$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c2745679-db1e-409b-9051-e4eb09db7fe3.roa File: c2745679-db1e-409b-9051-e4eb09db7fe3.roa (raw, json) Hash identifier: qR4MmdBKgkUQ8VdlU+sTpSxU5sFEu6a7NrQn7U6MXzo= Subject key identifier: 3D:7D:6C:0A:07:32:27:0D:76:EF:19:A6:C8:82:4A:DA:2A:CD:EF:D7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 134200A4D543E157D44EBC1D0F5FDF4C99CE3D64 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c2745679-db1e-409b-9051-e4eb09db7fe3.roa Signing time: Sun 11 Oct 2026 15:10:32 +0000 ROA not before: Sun 11 Oct 2026 15:10:32 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:42:00:a4:d5:43:e1:57:d4:4e:bc:1d:0f:5f:df:4c:99:ce:3d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:32 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=409543a2e83cbfe60ae81708b8d8f64175512e879626b33dddb84443e46a6442, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:4f:4a:19:02:4f:01:cd:58:69:c7:5c:c6: 36:45:80:68:90:46:13:67:96:63:14:cc:c2:77:24: 06:ce:ed:46:f7:b6:fa:ed:99:df:3b:9f:f1:3d:b8: 85:05:6b:e2:5f:88:34:b1:32:82:f6:19:2c:5a:7d: 91:39:02:83:6c:1f:55:55:19:2e:45:12:d9:a6:38: 61:c3:20:4f:62:2c:be:ad:cb:9f:8a:dd:ca:3e:f6: ba:9f:a0:69:3b:1c:1b:d6:5b:63:03:50:20:4e:c6: de:58:f1:63:bb:b6:1e:8d:40:c4:39:1e:b5:b4:63: b8:ac:22:a0:a1:b1:b6:6e:55:86:57:80:02:da:99: e5:33:08:1c:e6:16:b5:ba:96:e9:a0:87:bd:61:7f: 99:76:31:bb:cf:b4:74:c8:47:41:9a:f4:67:12:26: f9:cd:21:49:67:f7:8b:dd:fe:77:37:7b:6b:74:fa: bb:70:83:c5:2b:95:30:67:96:ed:28:dc:a0:1e:df: 6e:4f:c1:f3:7b:7f:8e:89:61:b3:f9:8b:81:3f:c1: b6:9d:28:df:8a:5b:a1:1a:24:fb:0d:e4:28:ee:f3: e8:28:28:f8:3a:ea:93:1c:1b:4b:2f:3d:6b:57:a1: a2:71:21:a6:d4:78:12:18:d1:1b:19:06:60:7a:70: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7D:6C:0A:07:32:27:0D:76:EF:19:A6:C8:82:4A:DA:2A:CD:EF:D7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c2745679-db1e-409b-9051-e4eb09db7fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611d::/48 Signature Algorithm: sha256WithRSAEncryption 15:d1:51:a6:b2:69:6d:0a:45:6f:7f:21:cc:77:a5:9a:95:fb: 89:b1:82:7e:bc:eb:91:43:f1:b0:dc:dc:c7:34:5d:dd:42:d2: 11:17:be:01:05:df:1d:97:50:58:a9:49:c2:22:8e:76:bd:36: 21:8d:bf:d4:68:64:ab:72:8e:fc:47:75:61:35:7a:2b:b6:08: 55:1e:44:4b:88:07:ae:d2:70:eb:ec:1a:38:ff:64:65:79:1d: 43:24:5a:f0:2f:f6:c3:60:d1:5e:82:09:9f:3f:08:83:6e:ca: 0c:85:f5:a0:37:2c:a8:82:10:6f:fb:5a:74:a6:c4:6f:c6:39: d3:1c:03:93:79:e2:b3:71:85:11:7a:f9:60:4a:5e:1c:6e:c9: 39:10:ba:8a:03:ca:46:cb:7d:48:08:2b:81:28:15:4c:c7:88: 75:da:55:0c:32:a5:f4:a4:85:a3:1d:b6:bc:c3:7f:93:f5:7b: ed:3c:7e:3a:93:f5:6f:24:bd:8a:ab:20:b0:22:88:12:dc:67: a0:bd:5b:47:9f:74:2a:19:85:80:13:1c:dd:b7:2e:83:b4:5b: 6d:fa:8c:af:e6:09:56:fe:9c:ca:67:71:7a:a2:6a:5d:2f:86: b0:38:87:eb:e8:10:8f:21:60:9d:46:08:eb:3d:53:8a:53:07: 87:45:9c:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE0IApNVD4VfUTrwdD1/fTJnOPWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDMyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDk1NDNhMmU4M2NiZmU2MGFlODE3MDhiOGQ4ZjY0MTc1 NTEyZTg3OTYyNmIzM2RkZGI4NDQ0M2U0NmE2NDQyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7uk9KGQJPAc1YacdcxjZFgGiQRhNnlmMUzMJ3JAbO7Ub3 tvrtmd87n/E9uIUFa+JfiDSxMoL2GSxafZE5AoNsH1VVGS5FEtmmOGHDIE9iLL6t y5+K3co+9rqfoGk7HBvWW2MDUCBOxt5Y8WO7th6NQMQ5HrW0Y7isIqChsbZuVYZX gALameUzCBzmFrW6lumgh71hf5l2MbvPtHTIR0Ga9GcSJvnNIUln94vd/nc3e2t0 +rtwg8UrlTBnlu0o3KAe325PwfN7f46JYbP5i4E/wbadKN+KW6EaJPsN5Cju8+go KPg66pMcG0svPWtXoaJxIabUeBIY0RsZBmB6cKgTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPX1sCgcyJw127xmmyIJK2irN79cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MyNzQ1Njc5LWRiMWUtNDA5Yi05MDUxLWU0ZWIwOWRiN2ZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR0wDQYJKoZIhvcNAQELBQADggEBABXRUaayaW0KRW9/Icx3pZqV +4mxgn6865FD8bDc3Mc0Xd1C0hEXvgEF3x2XUFipScIijna9NiGNv9RoZKtyjvxH dWE1eiu2CFUeREuIB67ScOvsGjj/ZGV5HUMkWvAv9sNg0V6CCZ8/CINuygyF9aA3 LKiCEG/7WnSmxG/GOdMcA5N54rNxhRF6+WBKXhxuyTkQuooDykbLfUgIK4EoFUzH iHXaVQwypfSkhaMdtrzDf5P1e+08fjqT9W8kvYqrILAiiBLcZ6C9W0efdCoZhYAT HN23LoO0W236jK/mCVb+nMpncXqial0vhrA4h+voEI8hYJ1GCOs9U4pTB4dFnPE= -----END CERTIFICATE-----Generated at Tue Oct 27 08:47:59 2026 by rpki-client