$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa File: ab860450-a818-47f3-a42f-5570594471c3.roa (raw, json) Hash identifier: 3YZ5OvhGwDEoQvzVCFs8/ZhIb0nary690aNgdpUVxq0= Subject key identifier: 2C:A1:4F:36:E4:89:28:12:17:F6:A6:8A:8B:20:ED:E6:8A:9D:05:7A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E8F8B3D5C134D430B022D2FF096CD8DC2529862 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa Signing time: Mon 26 Oct 2026 04:20:38 +0000 ROA not before: Mon 26 Oct 2026 04:20:38 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e900::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8f:8b:3d:5c:13:4d:43:0b:02:2d:2f:f0:96:cd:8d:c2:52:98:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:38 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=5011ceb569585115b52ac743a764caa8fe94e47094e2fe643092fa1f874433d2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:33:d8:83:07:a8:b2:af:ee:7c:6d:15:70: bd:12:f0:f1:21:36:bf:d2:9e:76:ce:4e:e0:f6:9b: 5f:a6:81:77:d6:37:39:37:b8:8c:74:11:9e:e7:9e: 56:ce:22:6b:c0:cb:85:08:7b:17:82:24:03:1a:0e: 51:57:09:b8:22:b2:51:cf:d4:e8:84:98:b3:e8:56: 12:6e:8a:cc:45:6f:f2:22:ca:8c:c0:36:03:63:d5: 04:7c:d0:5e:d3:8d:02:3c:ad:04:98:32:d8:fa:05: 9e:4f:4b:73:64:68:be:dd:44:8d:64:4a:a9:da:e2: 59:b6:fe:3a:69:69:91:70:52:35:73:d6:e6:cc:2e: ba:a3:77:72:8f:09:e3:a5:74:d4:d9:30:2f:66:d1: 95:76:a3:96:8d:b0:50:77:15:38:da:db:87:02:c5: c1:04:3c:a6:95:1f:e7:5b:88:e6:57:10:4c:3e:e9: 02:36:0e:59:8e:76:66:4a:a2:42:48:57:65:0d:d6: ef:cd:bd:96:d3:0c:2a:cc:ef:3b:d4:e6:d6:35:3c: c9:a3:92:16:d7:b4:55:63:96:a4:37:d9:cb:04:59: 8f:1c:a5:c8:1d:e6:f1:d0:36:1e:4e:44:cf:29:b5: df:30:21:57:c3:f0:74:d1:a7:6c:7a:86:30:99:4e: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:4F:36:E4:89:28:12:17:F6:A6:8A:8B:20:ED:E6:8A:9D:05:7A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/42 Signature Algorithm: sha256WithRSAEncryption 95:7c:da:02:e5:cb:22:e5:81:b7:cd:84:45:51:45:20:14:e2: e1:3a:03:f1:0b:cf:9c:b9:c0:9d:48:4e:62:fa:d8:65:37:18: cd:dc:ab:45:df:ff:0c:90:73:01:f0:3d:1f:4f:d8:b9:c7:c1: 0b:d4:91:c7:ce:8e:ee:61:db:14:8b:7b:f4:a5:8b:4b:75:2b: 2b:0d:55:13:1a:37:84:bf:92:5f:00:1c:8e:37:ae:f3:57:91: 33:e8:9e:c5:5d:63:4f:e1:d6:97:87:7e:07:2b:b2:90:b5:8c: 0e:8f:b5:07:08:08:88:80:f5:7c:d5:a7:05:20:e2:3c:4e:eb: b6:53:79:be:c8:cd:f4:a3:1a:f4:23:cc:91:a3:57:ca:ae:ae: c9:ff:93:b8:91:eb:94:5c:b3:20:27:02:a8:d4:6d:2a:2d:24: d2:cb:a9:0f:62:8e:35:76:dc:e4:ac:4f:1c:24:fe:14:7c:e2: 72:74:8d:83:be:b9:7a:7f:14:cd:a7:45:f6:ff:53:a3:85:74: f4:07:49:cf:07:4d:34:6c:1f:e8:bc:0e:d0:fa:16:ac:8c:ab: e2:0e:c3:54:c8:7b:9c:f8:b8:eb:3a:0f:45:7d:04:67:05:26: c0:06:87:43:9e:6e:85:c2:b5:a9:ed:96:00:37:ae:51:f0:93: 45:b4:60:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPo+LPVwTTUMLAi0v8JbNjcJSmGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDM4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDExY2ViNTY5NTg1MTE1YjUyYWM3NDNhNzY0Y2FhOGZl OTRlNDcwOTRlMmZlNjQzMDkyZmExZjg3NDQzM2QyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1wDPYgweosq/ufG0VcL0S8PEhNr/SnnbOTuD2m1+mgXfW Nzk3uIx0EZ7nnlbOImvAy4UIexeCJAMaDlFXCbgislHP1OiEmLPoVhJuisxFb/Ii yozANgNj1QR80F7TjQI8rQSYMtj6BZ5PS3NkaL7dRI1kSqna4lm2/jppaZFwUjVz 1ubMLrqjd3KPCeOldNTZMC9m0ZV2o5aNsFB3FTja24cCxcEEPKaVH+dbiOZXEEw+ 6QI2DlmOdmZKokJIV2UN1u/NvZbTDCrM7zvU5tY1PMmjkhbXtFVjlqQ32csEWY8c pcgd5vHQNh5ORM8ptd8wIVfD8HTRp2x6hjCZTg2/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULKFPNuSJKBIX9qaKiyDt5oqdBXowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FiODYwNDUwLWE4MTgtNDdmMy1hNDJmLTU1NzA1OTQ0NzFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76QAwDQYJKoZIhvcNAQELBQADggEBAJV82gLlyyLlgbfNhEVRRSAU 4uE6A/ELz5y5wJ1ITmL62GU3GM3cq0Xf/wyQcwHwPR9P2LnHwQvUkcfOju5h2xSL e/Sli0t1KysNVRMaN4S/kl8AHI43rvNXkTPonsVdY0/h1peHfgcrspC1jA6PtQcI CIiA9XzVpwUg4jxO67ZTeb7IzfSjGvQjzJGjV8qursn/k7iR65RcsyAnAqjUbSot JNLLqQ9ijjV23OSsTxwk/hR84nJ0jYO+uXp/FM2nRfb/U6OFdPQHSc8HTTRsH+i8 DtD6FqyMq+IOw1TIe5z4uOs6D0V9BGcFJsAGh0OeboXCtantlgA3rlHwk0W0YEA= -----END CERTIFICATE-----Generated at Tue Oct 27 06:01:09 2026 by rpki-client