$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c75a14e9-fb85-4fbb-8cb1-7e1f4ece5236.roa File: c75a14e9-fb85-4fbb-8cb1-7e1f4ece5236.roa (raw, json) Hash identifier: NjUdhZ6YMi4SompwZSnCzFMtOfM4FOE7Xguzps9OLl8= Subject key identifier: 56:9E:C3:1D:EB:D0:9E:33:77:91:71:2E:72:99:A8:E1:15:2D:5D:8A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1740214BAB590A01FC99CF9FFDF52F0CB026C8C4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c75a14e9-fb85-4fbb-8cb1-7e1f4ece5236.roa Signing time: Fri 13 Nov 2026 21:34:19 +0000 ROA not before: Fri 13 Nov 2026 21:34:19 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4324::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:40:21:4b:ab:59:0a:01:fc:99:cf:9f:fd:f5:2f:0c:b0:26:c8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:34:19 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=7d3cfdb7657047979b458e1f700adf1f645fa63d17325e96d747cdbf2ef096a0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:09:27:64:6e:a2:9c:21:8d:1d:03:5d:63: 60:bb:e1:38:d4:f8:f5:9f:0f:bf:3e:c6:92:3b:5c: 1b:fe:a9:7e:7a:e0:f4:47:2f:17:1f:2b:b6:bb:02: ef:11:e8:09:c3:f4:ce:17:3d:e4:da:14:b2:b0:4a: fc:b9:fe:0c:a0:7b:86:b7:8c:32:3e:ed:6e:e2:cd: b4:13:61:ea:0c:79:08:c0:b9:3c:8f:e0:b0:bd:19: 81:57:a5:c0:d5:fc:ad:a2:ac:22:c5:54:29:4a:c4: f4:18:f3:bc:a5:8a:e3:b2:4b:9a:d8:d4:10:41:c3: 6a:18:5a:b6:e7:e1:29:74:f7:fb:4b:8c:a6:a6:4e: 54:19:8a:bb:cf:c6:2d:96:3e:b0:54:a9:cb:87:53: b5:5b:45:da:4f:f2:b8:ec:26:ba:6c:57:e2:e9:09: 9b:6c:40:2c:8a:c0:cc:6a:7a:ea:74:e7:4e:cf:c2: 50:6c:69:a6:af:23:3d:00:56:d0:ec:b5:49:0c:40: cb:15:7f:8f:c7:f1:2a:35:c3:6a:5b:ae:d4:11:db: d6:c6:4c:c2:f8:c7:8d:03:2a:2f:e2:b5:67:d4:8c: 77:9e:1f:38:f7:68:10:78:62:54:b3:a5:74:0c:f7: c1:1a:c1:79:c5:4f:cc:17:d2:1e:6b:a5:a6:09:1c: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9E:C3:1D:EB:D0:9E:33:77:91:71:2E:72:99:A8:E1:15:2D:5D:8A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c75a14e9-fb85-4fbb-8cb1-7e1f4ece5236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4324::/46 Signature Algorithm: sha256WithRSAEncryption 14:72:c9:2a:a3:43:cb:2a:47:54:9f:b5:c5:ff:ba:08:44:58: b2:1b:f5:bd:1b:e6:9c:b4:68:ad:25:87:06:11:64:c1:58:77: 58:f6:4a:36:c6:ad:29:36:91:a1:98:90:73:3b:48:7f:c4:4c: fc:ef:14:c1:c2:21:c3:8d:b1:67:0e:1b:7e:b8:b4:52:f7:1a: d8:5d:6d:fa:2e:24:0a:50:33:fe:bf:e1:15:cc:45:98:ae:41: 5e:db:56:a9:8e:21:c9:17:be:2d:db:e0:10:c4:37:cc:fb:19: dd:d8:04:48:e2:d0:d1:8b:58:8b:b7:f0:bb:53:15:cd:a7:de: 90:f2:fa:a5:ce:5b:38:d9:43:bf:cc:58:31:62:8c:18:24:39: 9b:1c:80:85:59:97:7a:06:30:29:58:8a:cb:2d:34:3b:3e:9d: 03:7b:4e:26:4d:54:2a:b5:d2:85:48:94:72:cb:02:30:1d:14: 39:de:e4:b1:e2:2a:49:ff:82:68:6f:c1:e9:cc:f1:d7:0d:ae: 5f:fd:3b:dc:88:8e:f8:7f:66:b9:12:82:67:f8:ba:c7:a9:6c: 14:c0:bd:d2:5b:ec:39:6e:f9:4f:42:c4:a3:24:db:4d:24:1b: 1f:d6:03:d7:d6:33:1b:7b:96:8d:58:9b:82:ff:64:90:fe:1f: 79:05:a2:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF0AhS6tZCgH8mc+f/fUvDLAmyMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjEzNDE5WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDNjZmRiNzY1NzA0Nzk3OWI0NThlMWY3MDBhZGYxZjY0 NWZhNjNkMTczMjVlOTZkNzQ3Y2RiZjJlZjA5NmEwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8BgknZG6inCGNHQNdY2C74TjU+PWfD78+xpI7XBv+qX56 4PRHLxcfK7a7Au8R6AnD9M4XPeTaFLKwSvy5/gyge4a3jDI+7W7izbQTYeoMeQjA uTyP4LC9GYFXpcDV/K2irCLFVClKxPQY87yliuOyS5rY1BBBw2oYWrbn4Sl09/tL jKamTlQZirvPxi2WPrBUqcuHU7VbRdpP8rjsJrpsV+LpCZtsQCyKwMxqeup0507P wlBsaaavIz0AVtDstUkMQMsVf4/H8So1w2pbrtQR29bGTML4x40DKi/itWfUjHee Hzj3aBB4YlSzpXQM98EawXnFT8wX0h5rpaYJHI0DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVp7DHevQnjN3kXEucpmo4RUtXYowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M3NWExNGU5LWZiODUtNGZiYi04Y2IxLTdlMWY0ZWNlNTIzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQyQwDQYJKoZIhvcNAQELBQADggEBABRyySqjQ8sqR1SftcX/ughE WLIb9b0b5py0aK0lhwYRZMFYd1j2SjbGrSk2kaGYkHM7SH/ETPzvFMHCIcONsWcO G364tFL3GthdbfouJApQM/6/4RXMRZiuQV7bVqmOIckXvi3b4BDEN8z7Gd3YBEji 0NGLWIu38LtTFc2n3pDy+qXOWzjZQ7/MWDFijBgkOZscgIVZl3oGMClYisstNDs+ nQN7TiZNVCq10oVIlHLLAjAdFDne5LHiKkn/gmhvwenM8dcNrl/9O9yIjvh/ZrkS gmf4usepbBTAvdJb7Dlu+U9CxKMk200kGx/WA9fWMxt7lo1Ym4L/ZJD+H3kFoiU= -----END CERTIFICATE-----Generated at Sun Nov 15 05:41:39 2026 by rpki-client