$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa File: d040f02c-c962-433b-9282-37c1d283eaeb.roa (raw, json) Hash identifier: cax2Z2XvG43jqENAli2e2lU05SOiaCx8koggOILlbdA= Subject key identifier: AD:AA:22:AC:DC:C2:0F:0F:BC:8E:17:14:24:40:1B:CA:B7:6F:03:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 47F0526E8CDC1B76F107C051A3BDB91A0DE0F811 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa Signing time: Mon 26 Oct 2026 04:20:51 +0000 ROA not before: Mon 26 Oct 2026 04:20:51 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:eb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f0:52:6e:8c:dc:1b:76:f1:07:c0:51:a3:bd:b9:1a:0d:e0:f8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:51 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=4512f5d8007b966b90da8532703a6707b678ffebf4c77ea465a83d6eed8bb234, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:99:8f:1e:98:ae:a7:f7:56:0a:5c:b8:cd: 6f:87:de:ab:27:7b:d2:bf:1b:b3:46:2a:95:cc:8e: 9f:08:27:ca:62:d3:52:87:b6:bb:6f:dc:a8:26:d9: 79:76:2a:ac:de:2d:fb:b5:20:40:e2:6f:d4:5a:61: 14:a8:03:24:2e:a4:3e:5b:e2:10:4c:b7:4b:f4:7c: 53:86:d9:ee:ad:d5:1b:78:69:50:fe:c2:c5:8a:57: a1:5f:f0:c3:bc:1b:d7:19:2d:f1:df:27:9d:34:40: 83:84:58:48:29:f6:dc:36:f2:2d:21:ef:2e:94:d7: 54:3d:eb:67:e8:16:e6:fa:9f:f2:8f:c8:20:17:a3: 8f:44:0f:4e:2d:97:ac:5d:1e:66:02:c4:3a:7d:0a: 81:34:52:79:38:88:d1:e5:59:60:a8:77:41:b9:a7: 31:06:95:cf:d7:a6:19:81:87:cb:e6:79:8d:4e:9b: 64:74:51:f7:db:33:46:d5:3b:4d:cd:17:30:21:cc: a6:88:c5:4a:99:35:fe:4d:e6:7d:ca:e1:0d:3d:49: 5c:f1:9c:1f:98:14:76:e5:b6:10:91:ad:30:fa:24: 8c:2e:1b:3d:1a:de:61:77:fc:4a:aa:6c:de:b7:47: e7:04:22:20:d1:7e:fa:bc:6c:5a:1e:07:91:75:e9: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:22:AC:DC:C2:0F:0F:BC:8E:17:14:24:40:1B:CA:B7:6F:03:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:eb00::/40 Signature Algorithm: sha256WithRSAEncryption 04:3f:4f:c3:a8:a1:b8:a7:e7:d5:b1:f5:92:c8:e7:5d:d0:85: 17:62:9d:25:a5:e7:ae:8d:c5:dc:85:54:4b:82:8a:02:a5:a7: 69:02:a4:fc:d4:ad:28:2b:8b:38:cc:1f:79:ff:a3:2b:89:cd: 85:98:d1:96:73:3a:37:3f:0a:26:b6:87:2a:28:46:1c:e0:80: a6:c4:e2:aa:65:65:8d:ee:b0:81:6b:83:28:cc:78:27:b9:bd: b3:33:50:1e:73:24:20:d7:bc:62:06:c7:30:8b:ca:bb:66:bb: d9:be:ad:20:d7:b4:af:10:1b:d1:09:e2:c9:ca:c1:f9:99:3f: ce:07:40:ae:25:98:07:c5:33:d2:2c:17:62:d1:2e:c7:e6:83: a0:7a:d2:4e:de:0c:16:db:4c:cf:f9:24:c3:6e:78:d5:ab:b9: cb:16:9b:75:af:98:92:aa:01:2b:ae:38:bd:aa:fc:45:1e:3c: 38:cc:41:f1:fa:65:67:ff:84:38:72:b5:79:dd:8f:42:d5:5c: f3:a9:11:a1:3b:4c:33:27:6a:4c:0c:b0:f5:6c:5a:6d:09:df: 80:4d:40:9f:d5:d2:a8:5b:f0:23:82:48:fb:97:5e:e8:6a:46: a4:fe:65:6e:22:51:92:2c:a2:eb:63:d0:27:b5:86:6f:44:a9: e6:63:32:5e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUR/BSbozcG3bxB8BRo725Gg3g+BEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDUxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTEyZjVkODAwN2I5NjZiOTBkYTg1MzI3MDNhNjcwN2I2 NzhmZmViZjRjNzdlYTQ2NWE4M2Q2ZWVkOGJiMjM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCy5mPHpiup/dWCly4zW+H3qsne9K/G7NGKpXMjp8IJ8pi 01KHtrtv3Kgm2Xl2KqzeLfu1IEDib9RaYRSoAyQupD5b4hBMt0v0fFOG2e6t1Rt4 aVD+wsWKV6Ff8MO8G9cZLfHfJ500QIOEWEgp9tw28i0h7y6U11Q962foFub6n/KP yCAXo49ED04tl6xdHmYCxDp9CoE0Unk4iNHlWWCod0G5pzEGlc/XphmBh8vmeY1O m2R0UffbM0bVO03NFzAhzKaIxUqZNf5N5n3K4Q09SVzxnB+YFHblthCRrTD6JIwu Gz0a3mF3/EqqbN63R+cEIiDRfvq8bFoeB5F16WlTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUraoirNzCDw+8jhcUJEAbyrdvA6EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QwNDBmMDJjLWM5NjItNDMzYi05MjgyLTM3YzFkMjgzZWFlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76zANBgkqhkiG9w0BAQsFAAOCAQEABD9Pw6ihuKfn1bH1ksjnXdCF F2KdJaXnro3F3IVUS4KKAqWnaQKk/NStKCuLOMwfef+jK4nNhZjRlnM6Nz8KJraH KihGHOCApsTiqmVlje6wgWuDKMx4J7m9szNQHnMkINe8YgbHMIvKu2a72b6tINe0 rxAb0QniycrB+Zk/zgdAriWYB8Uz0iwXYtEux+aDoHrSTt4MFttMz/kkw2541au5 yxabda+YkqoBK644var8RR48OMxB8fplZ/+EOHK1ed2PQtVc86kRoTtMMydqTAyw 9WxabQnfgE1An9XSqFvwI4JI+5de6GpGpP5lbiJRkiyi62PQJ7WGb0Sp5mMyXg== -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:08 2026 by rpki-client