$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa File: d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa (raw, json) Hash identifier: uwNnsOrxGtq+vynUZMxbbWAPDvjY1LBS/eF3+cYK5oE= Subject key identifier: A1:8D:65:36:8D:36:5E:77:7E:12:0E:6E:8B:A4:E2:A7:53:96:B6:B0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6ACE7B05794B88FD421AA83ED9F560F9C82AC43A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa Signing time: Wed 21 Oct 2026 00:10:08 +0000 ROA not before: Wed 21 Oct 2026 00:10:08 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5507::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ce:7b:05:79:4b:88:fd:42:1a:a8:3e:d9:f5:60:f9:c8:2a:c4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 00:10:08 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=51e7e0894b6776752c8f4ee859369999534a261e990d26cea2fbee673c0687e4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:8c:47:f8:91:0e:82:92:bc:46:e9:05:5f: 0f:16:6b:1f:2e:1d:49:f1:1d:a0:c8:c6:64:8b:9e: fd:24:8f:ab:c7:e8:d2:84:b3:64:98:08:45:8f:e1: 97:1a:cc:1b:35:37:e6:c6:db:00:44:56:85:e1:a4: c4:e4:ba:64:1b:e6:1f:10:ed:da:92:d8:21:a3:0f: 63:a1:86:3b:1b:79:9c:94:cc:bc:cd:9a:dc:30:e5: 89:16:ca:6d:fc:9f:8b:99:15:28:ac:72:b1:ab:31: 3f:79:a4:0d:ae:7e:4f:94:12:12:42:72:f7:cd:45: 30:0d:03:cf:24:30:f5:e9:e8:d4:c4:e0:f2:50:44: 9d:19:76:04:5e:9b:d9:a6:a2:ee:66:d5:d1:d2:ff: c0:1c:54:ab:7c:25:7a:92:86:5e:0e:75:44:f3:98: 27:20:24:32:df:0b:fd:f9:aa:8f:a3:39:a3:de:59: d0:d8:6e:5e:ab:07:91:dc:ff:85:3a:cc:b0:6d:cd: 55:f7:1e:56:eb:7e:73:80:a4:98:be:44:1b:94:2b: 15:8a:14:36:ff:21:bb:79:dd:80:98:1c:30:00:02: c2:48:ef:18:da:f9:b4:c8:06:20:88:00:90:0b:e8: 65:6e:7f:0e:23:c3:ff:30:f6:85:c3:5a:5c:80:a5: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:65:36:8D:36:5E:77:7E:12:0E:6E:8B:A4:E2:A7:53:96:B6:B0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5507::/48 Signature Algorithm: sha256WithRSAEncryption 16:4e:b4:6a:b2:5d:cd:9e:33:9f:9f:3b:d0:93:b6:d5:e4:6d: 92:ff:60:97:eb:b5:81:a2:fc:b7:89:42:e4:72:ed:ce:bd:a2: 45:9e:6c:3f:31:c8:3a:a0:eb:fe:8c:67:76:c2:cb:80:67:66: 1f:5c:6f:37:80:7f:54:8d:1a:f6:56:ed:b4:d2:d9:96:44:4d: 2c:2b:d7:08:68:04:8d:36:6c:06:ab:72:e3:09:aa:8c:9d:4c: f8:cc:5e:bc:77:82:6b:06:bb:06:7f:28:1f:d2:3a:bc:66:72: d0:97:c8:dc:ea:ed:ff:a3:b6:1c:5a:8c:83:c3:a2:ba:57:23: 5b:8f:9a:5d:3b:1d:95:f5:7f:89:f9:29:62:4e:16:89:0e:11: 4e:db:d2:37:22:02:16:a3:37:dc:87:e3:a0:2c:cb:35:eb:62: af:4c:38:bb:eb:01:80:42:22:ee:85:46:09:4c:53:f8:26:79: a6:52:38:12:f0:43:98:19:55:79:4f:f5:42:e0:bd:57:77:ba: 93:b8:93:43:2f:c7:91:cf:d1:3e:d4:b6:e3:ad:15:00:1c:ce: 0a:a8:b2:db:4e:9b:23:ae:60:ba:b2:ab:a7:af:8d:30:cd:1b: 3f:04:dc:ec:40:3b:2d:2a:2d:64:75:07:cb:54:ef:a7:3f:85: fc:2d:86:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUas57BXlLiP1CGqg+2fVg+cgqxDowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIxMDAxMDA4WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWU3ZTA4OTRiNjc3Njc1MmM4ZjRlZTg1OTM2OTk5OTUz NGEyNjFlOTkwZDI2Y2VhMmZiZWU2NzNjMDY4N2U0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsqIxH+JEOgpK8RukFXw8Wax8uHUnxHaDIxmSLnv0kj6vH 6NKEs2SYCEWP4ZcazBs1N+bG2wBEVoXhpMTkumQb5h8Q7dqS2CGjD2OhhjsbeZyU zLzNmtww5YkWym38n4uZFSiscrGrMT95pA2ufk+UEhJCcvfNRTANA88kMPXp6NTE 4PJQRJ0ZdgRem9mmou5m1dHS/8AcVKt8JXqShl4OdUTzmCcgJDLfC/35qo+jOaPe WdDYbl6rB5Hc/4U6zLBtzVX3HlbrfnOApJi+RBuUKxWKFDb/Ibt53YCYHDAAAsJI 7xja+bTIBiCIAJAL6GVufw4jw/8w9oXDWlyApTBbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoY1lNo02Xnd+Eg5ui6Tip1OWtrAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QxOTZjOWM5LWViNDAtNGYyZi04NzNjLTEyMzFlNzQzOGEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQcwDQYJKoZIhvcNAQELBQADggEBABZOtGqyXc2eM5+fO9CTttXk bZL/YJfrtYGi/LeJQuRy7c69okWebD8xyDqg6/6MZ3bCy4BnZh9cbzeAf1SNGvZW 7bTS2ZZETSwr1whoBI02bAarcuMJqoydTPjMXrx3gmsGuwZ/KB/SOrxmctCXyNzq 7f+jthxajIPDorpXI1uPml07HZX1f4n5KWJOFokOEU7b0jciAhajN9yH46AsyzXr Yq9MOLvrAYBCIu6FRglMU/gmeaZSOBLwQ5gZVXlP9ULgvVd3upO4k0Mvx5HP0T7U tuOtFQAczgqosttOmyOuYLqyq6evjTDNGz8E3OxAOy0qLWR1B8tU76c/hfwthnc= -----END CERTIFICATE-----Generated at Tue Oct 27 15:33:52 2026 by rpki-client