$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa File: c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa (raw, json) Hash identifier: 3lfIadMHq7uPVjosysTn3bvNMqRv5hzasxtC+RVm4GQ= Subject key identifier: 72:8D:F4:39:1F:37:AA:60:D8:83:B1:6B:8C:31:27:A5:40:5A:DB:5C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 59AA3229E4B118BF1ACECA638BCE93D6B1A8AFC9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa Signing time: Sun 04 Oct 2026 00:30:13 +0000 ROA not before: Sun 04 Oct 2026 00:30:13 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:4140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:32:29:e4:b1:18:bf:1a:ce:ca:63:8b:ce:93:d6:b1:a8:af:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 4 00:30:13 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=cec308b1d5705a0c1807632e1b6b19ebf8d984a99d4116fcf3f372a85bd6362d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:88:2e:8b:6a:50:f6:a2:2b:68:1d:36:26:60: 99:d9:e9:a1:44:8a:16:d3:38:5c:8e:2f:36:78:47: cf:c4:cd:ff:e4:c0:7a:85:b1:bd:0e:35:af:96:cf: 7b:8e:21:53:05:a7:a5:8c:b4:1e:36:ce:81:90:60: 90:a4:06:07:39:55:d6:2b:b8:d2:5d:ae:db:d2:15: 10:88:93:7e:48:7e:60:d4:00:10:38:e0:36:27:2e: 00:2c:3d:97:2f:aa:14:cc:97:e9:59:4f:a1:8f:0e: 76:c4:89:22:11:fa:57:d9:c6:e3:75:b0:ea:20:4e: e0:d9:c3:ed:88:3a:23:b0:63:3a:1f:63:ed:bb:76: cb:40:0c:75:97:dd:6e:f3:69:12:55:7e:02:13:aa: 18:ba:02:f8:b6:4f:b6:a8:fe:a6:a5:29:41:7f:73: 07:27:c8:45:7d:85:57:2e:c3:41:78:b5:54:1f:6c: 89:e6:b6:94:67:3d:62:bc:7a:1b:e6:e7:69:a6:3e: 12:f9:66:97:61:1c:6c:d9:e8:94:47:23:99:8a:ac: 9e:eb:0a:19:e5:d0:87:86:06:2a:ff:26:d6:ec:ab: b4:ab:9c:72:80:98:64:4e:46:3b:5a:bb:6f:d4:06: e4:25:21:05:65:ee:65:f8:ef:d7:2e:cd:37:7f:e1: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:F4:39:1F:37:AA:60:D8:83:B1:6B:8C:31:27:A5:40:5A:DB:5C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4140::/48 Signature Algorithm: sha256WithRSAEncryption 6c:75:73:42:86:6f:da:5d:3d:5e:09:d4:6c:ff:e4:b9:aa:7f: 32:5f:fd:19:7d:e4:3e:c5:01:5d:f3:e7:ef:2d:ef:e2:b1:fd: 76:7f:50:6b:18:32:a6:71:3a:8d:26:b4:52:dd:87:91:97:6b: 09:4e:d9:32:dc:db:3e:58:55:6d:c3:f2:56:31:e5:eb:d8:cf: 8b:68:d7:51:a9:d6:19:42:4c:ec:dd:99:1c:0f:19:e4:13:3a: 01:2a:32:01:77:51:3c:26:79:cc:97:f0:37:ec:a4:e1:fb:4f: de:0a:00:20:1b:ef:0f:e8:9c:e1:a4:5b:1a:0d:1c:6f:35:2e: 15:dc:2d:fe:b1:6c:f0:6b:6c:99:7c:82:33:33:6b:89:97:a1: 56:9e:46:a0:5e:e2:5b:f2:1f:b2:e2:3a:11:93:eb:c8:3d:22: d5:f6:6a:26:5e:a8:ab:18:bb:eb:bd:57:1a:ec:d0:41:d8:a5: 1c:36:f8:f5:a7:aa:69:d4:7b:77:68:5e:cf:0e:2e:72:56:83: 28:7c:80:c1:06:48:23:62:cc:0f:86:7a:01:1e:57:c8:c8:ad: ed:b8:85:be:1b:48:65:ca:d7:04:ee:b2:49:aa:1d:83:16:f8: 68:bf:af:9b:a8:ee:a1:20:4f:33:16:90:d4:83:c9:13:52:eb: 7d:8a:51:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWaoyKeSxGL8azspji86T1rGor8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA0MDAzMDEzWhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWMzMDhiMWQ1NzA1YTBjMTgwNzYzMmUxYjZiMTllYmY4 ZDk4NGE5OWQ0MTE2ZmNmM2YzNzJhODViZDYzNjJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsiC6LalD2oitoHTYmYJnZ6aFEihbTOFyOLzZ4R8/Ezf/k wHqFsb0ONa+Wz3uOIVMFp6WMtB42zoGQYJCkBgc5VdYruNJdrtvSFRCIk35IfmDU ABA44DYnLgAsPZcvqhTMl+lZT6GPDnbEiSIR+lfZxuN1sOogTuDZw+2IOiOwYzof Y+27dstADHWX3W7zaRJVfgITqhi6Avi2T7ao/qalKUF/cwcnyEV9hVcuw0F4tVQf bInmtpRnPWK8ehvm52mmPhL5ZpdhHGzZ6JRHI5mKrJ7rChnl0IeGBir/Jtbsq7Sr nHKAmGRORjtau2/UBuQlIQVl7mX479cuzTd/4doxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUco30OR83qmDYg7FrjDEnpUBa21wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MzMzdkMWM2LTU4ZmMtNGZmYy1iZjRiLTMwM2FkMDhiYzllZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQUAwDQYJKoZIhvcNAQELBQADggEBAGx1c0KGb9pdPV4J1Gz/5Lmq fzJf/Rl95D7FAV3z5+8t7+Kx/XZ/UGsYMqZxOo0mtFLdh5GXawlO2TLc2z5YVW3D 8lYx5evYz4to11Gp1hlCTOzdmRwPGeQTOgEqMgF3UTwmecyX8DfspOH7T94KACAb 7w/onOGkWxoNHG81LhXcLf6xbPBrbJl8gjMza4mXoVaeRqBe4lvyH7LiOhGT68g9 ItX2aiZeqKsYu+u9Vxrs0EHYpRw2+PWnqmnUe3doXs8OLnJWgyh8gMEGSCNizA+G egEeV8jIre24hb4bSGXK1wTuskmqHYMW+Gi/r5uo7qEgTzMWkNSDyRNS632KUYg= -----END CERTIFICATE-----Generated at Wed Oct 21 22:45:55 2026 by rpki-client