$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa File: b801f8fd-dbab-4a07-86be-11a07359c259.roa (raw, json) Hash identifier: Jw8H+iaq8ttqQ396DXGCzli3lG7VNVMgK4+kyIABg1w= Subject key identifier: 76:86:D9:2F:73:33:79:26:C4:71:74:13:1E:27:9B:16:86:BE:21:84 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5BE43742697288E69A7319E938E4D1AA88D85ED2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa Signing time: Thu 15 Oct 2026 03:20:21 +0000 ROA not before: Thu 15 Oct 2026 03:20:21 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e4:37:42:69:72:88:e6:9a:73:19:e9:38:e4:d1:aa:88:d8:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:21 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=621678d26797fbb3bdf2f70bba5ad997f5de544c5d4cbcbc32a25dbc4fe0f467, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:6b:71:1b:8d:5f:16:b3:bb:8a:3e:c6:ee: b3:6b:ad:a7:4b:b6:d7:af:cd:09:3f:4e:28:3d:c9: e4:79:9e:19:3c:bf:b4:14:66:41:6a:06:f5:6f:f2: 3e:00:2b:58:34:1f:eb:fb:64:ee:37:c2:f8:87:b8: 4a:26:d9:0b:8e:55:a7:08:f5:94:09:99:2a:ec:95: eb:10:e4:07:30:0f:92:28:e6:18:f6:21:40:73:65: f0:b2:29:15:aa:ca:0d:10:e1:57:e6:cc:24:79:5c: 77:01:89:9f:43:9f:9d:44:a0:e2:f7:39:bb:e0:f4: 6f:02:cd:7d:ba:c2:1a:49:61:bc:9e:41:37:b6:29: 9c:ae:90:44:8c:14:d5:8f:72:31:2d:5c:5e:14:06: b3:be:12:a8:3d:01:4e:da:83:0f:ef:85:1e:5f:d9: 4b:b7:c7:1c:ad:0a:34:06:5d:89:ab:e6:5a:1e:88: f8:ad:45:66:73:a1:96:55:ad:76:c2:a1:70:fd:98: b9:12:44:61:a6:a0:04:ae:eb:4f:19:52:3e:9f:e7: 89:7d:2a:bc:48:6b:03:e7:e9:d6:5d:ee:81:48:c5: 79:f4:a7:67:6b:0d:a1:38:5f:9d:8f:f0:a3:10:f6: bc:58:66:fd:50:ff:4b:f9:23:8f:d1:3e:cf:84:fa: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:86:D9:2F:73:33:79:26:C4:71:74:13:1E:27:9B:16:86:BE:21:84 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 35:ec:49:df:37:9e:55:fb:08:44:c2:1e:0e:2d:a3:31:f3:3b: fc:e7:34:94:66:22:a3:2d:37:18:f7:3e:e7:15:a8:d6:5e:88: c9:7f:ed:74:0a:ef:3e:55:d6:94:e8:5d:5c:ca:7a:26:04:3d: 05:3e:15:48:62:39:b8:19:41:f8:9d:5b:e7:73:cf:df:2a:e1: 60:0d:61:90:47:a7:4e:32:93:24:0d:0a:3f:34:34:a8:bd:b9: dc:ae:83:cf:e0:18:8d:c0:74:f4:26:f3:cb:3d:93:84:49:d6: d0:78:a5:27:44:6c:55:16:62:34:ea:96:74:15:f2:83:e9:a1: 1d:55:0e:91:df:2e:89:91:df:19:56:9e:0b:e3:9f:b8:2c:b1: cc:a1:02:db:83:dd:da:23:f9:72:c0:3a:fb:73:f7:f6:bf:69: 6e:c1:b8:0a:26:65:25:8b:52:6b:ce:1c:20:93:85:77:35:b4: b4:14:d8:65:a3:58:95:da:95:60:b8:b2:fb:e8:a6:77:d2:6c: ce:8c:5c:c5:5e:c4:ea:27:08:b8:53:74:eb:5d:32:c3:08:46: 76:11:2d:4c:9c:86:75:18:35:46:b0:47:9f:90:f2:c1:63:b0: d2:ab:74:d6:fe:e7:d6:4f:b7:ee:9f:53:e1:0e:7d:9d:8d:00: c7:86:16:c2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUW+Q3QmlyiOaacxnpOOTRqojYXtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDIxWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjE2NzhkMjY3OTdmYmIzYmRmMmY3MGJiYTVhZDk5N2Y1 ZGU1NDRjNWQ0Y2JjYmMzMmEyNWRiYzRmZTBmNDY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWBmtxG41fFrO7ij7G7rNrradLttevzQk/Tig9yeR5nhk8 v7QUZkFqBvVv8j4AK1g0H+v7ZO43wviHuEom2QuOVacI9ZQJmSrslesQ5AcwD5Io 5hj2IUBzZfCyKRWqyg0Q4VfmzCR5XHcBiZ9Dn51EoOL3Obvg9G8CzX26whpJYbye QTe2KZyukESMFNWPcjEtXF4UBrO+Eqg9AU7agw/vhR5f2Uu3xxytCjQGXYmr5loe iPitRWZzoZZVrXbCoXD9mLkSRGGmoASu608ZUj6f54l9KrxIawPn6dZd7oFIxXn0 p2drDaE4X52P8KMQ9rxYZv1Q/0v5I4/RPs+E+sgfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdobZL3MzeSbEcXQTHiebFoa+IYQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I4MDFmOGZkLWRiYWItNGEwNy04NmJlLTExYTA3MzU5YzI1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEANexJ3zeeVfsIRMIeDi2jMfM7 /Oc0lGYioy03GPc+5xWo1l6IyX/tdArvPlXWlOhdXMp6JgQ9BT4VSGI5uBlB+J1b 53PP3yrhYA1hkEenTjKTJA0KPzQ0qL253K6Dz+AYjcB09Cbzyz2ThEnW0HilJ0Rs VRZiNOqWdBXyg+mhHVUOkd8uiZHfGVaeC+OfuCyxzKEC24Pd2iP5csA6+3P39r9p bsG4CiZlJYtSa84cIJOFdzW0tBTYZaNYldqVYLiy++imd9JszoxcxV7E6icIuFN0 610ywwhGdhEtTJyGdRg1RrBHn5DywWOw0qt01v7n1k+37p9T4Q59nY0Ax4YWwg== -----END CERTIFICATE-----Generated at Sun Nov 8 17:11:29 2026 by rpki-client