$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c99349c6-2b1b-43c8-96ba-bc1bfecfd412.roa File: c99349c6-2b1b-43c8-96ba-bc1bfecfd412.roa (raw, json) Hash identifier: JgmPjvzdnXeheG+yEOctXxneqEcoCYnTzVXHJc6TuxU= Subject key identifier: B3:86:0E:70:56:5A:AC:75:D3:C3:E9:2A:1A:34:84:73:D0:AC:CA:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 655E9155720F35DBE1E50AF5F95790A736F8D18B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c99349c6-2b1b-43c8-96ba-bc1bfecfd412.roa Signing time: Mon 05 Oct 2026 00:10:04 +0000 ROA not before: Mon 05 Oct 2026 00:10:04 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:18::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5e:91:55:72:0f:35:db:e1:e5:0a:f5:f9:57:90:a7:36:f8:d1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 5 00:10:04 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=dbe7344a17def73bb0c8f9b591144b2cc5b3c92d4d38184a6c880258977e1b87, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:64:00:b6:4d:35:4d:c7:78:27:55:15:71: 47:a7:66:a2:61:52:21:82:17:8a:d9:f7:c1:26:d1: 6a:9e:4c:d9:f9:92:ed:d7:8b:6b:51:cb:c5:ad:e6: 04:9d:b8:5d:ac:ff:71:43:e5:c1:75:9c:63:50:07: d1:69:58:d3:79:de:06:c0:20:7c:dd:af:73:3d:5d: 9a:d5:8e:3c:61:dd:66:ce:ff:b8:35:61:40:eb:53: ea:7e:78:a9:3a:4e:18:b7:1c:e2:63:e9:1e:e3:ba: c8:33:e2:bd:93:a1:87:1b:0f:e1:c9:a7:60:26:ee: f4:61:07:af:95:ec:66:33:2e:24:09:10:40:15:7e: be:a5:05:7d:98:cc:e2:bd:93:f3:21:57:14:6b:c4: 1b:61:34:20:ff:c8:7b:1a:f7:a1:1f:58:e6:dc:a5: ad:2a:64:b5:2c:2d:fa:22:55:c8:7a:c1:5c:11:60: ef:7b:82:a9:4f:c1:88:32:82:44:b6:79:a1:95:c2: 52:d8:4d:d8:f2:c2:6d:17:7b:c0:f1:19:79:b4:bd: bf:63:d2:81:c7:68:c4:66:9d:37:5a:32:0f:a9:18: f7:99:e9:ac:a3:44:7a:5a:79:9c:d8:bb:3b:d9:a2: d3:5a:0a:aa:7b:2e:4d:c7:f9:65:45:c7:f3:aa:b4: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:0E:70:56:5A:AC:75:D3:C3:E9:2A:1A:34:84:73:D0:AC:CA:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c99349c6-2b1b-43c8-96ba-bc1bfecfd412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:18::/46 Signature Algorithm: sha256WithRSAEncryption 66:9d:93:e2:21:a9:59:73:80:bb:51:fb:52:1e:3c:dc:6a:1e: 67:2b:fe:3e:20:bb:c6:66:f6:ba:7c:0b:2d:75:b6:78:29:20: 61:f2:13:56:74:bc:77:9b:25:c7:d2:bf:72:8a:ac:20:31:a7: e1:ba:c0:4e:6c:95:cc:80:b9:4e:fd:6a:52:2b:c3:e1:af:26: 0f:fb:68:e2:ee:44:6a:42:0b:23:7b:a3:85:bf:20:59:ee:15: 21:b0:c6:d2:65:3c:d3:e5:12:2b:6c:ee:71:38:5f:ef:04:18: 1a:df:03:2d:25:b4:e0:4e:84:8e:be:6c:8b:ff:bb:5c:0e:df: ba:6a:5b:43:47:ce:e4:b4:53:8c:26:0f:b7:2e:d7:03:aa:4d: e0:ed:ad:a3:10:6b:3c:0e:5e:b5:38:0e:f3:df:f7:bd:96:95: a5:01:a7:4d:9e:84:34:b3:d1:d3:02:4b:e5:a8:3e:08:d5:93: 7d:da:a4:0e:fd:df:01:3f:70:59:7d:d8:e4:c5:76:02:5c:9f: 1d:6b:90:8d:53:e1:dd:85:91:1f:a9:52:dc:f0:ef:7d:9a:11: a4:48:62:85:24:4e:8e:a3:a1:89:c1:c0:59:cb:fd:30:15:07: 26:f5:40:b5:e6:24:58:f6:96:e1:12:48:a2:68:72:73:34:73: 44:47:ac:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZV6RVXIPNdvh5Qr1+VeQpzb40YswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA1MDAxMDA0WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmU3MzQ0YTE3ZGVmNzNiYjBjOGY5YjU5MTE0NGIyY2M1 YjNjOTJkNGQzODE4NGE2Yzg4MDI1ODk3N2UxYjg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC60GQAtk01Tcd4J1UVcUenZqJhUiGCF4rZ98Em0WqeTNn5 ku3Xi2tRy8Wt5gSduF2s/3FD5cF1nGNQB9FpWNN53gbAIHzdr3M9XZrVjjxh3WbO /7g1YUDrU+p+eKk6Thi3HOJj6R7jusgz4r2ToYcbD+HJp2Am7vRhB6+V7GYzLiQJ EEAVfr6lBX2YzOK9k/MhVxRrxBthNCD/yHsa96EfWObcpa0qZLUsLfoiVch6wVwR YO97gqlPwYgygkS2eaGVwlLYTdjywm0Xe8DxGXm0vb9j0oHHaMRmnTdaMg+pGPeZ 6ayjRHpaeZzYuzvZotNaCqp7Lk3H+WVFx/OqtIk3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs4YOcFZarHXTw+kqGjSEc9Csys0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5OTM0OWM2LTJiMWItNDNjOC05NmJhLWJjMWJmZWNmZDQxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDxABgwDQYJKoZIhvcNAQELBQADggEBAGadk+IhqVlzgLtR+1IePNxq Hmcr/j4gu8Zm9rp8Cy11tngpIGHyE1Z0vHebJcfSv3KKrCAxp+G6wE5slcyAuU79 alIrw+GvJg/7aOLuRGpCCyN7o4W/IFnuFSGwxtJlPNPlEits7nE4X+8EGBrfAy0l tOBOhI6+bIv/u1wO37pqW0NHzuS0U4wmD7cu1wOqTeDtraMQazwOXrU4DvPf972W laUBp02ehDSz0dMCS+WoPgjVk33apA793wE/cFl92OTFdgJcnx1rkI1T4d2FkR+p Utzw732aEaRIYoUkTo6joYnBwFnL/TAVByb1QLXmJFj2luESSKJocnM0c0RHrI0= -----END CERTIFICATE-----Generated at Sat Oct 31 05:18:43 2026 by rpki-client