$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa File: f8a24442-56c6-46d4-9923-f4d5b17fd850.roa (raw, json) Hash identifier: XPx5lPdwX6AVH6wU4jm05dYHc99SPg61867KZAtvREU= Subject key identifier: 75:C0:4D:2C:82:9A:D3:DD:65:9A:83:09:E2:E1:58:D3:08:18:D1:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 19D2494E603F7366BB7CA7EE4A49D1E027065DA9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa Signing time: Mon 26 Oct 2026 04:10:36 +0000 ROA not before: Mon 26 Oct 2026 04:10:36 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d2:49:4e:60:3f:73:66:bb:7c:a7:ee:4a:49:d1:e0:27:06:5d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:36 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=34722a9ad988861a583d03182ee0fc17220a6677a5f943b6d60d99b58cedc0cb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:89:54:53:2b:85:61:25:cf:3d:4e:0b:1e: 2c:4d:0a:a6:0b:01:23:e7:be:96:b0:d0:3b:12:0b: ae:53:f6:5d:9c:4a:48:6e:7b:d6:4b:88:d6:df:0e: 13:5a:f5:24:85:bd:8f:b8:ba:fb:74:b4:2d:aa:ed: b3:f9:7f:cd:3c:fb:1d:ea:09:2d:64:15:9a:54:22: 73:cd:df:f5:a3:e6:c4:de:a2:65:9f:89:ee:8e:08: 62:06:98:16:9e:27:81:e0:06:ab:53:f1:29:49:8f: 02:34:f3:bd:e4:30:50:74:fe:6f:aa:df:e1:5a:59: 34:c5:ef:87:8f:d6:18:03:9c:64:d8:36:de:45:de: 78:d6:0c:13:b7:09:92:e4:ed:53:d7:dc:49:c2:ed: 77:32:17:c7:ef:81:da:80:9c:49:c1:35:84:b0:b8: 53:b0:9f:d0:29:37:a5:17:55:bd:c7:7b:b3:66:7b: a4:65:3c:63:42:06:eb:e4:ac:a4:2e:6a:ea:06:46: 88:c5:58:52:7a:5f:84:87:68:66:bd:2f:96:c1:ca: 26:df:4e:05:fa:5c:86:20:be:f5:83:c3:b4:29:c1: 10:b9:5f:6b:07:e9:cf:13:82:01:50:5e:a1:06:a1: 67:b2:c2:07:29:04:c6:7f:9d:e3:ae:73:27:41:6a: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C0:4D:2C:82:9A:D3:DD:65:9A:83:09:E2:E1:58:D3:08:18:D1:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption a4:66:57:80:87:a6:f4:cc:71:6c:bb:f8:52:af:f0:46:cb:0f: f5:70:2f:17:3e:55:9b:71:89:e5:39:c1:87:70:01:7b:02:6e: 8b:ea:63:f6:94:6b:f7:73:85:a3:fd:b6:3d:ab:dd:0a:47:ec: d2:c5:a1:53:10:4e:bb:3e:36:ca:8d:19:d4:c6:7c:c5:3d:c8: b2:20:a6:e0:2f:5b:32:64:38:de:c6:0c:9b:f2:fa:ad:d6:91: 05:ab:78:2a:02:ad:16:86:98:dd:35:f1:c0:4f:eb:53:23:9d: cf:9a:1f:c9:d0:b6:3d:5e:da:c4:db:83:88:62:19:96:76:a5: 42:6e:f8:7e:82:03:0f:4c:cc:ac:80:1d:5f:35:a9:4b:c5:8d: cd:05:54:77:f5:1d:9e:89:7a:5a:f9:b8:12:b7:82:c9:74:b5: 42:a5:e4:28:9c:38:9b:c4:08:e3:5e:08:6d:1a:bb:67:02:ef: 54:a9:57:31:e9:07:39:f4:45:9f:06:c5:31:50:b2:99:ef:8b: 01:4c:a5:1f:86:51:2c:c0:43:2f:5d:a3:b0:ac:1d:5f:e1:88: 12:aa:fb:28:30:b6:0a:03:ad:b7:e7:8c:ce:5c:a6:37:bc:43: 45:89:88:70:9b:b7:d5:4d:eb:75:01:1a:d7:87:16:6e:33:0c: 27:4b:1d:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGdJJTmA/c2a7fKfuSknR4CcGXakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDM2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDcyMmE5YWQ5ODg4NjFhNTgzZDAzMTgyZWUwZmMxNzIy MGE2Njc3YTVmOTQzYjZkNjBkOTliNThjZWRjMGNiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcC4lUUyuFYSXPPU4LHixNCqYLASPnvpaw0DsSC65T9l2c Skhue9ZLiNbfDhNa9SSFvY+4uvt0tC2q7bP5f808+x3qCS1kFZpUInPN3/Wj5sTe omWfie6OCGIGmBaeJ4HgBqtT8SlJjwI0873kMFB0/m+q3+FaWTTF74eP1hgDnGTY Nt5F3njWDBO3CZLk7VPX3EnC7XcyF8fvgdqAnEnBNYSwuFOwn9ApN6UXVb3He7Nm e6RlPGNCBuvkrKQuauoGRojFWFJ6X4SHaGa9L5bByibfTgX6XIYgvvWDw7QpwRC5 X2sH6c8TggFQXqEGoWeywgcpBMZ/neOucydBaoG1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdcBNLIKa091lmoMJ4uFY0wgY0fEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4YTI0NDQyLTU2YzYtNDZkNC05OTIzLWY0ZDViMTdmZDg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBAKRmV4CHpvTMcWy7+FKv8EbL D/VwLxc+VZtxieU5wYdwAXsCbovqY/aUa/dzhaP9tj2r3QpH7NLFoVMQTrs+NsqN GdTGfMU9yLIgpuAvWzJkON7GDJvy+q3WkQWreCoCrRaGmN018cBP61Mjnc+aH8nQ tj1e2sTbg4hiGZZ2pUJu+H6CAw9MzKyAHV81qUvFjc0FVHf1HZ6Jelr5uBK3gsl0 tUKl5CicOJvECONeCG0au2cC71SpVzHpBzn0RZ8GxTFQspnviwFMpR+GUSzAQy9d o7CsHV/hiBKq+ygwtgoDrbfnjM5cpje8Q0WJiHCbt9VN63UBGteHFm4zDCdLHUM= -----END CERTIFICATE-----Generated at Tue Oct 27 06:03:30 2026 by rpki-client