$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa File: c8a22460-1c12-4314-8b13-6a586edac27c.roa (raw, json) Hash identifier: d26++LQmKGhQ9/hApoLZU9rJ2bxQk7tC6VVGThdl2hA= Subject key identifier: D2:6E:79:AF:B6:66:39:1D:17:EA:DF:97:6A:B7:D7:B5:56:B4:FC:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 01092BDF96ECEB7BC3D9F36EA2D4AB795C99E5B4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa Signing time: Mon 26 Oct 2026 04:10:06 +0000 ROA not before: Mon 26 Oct 2026 04:10:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:09:2b:df:96:ec:eb:7b:c3:d9:f3:6e:a2:d4:ab:79:5c:99:e5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=3e291fda7bdee29f0d4356f50a5da1ede8697019f2be91170c1af3fac8099d80, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:46:77:fd:05:dc:dc:4a:4d:bc:c2:a1:92: 40:f0:da:1b:64:9f:3e:ab:fa:f8:c0:d9:e5:d1:ab: 02:61:09:48:c2:b8:73:e1:a6:9b:51:5d:35:5d:ed: 11:3c:34:11:7e:52:d3:64:f6:b9:5e:d5:9a:ea:77: 25:7c:76:27:e5:e4:46:e7:ff:e7:a3:79:c5:39:43: ec:0c:23:40:09:1c:c8:7c:a6:7f:32:5a:f9:54:8d: 30:0d:a2:d9:72:db:f3:88:b3:3e:2f:61:54:6b:8c: 4c:22:63:4d:53:a7:05:7b:f6:3d:e9:2d:de:53:31: ba:f2:af:f4:32:5d:c1:6e:a5:b1:71:6d:42:1e:e4: 9c:f1:4c:9c:39:79:12:11:2e:19:91:aa:13:9a:c0: e4:7a:7c:ea:af:96:c1:f2:73:b0:0d:9e:34:3f:ad: 80:3f:55:64:4c:30:b7:5a:63:03:f8:fb:47:3a:0d: de:9e:84:59:2a:eb:da:75:18:8e:b2:37:96:60:fb: 24:3a:20:13:44:a1:15:ad:8b:fa:9b:28:b4:9c:93: de:28:63:0d:0d:4b:47:e4:5d:ef:8c:91:50:39:23: fb:54:a9:2c:14:dd:c1:42:2b:aa:fd:72:c2:d4:53: 4b:d8:b2:9a:de:64:10:d1:01:97:02:71:8b:73:83: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:79:AF:B6:66:39:1D:17:EA:DF:97:6A:B7:D7:B5:56:B4:FC:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 4f:ec:a9:6c:ef:e0:5c:d2:80:16:3d:05:43:13:d7:0c:14:37: cd:d4:2f:d4:d5:fa:51:73:28:76:b9:1e:40:1f:5a:71:3f:62: 5a:2c:39:85:5d:c1:0d:f2:79:20:a3:a7:da:11:aa:bc:c1:7e: d8:cd:e1:97:4f:1e:f7:a2:60:c1:67:f8:41:0a:b8:b4:c6:40: ce:bf:6d:a4:45:db:d1:25:2f:92:06:61:9b:5a:f0:36:ca:2e: db:68:41:d5:67:ad:60:69:f8:12:a4:c4:92:31:0d:e0:e8:bc: 45:c4:4c:66:70:2a:55:87:73:85:0f:c0:69:7a:2d:2c:a4:3f: da:f0:af:5d:6b:b5:ca:4c:56:4b:27:89:ab:1a:58:9d:0e:4c: aa:90:6f:d2:7a:6e:eb:a2:39:0e:54:18:4c:c3:06:2c:3b:62: 2b:85:08:99:8d:ac:f1:aa:a5:39:00:8d:b4:3e:5c:d4:db:30: 3d:ae:23:17:99:c9:aa:34:da:e0:56:a2:2e:62:4b:1b:7c:a9: 8a:f3:54:2f:38:79:3e:c1:4d:89:80:26:11:5f:d0:4f:55:e5: 4a:95:9b:a9:80:67:26:c6:d5:2d:ab:1d:2a:64:e1:77:3a:00: 27:f3:30:26:3a:f0:35:31:55:69:10:94:1a:06:09:4a:b2:bc: 88:a2:25:4d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAQkr35bs63vD2fNuotSreVyZ5bQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTI5MWZkYTdiZGVlMjlmMGQ0MzU2ZjUwYTVkYTFlZGU4 Njk3MDE5ZjJiZTkxMTcwYzFhZjNmYWM4MDk5ZDgwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCccEZ3/QXc3EpNvMKhkkDw2htknz6r+vjA2eXRqwJhCUjC uHPhpptRXTVd7RE8NBF+UtNk9rle1ZrqdyV8difl5Ebn/+ejecU5Q+wMI0AJHMh8 pn8yWvlUjTANotly2/OIsz4vYVRrjEwiY01TpwV79j3pLd5TMbryr/QyXcFupbFx bUIe5JzxTJw5eRIRLhmRqhOawOR6fOqvlsHyc7ANnjQ/rYA/VWRMMLdaYwP4+0c6 Dd6ehFkq69p1GI6yN5Zg+yQ6IBNEoRWti/qbKLSck94oYw0NS0fkXe+MkVA5I/tU qSwU3cFCK6r9csLUU0vYspreZBDRAZcCcYtzg+afAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0m55r7ZmOR0X6t+XarfXtVa0/KEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M4YTIyNDYwLTFjMTItNDMxNC04YjEzLTZhNTg2ZWRhYzI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAT+ypbO/gXNKAFj0FQxPXDBQ3 zdQv1NX6UXModrkeQB9acT9iWiw5hV3BDfJ5IKOn2hGqvMF+2M3hl08e96JgwWf4 QQq4tMZAzr9tpEXb0SUvkgZhm1rwNsou22hB1WetYGn4EqTEkjEN4Oi8RcRMZnAq VYdzhQ/AaXotLKQ/2vCvXWu1ykxWSyeJqxpYnQ5MqpBv0npu66I5DlQYTMMGLDti K4UImY2s8aqlOQCNtD5c1NswPa4jF5nJqjTa4FaiLmJLG3ypivNULzh5PsFNiYAm EV/QT1XlSpWbqYBnJsbVLasdKmThdzoAJ/MwJjrwNTFVaRCUGgYJSrK8iKIlTQ== -----END CERTIFICATE-----Generated at Tue Oct 27 16:22:15 2026 by rpki-client