$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa File: ee2c3586-4c23-4045-b98b-d28000a3bd55.roa (raw, json) Hash identifier: lkhfqsgo/ZNKa9OgR6pw5YNSAab+PWUxMj3xaTk79hs= Subject key identifier: 9E:D1:B5:3B:28:C7:A1:73:28:59:D7:9B:F2:86:2C:1C:86:93:82:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E8B1392A194CA88A2E244C866A787335DD65529 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa Signing time: Sun 11 Oct 2026 15:08:47 +0000 ROA not before: Sun 11 Oct 2026 15:08:47 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5503::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8b:13:92:a1:94:ca:88:a2:e2:44:c8:66:a7:87:33:5d:d6:55:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:47 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=4f50c04b005779be2e0bba3a38aa6968b74b85653db6c95ecbdc96841076295d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:b8:e8:9a:88:42:8c:19:64:09:af:63:af: b3:0d:a0:a1:a4:a4:8d:c0:87:b5:d8:15:2c:53:a8: 43:4d:36:bb:bc:a2:33:df:46:80:8f:25:67:c7:2d: 0b:47:3e:d6:9e:74:c3:bf:70:3e:c9:f0:01:55:6c: 35:67:4d:e1:a3:b5:ea:d8:69:71:c5:5d:ac:85:de: a4:e4:f0:8a:34:f9:43:31:7d:a4:c6:ea:39:44:70: 62:e3:40:7e:52:36:18:7c:ae:6d:14:12:c0:bc:d8: 1f:f0:46:9e:56:c9:e3:1e:76:0f:c5:7b:d3:6a:d1: eb:d7:0d:76:9f:01:d4:26:48:45:07:0f:47:0c:84: f6:a2:ea:96:06:bc:fd:92:a1:87:f3:40:25:c2:1d: 76:10:f4:a4:3d:05:9c:71:b9:3e:3e:df:34:5c:de: 07:68:cb:60:04:13:17:85:e9:a0:76:3b:f8:eb:5a: 93:c6:ec:28:a2:91:aa:46:20:c2:d5:0e:e6:a3:e0: 4b:b8:b9:25:1b:1c:79:cb:a6:a1:de:21:2b:e4:27: e3:a5:c6:91:80:a6:cb:99:bc:95:f5:f8:e8:87:ce: cf:6a:2c:72:e7:29:47:0e:68:8f:9f:8b:87:ce:d9: 3b:22:d5:e0:eb:fe:95:71:53:ce:5a:4d:e6:54:28: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:B5:3B:28:C7:A1:73:28:59:D7:9B:F2:86:2C:1C:86:93:82:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5503::/48 Signature Algorithm: sha256WithRSAEncryption 79:92:74:1b:56:3a:e5:3d:48:3d:68:b0:5c:e3:0f:44:64:eb: b3:ec:55:5d:3d:7e:74:99:35:a7:c5:14:d6:63:3f:dd:4f:96: b3:af:fc:bd:99:1c:b3:60:a5:22:d9:b7:c6:5c:f9:28:e1:b4: 2a:dd:49:2c:d2:78:cc:60:6c:e6:d0:8e:f2:c9:7e:26:8f:a8: 1f:c0:64:cc:a3:2f:e4:6b:93:53:da:dd:df:e9:78:75:1e:f1: 0d:24:cd:89:da:49:f3:a7:7c:36:15:0c:8e:71:cc:5c:ab:fe: 24:60:8d:fe:41:d9:3a:c8:0f:90:92:19:e4:68:cf:e9:54:53: ef:06:f3:56:97:c0:8c:d3:bb:ef:d1:89:c8:e1:19:d5:80:f7: 4d:6f:21:04:3e:05:00:57:89:79:d2:66:45:5b:c7:1f:f6:51: ee:5a:ad:f6:c5:52:9f:ca:f9:eb:1a:05:42:c2:55:72:76:45: ef:dd:13:ee:af:6b:52:b5:91:d2:da:89:66:f7:7f:d4:be:c8: 55:a1:3b:7a:77:b9:62:19:e3:db:92:21:d3:39:2d:33:1b:df: 4b:85:23:a3:39:1f:44:cd:c8:7d:3b:33:7c:2f:4a:16:96:8d: 3c:c4:4d:a6:47:f8:28:77:94:73:f4:34:e9:c6:b9:e3:05:b3: 15:64:62:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULosTkqGUyoii4kTIZqeHM13WVSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODQ3WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjUwYzA0YjAwNTc3OWJlMmUwYmJhM2EzOGFhNjk2OGI3 NGI4NTY1M2RiNmM5NWVjYmRjOTY4NDEwNzYyOTVkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw+rjomohCjBlkCa9jr7MNoKGkpI3Ah7XYFSxTqENNNru8 ojPfRoCPJWfHLQtHPtaedMO/cD7J8AFVbDVnTeGjterYaXHFXayF3qTk8Io0+UMx faTG6jlEcGLjQH5SNhh8rm0UEsC82B/wRp5WyeMedg/Fe9Nq0evXDXafAdQmSEUH D0cMhPai6pYGvP2SoYfzQCXCHXYQ9KQ9BZxxuT4+3zRc3gdoy2AEExeF6aB2O/jr WpPG7CiikapGIMLVDuaj4Eu4uSUbHHnLpqHeISvkJ+OlxpGApsuZvJX1+OiHzs9q LHLnKUcOaI+fi4fO2Tsi1eDr/pVxU85aTeZUKFVdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUntG1OyjHoXMoWdeb8oYsHIaTgjIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VlMmMzNTg2LTRjMjMtNDA0NS1iOThiLWQyODAwMGEzYmQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQMwDQYJKoZIhvcNAQELBQADggEBAHmSdBtWOuU9SD1osFzjD0Rk 67PsVV09fnSZNafFFNZjP91PlrOv/L2ZHLNgpSLZt8Zc+SjhtCrdSSzSeMxgbObQ jvLJfiaPqB/AZMyjL+Rrk1Pa3d/peHUe8Q0kzYnaSfOnfDYVDI5xzFyr/iRgjf5B 2TrID5CSGeRoz+lUU+8G81aXwIzTu+/RicjhGdWA901vIQQ+BQBXiXnSZkVbxx/2 Ue5arfbFUp/K+esaBULCVXJ2Re/dE+6va1K1kdLaiWb3f9S+yFWhO3p3uWIZ49uS IdM5LTMb30uFI6M5H0TNyH07M3wvShaWjTzETaZH+Ch3lHP0NOnGueMFsxVkYiI= -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:55 2026 by rpki-client