$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dbafe07f-364e-44b7-bae9-bce468889dc0.roa File: dbafe07f-364e-44b7-bae9-bce468889dc0.roa (raw, json) Hash identifier: ZClD2kq2rSHNK1A8oSGjlZHPX+31XhMuKXqmLUCb2dw= Subject key identifier: FB:6D:3C:F9:EA:9A:3D:CF:04:8A:1C:56:6F:1F:A1:F4:3A:E9:90:05 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CBA8CEDEB60A745379D8C541E46E88F6E5A0F2C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dbafe07f-364e-44b7-bae9-bce468889dc0.roa Signing time: Fri 30 Oct 2026 19:32:46 +0000 ROA not before: Fri 30 Oct 2026 19:32:46 +0000 ROA not after: Thu 28 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:4314::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:8c:ed:eb:60:a7:45:37:9d:8c:54:1e:46:e8:8f:6e:5a:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 30 19:32:46 2026 GMT Not After : Jan 28 23:59:59 2027 GMT Subject: serialNumber=8d764681985096d8de78f9443a395985b64e46e46be1540a23d9d8fe98106083, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:2d:2a:a2:b6:e1:e5:3b:2d:3f:e0:5b:70: 4f:be:7f:ae:b8:7a:b9:12:3b:ca:57:8d:8a:79:76: 16:82:b1:43:2f:f0:18:e3:30:c4:f2:a5:ef:90:a0: 51:47:6f:93:b1:ed:d4:36:d1:23:fc:d3:59:22:3f: d8:96:b9:04:18:24:d9:df:d4:10:41:d2:69:58:d8: 22:07:fc:3a:5f:e6:2e:5c:c7:d4:df:fe:18:be:4b: 2e:73:9e:d5:6e:53:51:a0:7d:0b:c7:2f:c4:20:e4: 47:c6:85:21:64:38:8d:ee:7a:b9:4b:c0:7a:c3:52: 2e:81:d0:64:fe:15:83:c1:a7:e8:15:5b:08:32:f7: 0b:53:0e:25:d5:89:7d:bc:53:4c:73:08:71:6e:cb: 02:c4:3f:01:71:68:f3:44:ed:8a:45:db:ac:97:75: b2:81:c4:8c:0b:de:28:72:00:f9:22:27:d5:dd:87: 3b:fe:5c:44:57:73:93:31:92:e1:ad:54:b1:88:99: 28:04:2f:6a:04:d6:78:70:5a:96:73:cd:08:cf:06: 05:1a:76:8d:05:31:fb:c8:8b:bf:07:da:a0:9b:71: db:ea:cd:7d:82:fe:23:76:a8:6e:97:5f:92:94:a8: f1:4b:97:bb:a8:0f:91:45:3d:9d:45:e9:8a:85:3b: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6D:3C:F9:EA:9A:3D:CF:04:8A:1C:56:6F:1F:A1:F4:3A:E9:90:05 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dbafe07f-364e-44b7-bae9-bce468889dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4314::/46 Signature Algorithm: sha256WithRSAEncryption 1e:d5:86:5c:a0:f6:48:88:a3:78:fc:87:52:f4:04:02:28:63: de:23:df:46:29:27:57:d2:cc:25:b4:a7:b6:81:36:25:c0:02: 4d:8a:bb:ed:ab:a4:74:92:3c:a4:51:70:f2:26:76:7f:49:af: 87:28:3e:95:34:77:b7:55:6c:35:65:dc:c2:2a:b1:14:4e:34: 82:aa:4f:fe:93:c8:37:a2:77:a9:85:12:b1:d9:92:cf:fb:b7: e9:bc:6f:a5:6a:84:e1:24:87:38:7d:0b:88:dd:48:d7:fc:82: a5:44:f1:54:85:64:2b:35:d8:c4:fc:b7:95:1a:c4:e9:89:88: df:b3:c8:4f:e3:96:45:d8:96:15:b9:4b:a7:fc:8e:94:11:93: 49:a3:9c:1c:6b:ba:82:14:e8:3c:d2:68:79:08:54:93:38:0a: 26:31:fa:3b:15:2b:70:d8:1f:f2:81:4c:f1:4d:5f:29:03:5e: 74:aa:2e:d7:fa:71:a1:2f:cf:43:68:4a:7d:ad:d9:d8:8f:54: c1:6a:f3:03:1c:45:6b:67:82:2a:11:3e:66:d7:ef:20:69:b5: ae:d2:38:44:be:ba:e1:2b:8d:ad:c6:2c:d8:79:04:b4:28:eb: 10:8b:35:fd:5f:a3:91:c3:4d:02:8a:05:bd:33:af:60:7d:2e: e8:18:00:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfLqM7etgp0U3nYxUHkboj25aDywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDMwMTkzMjQ2WhcNMjcwMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDc2NDY4MTk4NTA5NmQ4ZGU3OGY5NDQzYTM5NTk4NWI2 NGU0NmU0NmJlMTU0MGEyM2Q5ZDhmZTk4MTA2MDgzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClFi0qorbh5TstP+BbcE++f664erkSO8pXjYp5dhaCsUMv 8BjjMMType+QoFFHb5Ox7dQ20SP801kiP9iWuQQYJNnf1BBB0mlY2CIH/Dpf5i5c x9Tf/hi+Sy5zntVuU1GgfQvHL8Qg5EfGhSFkOI3uerlLwHrDUi6B0GT+FYPBp+gV Wwgy9wtTDiXViX28U0xzCHFuywLEPwFxaPNE7YpF26yXdbKBxIwL3ihyAPkiJ9Xd hzv+XERXc5MxkuGtVLGImSgEL2oE1nhwWpZzzQjPBgUado0FMfvIi78H2qCbcdvq zX2C/iN2qG6XX5KUqPFLl7uoD5FFPZ1F6YqFO8HpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+208+eqaPc8EihxWbx+h9DrpkAUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RiYWZlMDdmLTM2NGUtNDRiNy1iYWU5LWJjZTQ2ODg4OWRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxQwDQYJKoZIhvcNAQELBQADggEBAB7Vhlyg9kiIo3j8h1L0BAIo Y94j30YpJ1fSzCW0p7aBNiXAAk2Ku+2rpHSSPKRRcPImdn9Jr4coPpU0d7dVbDVl 3MIqsRRONIKqT/6TyDeid6mFErHZks/7t+m8b6VqhOEkhzh9C4jdSNf8gqVE8VSF ZCs12MT8t5UaxOmJiN+zyE/jlkXYlhW5S6f8jpQRk0mjnBxruoIU6DzSaHkIVJM4 CiYx+jsVK3DYH/KBTPFNXykDXnSqLtf6caEvz0NoSn2t2diPVMFq8wMcRWtngioR PmbX7yBpta7SOES+uuErja3GLNh5BLQo6xCLNf1fo5HDTQKKBb0zr2B9LugYAI0= -----END CERTIFICATE-----Generated at Wed Nov 4 14:44:24 2026 by rpki-client