$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: xyKLscBCoXrGvvlEeQ66i6UgcCILk+en528ZvKc93xU= Subject key identifier: 9B:19:73:CB:2B:6C:C4:DB:B6:DE:19:4C:01:05:9A:A8:43:4B:5B:EE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 73822114B688C4ADFE0C9A004809721AFCE28AED Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Mon 26 Oct 2026 04:20:55 +0000 ROA not before: Mon 26 Oct 2026 04:20:55 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:82:21:14:b6:88:c4:ad:fe:0c:9a:00:48:09:72:1a:fc:e2:8a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:55 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=491f98aa67a24d495c21705e52dc371cb546c6235a870656e0cadace3a3f25b9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:4b:e3:19:42:cc:b4:05:62:09:5e:06:42: f5:43:0b:33:f1:7d:0b:35:7d:cb:1a:e0:e9:a3:e1: c1:09:57:30:ad:5e:fe:c5:a1:69:f0:0c:67:74:3e: c6:d5:b3:86:10:89:6d:f9:81:89:90:97:1c:4f:f7: 23:58:b8:87:b3:08:b0:56:80:d8:c6:73:12:15:2c: c6:0c:ef:2e:de:03:67:2f:6f:ff:0d:78:ac:83:08: 64:2b:f9:d6:87:a2:49:6f:66:62:2d:6b:f3:42:f2: c1:f0:48:29:9d:ac:86:6e:b8:6d:d0:40:2a:64:a9: 98:02:09:51:b6:f0:fe:23:45:3d:9c:75:01:87:09: 23:84:bf:20:d8:dc:b9:4b:d9:ad:72:9d:60:e7:f5: a3:6a:ac:fd:0f:96:24:55:be:aa:99:6e:36:32:c0: ea:33:7a:5a:fe:79:27:a1:a2:cd:4c:c4:c5:27:1a: df:70:9f:9d:e9:58:16:d8:ba:b1:71:a7:f1:56:c2: 07:d9:5a:1b:16:9f:e1:15:55:6a:a7:6d:29:d7:7a: 0f:25:86:43:83:25:d9:a3:6f:ec:50:94:e4:d8:f6: e6:30:33:5e:fc:c7:b4:2c:7c:41:80:b7:79:e5:4b: 71:8b:50:49:2d:14:79:66:27:cf:57:4a:82:cf:2c: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:19:73:CB:2B:6C:C4:DB:B6:DE:19:4C:01:05:9A:A8:43:4B:5B:EE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 3b:9d:72:be:02:f8:73:05:e1:53:15:ae:8b:dc:3d:6e:62:5b: cd:75:5b:48:49:a4:a3:5c:8d:a5:39:90:e8:1e:7f:1b:e4:d5: bd:02:6a:b0:1f:61:b3:e5:d7:e9:4f:19:20:16:55:25:ea:3a: 27:ef:84:97:19:27:5b:23:e3:07:cb:83:81:ed:63:7e:46:20: 16:0f:8d:f6:2d:e3:47:d9:f1:db:ff:14:80:da:41:15:a9:4c: 82:51:af:85:64:00:2f:d2:1c:ea:a4:58:62:d7:37:ff:cc:c7: 5d:47:a8:27:c4:60:c4:10:f0:89:e2:5b:8d:46:6e:8e:fb:a6: d6:7c:c0:15:77:fa:89:35:5b:1d:6c:29:61:59:b6:a8:3f:e4: 04:74:00:53:40:67:a5:42:6f:99:b6:19:43:7d:62:64:1c:92: f3:d1:fc:7c:84:3c:62:11:25:fd:c6:8e:35:44:ae:3c:09:8e: 7f:69:db:bc:a5:cd:2f:21:88:fb:57:66:25:f2:eb:29:82:f5: 2d:7a:d7:51:33:28:c1:48:0e:7a:78:8f:f7:c1:b9:1f:c5:27: 70:17:0b:7e:01:dc:07:50:78:74:6d:48:8b:c7:29:51:a4:33: ec:25:2e:b4:3b:20:52:45:a1:88:82:6f:9f:c3:41:e9:dc:0e: ff:69:7a:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc4IhFLaIxK3+DJoASAlyGvziiu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDU1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTFmOThhYTY3YTI0ZDQ5NWMyMTcwNWU1MmRjMzcxY2I1 NDZjNjIzNWE4NzA2NTZlMGNhZGFjZTNhM2YyNWI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDILkvjGULMtAViCV4GQvVDCzPxfQs1fcsa4Omj4cEJVzCt Xv7FoWnwDGd0PsbVs4YQiW35gYmQlxxP9yNYuIezCLBWgNjGcxIVLMYM7y7eA2cv b/8NeKyDCGQr+daHoklvZmIta/NC8sHwSCmdrIZuuG3QQCpkqZgCCVG28P4jRT2c dQGHCSOEvyDY3LlL2a1ynWDn9aNqrP0PliRVvqqZbjYywOozelr+eSehos1MxMUn Gt9wn53pWBbYurFxp/FWwgfZWhsWn+EVVWqnbSnXeg8lhkODJdmjb+xQlOTY9uYw M178x7QsfEGAt3nlS3GLUEktFHlmJ89XSoLPLI03AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmxlzyytsxNu23hlMAQWaqENLW+4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBADudcr4C+HMF4VMVrovcPW5i W811W0hJpKNcjaU5kOgefxvk1b0CarAfYbPl1+lPGSAWVSXqOifvhJcZJ1sj4wfL g4HtY35GIBYPjfYt40fZ8dv/FIDaQRWpTIJRr4VkAC/SHOqkWGLXN//Mx11HqCfE YMQQ8IniW41Gbo77ptZ8wBV3+ok1Wx1sKWFZtqg/5AR0AFNAZ6VCb5m2GUN9YmQc kvPR/HyEPGIRJf3GjjVErjwJjn9p27ylzS8hiPtXZiXy6ymC9S1611EzKMFIDnp4 j/fBuR/FJ3AXC34B3AdQeHRtSIvHKVGkM+wlLrQ7IFJFoYiCb5/DQencDv9pegk= -----END CERTIFICATE-----Generated at Tue Oct 27 00:03:09 2026 by rpki-client