$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa File: e261d9a6-4c2a-42cf-aec3-29a76a536226.roa (raw, json) Hash identifier: NB2deat2LeDIzQHXnACHiW/Egd25C9UKnOrPZVC4Q4o= Subject key identifier: 6D:DA:00:25:41:2A:A1:67:24:37:6F:29:CE:FB:7E:97:92:93:01:D1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0139D09286E0249F8F38DDE16273C8DE6CF9BD48 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa Signing time: Wed 30 Sep 2026 00:00:04 +0000 ROA not before: Wed 30 Sep 2026 00:00:04 +0000 ROA not after: Tue 29 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:39:d0:92:86:e0:24:9f:8f:38:dd:e1:62:73:c8:de:6c:f9:bd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 30 00:00:04 2026 GMT Not After : Dec 29 23:59:59 2026 GMT Subject: serialNumber=abb22a84a13623894655fbdfe90dc097a0923ac90f5a472e3b408c8d46e810b9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:79:5f:a9:64:a0:7a:7b:f2:ba:b3:68:b8: 1e:a8:36:5c:cb:87:02:f4:0a:0f:55:ed:31:05:c5: cf:57:28:1e:29:18:33:be:fb:20:fd:88:b2:a4:c4: b8:d3:08:2c:47:a5:3c:65:0c:91:f6:02:9c:3d:a1: d7:e0:03:3d:fe:73:21:8d:89:51:eb:a1:38:3b:c3: 44:c2:85:ee:6c:2d:75:60:32:64:7c:2a:a4:62:45: 19:16:2e:07:f0:16:33:9f:b3:62:21:f3:cc:cc:d9: 06:77:21:a9:58:d8:b9:d0:fe:78:8f:52:83:77:b6: ce:46:61:11:f9:3c:ac:dc:bf:38:b7:1f:cf:f9:f0: 45:69:5a:92:81:d0:1e:44:f5:44:5a:cc:03:0f:02: 31:09:b1:f1:27:50:08:1d:26:d9:e0:02:9b:89:39: e0:54:e1:6e:5b:b8:58:80:ed:4f:32:d7:fa:4a:66: 20:05:73:b6:6d:7c:3a:37:df:48:76:fe:21:71:8d: f2:49:67:cf:cf:af:86:88:1a:b5:4c:73:59:fd:b6: bb:d1:6c:b7:a6:e0:e2:4f:20:9e:a8:9f:05:f6:92: 35:ec:13:03:f4:78:13:32:02:75:7b:43:7b:51:d2: 82:89:8b:9a:a0:9a:ae:25:b0:14:11:99:d9:81:cf: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:00:25:41:2A:A1:67:24:37:6F:29:CE:FB:7E:97:92:93:01:D1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5504::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3f:6b:89:9a:34:c6:b4:4d:d9:28:47:a3:d4:f0:bf:ec:58: b6:90:60:ba:c9:13:66:1d:8b:bd:5f:ff:cc:a4:a8:09:30:f2: 38:83:9f:50:ad:60:27:51:fe:ea:f3:7b:b0:4f:7c:4a:80:3f: 43:3f:31:45:75:fb:0d:26:54:d6:a7:cc:c2:b3:08:b8:3a:d2: 27:a9:85:64:f0:a4:14:fd:d4:a5:5f:8e:3a:c4:25:d3:4e:10: fa:28:fc:b4:a2:23:f3:ec:7c:5e:0c:c5:db:2d:45:cc:5f:e9: 08:2d:55:8b:58:61:c5:98:a3:97:ab:1a:38:7d:a5:50:83:a3: bb:56:76:d7:b2:10:bd:99:27:55:15:37:b2:62:25:11:0b:7d: 37:d6:64:14:f3:dc:12:85:5f:34:25:84:2e:7a:61:8b:92:bf: 89:b8:dd:5c:30:ea:7c:ff:7c:b7:09:4e:ef:23:67:4a:bc:24: 7e:43:73:24:c2:7e:04:11:f5:06:f8:00:77:ad:12:66:8a:50: cd:6d:96:83:61:44:73:41:93:05:3f:77:c4:61:aa:7d:2c:9c: 80:c0:ee:d2:e0:e3:2c:aa:c8:e2:ab:d0:99:c1:8b:45:b3:c0: 2b:bc:2b:95:d9:7e:95:8f:5b:76:b3:7f:09:d6:9e:06:bc:08: 85:8a:b6:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUATnQkobgJJ+PON3hYnPI3mz5vUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTMwMDAwMDA0WhcNMjYxMjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmIyMmE4NGExMzYyMzg5NDY1NWZiZGZlOTBkYzA5N2Ew OTIzYWM5MGY1YTQ3MmUzYjQwOGM4ZDQ2ZTgxMGI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8W3lfqWSgenvyurNouB6oNlzLhwL0Cg9V7TEFxc9XKB4p GDO++yD9iLKkxLjTCCxHpTxlDJH2Apw9odfgAz3+cyGNiVHroTg7w0TChe5sLXVg MmR8KqRiRRkWLgfwFjOfs2Ih88zM2QZ3IalY2LnQ/niPUoN3ts5GYRH5PKzcvzi3 H8/58EVpWpKB0B5E9URazAMPAjEJsfEnUAgdJtngApuJOeBU4W5buFiA7U8y1/pK ZiAFc7ZtfDo330h2/iFxjfJJZ8/Pr4aIGrVMc1n9trvRbLem4OJPIJ6onwX2kjXs EwP0eBMyAnV7Q3tR0oKJi5qgmq4lsBQRmdmBz8LRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbdoAJUEqoWckN28pzvt+l5KTAdEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UyNjFkOWE2LTRjMmEtNDJjZi1hZWMzLTI5YTc2YTUzNjIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQQwDQYJKoZIhvcNAQELBQADggEBAEs/a4maNMa0TdkoR6PU8L/s WLaQYLrJE2Ydi71f/8ykqAkw8jiDn1CtYCdR/urze7BPfEqAP0M/MUV1+w0mVNan zMKzCLg60iephWTwpBT91KVfjjrEJdNOEPoo/LSiI/PsfF4MxdstRcxf6QgtVYtY YcWYo5erGjh9pVCDo7tWdteyEL2ZJ1UVN7JiJRELfTfWZBTz3BKFXzQlhC56YYuS v4m43Vww6nz/fLcJTu8jZ0q8JH5DcyTCfgQR9Qb4AHetEmaKUM1tloNhRHNBkwU/ d8Rhqn0snIDA7tLg4yyqyOKr0JnBi0WzwCu8K5XZfpWPW3azfwnWnga8CIWKto8= -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:39 2026 by rpki-client