:4b:f9:2c:f6:57:e5:ee:29:a4:2a:56:1c:5d:ac:f6:00:58: f5:c6:d3:2b:00:78:6a:fb:46:8e:90:10:60:eb:29:91:ca:e9: 9b:7c:b6:70:2c:3a:1e:9f:6e:e4:cc:04:b1:b6:5e:ad:f3:d0: 96:c9:7d:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURHjuCPPZ3i7zT1WyBe0BMEcOXX0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDQwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTdiMzlkNDMxNDg1ZDA4MGRlNGU4OTdlZGFlYWM5Njky N2NjZTVjOThiM2JiNzZhYTFjNTFkMmI3MWI4NjEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNKJRJR8thNmtghVgkXD5iCwAZTRY6U0QLHS8k7QL0wd+l ZMDfOIOr9mGNuVhXwEQXxCrblcRuw5RiYfzvYtsOoCl/GRH8n4tW/hXsrUIKmM+1 Mh/PikhcDbFO6LiSgfsM+Bp7YZLE75vgECQmXFKx4wkJyDN/K6CuLNiMM9EHXs5Q avN/aXDJ9Ca1SsyOfgu8iwll8JVZ9BTo2VzT3/T1r52NJYVlU7sbXc1ikEZjEOIs j1M8NsYWc/Xzq9npKD619cR4b/dpydqIUENwo/eNMzGpyByLUGKkRboj6QQ4il81 +6rzfgjFPmeyc5yyOouQjQLHXGS7plkpuQpqElYfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7XoimPUbCN3gPa1objPX6UvV+MQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E2Yzk2YzQyLTQzNDQtNDRjOC1hMTk0LTRjODdmMGFkZTNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76wAwDQYJKoZIhvcNAQELBQADggEBACAGetEjgspmzupp5ZMs0H/i CpbYn1RcIA4q+3tnWYyN2LY0e3JCklmIdny6RgsZkN6NoNKYuEQLZ3ukKAOTPitJ uB+puesjLLXTjC26hmdKy4Z4QZDnrvEAD18P8kw7AJ5/qsEtaH+jMwunJgY0/QBU GLaj0xBXxe1eNKjB4FCdO5FPUIMKz8KcfLcG4K5rymNPtT5x1AgN4anaxPI06ReK o7S7rSUc8SoLzSRjANO64ilNNjHGZZIZzJp9pjS34LcfoAwgvyRL+Sz2V+XuKaQq VhxdrPYAWPXG0ysAeGr7Ro6QEGDrKZHK6Zt8tnAsOh6fbuTMBLG2Xq3z0JbJfU0= -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:40 2026 by rpki-client