$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa File: f8738a51-4689-46b8-a472-d4d0afaca2d7.roa (raw, json) Hash identifier: Unj63a8HGTuXIuuNIe+O94eRcv3fbNwrrTteaUD5e5w= Subject key identifier: 4E:4C:12:EA:D4:35:A9:2A:BF:2E:3B:BC:A8:E0:B4:20:C3:FA:FF:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48917CE074C3FDD4E3E7B0EF9C843EF71F4FFC14 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa Signing time: Sun 11 Oct 2026 15:08:16 +0000 ROA not before: Sun 11 Oct 2026 15:08:16 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:91:7c:e0:74:c3:fd:d4:e3:e7:b0:ef:9c:84:3e:f7:1f:4f:fc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:16 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=27d84f0f332f45cc151d4f0d762194a70600f7c90dabd9500efb80b2b6d526a6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:3c:d2:57:c5:cf:56:7e:72:86:e4:a1:40: 23:a9:77:f5:f4:d4:7b:22:63:3d:35:c9:c0:ac:6a: 85:ad:dd:46:64:55:7c:58:34:8b:84:8b:ca:a0:b5: 2a:be:1c:16:a9:3f:03:c3:19:fa:a8:f9:9a:d7:e6: b9:08:4e:a5:f0:46:3a:7d:2f:9b:6a:86:d8:cf:6a: 07:92:71:12:6e:1a:09:67:ec:55:e7:a1:4c:be:e9: 72:11:f3:c4:65:1b:66:c9:3f:e9:e8:84:97:36:ee: 3b:19:c2:ef:68:d9:ac:73:64:ca:21:b5:0b:95:d8: 5f:e9:26:c6:40:98:de:04:4b:13:d3:9e:7f:75:3a: a8:92:22:6d:81:f2:ac:88:0d:7b:cd:ec:f5:a9:39: ee:e4:32:e5:39:74:31:27:c8:50:35:8b:4e:e2:c6: 70:9e:74:f2:da:79:ba:bf:15:6e:82:26:b5:75:c4: 5c:f7:6e:9b:87:12:cb:79:72:8e:44:92:87:28:9b: 22:b9:03:c4:f6:2b:a0:25:ea:09:60:4f:ea:f8:29: ad:d9:5e:7d:de:fe:eb:0b:97:87:2a:ab:cb:3a:a0: 37:29:ab:d0:e4:68:41:84:54:76:65:9a:5c:6f:5e: 68:0f:5a:76:f8:d5:8b:66:05:f7:b1:6f:79:93:7c: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:12:EA:D4:35:A9:2A:BF:2E:3B:BC:A8:E0:B4:20:C3:FA:FF:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4::/48 Signature Algorithm: sha256WithRSAEncryption 61:1a:0b:e9:c6:c8:5f:2c:c7:28:43:eb:6d:bd:f5:a5:0e:94: 91:9b:bb:6b:b1:ba:43:43:5f:07:99:33:f7:53:83:b0:a7:e9: ee:c7:e0:75:39:63:ae:b9:89:08:48:1f:e3:5c:ff:8a:fc:9f: bb:7f:95:9f:fc:c9:ac:ab:94:f8:f5:02:9c:a6:99:1f:ba:a4: 64:c2:6b:4b:4d:d3:20:a6:a1:8c:85:48:e5:a0:ad:51:91:a1: 7d:be:c5:7b:b8:6b:e8:b5:a6:dc:b1:8c:d8:d1:a5:1e:44:da: 3d:18:f8:9e:a8:b7:dd:9c:c5:82:4a:4e:15:f8:bd:60:5f:84: 2b:20:c9:fa:a4:0c:1e:62:c0:82:9b:54:98:6b:b1:84:83:87: 14:65:de:2c:de:f9:b3:96:bb:89:52:93:45:44:79:a8:00:15: bf:3f:15:bb:f0:b1:d0:34:a0:1e:43:c7:76:84:ef:6d:1c:b8: a1:dd:67:9d:64:fc:f5:c9:04:9f:b2:3f:b3:8a:42:e4:5f:08: 5b:57:1d:80:07:1b:d3:30:69:fb:da:e7:26:62:75:55:b0:82: 22:cb:b4:ae:15:a4:f7:ac:d2:7f:9d:bb:5f:5e:77:88:ad:5a: f4:b0:cd:8b:af:18:76:a5:c7:42:98:c1:05:05:45:29:59:4d: 25:7d:a8:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSJF84HTD/dTj57DvnIQ+9x9P/BQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODE2WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2Q4NGYwZjMzMmY0NWNjMTUxZDRmMGQ3NjIxOTRhNzA2 MDBmN2M5MGRhYmQ5NTAwZWZiODBiMmI2ZDUyNmE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC50jzSV8XPVn5yhuShQCOpd/X01HsiYz01ycCsaoWt3UZk VXxYNIuEi8qgtSq+HBapPwPDGfqo+ZrX5rkITqXwRjp9L5tqhtjPageScRJuGgln 7FXnoUy+6XIR88RlG2bJP+nohJc27jsZwu9o2axzZMohtQuV2F/pJsZAmN4ESxPT nn91OqiSIm2B8qyIDXvN7PWpOe7kMuU5dDEnyFA1i07ixnCedPLaebq/FW6CJrV1 xFz3bpuHEst5co5EkocomyK5A8T2K6Al6glgT+r4Ka3ZXn3e/usLl4cqq8s6oDcp q9DkaEGEVHZlmlxvXmgPWnb41YtmBfexb3mTfOuLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTkwS6tQ1qSq/Lju8qOC0IMP6/44wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NzM4YTUxLTQ2ODktNDZiOC1hNDcyLWQ0ZDBhZmFjYTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAQwDQYJKoZIhvcNAQELBQADggEBAGEaC+nGyF8sxyhD62299aUO lJGbu2uxukNDXweZM/dTg7Cn6e7H4HU5Y665iQhIH+Nc/4r8n7t/lZ/8yayrlPj1 ApymmR+6pGTCa0tN0yCmoYyFSOWgrVGRoX2+xXu4a+i1ptyxjNjRpR5E2j0Y+J6o t92cxYJKThX4vWBfhCsgyfqkDB5iwIKbVJhrsYSDhxRl3ize+bOWu4lSk0VEeagA Fb8/FbvwsdA0oB5Dx3aE720cuKHdZ51k/PXJBJ+yP7OKQuRfCFtXHYAHG9Mwafva 5yZidVWwgiLLtK4VpPes0n+du19ed4itWvSwzYuvGHalx0KYwQUFRSlZTSV9qKY= -----END CERTIFICATE-----Generated at Tue Oct 27 00:06:06 2026 by rpki-client