$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa File: b863f23f-4426-4c77-a614-689e722bb8c6.roa (raw, json) Hash identifier: Pzk7oeDj7XqpUqBaCriGku1s4eEQfcNTmpt/8S8x/r0= Subject key identifier: 8C:03:F7:36:E9:D3:2C:FB:A1:D9:41:B2:64:FA:3F:B8:48:B1:39:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24EC73DE2C1534D659D4145B50939B04FE66AE82 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa Signing time: Sun 11 Oct 2026 15:08:33 +0000 ROA not before: Sun 11 Oct 2026 15:08:33 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ec:73:de:2c:15:34:d6:59:d4:14:5b:50:93:9b:04:fe:66:ae:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:33 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=0fa1f13b82585c5bfaafe97506869e818166fdbd46ca0f64afbbec5aed520b79, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:31:b5:60:1e:9c:94:68:b7:d4:f0:97:f8: 8d:19:8a:86:10:e8:63:25:92:14:a8:50:f2:16:6f: c7:86:bb:3d:f6:6a:62:e4:67:14:80:ac:f5:f0:33: d6:c8:4b:b4:e8:e4:f5:a1:11:53:b8:00:71:ed:8b: c8:04:78:c7:54:70:6c:27:d9:64:6e:8b:7c:6f:9b: 9f:36:96:6d:82:36:39:d8:48:80:46:e9:3b:ce:b5: 1c:d6:67:c1:31:c6:96:6e:ea:b5:3f:ba:56:32:24: 89:95:5f:1b:f1:4b:54:68:54:0a:dc:74:1f:68:da: 93:e6:45:e3:41:d7:24:41:c4:c0:95:12:50:be:28: f8:34:54:0b:09:82:c6:de:4a:8d:0d:c3:4e:bc:d9: 32:39:39:4e:25:dd:ce:8c:b5:fe:4a:10:e7:c4:f4: d3:f7:c0:52:29:63:1c:c7:bb:41:1c:00:c8:c6:5c: ff:4e:bf:b9:ad:b6:ee:bb:6a:94:12:5a:7d:54:61: c1:96:83:9e:2b:bd:ed:30:78:54:f0:67:71:fb:d8: f9:d7:44:c3:1b:23:f1:d2:4c:a0:d5:e0:be:d5:3b: 37:80:a2:3b:57:2a:3c:40:7c:da:e4:ac:d3:59:3e: a7:4d:ae:1e:6d:ee:6d:82:8d:0b:7a:e0:c7:6c:be: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:03:F7:36:E9:D3:2C:FB:A1:D9:41:B2:64:FA:3F:B8:48:B1:39:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6121::/48 Signature Algorithm: sha256WithRSAEncryption 36:8a:f4:58:2b:59:6c:5c:52:a6:15:42:0a:11:05:a6:a9:ea: 9d:f1:8b:f0:d6:96:ba:9f:82:34:aa:d2:8b:30:38:89:2d:26: 6e:a0:6d:84:5c:94:fe:4f:82:6d:9b:c8:44:a6:fa:be:d1:86: ac:64:f7:0d:63:37:24:c2:0e:5b:01:a5:63:99:39:7b:77:6c: 26:3e:15:a9:e1:c8:4d:0d:13:ef:d2:44:a9:f7:cf:bf:44:d1: c5:a5:a3:c6:5f:4a:ca:c9:51:2b:c8:f3:c1:df:f6:d6:b0:a5: be:75:2b:e6:33:5e:aa:c0:4f:28:cb:e1:7f:03:32:e7:af:b4: 1e:36:47:b0:b9:d3:97:5c:d0:69:d8:c5:49:1d:88:4a:4a:80: f2:34:f6:7b:da:0a:03:0f:24:68:e3:0c:12:94:6d:32:60:7f: 7b:cd:36:e8:ef:e2:fe:42:9e:d1:9f:e4:5a:b1:c6:f5:4e:1a: eb:11:ae:0f:59:fa:4e:fc:36:2d:0a:fe:d7:0d:ce:ab:52:6a: 71:45:0e:40:5c:e4:55:8c:52:96:66:0d:bb:fc:3b:ca:5b:f0: d4:03:19:fe:ef:cd:ec:6f:f5:25:c8:1d:d5:b8:e1:8f:af:65: a7:ca:29:82:af:b7:d7:60:25:70:50:c9:96:eb:9d:14:f3:1f: 33:be:dd:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJOxz3iwVNNZZ1BRbUJObBP5mroIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODMzWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmExZjEzYjgyNTg1YzViZmFhZmU5NzUwNjg2OWU4MTgx NjZmZGJkNDZjYTBmNjRhZmJiZWM1YWVkNTIwYjc5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1xjG1YB6clGi31PCX+I0ZioYQ6GMlkhSoUPIWb8eGuz32 amLkZxSArPXwM9bIS7To5PWhEVO4AHHti8gEeMdUcGwn2WRui3xvm582lm2CNjnY SIBG6TvOtRzWZ8ExxpZu6rU/ulYyJImVXxvxS1RoVArcdB9o2pPmReNB1yRBxMCV ElC+KPg0VAsJgsbeSo0Nw0682TI5OU4l3c6Mtf5KEOfE9NP3wFIpYxzHu0EcAMjG XP9Ov7mttu67apQSWn1UYcGWg54rve0weFTwZ3H72PnXRMMbI/HSTKDV4L7VOzeA ojtXKjxAfNrkrNNZPqdNrh5t7m2CjQt64MdsvtQVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjAP3NunTLPuh2UGyZPo/uEixOSowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I4NjNmMjNmLTQ0MjYtNGM3Ny1hNjE0LTY4OWU3MjJiYjhjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBADaK9FgrWWxcUqYVQgoRBaap 6p3xi/DWlrqfgjSq0oswOIktJm6gbYRclP5Pgm2byESm+r7Rhqxk9w1jNyTCDlsB pWOZOXt3bCY+FanhyE0NE+/SRKn3z79E0cWlo8ZfSsrJUSvI88Hf9tawpb51K+Yz XqrATyjL4X8DMuevtB42R7C505dc0GnYxUkdiEpKgPI09nvaCgMPJGjjDBKUbTJg f3vNNujv4v5CntGf5FqxxvVOGusRrg9Z+k78Ni0K/tcNzqtSanFFDkBc5FWMUpZm Dbv8O8pb8NQDGf7vzexv9SXIHdW44Y+vZafKKYKvt9dgJXBQyZbrnRTzHzO+3VA= -----END CERTIFICATE-----Generated at Tue Oct 27 09:13:26 2026 by rpki-client