$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa File: 87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json) Hash identifier: TLJwVr67P2PUsfIrOe5Snjirx7n6D0NCE51W1NgrTRY= Subject key identifier: 5D:2C:3C:20:9F:61:FE:63:AA:B6:B9:C9:AA:71:5A:0E:90:62:28:AE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 46B2E9E242BB6C49E3F1479DFD81AD917E121B7E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa Signing time: Mon 26 Oct 2026 04:20:43 +0000 ROA not before: Mon 26 Oct 2026 04:20:43 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b2:e9:e2:42:bb:6c:49:e3:f1:47:9d:fd:81:ad:91:7e:12:1b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:43 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=11a9b93f705b228929507e94743c2f28145d16f479bda35a47b4c5a064b9fc06, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:9b:dd:87:0b:40:c8:c1:c1:3c:f1:b0:b9: ab:47:b1:35:d4:f6:ca:2d:70:a2:af:78:91:8c:0b: 3e:54:ab:b3:63:3e:92:ee:8b:7a:75:51:21:f0:1d: 04:c9:0b:55:5b:a8:ef:32:86:43:6f:df:04:3b:58: 0f:ff:1d:1c:b7:66:6f:d6:83:bc:3e:0a:af:be:9e: 8b:ab:7c:e4:fa:17:f1:22:1c:50:ed:fb:52:72:76: ee:56:ca:a7:5e:18:68:c2:78:72:7b:24:2f:5c:22: b4:03:09:18:5b:ba:e1:f9:96:21:24:c7:94:b0:d1: 85:5d:5d:04:fc:02:32:3f:36:46:43:1e:4b:69:c5: 2c:81:d2:06:8f:bf:5c:07:65:1b:31:81:0e:ea:a2: ff:03:9b:2a:f3:e6:f6:23:71:dd:3d:ab:66:05:a0: e4:4b:41:ac:ac:9e:b2:17:15:92:91:19:48:86:fe: 10:7e:28:a8:e8:d7:c1:dd:c2:99:be:b1:34:6a:3f: 63:a6:95:b3:99:b0:9b:ee:e7:cc:15:8f:28:c3:c5: b9:89:fc:4e:03:78:ac:0f:9e:c3:2b:0c:3c:e0:f0: a8:8a:de:9c:85:62:31:3c:98:f6:6f:3a:4b:86:92: 3c:d4:53:2d:55:44:9a:88:1d:4e:75:86:8f:e1:07: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2C:3C:20:9F:61:FE:63:AA:B6:B9:C9:AA:71:5A:0E:90:62:28:AE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/42 Signature Algorithm: sha256WithRSAEncryption 67:b6:81:c7:c7:7c:3e:4a:78:24:8a:4a:34:00:ab:1f:d8:54: ba:b2:a3:9e:01:da:cd:9f:73:9d:7e:e5:d8:ae:5c:fa:90:3a: db:5b:51:2f:12:6a:aa:23:c9:87:88:8a:1e:c1:71:4b:a6:20: 2c:66:cb:59:93:4d:a6:37:f0:9f:d9:fe:50:83:c1:39:1f:1a: 68:53:1b:98:83:6b:8f:cf:28:83:cc:c4:83:56:2b:9c:d0:57: 3b:64:df:6f:56:39:b9:a5:73:db:25:a2:5f:c7:69:a2:bc:ff: 8d:d8:26:fa:5c:d6:77:a6:cc:be:c2:2c:f5:ad:49:00:93:d1: 94:d2:53:78:2f:1f:81:18:66:24:67:55:1b:1b:14:0a:0c:75: 50:ef:9e:b9:61:b8:36:ef:68:7d:81:93:79:2e:a6:49:67:7b: 7a:cb:1a:43:80:35:47:b4:2c:0b:90:35:09:a2:d5:72:10:7e: 29:22:ef:13:c3:9e:7b:39:4d:a7:2f:05:00:89:35:22:83:5d: 27:45:59:48:4c:93:dc:d2:fa:f1:29:d4:9b:f1:f2:d8:ba:00: 6e:ae:df:4f:e9:db:f6:c7:b9:0b:ff:3e:07:3b:bf:98:90:6e: fe:8b:0c:82:d4:9a:7b:07:48:e2:00:fc:c5:9a:73:36:f9:1c: 8d:46:2a:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURrLp4kK7bEnj8Ued/YGtkX4SG34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDQzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWE5YjkzZjcwNWIyMjg5Mjk1MDdlOTQ3NDNjMmYyODE0 NWQxNmY0NzliZGEzNWE0N2I0YzVhMDY0YjlmYzA2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb7pvdhwtAyMHBPPGwuatHsTXU9sotcKKveJGMCz5Uq7Nj PpLui3p1USHwHQTJC1VbqO8yhkNv3wQ7WA//HRy3Zm/Wg7w+Cq++nourfOT6F/Ei HFDt+1Jydu5WyqdeGGjCeHJ7JC9cIrQDCRhbuuH5liEkx5Sw0YVdXQT8AjI/NkZD HktpxSyB0gaPv1wHZRsxgQ7qov8Dmyrz5vYjcd09q2YFoORLQaysnrIXFZKRGUiG /hB+KKjo18Hdwpm+sTRqP2OmlbOZsJvu58wVjyjDxbmJ/E4DeKwPnsMrDDzg8KiK 3pyFYjE8mPZvOkuGkjzUUy1VRJqIHU51ho/hB0LXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXSw8IJ9h/mOqtrnJqnFaDpBiKK4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3YmFmYjBkLTdjZWMtNDMzMS04YTA5LTRhNGQ1NmFiZjdkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBAGe2gcfHfD5KeCSKSjQAqx/Y VLqyo54B2s2fc51+5diuXPqQOttbUS8SaqojyYeIih7BcUumICxmy1mTTaY38J/Z /lCDwTkfGmhTG5iDa4/PKIPMxINWK5zQVztk329WObmlc9slol/HaaK8/43YJvpc 1nemzL7CLPWtSQCT0ZTSU3gvH4EYZiRnVRsbFAoMdVDvnrlhuDbvaH2Bk3kupkln e3rLGkOANUe0LAuQNQmi1XIQfiki7xPDnns5TacvBQCJNSKDXSdFWUhMk9zS+vEp 1Jvx8ti6AG6u30/p2/bHuQv/Pgc7v5iQbv6LDILUmnsHSOIA/MWaczb5HI1GKos= -----END CERTIFICATE-----Generated at Thu Nov 12 21:15:50 2026 by rpki-client