$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa File: b2d641cc-0376-4d82-897a-3d5596d61679.roa (raw, json) Hash identifier: WuJ+ckcoU4sOEG/tVap3+qSs4ewhae7fuRu74HRdHcE= Subject key identifier: 2C:C2:D4:27:BD:6B:C8:9A:D1:B4:EA:F5:1B:12:4D:57:FD:45:AF:55 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 40BDD9BC19E8C65729A6DE3CF51CF16030D935C7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa Signing time: Thu 08 Oct 2026 01:10:08 +0000 ROA not before: Thu 08 Oct 2026 01:10:08 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bd:d9:bc:19:e8:c6:57:29:a6:de:3c:f5:1c:f1:60:30:d9:35:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 8 01:10:08 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=4b8cfdde1239d25c73476e7b88aca61eea55764c4aaae5695696cab8c9fa5be1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2c:57:ee:67:ed:8e:63:67:95:cd:d7:cd:7f: a7:9f:8e:26:9c:8f:9e:03:1b:ee:1c:fd:ab:d3:aa: c3:52:b9:e2:0a:26:f0:1f:5f:6d:a5:8c:44:63:7e: 81:29:80:05:76:62:c5:ef:1d:81:c2:25:9f:4c:57: c8:56:ba:9d:3f:fe:6a:16:95:e7:3a:a6:d0:ea:07: 79:da:c8:7c:3b:e4:80:63:0b:72:84:16:6a:a0:3f: b2:9e:89:c9:17:e6:25:3a:10:29:30:b8:5d:7e:a3: 48:60:1d:6b:19:71:d6:52:ae:47:68:49:76:e7:93: 50:b2:ed:80:f3:35:db:2c:38:53:92:da:b3:85:4a: 17:59:79:f1:4f:ce:13:5e:36:7c:2c:fe:6f:f9:88: 91:33:0f:e5:b8:c4:5b:22:26:c3:0f:9c:3d:60:4d: b3:6b:49:0b:89:1a:62:16:2b:12:9d:f7:dd:27:af: 41:e1:a7:ad:bc:4d:f0:c7:29:89:07:02:11:9f:38: 3c:14:e0:a0:65:bf:07:86:b3:0c:2e:c0:46:b1:57: d1:ea:41:17:ac:46:52:55:e9:a1:46:73:e6:4d:95: de:43:b3:a7:39:c3:38:46:61:ad:c5:9e:c6:92:88: b1:2f:08:9b:a9:00:56:f4:da:6c:9a:16:d6:0f:1a: c2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:D4:27:BD:6B:C8:9A:D1:B4:EA:F5:1B:12:4D:57:FD:45:AF:55 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7101::/48 Signature Algorithm: sha256WithRSAEncryption 92:f9:8c:9a:af:14:44:00:15:b9:8a:37:6a:6a:e2:eb:f2:fd: a1:dd:57:13:7a:dd:2a:43:bd:ce:ee:f7:98:34:53:f7:16:33: b2:95:fc:ab:09:8a:dc:2c:82:f9:f0:19:08:af:d7:d6:81:b7: dd:82:3a:8d:4c:d1:b0:37:6e:cf:e8:91:b7:3a:bf:27:08:9a: a0:03:18:8a:59:25:ae:63:b5:5f:9c:a9:c6:59:aa:f4:c8:4f: 92:b9:7d:a8:09:77:31:bb:aa:00:03:98:79:e4:a6:20:39:f7: ee:8f:8b:70:09:32:30:45:0f:d7:85:15:7b:a5:d5:01:9e:7a: 94:cb:b9:4d:c1:b9:51:98:5a:1f:de:e5:5a:c0:e7:fb:98:13: 3f:1f:9f:ef:bf:82:21:14:06:f9:c5:57:4f:b4:c8:08:8f:09: 3b:94:d3:51:2e:69:a0:fd:8b:ef:f5:56:aa:cb:d6:f2:8a:f9: b0:2b:62:6c:0b:51:3d:9e:ed:56:80:c7:72:06:8d:22:1b:79: 09:09:a5:36:59:6d:46:34:21:dc:17:6b:d1:63:6d:87:65:4a: 4f:de:3c:d9:ee:a7:cd:ae:eb:46:c4:82:66:e1:e4:4f:fb:61: 74:b3:6d:cb:97:89:1c:37:d3:1e:62:0e:6c:9a:0f:40:98:84: 31:11:d6:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQL3ZvBnoxlcppt489RzxYDDZNccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA4MDExMDA4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjhjZmRkZTEyMzlkMjVjNzM0NzZlN2I4OGFjYTYxZWVh NTU3NjRjNGFhYWU1Njk1Njk2Y2FiOGM5ZmE1YmUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqLFfuZ+2OY2eVzdfNf6efjiacj54DG+4c/avTqsNSueIK JvAfX22ljERjfoEpgAV2YsXvHYHCJZ9MV8hWup0//moWlec6ptDqB3nayHw75IBj C3KEFmqgP7KeickX5iU6ECkwuF1+o0hgHWsZcdZSrkdoSXbnk1Cy7YDzNdssOFOS 2rOFShdZefFPzhNeNnws/m/5iJEzD+W4xFsiJsMPnD1gTbNrSQuJGmIWKxKd990n r0Hhp628TfDHKYkHAhGfODwU4KBlvweGswwuwEaxV9HqQResRlJV6aFGc+ZNld5D s6c5wzhGYa3FnsaSiLEvCJupAFb02myaFtYPGsJlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULMLUJ71ryJrRtOr1GxJNV/1Fr1UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IyZDY0MWNjLTAzNzYtNGQ4Mi04OTdhLTNkNTU5NmQ2MTY3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycQEwDQYJKoZIhvcNAQELBQADggEBAJL5jJqvFEQAFbmKN2pq4uvy /aHdVxN63SpDvc7u95g0U/cWM7KV/KsJitwsgvnwGQiv19aBt92COo1M0bA3bs/o kbc6vycImqADGIpZJa5jtV+cqcZZqvTIT5K5fagJdzG7qgADmHnkpiA59+6Pi3AJ MjBFD9eFFXul1QGeepTLuU3BuVGYWh/e5VrA5/uYEz8fn++/giEUBvnFV0+0yAiP CTuU01EuaaD9i+/1VqrL1vKK+bArYmwLUT2e7VaAx3IGjSIbeQkJpTZZbUY0IdwX a9FjbYdlSk/ePNnup82u60bEgmbh5E/7YXSzbcuXiRw30x5iDmyaD0CYhDER1ro= -----END CERTIFICATE-----Generated at Tue Oct 27 00:05:35 2026 by rpki-client