$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c17b080d-da47-452a-be2e-3d74962c128e.roa File: c17b080d-da47-452a-be2e-3d74962c128e.roa (raw, json) Hash identifier: PSiohiHdNvk+sm5l+75Hw+EZ5zUc4onKUoF1Ir73JNM= Subject key identifier: 7A:2D:A7:10:44:4B:23:75:9B:C1:CB:5F:A3:8E:1F:12:24:E7:1F:FC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6340A061FFA26AF343FA1FECFA2AD4C9562E232D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c17b080d-da47-452a-be2e-3d74962c128e.roa Signing time: Fri 30 Oct 2026 19:32:45 +0000 ROA not before: Fri 30 Oct 2026 19:32:45 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:430c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:40:a0:61:ff:a2:6a:f3:43:fa:1f:ec:fa:2a:d4:c9:56:2e:23:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:45 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=ba82f0d27cb8e708fe8bb29b4d2d004ed79ec6b0fe82bf608f30930a2e32705f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a1:d5:c1:1d:c9:ef:f9:20:1a:cf:45:aa:2b: 8a:0d:7e:4c:3a:f6:1b:be:37:68:41:d2:47:42:a7: a6:cb:00:c0:3a:e7:a7:cd:cf:1f:40:89:1e:e9:2e: 8d:cc:53:f7:bc:7a:fc:a8:72:f3:20:06:10:37:20: e5:e3:9b:f3:95:99:e5:8e:cc:b2:33:fa:e8:5b:ec: b4:af:83:9b:0e:92:67:ad:13:19:5b:c1:d4:b3:c0: b8:32:28:d3:3b:78:e1:cf:a6:7c:60:b9:53:dd:d8: 9c:62:ca:2c:d3:d5:b7:ee:a6:ac:cf:35:d5:7c:89: b0:5d:ec:be:55:1b:11:92:34:8f:b6:99:17:81:92: ec:7c:87:65:76:7a:e4:5c:d8:fc:6f:8c:81:af:81: 11:50:dd:b8:cc:eb:33:68:0e:31:b0:e0:24:a4:3b: e4:b4:3d:e0:49:00:44:19:6c:7e:15:96:d7:14:e5: 44:c3:86:84:3d:0c:b2:ce:f5:e7:92:0e:6a:02:ff: 91:23:65:5b:00:00:b3:e8:cf:23:23:7f:8e:52:e4: 3f:bf:75:dd:fc:59:2b:11:3f:95:10:61:89:17:58: 7a:58:87:9e:53:20:a5:02:53:9b:2c:1f:97:40:69: 9a:fb:8a:36:4c:dc:15:91:3d:e1:64:c2:a4:73:f1: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2D:A7:10:44:4B:23:75:9B:C1:CB:5F:A3:8E:1F:12:24:E7:1F:FC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c17b080d-da47-452a-be2e-3d74962c128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:430c::/46 Signature Algorithm: sha256WithRSAEncryption 58:bc:08:f7:75:e0:bc:a8:02:94:df:48:6b:6d:31:3f:67:1c: 19:9f:67:ed:0d:4f:ab:30:8b:27:19:dc:29:86:3f:e7:cd:84: 10:15:73:47:64:60:dc:d1:db:78:34:7e:3a:1d:64:55:cc:6e: 63:4e:c2:94:4d:a1:0b:eb:e4:74:7f:6f:11:e3:bc:84:ff:2b: c1:2f:fb:1f:17:0f:21:30:99:8d:df:fc:47:0c:2d:2a:5a:84: 4b:6a:d6:0e:9d:f4:82:5e:90:68:94:e9:01:fb:2c:8f:4e:19: 95:fa:09:cb:91:84:36:d4:83:42:65:07:60:7b:dd:cf:9d:a2: a3:3a:81:9b:4d:df:64:7e:b4:99:43:d0:3a:7f:1f:be:e9:2c: 9f:a3:24:1c:7e:83:5a:2f:2b:6f:3e:f3:04:23:2e:56:93:82: 83:e1:98:aa:c3:f0:2b:31:25:28:4e:9c:92:a0:96:49:e2:e8: 90:18:a7:ab:31:41:da:eb:e8:1d:ae:a6:25:43:4b:25:25:22: e4:0e:d7:6f:7a:91:15:c4:92:3d:00:66:7e:2e:d5:5f:63:1b: 59:53:87:a9:8f:0b:38:dd:a5:a3:50:b4:1f:27:03:97:50:b6: db:98:c6:cb:b2:54:2c:7a:ed:3c:88:d2:4a:fb:07:27:4b:2b: f1:7c:49:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY0CgYf+iavND+h/s+irUyVYuIy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ1WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTgyZjBkMjdjYjhlNzA4ZmU4YmIyOWI0ZDJkMDA0ZWQ3 OWVjNmIwZmU4MmJmNjA4ZjMwOTMwYTJlMzI3MDVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVodXBHcnv+SAaz0WqK4oNfkw69hu+N2hB0kdCp6bLAMA6 56fNzx9AiR7pLo3MU/e8evyocvMgBhA3IOXjm/OVmeWOzLIz+uhb7LSvg5sOkmet ExlbwdSzwLgyKNM7eOHPpnxguVPd2JxiyizT1bfupqzPNdV8ibBd7L5VGxGSNI+2 mReBkux8h2V2euRc2PxvjIGvgRFQ3bjM6zNoDjGw4CSkO+S0PeBJAEQZbH4VltcU 5UTDhoQ9DLLO9eeSDmoC/5EjZVsAALPozyMjf45S5D+/dd38WSsRP5UQYYkXWHpY h55TIKUCU5ssH5dAaZr7ijZM3BWRPeFkwqRz8an1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUei2nEERLI3Wbwctfo44fEiTnH/wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MxN2IwODBkLWRhNDctNDUyYS1iZTJlLTNkNzQ5NjJjMTI4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQwwwDQYJKoZIhvcNAQELBQADggEBAFi8CPd14LyoApTfSGttMT9n HBmfZ+0NT6swiycZ3CmGP+fNhBAVc0dkYNzR23g0fjodZFXMbmNOwpRNoQvr5HR/ bxHjvIT/K8Ev+x8XDyEwmY3f/EcMLSpahEtq1g6d9IJekGiU6QH7LI9OGZX6CcuR hDbUg0JlB2B73c+doqM6gZtN32R+tJlD0Dp/H77pLJ+jJBx+g1ovK28+8wQjLlaT goPhmKrD8CsxJShOnJKglkni6JAYp6sxQdrr6B2upiVDSyUlIuQO1296kRXEkj0A Zn4u1V9jG1lTh6mPCzjdpaNQtB8nA5dQttuYxsuyVCx67TyI0kr7BydLK/F8SSI= -----END CERTIFICATE-----Generated at Tue Nov 3 22:21:10 2026 by rpki-client