$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa File: c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json) Hash identifier: fYTloIXyoLVwbwbeqeNpheW6kAxdtN8PE20YAlozax4= Subject key identifier: F3:09:BE:16:0E:C3:F6:F5:34:C5:BE:BB:16:C3:F0:B3:4C:04:FD:AB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 72A9A70A88383CC5274DFFDCE0A561CDFADCE7AE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa Signing time: Tue 27 Oct 2026 00:50:43 +0000 ROA not before: Tue 27 Oct 2026 00:50:43 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a9:a7:0a:88:38:3c:c5:27:4d:ff:dc:e0:a5:61:cd:fa:dc:e7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:43 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=17db62ab1bb06abf13989ce5c32a5fc8c7368e41bd95abf0a7f898a7db2c3ac9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:e2:1a:e7:f2:19:a9:de:14:f6:de:a7:2a: a9:f2:c7:1e:bc:b9:71:54:77:b3:9f:34:df:06:a5: 46:c8:14:3b:6e:1b:5a:cb:dd:16:2d:58:ca:cb:5b: ca:45:7a:b2:aa:4f:47:a2:29:5d:2e:f7:20:c0:3d: d7:7f:2f:6e:a5:a7:da:c8:40:d0:e1:03:13:e1:24: 3e:8f:d5:f8:29:bd:fc:12:c4:85:c0:85:fc:13:7c: 43:3b:4f:76:d7:e7:40:35:70:3a:67:8d:43:e4:f0: e1:70:50:0f:92:5b:26:25:ff:1b:37:38:13:9f:bc: 1b:93:53:03:db:22:31:c1:64:e2:6e:3f:05:3c:2c: 08:ef:92:24:79:ab:b3:26:f4:f2:22:ac:d8:f4:52: 83:aa:cb:27:83:41:ac:1f:17:d4:e3:e2:a4:96:25: 58:1e:fa:35:72:13:4f:89:a8:fb:fe:0a:b1:12:c1: 2d:a5:78:db:fc:41:95:9a:ef:4a:a3:2c:da:13:47: a6:81:b6:c9:48:d1:13:4e:03:dc:b8:7b:f2:89:9e: 68:ae:4c:94:3b:77:58:3f:9b:34:c4:74:36:94:0b: 2c:2f:15:d7:dd:52:c8:1d:1f:7f:79:e7:c8:ad:0e: 62:fa:f0:40:ef:5b:de:63:a7:4c:96:9a:fa:96:13: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:BE:16:0E:C3:F6:F5:34:C5:BE:BB:16:C3:F0:B3:4C:04:FD:AB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8801::/48 Signature Algorithm: sha256WithRSAEncryption 07:48:ec:93:11:b3:e2:68:9d:13:e1:90:c0:d5:49:95:b0:fb: be:af:bc:fa:a1:0a:04:70:07:52:63:4e:03:30:d8:9f:63:ff: 8e:f3:3e:78:a7:5c:a3:b7:65:55:bf:8b:67:6a:ec:9b:79:db: 77:0e:3e:57:d9:df:b0:a4:64:e7:92:da:da:c6:6a:39:09:dd: 5a:af:bc:11:39:7e:a0:38:63:1c:59:5e:01:bf:f0:a8:d9:c4: 6d:04:77:97:7d:c2:5a:0d:17:60:8d:5f:4e:f7:d1:e9:87:7d: cd:b7:c2:a7:61:c3:0b:fc:72:2a:29:b1:71:d5:d1:c0:0a:f8: 37:e5:d1:4d:82:31:2b:ea:86:4b:f1:b9:91:68:4c:dd:be:fa: be:09:f1:4e:4d:1c:b5:60:1d:3c:0f:e3:08:61:1e:62:3a:79: 87:9b:13:7a:84:f5:86:3c:2a:bd:d8:b9:95:7a:6f:38:a4:1c: 2e:37:5c:24:4e:9f:9e:fa:cf:3c:13:6c:cf:25:df:b0:6a:f0: 52:f1:58:cc:d4:11:56:72:aa:35:cf:3f:1c:dd:4f:3e:d5:56: 18:6a:2c:34:63:87:58:cc:fe:30:dc:25:c1:d8:ea:9d:0e:79: 53:d5:97:a9:f8:53:76:83:81:e9:82:60:1c:37:8a:e2:7d:73: dc:12:46:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcqmnCog4PMUnTf/c4KVhzfrc564wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDQzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2RiNjJhYjFiYjA2YWJmMTM5ODljZTVjMzJhNWZjOGM3 MzY4ZTQxYmQ5NWFiZjBhN2Y4OThhN2RiMmMzYWM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdaeIa5/IZqd4U9t6nKqnyxx68uXFUd7OfNN8GpUbIFDtu G1rL3RYtWMrLW8pFerKqT0eiKV0u9yDAPdd/L26lp9rIQNDhAxPhJD6P1fgpvfwS xIXAhfwTfEM7T3bX50A1cDpnjUPk8OFwUA+SWyYl/xs3OBOfvBuTUwPbIjHBZOJu PwU8LAjvkiR5q7Mm9PIirNj0UoOqyyeDQawfF9Tj4qSWJVge+jVyE0+JqPv+CrES wS2leNv8QZWa70qjLNoTR6aBtslI0RNOA9y4e/KJnmiuTJQ7d1g/mzTEdDaUCywv FdfdUsgdH39558itDmL68EDvW95jp0yWmvqWE/0xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8wm+Fg7D9vU0xb67FsPws0wE/aswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0OTc0OWM1LTQyNjMtNDQzZi1hNWQxLWYwZmMxYTI3ZWRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBAAdI7JMRs+JonRPhkMDVSZWw +76vvPqhCgRwB1JjTgMw2J9j/47zPninXKO3ZVW/i2dq7Jt523cOPlfZ37CkZOeS 2trGajkJ3VqvvBE5fqA4YxxZXgG/8KjZxG0Ed5d9wloNF2CNX0730emHfc23wqdh wwv8ciopsXHV0cAK+Dfl0U2CMSvqhkvxuZFoTN2++r4J8U5NHLVgHTwP4whhHmI6 eYebE3qE9YY8Kr3YuZV6bzikHC43XCROn576zzwTbM8l37Bq8FLxWMzUEVZyqjXP PxzdTz7VVhhqLDRjh1jM/jDcJcHY6p0OeVPVl6n4U3aDgemCYBw3iuJ9c9wSRpM= -----END CERTIFICATE-----Generated at Tue Oct 27 15:36:53 2026 by rpki-client