$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa File: a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa (raw, json) Hash identifier: B4dvjXb9vZ9nAgRD4OD0busSxNG52FXv+vApd9HYHqA= Subject key identifier: B2:25:C0:FC:1A:CA:F3:B7:89:E5:B9:24:82:47:2F:01:6A:99:32:E7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0B3FD9E7FB1A077A1EBE6FE49F14D2B6F47D83A6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa Signing time: Tue 27 Oct 2026 00:50:23 +0000 ROA not before: Tue 27 Oct 2026 00:50:23 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3f:d9:e7:fb:1a:07:7a:1e:be:6f:e4:9f:14:d2:b6:f4:7d:83:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:23 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=de66abf8f37a5b50ad03a76a41b1a9a73d4802e25a9132108ae2289367024384, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:16:1b:9e:33:35:1a:c9:8e:6b:44:ad:bd: b4:d2:d6:bb:53:5e:e0:0e:dd:ae:8c:99:45:f4:9a: 21:46:7c:8f:58:72:a6:52:3b:40:f8:4c:c5:c3:93: c6:72:93:b8:46:7f:c2:e4:0a:d3:22:6c:2e:5b:30: 5d:2c:a0:b4:2c:50:58:f7:10:b5:99:bc:89:71:84: 8b:65:a2:74:08:48:70:4b:99:df:cc:79:e2:26:27: 5f:e3:6b:ae:0d:a7:4a:84:be:cf:df:7d:a8:b8:07: 30:39:99:d3:27:df:8c:56:8e:80:d1:e5:86:c7:06: f7:06:4f:ae:cd:f9:6e:e1:76:65:78:22:a9:e3:c6: b2:ae:86:d2:88:a3:76:85:19:3b:91:6d:08:68:2c: 39:ae:da:db:0d:95:5e:eb:c9:2c:85:52:8f:5e:66: e5:f4:47:b1:92:b9:34:44:7f:fb:2d:8c:18:54:5d: b3:37:81:97:4a:1b:b8:51:8d:f3:83:3a:ec:b2:20: e1:c7:61:d4:44:57:24:b7:16:94:de:18:f0:d5:11: 7a:85:4b:c7:6e:bc:c1:00:ec:bb:7e:a4:4c:c7:bd: b1:0f:f1:c6:ff:22:6e:b3:0f:72:5c:f7:8f:96:d1: be:c0:1b:08:e5:52:c5:35:c0:7c:fc:67:4a:e6:00: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:25:C0:FC:1A:CA:F3:B7:89:E5:B9:24:82:47:2F:01:6A:99:32:E7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10b::/48 Signature Algorithm: sha256WithRSAEncryption 45:39:25:da:e1:0b:10:4f:b4:9b:3b:20:c6:9c:97:63:a9:1d: 38:a7:33:82:58:f8:e1:62:d8:03:5c:a4:a1:09:2b:60:27:a4: f6:a6:f8:33:62:bf:f0:b9:5c:a4:c5:21:ad:03:8d:62:14:21: c7:90:70:c1:f2:fd:65:3b:d4:28:3d:c3:b5:05:cd:d9:5f:6c: 32:1e:b1:1b:3c:b8:83:69:be:83:0c:ee:d3:9b:4b:7e:0b:9d: 55:b1:2b:97:01:80:dd:b1:eb:d5:48:85:3a:4b:22:b8:e3:50: 18:05:ac:6d:fc:07:ba:5e:8c:bd:62:d5:e0:10:33:d3:55:c8: 23:af:c2:f0:82:09:90:3e:ff:b4:28:fb:1f:4b:6f:a9:99:37: 3d:43:6e:f5:0b:e1:e9:86:d3:cf:32:c6:d1:5c:80:da:f6:89: a3:7f:5b:22:b8:53:05:4c:99:89:65:ed:49:08:95:06:ea:85: 96:68:1e:48:3a:cf:e4:6c:be:a8:52:3c:45:61:f3:ad:1a:7b: 6d:76:15:c8:7e:91:a4:86:93:2d:93:e9:c8:22:5a:3c:f9:d7: 29:ee:78:93:9a:2e:f1:c0:88:0c:75:4a:b3:7f:2e:5b:f4:da: 5f:15:40:f3:81:a9:e4:77:e2:a8:e3:15:47:2d:14:af:52:e3: e6:de:2a:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCz/Z5/saB3oevm/knxTStvR9g6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDIzWhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTY2YWJmOGYzN2E1YjUwYWQwM2E3NmE0MWIxYTlhNzNk NDgwMmUyNWE5MTMyMTA4YWUyMjg5MzY3MDI0Mzg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4yhYbnjM1GsmOa0StvbTS1rtTXuAO3a6MmUX0miFGfI9Y cqZSO0D4TMXDk8Zyk7hGf8LkCtMibC5bMF0soLQsUFj3ELWZvIlxhItlonQISHBL md/MeeImJ1/ja64Np0qEvs/ffai4BzA5mdMn34xWjoDR5YbHBvcGT67N+W7hdmV4 IqnjxrKuhtKIo3aFGTuRbQhoLDmu2tsNlV7rySyFUo9eZuX0R7GSuTREf/stjBhU XbM3gZdKG7hRjfODOuyyIOHHYdREVyS3FpTeGPDVEXqFS8duvMEA7Lt+pEzHvbEP 8cb/Im6zD3Jc94+W0b7AGwjlUsU1wHz8Z0rmABiXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsiXA/BrK87eJ5bkkgkcvAWqZMucwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzZTEwYjQwLWNhM2ItNDYzMS05YzM5LWUzZGVlNmEzMWQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QswDQYJKoZIhvcNAQELBQADggEBAEU5JdrhCxBPtJs7IMacl2Op HTinM4JY+OFi2ANcpKEJK2AnpPam+DNiv/C5XKTFIa0DjWIUIceQcMHy/WU71Cg9 w7UFzdlfbDIesRs8uINpvoMM7tObS34LnVWxK5cBgN2x69VIhTpLIrjjUBgFrG38 B7pejL1i1eAQM9NVyCOvwvCCCZA+/7Qo+x9Lb6mZNz1DbvUL4emG088yxtFcgNr2 iaN/WyK4UwVMmYll7UkIlQbqhZZoHkg6z+RsvqhSPEVh860ae212Fch+kaSGky2T 6cgiWjz51ynueJOaLvHAiAx1SrN/Llv02l8VQPOBqeR34qjjFUctFK9S4+beKvg= -----END CERTIFICATE-----Generated at Wed Nov 11 14:33:44 2026 by rpki-client