$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a87721b1-51b4-405f-a72a-cabeb3cd84b2.roa File: a87721b1-51b4-405f-a72a-cabeb3cd84b2.roa (raw, json) Hash identifier: pQPU6M+Mg3B6vlQ5VHH/993aAmo6+TCkhFq2bmEWj6s= Subject key identifier: 3C:7F:8A:5B:99:4D:C8:44:A6:6D:DF:CC:0B:9F:EF:21:CB:C0:29:E0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 457BEBD90EF6C34B3BE57E9181A6EA04D844A281 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a87721b1-51b4-405f-a72a-cabeb3cd84b2.roa Signing time: Sun 18 Oct 2026 01:20:09 +0000 ROA not before: Sun 18 Oct 2026 01:20:09 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7b:eb:d9:0e:f6:c3:4b:3b:e5:7e:91:81:a6:ea:04:d8:44:a2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 18 01:20:09 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=52e81f9dc431176dcfa7974258e5a975e7bdc4bbefb6d65c0e46dc45773e209a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:d7:9e:1a:fb:46:d8:82:fb:fa:c5:98:f5: 5e:fe:89:10:72:ca:2e:87:3c:2e:7f:39:d9:20:5f: 2b:3e:3b:a2:a2:58:4b:17:c7:fb:55:9e:9f:bb:a9: e7:a2:33:f0:f3:6c:3e:fe:98:08:37:d3:3d:3e:d3: 41:99:d5:2f:76:a8:c6:a3:a9:a4:f1:dc:05:5f:d1: 8a:19:dc:f9:78:e6:14:03:e9:00:db:f9:20:9e:aa: 18:8d:32:9d:ae:b3:30:7d:9f:49:82:d4:e4:e8:f3: 75:62:fa:d9:43:f9:f9:5b:f2:6f:91:24:c3:18:55: f5:2d:b5:bd:eb:2a:71:41:0a:c1:0d:23:d5:f0:06: f4:29:63:7c:ed:eb:bb:8a:f6:b6:19:b2:c2:1e:02: f0:28:cd:b3:fa:8c:a4:57:59:54:f0:09:00:fb:68: 13:69:11:89:06:31:7f:ae:61:09:32:8d:6b:72:0d: 78:c7:32:05:06:9a:c3:89:a0:26:35:1e:55:ca:7b: 02:59:18:0b:1f:c0:75:a3:f5:21:3d:e3:fb:62:e8: 97:07:ff:20:1d:66:88:9f:8c:24:57:62:24:9a:d1: 17:04:ff:4a:74:55:ad:e2:4e:7f:a7:15:66:64:a2: 4c:5a:2b:16:2f:ed:4d:a6:27:3e:9b:3d:86:88:e6: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:8A:5B:99:4D:C8:44:A6:6D:DF:CC:0B:9F:EF:21:CB:C0:29:E0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a87721b1-51b4-405f-a72a-cabeb3cd84b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a00::/40 Signature Algorithm: sha256WithRSAEncryption 28:b0:a7:62:fb:ee:86:7e:80:dd:84:b7:b4:26:97:e4:22:35: 1c:c5:ad:73:2f:a1:12:4b:6f:07:9c:48:fc:1b:bc:1b:e2:a5: 4c:62:a1:da:5d:8b:fe:dd:53:4b:5f:c8:34:39:6b:92:08:f6: 95:d2:64:ad:48:7b:6d:59:d7:b6:96:6e:3d:2b:b8:6e:02:3c: 4a:e6:99:5b:2f:4d:ed:d6:04:29:9b:bd:a1:08:ad:22:fc:bd: 91:08:85:f1:65:26:05:73:59:24:cd:2c:47:28:5f:1a:b9:85: 6b:9a:6f:b0:0a:de:11:93:de:bd:08:3c:45:13:60:c1:5b:61: af:51:55:ee:d8:14:00:6d:89:53:ed:e8:92:17:e2:db:3a:f7: 45:8b:9d:29:08:0a:44:1c:45:0e:3b:fd:6a:12:7e:22:5b:62: fb:ba:19:19:f9:f4:62:63:49:48:c0:5c:01:b0:c3:52:17:3f: d4:55:06:f2:f8:97:05:89:97:4e:cf:11:ec:eb:0c:e6:95:dc: 2e:25:8e:f1:f4:ce:15:40:3d:0b:c6:c0:45:20:00:95:10:c2: 90:7d:43:2b:7f:23:ff:aa:3f:be:e3:57:b7:76:d7:b1:89:c1: 07:82:e1:36:cc:9f:ef:bb:e0:50:c0:60:e6:76:ed:4f:ef:5a: 60:c2:6d:d2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURXvr2Q72w0s75X6RgabqBNhEooEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDA5WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmU4MWY5ZGM0MzExNzZkY2ZhNzk3NDI1OGU1YTk3NWU3 YmRjNGJiZWZiNmQ2NWMwZTQ2ZGM0NTc3M2UyMDlhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmT9eeGvtG2IL7+sWY9V7+iRByyi6HPC5/OdkgXys+O6Ki WEsXx/tVnp+7qeeiM/DzbD7+mAg30z0+00GZ1S92qMajqaTx3AVf0YoZ3Pl45hQD 6QDb+SCeqhiNMp2uszB9n0mC1OTo83Vi+tlD+flb8m+RJMMYVfUttb3rKnFBCsEN I9XwBvQpY3zt67uK9rYZssIeAvAozbP6jKRXWVTwCQD7aBNpEYkGMX+uYQkyjWty DXjHMgUGmsOJoCY1HlXKewJZGAsfwHWj9SE94/ti6JcH/yAdZoifjCRXYiSa0RcE /0p0Va3iTn+nFWZkokxaKxYv7U2mJz6bPYaI5qDXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPH+KW5lNyESmbd/MC5/vIcvAKeAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E4NzcyMWIxLTUxYjQtNDA1Zi1hNzJhLWNhYmViM2NkODRiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxijANBgkqhkiG9w0BAQsFAAOCAQEAKLCnYvvuhn6A3YS3tCaX5CI1 HMWtcy+hEktvB5xI/Bu8G+KlTGKh2l2L/t1TS1/INDlrkgj2ldJkrUh7bVnXtpZu PSu4bgI8SuaZWy9N7dYEKZu9oQitIvy9kQiF8WUmBXNZJM0sRyhfGrmFa5pvsAre EZPevQg8RRNgwVthr1FV7tgUAG2JU+3okhfi2zr3RYudKQgKRBxFDjv9ahJ+Ilti +7oZGfn0YmNJSMBcAbDDUhc/1FUG8viXBYmXTs8R7OsM5pXcLiWO8fTOFUA9C8bA RSAAlRDCkH1DK38j/6o/vuNXt3bXsYnBB4LhNsyf77vgUMBg5nbtT+9aYMJt0g== -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:04 2026 by rpki-client