$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa File: d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa (raw, json) Hash identifier: 8pKi1GLkdjDRh78UwgiaKhnEjomBFZuiJv+U34YGO2o= Subject key identifier: C1:3D:4F:93:26:30:A3:E1:6F:CC:2D:77:9A:B8:E5:03:13:90:34:DC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 51E4A956C7DB344AC01DDFC26C53AF8699B25208 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa Signing time: Sun 11 Oct 2026 15:10:16 +0000 ROA not before: Sun 11 Oct 2026 15:10:16 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e4:a9:56:c7:db:34:4a:c0:1d:df:c2:6c:53:af:86:99:b2:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:16 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=5a8b5a05fbd75850f486222244a068f1d2bac01d8bbb5b4eb7374c37ac45d0ef, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:43:b8:0e:b5:fe:c0:92:33:b5:2e:80:ae: c0:76:dd:27:ec:94:19:f1:81:c5:67:0d:40:e0:60: 32:72:62:c9:61:07:3b:5e:43:c4:0b:a6:3a:cd:f3: 55:71:8f:bb:6b:32:44:0b:6a:c9:a6:d5:b1:cb:9a: 62:cf:e4:61:51:80:31:4d:66:96:3f:dd:94:1e:44: f3:72:15:b6:31:e5:cd:4e:05:dd:d5:18:d1:df:b5: 58:68:a3:fc:2b:7f:65:d8:ca:26:03:f2:a8:ba:57: 3f:4e:b3:b1:67:6c:52:b4:d4:d7:20:bd:55:6c:0d: 9e:d6:3e:44:cd:a0:70:a3:6e:15:e1:1a:24:96:75: e4:cf:8c:c0:01:ce:a4:20:dc:9a:59:ae:ee:7f:b3: 80:dc:24:38:5f:40:60:40:a1:34:a1:74:4b:a5:3b: 87:08:d7:df:f8:83:be:47:fb:fe:90:e9:fb:2b:64: f3:dd:92:fd:63:7c:98:1f:96:c3:98:29:a5:66:13: 62:59:df:81:7e:da:f2:66:ea:ee:4e:be:d3:31:b0: 12:18:62:65:7f:af:a1:f9:15:7c:26:4f:cb:61:c6: 9d:a9:ba:2d:e1:fa:6a:c1:55:ec:25:9f:63:02:dc: 90:3a:f0:ad:56:69:e4:5d:4c:3e:b6:4a:3b:af:cb: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3D:4F:93:26:30:A3:E1:6F:CC:2D:77:9A:B8:E5:03:13:90:34:DC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611c::/48 Signature Algorithm: sha256WithRSAEncryption 8d:05:35:5a:2b:0d:0f:dd:f9:ef:ee:a0:2d:df:da:c2:f9:7f: 02:5b:fd:2a:25:36:6f:6a:52:41:17:4b:fa:0b:0a:4a:66:b1: d6:3a:6b:22:56:3e:75:03:24:3f:a4:0f:cf:2d:aa:2f:08:59: 18:6f:13:0c:0f:2f:1e:5c:83:3b:03:91:4e:65:2c:c2:d6:70: 98:28:37:69:0e:d4:81:c9:0b:33:c4:28:44:f2:ec:ea:94:0e: 89:81:eb:4a:29:c0:e0:eb:d2:43:76:bf:cb:96:6a:48:88:08: 24:7a:37:70:95:c1:fc:b7:d9:b8:9c:c4:b6:96:6b:33:3c:d2: f4:23:21:2c:f7:63:0b:06:02:a2:01:64:87:50:18:3c:85:d5: f7:ff:19:cd:49:42:15:88:74:9e:f0:24:a6:7f:c1:09:08:d1: 7d:d8:2d:29:dc:d0:01:35:98:5e:3b:57:bf:21:e9:16:c7:13: d0:80:e9:72:13:2d:74:88:70:c3:39:c5:5a:94:4c:e6:10:f8: fc:87:8e:f2:17:b9:3b:6f:3c:5c:68:bb:37:58:3f:a7:45:3e: 95:96:65:65:b5:5a:9c:7f:ea:8e:6b:3a:08:69:17:d3:49:a6: f7:02:60:fd:88:52:1a:5f:39:7e:c1:6f:af:b1:21:d5:ce:c3: 57:1e:1e:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUeSpVsfbNErAHd/CbFOvhpmyUggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDE2WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YThiNWEwNWZiZDc1ODUwZjQ4NjIyMjI0NGEwNjhmMWQy YmFjMDFkOGJiYjViNGViNzM3NGMzN2FjNDVkMGVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC47EO4DrX+wJIztS6ArsB23SfslBnxgcVnDUDgYDJyYslh BzteQ8QLpjrN81Vxj7trMkQLasmm1bHLmmLP5GFRgDFNZpY/3ZQeRPNyFbYx5c1O Bd3VGNHftVhoo/wrf2XYyiYD8qi6Vz9Os7FnbFK01NcgvVVsDZ7WPkTNoHCjbhXh GiSWdeTPjMABzqQg3JpZru5/s4DcJDhfQGBAoTShdEulO4cI19/4g75H+/6Q6fsr ZPPdkv1jfJgflsOYKaVmE2JZ34F+2vJm6u5OvtMxsBIYYmV/r6H5FXwmT8thxp2p ui3h+mrBVewln2MC3JA68K1WaeRdTD62Sjuvywl7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwT1PkyYwo+FvzC13mrjlAxOQNNwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q4N2MwMTU1LTg1MTktNDBmNi1iOWQ5LTk5ZTFhYjY1NzRkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRwwDQYJKoZIhvcNAQELBQADggEBAI0FNVorDQ/d+e/uoC3f2sL5 fwJb/SolNm9qUkEXS/oLCkpmsdY6ayJWPnUDJD+kD88tqi8IWRhvEwwPLx5cgzsD kU5lLMLWcJgoN2kO1IHJCzPEKETy7OqUDomB60opwODr0kN2v8uWakiICCR6N3CV wfy32bicxLaWazM80vQjISz3YwsGAqIBZIdQGDyF1ff/Gc1JQhWIdJ7wJKZ/wQkI 0X3YLSnc0AE1mF47V78h6RbHE9CA6XITLXSIcMM5xVqUTOYQ+PyHjvIXuTtvPFxo uzdYP6dFPpWWZWW1Wpx/6o5rOghpF9NJpvcCYP2IUhpfOX7Bb6+xIdXOw1ceHs0= -----END CERTIFICATE-----Generated at Mon Oct 12 15:13:15 2026 by rpki-client