$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a83ca476-c91e-49fa-a145-a668b3654263.roa File: a83ca476-c91e-49fa-a145-a668b3654263.roa (raw, json) Hash identifier: TCoGuLJgW17SMZtyOkb002fnDy30M8XWkibqZB8iduk= Subject key identifier: 98:1B:9C:36:DB:CF:A3:C7:9D:AF:A4:64:27:A1:35:37:6F:65:AE:EC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 18E97AB9783B95D75536A7DBE1C2BA0EE826E153 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a83ca476-c91e-49fa-a145-a668b3654263.roa Signing time: Fri 30 Oct 2026 19:32:47 +0000 ROA not before: Fri 30 Oct 2026 19:32:47 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4318::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e9:7a:b9:78:3b:95:d7:55:36:a7:db:e1:c2:ba:0e:e8:26:e1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:47 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=e0c5c0f89d39dd279da339704f1e19bb7f43e461f0cc54201bb3b12c907c8c98, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:53:b7:0c:c6:6d:32:9d:87:37:db:bc:31: 75:d5:9a:08:24:5c:69:a9:17:21:9f:a6:da:0c:71: 99:c1:e0:33:ae:00:db:31:15:21:7a:4c:46:00:96: 95:15:2d:26:39:97:50:76:a1:75:13:e9:f8:da:c7: d4:7c:67:1b:57:27:5b:c4:50:a4:57:f0:40:f3:b0: e3:bf:27:12:59:4c:e2:86:0b:96:4f:ad:e3:e3:c0: 8e:aa:75:b9:4c:f5:d1:82:d7:0e:7f:1a:df:f9:37: 55:5c:38:13:70:4e:97:38:61:64:62:93:8e:eb:d0: 2a:31:eb:6f:eb:12:7a:7f:7e:26:2d:6b:72:0c:89: 03:c6:d7:cc:74:b2:dd:c2:51:0d:36:d7:ca:75:1e: 1c:a5:00:00:64:51:76:81:8a:e2:7f:a4:39:0f:1d: eb:cb:32:59:23:e6:d1:32:a6:5c:7d:72:89:cb:06: 7a:2b:aa:b0:34:85:e9:ad:26:42:15:f9:0f:79:ef: 71:56:84:4a:5a:12:05:09:a2:c1:b6:ac:ed:87:46: 4a:41:4c:78:9c:12:59:2f:f3:8d:c9:4d:69:f9:2e: d8:36:be:cc:c2:c6:2f:d2:fa:db:23:d7:ca:16:7c: c1:29:3a:50:37:a7:f9:1a:0c:2f:f7:1c:e7:25:8e: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1B:9C:36:DB:CF:A3:C7:9D:AF:A4:64:27:A1:35:37:6F:65:AE:EC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a83ca476-c91e-49fa-a145-a668b3654263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4318::/46 Signature Algorithm: sha256WithRSAEncryption 11:43:1d:b9:c1:60:cb:ce:65:eb:d4:40:2b:4b:cf:93:bd:2f: 06:9f:f1:12:6b:78:99:9d:ca:bd:04:02:12:32:36:29:0b:f9: d8:3e:ec:28:70:3e:75:a9:9f:95:b8:bc:9e:5b:d6:de:62:2f: 5d:3d:2e:08:30:12:69:e6:13:6a:52:92:7f:bd:8d:bd:dc:f7: 2c:e1:dd:22:52:1e:ce:97:9e:96:67:99:52:ac:93:ee:58:71: 3a:45:81:71:ad:fa:c1:8a:14:b0:2d:ff:c5:89:b6:51:2b:19: 6d:1c:10:68:23:44:19:b1:5b:0e:43:0a:53:c7:48:5d:55:e7: 7f:f2:d0:72:18:d2:09:a2:4f:6b:e4:de:74:61:da:36:f9:58: 3c:ae:34:0b:c6:6b:11:37:a3:9c:da:af:bc:20:d7:5f:ec:69: 20:52:9a:e7:73:eb:25:a8:e9:65:13:45:24:ba:e5:8e:41:d3: 84:4a:3e:1a:2c:20:64:77:60:aa:1d:d9:ad:da:c8:28:63:de: 7c:4c:ec:4c:e3:e9:49:08:7f:84:c4:36:1f:09:2d:7c:3c:50: df:55:3b:38:d7:f2:bc:15:c7:c5:fb:f5:e9:19:5e:c6:c7:cb: d9:24:67:ad:c2:ea:a0:19:64:3c:39:42:38:7e:4d:ee:f9:a8: ff:0b:5d:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGOl6uXg7lddVNqfb4cK6Dugm4VMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ3WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGM1YzBmODlkMzlkZDI3OWRhMzM5NzA0ZjFlMTliYjdm NDNlNDYxZjBjYzU0MjAxYmIzYjEyYzkwN2M4Yzk4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/GVO3DMZtMp2HN9u8MXXVmggkXGmpFyGfptoMcZnB4DOu ANsxFSF6TEYAlpUVLSY5l1B2oXUT6fjax9R8ZxtXJ1vEUKRX8EDzsOO/JxJZTOKG C5ZPrePjwI6qdblM9dGC1w5/Gt/5N1VcOBNwTpc4YWRik47r0Cox62/rEnp/fiYt a3IMiQPG18x0st3CUQ0218p1HhylAABkUXaBiuJ/pDkPHevLMlkj5tEyplx9conL BnorqrA0hemtJkIV+Q9573FWhEpaEgUJosG2rO2HRkpBTHicElkv843JTWn5Ltg2 vszCxi/S+tsj18oWfMEpOlA3p/kaDC/3HOcljjD1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmBucNtvPo8edr6RkJ6E1N29lruwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E4M2NhNDc2LWM5MWUtNDlmYS1hMTQ1LWE2NjhiMzY1NDI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxgwDQYJKoZIhvcNAQELBQADggEBABFDHbnBYMvOZevUQCtLz5O9 Lwaf8RJreJmdyr0EAhIyNikL+dg+7ChwPnWpn5W4vJ5b1t5iL109LggwEmnmE2pS kn+9jb3c9yzh3SJSHs6XnpZnmVKsk+5YcTpFgXGt+sGKFLAt/8WJtlErGW0cEGgj RBmxWw5DClPHSF1V53/y0HIY0gmiT2vk3nRh2jb5WDyuNAvGaxE3o5zar7wg11/s aSBSmudz6yWo6WUTRSS65Y5B04RKPhosIGR3YKod2a3ayChj3nxM7Ezj6UkIf4TE Nh8JLXw8UN9VOzjX8rwVx8X79ekZXsbHy9kkZ63C6qAZZDw5Qjh+Te75qP8LXV4= -----END CERTIFICATE-----Generated at Wed Nov 4 16:59:51 2026 by rpki-client