$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa File: b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa (raw, json) Hash identifier: QIPaY+EBZAuUNMWq3g+cJfdBaFLmGPtlkmlAoxqg41Q= Subject key identifier: C8:9B:D4:1A:77:C4:4E:DA:1D:28:0E:81:3A:78:0A:37:4C:41:E6:8D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6B2B57469570E742C88BF64526F85E757047B5F9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa Signing time: Wed 21 Oct 2026 00:10:09 +0000 ROA not before: Wed 21 Oct 2026 00:10:09 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2b:57:46:95:70:e7:42:c8:8b:f6:45:26:f8:5e:75:70:47:b5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 00:10:09 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=af0f42a68469ad8b4599f53b9fd2a1a113aee1a08d70f5276bf9814626daea39, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:87:99:f8:fe:5d:82:97:4e:db:34:33:99: c4:1e:1c:e1:ff:af:fd:08:82:d2:e9:e2:00:ae:fa: a4:61:7f:8a:f8:5e:e7:c0:02:86:ff:b3:a7:b2:84: 2b:ab:48:ef:40:83:a6:2d:49:7a:aa:3b:97:4a:b0: a5:dd:a0:ea:77:b6:ef:99:16:65:43:db:a6:87:7b: 92:e3:c3:02:ba:23:51:91:df:78:83:87:34:59:6d: 8e:4d:58:b8:8c:09:2a:b4:2b:09:85:9d:04:ed:90: 89:01:ed:9c:c5:e4:b4:a0:96:ff:58:ba:7e:34:8f: eb:5c:bf:a1:a7:ff:b6:04:dd:34:41:dd:84:80:f3: c9:0a:9d:19:fa:d7:0b:5b:82:eb:a4:c6:d5:ea:b5: 1c:98:24:06:69:1b:21:b6:c2:c6:22:08:4b:97:05: 2b:13:90:40:02:82:0f:64:43:94:84:1a:7e:1b:44: b7:43:7a:c2:77:17:71:02:2f:67:7d:d9:4a:d0:89: cf:b6:3b:cc:42:81:3b:c3:ae:31:48:d6:4d:7d:21: c1:73:83:9c:04:ec:52:a0:fc:80:46:54:c6:1e:2b: 35:a2:53:db:4c:93:dd:6d:ed:c3:d1:b9:2d:f8:e0: c8:8d:e2:ae:da:ee:42:d8:b6:0a:c4:47:ac:ea:0a: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:D4:1A:77:C4:4E:DA:1D:28:0E:81:3A:78:0A:37:4C:41:E6:8D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0::/28 Signature Algorithm: sha256WithRSAEncryption 1e:bb:1b:9a:5a:38:66:04:f4:35:11:91:c8:e7:00:28:5b:b5: 4f:77:c1:ee:f6:79:26:b8:05:96:3e:87:51:c3:3a:6f:2a:44: f6:38:c7:ae:13:0d:f5:cf:67:83:9f:21:c0:1e:3a:63:00:2e: 79:9f:de:45:53:b0:1f:f5:ee:54:54:6c:96:b3:da:d6:c4:c9: 49:6b:bf:e9:3c:fb:3d:4a:f1:7b:3d:45:a1:7d:02:01:d3:3c: 13:fb:96:c5:5d:c5:30:7f:6f:17:70:de:3e:c5:52:c1:4e:b8: 42:91:3a:5f:be:9f:17:39:80:a8:26:7e:4c:d3:62:7e:39:a5: 0e:7d:35:a3:d0:cb:ad:69:cd:58:10:db:cb:9a:bd:9b:1e:2e: 6b:25:3f:41:95:d8:8c:4d:3c:13:ea:b9:fe:f8:dc:a2:7c:77: f1:44:5a:c7:2a:63:a5:1f:9c:b8:31:98:ce:26:0d:c2:31:b9: 30:14:21:fb:b5:2f:ab:fc:58:01:62:01:24:30:61:10:91:5e: dc:29:fb:9f:68:b5:0f:a3:cf:44:8e:19:ac:34:51:d2:ab:ba: 18:b1:78:e4:58:5b:c0:26:83:ac:b6:32:75:82:8d:31:72:a5: fc:2a:b5:31:25:4c:bb:39:b5:f8:41:4d:74:1b:6d:1b:39:45: 71:49:8c:b9 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUaytXRpVw50LIi/ZFJvhedXBHtfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIxMDAxMDA5WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjBmNDJhNjg0NjlhZDhiNDU5OWY1M2I5ZmQyYTFhMTEz YWVlMWEwOGQ3MGY1Mjc2YmY5ODE0NjI2ZGFlYTM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXHIeZ+P5dgpdO2zQzmcQeHOH/r/0IgtLp4gCu+qRhf4r4 XufAAob/s6eyhCurSO9Ag6YtSXqqO5dKsKXdoOp3tu+ZFmVD26aHe5LjwwK6I1GR 33iDhzRZbY5NWLiMCSq0KwmFnQTtkIkB7ZzF5LSglv9Yun40j+tcv6Gn/7YE3TRB 3YSA88kKnRn61wtbguukxtXqtRyYJAZpGyG2wsYiCEuXBSsTkEACgg9kQ5SEGn4b RLdDesJ3F3ECL2d92UrQic+2O8xCgTvDrjFI1k19IcFzg5wE7FKg/IBGVMYeKzWi U9tMk91t7cPRuS344MiN4q7a7kLYtgrER6zqCqOfAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUyJvUGnfETtodKA6BOngKN0xB5o0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YmJhZmJmLWU2ZDQtNDQ4Ny05ZWJiLWNiZDcyYjNkNmM3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPDwMA0GCSqGSIb3DQEBCwUAA4IBAQAeuxuaWjhmBPQ1EZHI5wAoW7VP d8Hu9nkmuAWWPodRwzpvKkT2OMeuEw31z2eDnyHAHjpjAC55n95FU7Af9e5UVGyW s9rWxMlJa7/pPPs9SvF7PUWhfQIB0zwT+5bFXcUwf28XcN4+xVLBTrhCkTpfvp8X OYCoJn5M02J+OaUOfTWj0Mutac1YENvLmr2bHi5rJT9BldiMTTwT6rn++NyifHfx RFrHKmOlH5y4MZjOJg3CMbkwFCH7tS+r/FgBYgEkMGEQkV7cKfufaLUPo89Ejhms NFHSq7oYsXjkWFvAJoOstjJ1go0xcqX8KrUxJUy7ObX4QU10G20bOUVxSYy5 -----END CERTIFICATE-----Generated at Tue Oct 27 08:46:38 2026 by rpki-client