$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c3d7d7bc-8df6-4f17-a53d-95ca4a4dbe74.roa File: c3d7d7bc-8df6-4f17-a53d-95ca4a4dbe74.roa (raw, json) Hash identifier: na69X0+4XAh39nvBLQr1uZJvhOnHxD9F5LHNAzaFyiA= Subject key identifier: 96:9A:AD:86:62:77:E1:66:0A:01:EA:37:07:6E:11:C7:70:9C:70:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 616A62F31BE30CB0A277B515BE5F9660456B8C98 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c3d7d7bc-8df6-4f17-a53d-95ca4a4dbe74.roa Signing time: Fri 30 Oct 2026 19:32:50 +0000 ROA not before: Fri 30 Oct 2026 19:32:50 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4324::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6a:62:f3:1b:e3:0c:b0:a2:77:b5:15:be:5f:96:60:45:6b:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:50 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=29e8c2b5e623799a4c07157d530b77504c8234c18c7d9154ded2ca54f04036e9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:1e:06:e2:90:dd:c4:e2:b7:d3:47:c4:f5: 59:09:42:87:f4:51:63:77:67:ef:90:29:08:fb:27: 35:2d:84:e9:fd:ce:b1:24:9a:c7:7d:04:0c:3d:6a: 44:7e:52:c4:29:6f:a9:2a:dc:8e:b3:1d:a8:13:32: 58:af:41:d8:02:b4:f4:ef:3f:eb:c5:e5:46:ce:f7: 8f:ec:09:54:e9:61:f7:be:e9:f5:9a:03:9e:6c:8e: 2a:c3:96:30:28:4f:c0:9d:b3:38:a3:9a:92:4d:3a: b6:fd:9e:f9:b8:ca:cc:1d:a4:4e:98:3c:07:c3:c8: 80:11:6d:15:81:f3:4c:6e:bb:ce:65:15:9a:2c:91: 9b:10:97:a5:ad:2f:1d:6f:e1:8c:b0:c8:40:20:14: 34:5c:0f:a0:ff:eb:14:c5:b2:20:13:41:0b:27:85: 4f:0a:3a:c7:d3:a4:a7:b2:1a:e4:65:f9:d3:35:a1: 69:c9:9b:f5:9d:dd:fd:f3:d3:06:6e:b1:12:98:07: 76:12:db:b4:d7:e6:48:76:33:b5:1a:c1:05:d0:63: 40:36:6a:b1:70:85:84:55:be:66:e6:0b:5f:53:85: db:62:2c:9e:77:69:d8:85:e0:2b:8a:0a:26:a1:5a: 29:fa:7e:22:93:ad:74:03:14:5f:40:4b:0a:77:57: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:AD:86:62:77:E1:66:0A:01:EA:37:07:6E:11:C7:70:9C:70:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c3d7d7bc-8df6-4f17-a53d-95ca4a4dbe74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4324::/46 Signature Algorithm: sha256WithRSAEncryption 40:93:19:11:c6:4f:4c:78:64:8b:1e:99:1f:b2:2e:66:a9:13: 14:f5:62:93:1d:c2:2e:e3:4d:41:f8:93:96:05:25:54:70:e3: 54:9e:5d:55:03:6d:5d:9b:4f:62:9b:9c:52:b0:b6:b0:cc:62: 98:0f:e9:c4:5b:a5:df:55:e9:f0:61:c7:c7:c4:81:ac:be:d6: 44:e3:b4:03:81:7f:bd:f4:5c:21:df:76:25:79:88:74:69:08: e8:a4:08:75:ec:43:ec:5a:39:04:de:ac:eb:f5:54:29:d9:57: aa:f4:b6:f1:83:95:3d:e4:03:e9:e5:c3:83:78:56:ca:bb:c2: c3:35:d5:77:c4:6a:21:30:9f:b8:28:79:b9:00:99:86:0c:3d: c8:d6:43:89:53:85:ad:9c:f4:64:9a:73:a3:5e:d8:19:c2:9f: 1e:2b:2f:74:2d:97:75:10:7a:73:7b:b8:c0:b9:47:7a:4b:92: e5:f8:16:c6:0d:cb:82:d6:d1:d4:66:dc:39:8b:d6:c1:42:04: 12:36:fe:75:e3:ad:39:d1:dd:f6:cf:94:92:db:39:48:f4:23: a3:19:cb:0d:64:31:1b:42:a7:4b:0b:7f:d7:d8:63:f9:d9:0a: 53:b6:b7:28:fe:63:4c:20:37:e0:0f:ac:7c:bd:71:a9:0a:af: 9b:53:26:69 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYWpi8xvjDLCid7UVvl+WYEVrjJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjUwWhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWU4YzJiNWU2MjM3OTlhNGMwNzE1N2Q1MzBiNzc1MDRj ODIzNGMxOGM3ZDkxNTRkZWQyY2E1NGYwNDAzNmU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQFh4G4pDdxOK300fE9VkJQof0UWN3Z++QKQj7JzUthOn9 zrEkmsd9BAw9akR+UsQpb6kq3I6zHagTMlivQdgCtPTvP+vF5UbO94/sCVTpYfe+ 6fWaA55sjirDljAoT8CdszijmpJNOrb9nvm4yswdpE6YPAfDyIARbRWB80xuu85l FZoskZsQl6WtLx1v4YywyEAgFDRcD6D/6xTFsiATQQsnhU8KOsfTpKeyGuRl+dM1 oWnJm/Wd3f3z0wZusRKYB3YS27TX5kh2M7UawQXQY0A2arFwhYRVvmbmC19Thdti LJ53adiF4CuKCiahWin6fiKTrXQDFF9ASwp3VzuxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlpqthmJ34WYKAeo3B24Rx3CccPswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MzZDdkN2JjLThkZjYtNGYxNy1hNTNkLTk1Y2E0YTRkYmU3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQyQwDQYJKoZIhvcNAQELBQADggEBAECTGRHGT0x4ZIsemR+yLmap ExT1YpMdwi7jTUH4k5YFJVRw41SeXVUDbV2bT2KbnFKwtrDMYpgP6cRbpd9V6fBh x8fEgay+1kTjtAOBf730XCHfdiV5iHRpCOikCHXsQ+xaOQTerOv1VCnZV6r0tvGD lT3kA+nlw4N4Vsq7wsM11XfEaiEwn7goebkAmYYMPcjWQ4lTha2c9GSac6Ne2BnC nx4rL3Qtl3UQenN7uMC5R3pLkuX4FsYNy4LW0dRm3DmL1sFCBBI2/nXjrTnR3fbP lJLbOUj0I6MZyw1kMRtCp0sLf9fYY/nZClO2tyj+Y0wgN+APrHy9cakKr5tTJmk= -----END CERTIFICATE-----Generated at Tue Nov 3 22:21:12 2026 by rpki-client