$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa File: d258d57d-021e-4cb2-93b0-750fadc6ca66.roa (raw, json) Hash identifier: Y5iZga/beCnc2ZWGOUVnhC5mBJgmz27z2fvQmCkmnjM= Subject key identifier: 2F:66:F8:E7:64:8C:3E:8B:B6:BB:07:DF:B7:21:9C:E6:61:64:48:7C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 440DD606E98A4053E6321A66613211E6F255F3E7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa Signing time: Sun 11 Oct 2026 15:08:32 +0000 ROA not before: Sun 11 Oct 2026 15:08:32 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0d:d6:06:e9:8a:40:53:e6:32:1a:66:61:32:11:e6:f2:55:f3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:32 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=a095b143568f0ac4123eebc1481501bd6e5bc16ab4f89c918eed42290785f270, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:e4:7d:e4:61:52:19:f3:fb:b3:35:1f:64: 35:65:59:be:6c:f4:e7:4b:98:70:e6:ea:75:53:2d: ff:dd:79:c5:56:2f:4b:41:2e:10:05:45:ab:3f:89: 4c:5a:0f:68:1e:3f:6b:4b:0e:c3:1f:33:ed:04:d9: 7a:49:18:6f:d9:71:04:73:b4:e7:0c:ac:e7:a6:fd: a2:ae:61:c7:b1:88:ae:1b:4b:3e:d3:a6:cf:50:53: 5a:9f:f3:03:10:b1:f0:89:76:08:81:e9:1a:39:e4: 20:ab:de:39:8c:ae:f9:e7:a1:50:2d:e8:c9:83:a8: a6:65:58:90:23:72:79:1e:38:32:36:15:f7:3f:5d: 8b:66:6c:65:d4:79:28:49:d6:e9:21:c2:06:de:34: 03:0b:57:b7:07:bb:aa:2f:ff:5b:6c:5d:90:71:e3: 86:f0:15:c7:d6:39:ab:da:e6:80:37:0a:44:f8:2a: 47:f8:8f:f3:bd:eb:92:ce:46:a5:15:e9:bd:46:10: 6e:a3:34:81:89:1a:0c:a3:f9:78:79:8c:d7:f7:a7: ae:70:1a:6a:2f:23:ec:b7:84:05:86:a3:a5:b4:4c: 91:f4:ab:e0:ef:87:a1:25:58:d6:cb:43:b6:6f:be: 73:3b:66:7e:49:69:00:30:cc:2e:4a:01:1a:dd:54: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:F8:E7:64:8C:3E:8B:B6:BB:07:DF:B7:21:9C:E6:61:64:48:7C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611f::/48 Signature Algorithm: sha256WithRSAEncryption 91:a2:81:af:d4:5a:b2:34:35:5c:53:21:39:73:d7:5c:c1:51: 5c:a9:b0:41:07:93:06:8a:da:6f:3a:bc:33:16:94:9f:33:c2: 78:25:7e:8b:2a:70:2b:6c:52:b2:bf:96:b4:c7:19:22:6d:5f: 11:3d:e4:78:c7:86:e2:8d:fa:19:2b:20:40:5e:3e:10:a7:61: 89:d1:c1:07:23:69:7f:91:87:b8:83:22:39:86:20:ed:15:f0: 98:1f:89:19:e0:f2:34:68:48:f7:ca:c3:e3:9e:ce:14:a5:51: 4e:0a:e2:85:1c:a1:4c:34:d6:cb:da:71:e6:bf:8c:28:4b:a9: 45:df:40:6f:40:38:40:d4:40:ab:c0:8e:84:a7:e6:bd:4a:11: 1b:8e:f8:22:60:08:93:79:f5:fd:3f:f9:b5:19:6d:40:b4:d0: 9a:37:01:1f:af:1f:e4:99:79:86:3a:16:82:e4:70:b2:bb:43: 62:ab:79:81:a8:bb:64:e1:8e:ab:a8:59:fc:6f:54:18:f3:f2: 0e:9a:ff:55:ff:f1:8b:45:13:51:f0:ea:32:23:cc:e2:63:75: 69:86:14:c4:f7:cf:c8:55:7f:0a:b9:ec:a0:99:c2:db:be:7d: 2e:e4:56:8c:cf:f5:f6:97:b0:e8:31:ce:1f:18:be:ab:4b:a7: 2a:d2:d3:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURA3WBumKQFPmMhpmYTIR5vJV8+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODMyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDk1YjE0MzU2OGYwYWM0MTIzZWViYzE0ODE1MDFiZDZl NWJjMTZhYjRmODljOTE4ZWVkNDIyOTA3ODVmMjcwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgi+R95GFSGfP7szUfZDVlWb5s9OdLmHDm6nVTLf/decVW L0tBLhAFRas/iUxaD2geP2tLDsMfM+0E2XpJGG/ZcQRztOcMrOem/aKuYcexiK4b Sz7Tps9QU1qf8wMQsfCJdgiB6Ro55CCr3jmMrvnnoVAt6MmDqKZlWJAjcnkeODI2 Ffc/XYtmbGXUeShJ1ukhwgbeNAMLV7cHu6ov/1tsXZBx44bwFcfWOava5oA3CkT4 Kkf4j/O965LORqUV6b1GEG6jNIGJGgyj+Xh5jNf3p65wGmovI+y3hAWGo6W0TJH0 q+Dvh6ElWNbLQ7ZvvnM7Zn5JaQAwzC5KARrdVDWLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL2b452SMPou2uwfftyGc5mFkSHwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNThkNTdkLTAyMWUtNGNiMi05M2IwLTc1MGZhZGM2Y2E2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR8wDQYJKoZIhvcNAQELBQADggEBAJGiga/UWrI0NVxTITlz11zB UVypsEEHkwaK2m86vDMWlJ8zwnglfosqcCtsUrK/lrTHGSJtXxE95HjHhuKN+hkr IEBePhCnYYnRwQcjaX+Rh7iDIjmGIO0V8JgfiRng8jRoSPfKw+OezhSlUU4K4oUc oUw01svacea/jChLqUXfQG9AOEDUQKvAjoSn5r1KERuO+CJgCJN59f0/+bUZbUC0 0Jo3AR+vH+SZeYY6FoLkcLK7Q2KreYGou2ThjquoWfxvVBjz8g6a/1X/8YtFE1Hw 6jIjzOJjdWmGFMT3z8hVfwq57KCZwtu+fS7kVozP9faXsOgxzh8YvqtLpyrS0+Q= -----END CERTIFICATE-----Generated at Mon Oct 12 02:24:48 2026 by rpki-client