$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa File: d17966f5-59b2-4e40-9068-579a0f07eb22.roa (raw, json) Hash identifier: f6wsKlbzYzbwqdDZqAZ6KJrs2GwUF11FTLZuwHnpBX4= Subject key identifier: E2:AE:95:C5:66:C6:32:70:34:BE:52:40:3F:C6:54:0D:17:91:55:FA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 31D9B87CAB78FBB9DED2DBBD66B0A7BADD64804D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa Signing time: Thu 22 Oct 2026 00:30:13 +0000 ROA not before: Thu 22 Oct 2026 00:30:13 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d9:b8:7c:ab:78:fb:b9:de:d2:db:bd:66:b0:a7:ba:dd:64:80:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:30:13 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=a268d6f0b9a25e8ea5bae77f02f72743d58caaf7900606e37bbb97c143844387, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:0d:bb:ba:4c:ae:08:d6:28:c7:f3:7f:2b: f0:63:03:98:9f:a3:b3:ff:c4:b2:12:95:c0:b0:e8: ac:89:bc:6f:35:e2:ab:65:94:d2:a6:c5:e2:ce:2a: 38:20:1e:30:6b:99:37:f6:0d:71:3b:a2:13:19:61: 1c:bf:d5:90:41:6f:e5:58:d6:87:c7:d6:e3:8d:58: a5:f1:ff:e6:c2:40:0c:ee:09:22:d3:81:b4:93:2a: bd:6a:c9:28:b2:bd:5f:d9:fc:67:65:cb:2b:0d:52: 7b:69:68:d9:b0:ad:19:04:f4:b9:8b:71:24:07:9b: 08:02:a1:29:64:ac:10:d5:e0:38:b0:fa:3c:23:70: 30:83:0e:00:b8:7f:a9:d0:f5:e7:1b:a9:57:8e:32: b0:61:80:ee:b6:0a:f6:c4:cf:fc:f4:b7:55:c2:31: b6:50:b7:fb:1a:4e:33:99:21:e9:2b:f8:1b:26:fb: c7:75:96:c4:d1:8e:be:28:b9:07:27:d1:23:f4:3c: 5a:b3:5a:22:8f:da:5b:48:0b:b7:1b:1f:fa:f3:62: bb:e2:e1:e1:3e:f3:57:f3:c4:94:98:77:bf:8f:fc: 45:74:ce:ae:ad:41:94:81:3d:4c:bf:25:be:6d:61: cd:6b:12:fa:0f:eb:59:64:f4:d1:aa:7e:96:0c:40: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:95:C5:66:C6:32:70:34:BE:52:40:3F:C6:54:0D:17:91:55:FA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b00::/48 Signature Algorithm: sha256WithRSAEncryption 1c:5c:e4:b6:c2:b5:e7:3e:c9:78:7b:57:b1:0f:79:80:d5:2e: 6f:83:95:ae:fe:32:3c:b6:4f:7e:bb:02:b3:6b:68:95:4e:12: 10:44:cb:3f:53:0b:6c:0c:cc:77:b7:cd:48:77:ce:70:6d:03: 10:cd:b6:ca:24:7b:fb:b2:11:e3:e2:2d:d3:46:8f:0b:74:1d: 27:ac:15:2a:cb:3c:ed:38:3c:fa:8a:96:06:43:3c:35:71:96: 3b:89:a7:2b:58:bc:73:92:45:a3:56:9a:4e:a8:73:62:63:55: 0e:7a:aa:33:2f:f7:6c:12:51:82:2a:2f:12:8c:1d:50:3e:92: 1d:34:f9:6b:86:39:f3:60:a5:23:47:46:5b:f5:91:d3:f7:6a: 01:f4:4d:ba:0b:29:98:6f:75:d6:33:5a:aa:8d:95:20:84:af: e9:22:e5:16:d0:9f:36:93:f6:7d:2c:e9:d5:4e:b2:5b:4b:4c: 48:83:b9:54:a7:5c:62:05:23:7f:c1:1e:f7:61:16:4e:dc:2d: 53:f7:26:e3:2d:63:87:65:04:db:e8:bb:39:ff:be:4b:b8:23: 65:e8:80:5f:a8:e0:60:ec:ae:4a:04:33:e6:69:b7:f1:32:63: 16:6a:89:72:c4:20:d6:62:53:90:26:f8:09:e6:4b:3f:6c:4a: 19:8e:e3:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMdm4fKt4+7ne0tu9ZrCnut1kgE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIyMDAzMDEzWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjY4ZDZmMGI5YTI1ZThlYTViYWU3N2YwMmY3Mjc0M2Q1 OGNhYWY3OTAwNjA2ZTM3YmJiOTdjMTQzODQ0Mzg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZmA27ukyuCNYox/N/K/BjA5ifo7P/xLISlcCw6KyJvG81 4qtllNKmxeLOKjggHjBrmTf2DXE7ohMZYRy/1ZBBb+VY1ofH1uONWKXx/+bCQAzu CSLTgbSTKr1qySiyvV/Z/GdlyysNUntpaNmwrRkE9LmLcSQHmwgCoSlkrBDV4Diw +jwjcDCDDgC4f6nQ9ecbqVeOMrBhgO62CvbEz/z0t1XCMbZQt/saTjOZIekr+Bsm +8d1lsTRjr4ouQcn0SP0PFqzWiKP2ltIC7cbH/rzYrvi4eE+81fzxJSYd7+P/EV0 zq6tQZSBPUy/Jb5tYc1rEvoP61lk9NGqfpYMQC4PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4q6VxWbGMnA0vlJAP8ZUDReRVfowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QxNzk2NmY1LTU5YjItNGU0MC05MDY4LTU3OWEwZjA3ZWIyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwAwDQYJKoZIhvcNAQELBQADggEBABxc5LbCtec+yXh7V7EPeYDV Lm+Dla7+Mjy2T367ArNraJVOEhBEyz9TC2wMzHe3zUh3znBtAxDNtsoke/uyEePi LdNGjwt0HSesFSrLPO04PPqKlgZDPDVxljuJpytYvHOSRaNWmk6oc2JjVQ56qjMv 92wSUYIqLxKMHVA+kh00+WuGOfNgpSNHRlv1kdP3agH0TboLKZhvddYzWqqNlSCE r+ki5RbQnzaT9n0s6dVOsltLTEiDuVSnXGIFI3/BHvdhFk7cLVP3JuMtY4dlBNvo uzn/vku4I2XogF+o4GDsrkoEM+Zpt/EyYxZqiXLEINZiU5Am+AnmSz9sShmO4xI= -----END CERTIFICATE-----Generated at Tue Oct 27 05:12:57 2026 by rpki-client