$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa File: d2754057-8887-4dfa-96d2-8349e00ea226.roa (raw, json) Hash identifier: 3uXg1wnSLLvR6fubmc/F6HCVrSxmaDNI25iVbTTY5eo= Subject key identifier: AE:28:6F:A3:B7:A2:E5:89:86:AA:BF:63:5D:44:69:1F:27:04:A7:F8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B5DF853DB0A438B5859B68C7423962786D5359D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa Signing time: Sun 11 Oct 2026 15:10:17 +0000 ROA not before: Sun 11 Oct 2026 15:10:17 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:f8:53:db:0a:43:8b:58:59:b6:8c:74:23:96:27:86:d5:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:17 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=2b25aa1611b03f17e39531ea2e62c4e0c54f1a21ef54d9efbe96dd733d6e4d86, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:a5:a4:58:29:c1:80:39:5d:38:e7:93:f4: a7:f4:60:71:84:65:c3:0b:59:30:bc:45:6f:e3:48: 82:9e:7f:94:a6:d9:c4:13:db:e9:9b:ac:41:a0:33: b6:86:21:81:1b:b0:80:2c:0f:61:8c:dc:9c:e7:63: 1d:96:42:03:cf:93:f9:f1:99:46:ca:d8:a4:95:6d: c3:a7:7a:d8:29:b3:75:e4:78:10:d8:eb:fc:62:af: de:07:d3:85:8f:70:4a:ee:ac:ac:80:80:11:b1:6e: 54:dd:16:41:82:12:c3:b6:2b:d2:ba:f6:67:07:d5: 45:e1:da:28:6d:27:36:39:d0:fa:e4:93:77:60:cf: ef:fb:99:b1:2d:c7:72:d8:49:9e:44:96:84:9a:52: 9c:81:1d:3c:df:f4:b8:61:34:bd:07:cd:a0:00:8e: 30:11:c7:3c:ad:6f:4c:e5:a0:1b:80:73:9a:00:f3: 5b:bd:88:aa:cf:c7:06:a0:b1:8b:b4:11:39:c3:fd: c8:b4:66:ad:bc:bc:a9:77:77:ab:11:9c:6b:8e:ef: 26:c0:c8:cc:3b:17:61:7d:e5:82:ec:ed:45:5c:63: ed:7e:b1:dc:8d:9c:44:89:1d:45:65:8c:9e:af:96: 7e:e0:6e:67:5b:2b:68:a9:e6:bb:75:2c:46:6a:54: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:6F:A3:B7:A2:E5:89:86:AA:BF:63:5D:44:69:1F:27:04:A7:F8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6108::/48 Signature Algorithm: sha256WithRSAEncryption 2d:f2:98:a3:53:fd:9a:74:be:be:17:33:68:8a:aa:3e:51:1b: d8:67:0d:4a:71:48:25:03:d6:8a:26:61:d8:24:a0:d0:93:53: 04:8e:af:2a:3e:3c:70:cc:a6:cf:ba:40:93:e0:16:13:48:9c: 14:df:2a:e4:89:b8:42:ba:af:58:b3:40:fb:cb:4d:a1:8c:7f: 86:05:3c:a9:3b:8c:6a:04:aa:a3:39:d8:20:02:67:44:c6:22: 4c:ed:7b:3f:f6:82:f5:77:76:7d:95:61:70:c1:f6:e8:87:68: 8b:21:4f:51:ea:e1:e7:84:a5:3d:ff:47:6e:b3:4f:b9:c5:14: 36:fe:af:fd:56:df:b9:78:7b:35:d0:ad:f7:7c:02:5c:77:1a: 55:cd:89:a7:24:88:dd:79:69:7a:b7:d2:17:f1:fb:80:f0:06: c7:8f:e4:45:b6:48:a1:56:cd:bb:da:8f:87:fb:1e:ce:e8:86: e5:f9:70:10:72:bd:4a:d9:97:69:23:4d:9b:3a:5f:41:c0:6a: fd:01:77:a6:b8:18:ae:ce:b8:92:48:99:58:12:52:22:ac:02: 37:62:a7:3b:db:f0:1a:b4:bc:43:bc:9c:ec:fe:46:fd:4e:00: 73:c1:81:df:9b:2a:bb:fa:6b:49:41:6f:eb:47:54:3a:c0:98: 36:03:df:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS134U9sKQ4tYWbaMdCOWJ4bVNZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDE3WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjI1YWExNjExYjAzZjE3ZTM5NTMxZWEyZTYyYzRlMGM1 NGYxYTIxZWY1NGQ5ZWZiZTk2ZGQ3MzNkNmU0ZDg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiOaWkWCnBgDldOOeT9Kf0YHGEZcMLWTC8RW/jSIKef5Sm 2cQT2+mbrEGgM7aGIYEbsIAsD2GM3JznYx2WQgPPk/nxmUbK2KSVbcOnetgps3Xk eBDY6/xir94H04WPcErurKyAgBGxblTdFkGCEsO2K9K69mcH1UXh2ihtJzY50Prk k3dgz+/7mbEtx3LYSZ5EloSaUpyBHTzf9LhhNL0HzaAAjjARxzytb0zloBuAc5oA 81u9iKrPxwagsYu0ETnD/ci0Zq28vKl3d6sRnGuO7ybAyMw7F2F95YLs7UVcY+1+ sdyNnESJHUVljJ6vln7gbmdbK2ip5rt1LEZqVCV7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrihvo7ei5YmGqr9jXURpHycEp/gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNzU0MDU3LTg4ODctNGRmYS05NmQyLTgzNDllMDBlYTIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQgwDQYJKoZIhvcNAQELBQADggEBAC3ymKNT/Zp0vr4XM2iKqj5R G9hnDUpxSCUD1oomYdgkoNCTUwSOryo+PHDMps+6QJPgFhNInBTfKuSJuEK6r1iz QPvLTaGMf4YFPKk7jGoEqqM52CACZ0TGIkztez/2gvV3dn2VYXDB9uiHaIshT1Hq 4eeEpT3/R26zT7nFFDb+r/1W37l4ezXQrfd8Alx3GlXNiackiN15aXq30hfx+4Dw BseP5EW2SKFWzbvaj4f7Hs7ohuX5cBByvUrZl2kjTZs6X0HAav0Bd6a4GK7OuJJI mVgSUiKsAjdipzvb8Bq0vEO8nOz+Rv1OAHPBgd+bKrv6a0lBb+tHVDrAmDYD3/4= -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:28 2026 by rpki-client