$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1469e033-e996-40c6-8a84-d1b13e2e9622.roa File: 1469e033-e996-40c6-8a84-d1b13e2e9622.roa (raw, json) Hash identifier: VdaRgqcAd6ycRj4NIepxxqjdzqapvqzRNA8yjDhVmDo= Subject key identifier: AC:DD:8E:D1:FA:AC:4C:23:C6:D1:A8:4C:C8:67:6C:B7:E0:FD:8F:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4EBC26A755FB13A994DC1A2C804E6581621540B7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1469e033-e996-40c6-8a84-d1b13e2e9622.roa Signing time: Wed 07 Oct 2026 21:43:13 +0000 ROA not before: Wed 07 Oct 2026 21:43:13 +0000 ROA not after: Tue 05 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7409::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bc:26:a7:55:fb:13:a9:94:dc:1a:2c:80:4e:65:81:62:15:40:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 7 21:43:13 2026 GMT Not After : Jan 5 23:59:59 2027 GMT Subject: serialNumber=d60543abb1a83e40c4518a9a15e2dc1c1feb9d719b502c24c181c51c5332d582, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:23:43:f2:5a:f7:95:6c:5a:71:66:c6:2f: e9:7e:10:79:54:17:09:10:3d:a2:45:75:a6:f4:75: 66:b8:3b:4e:8e:c6:e9:0a:f7:c1:21:6e:68:e6:80: 1d:79:af:19:89:fb:3c:80:df:5e:18:c3:b8:de:0d: 2e:fa:32:27:e5:d8:ac:3b:85:11:f6:00:c3:89:cf: d8:11:76:bd:5d:8f:8f:da:6d:61:82:3b:ea:bd:73: 66:71:98:39:87:93:ee:08:6a:b2:0b:18:f1:60:f9: 62:19:d3:61:e9:26:63:70:78:25:90:a3:ad:d6:d7: f8:b7:50:33:0a:b1:88:c5:9d:bc:82:c2:40:7b:4f: 96:c4:43:ac:f1:4c:8f:9c:1f:8d:a6:5d:84:79:b1: 4b:46:f9:7a:5c:5b:b1:78:39:eb:91:2b:11:44:81: f1:14:7a:17:b9:8e:7d:cb:f4:64:6e:eb:02:27:91: a9:45:1a:1c:57:52:5c:00:52:34:b4:bc:20:71:68: a8:15:6a:71:f4:36:06:03:2c:b4:9f:fa:eb:28:57: 4e:72:3d:0d:b1:48:0c:7c:de:52:f4:81:6d:3e:32: 21:69:e8:31:8f:06:38:ea:c6:51:a3:0b:4c:79:68: d4:5b:d3:ab:9a:2f:b6:d4:ab:c4:9e:a5:75:79:fc: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DD:8E:D1:FA:AC:4C:23:C6:D1:A8:4C:C8:67:6C:B7:E0:FD:8F:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1469e033-e996-40c6-8a84-d1b13e2e9622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7409::/48 Signature Algorithm: sha256WithRSAEncryption 8c:4f:85:0f:f4:89:2f:c6:5c:ad:7a:e8:4a:3c:96:a0:18:e0: 3f:88:31:3e:9c:b4:19:cf:b2:a1:78:8d:8a:1c:52:96:72:53: 3a:85:07:48:53:f7:05:ef:da:41:12:c9:66:a1:7e:a0:31:86: 01:9f:5c:b2:d3:84:75:5d:0c:53:c7:4c:69:bc:88:83:95:77: db:0c:44:e2:a6:58:57:35:ce:b6:3a:0d:64:7e:81:c3:78:63: 11:95:ba:eb:92:e5:1e:64:79:55:67:05:32:76:d6:0c:cc:c9: c1:c8:17:3a:40:a3:6f:e3:58:a8:46:d8:59:80:6d:1e:60:9b: 21:ed:b1:15:59:a5:9b:6f:95:23:3e:09:2e:2a:7c:91:1a:8f: ab:d3:86:db:4c:ea:de:7e:5e:12:2a:54:d7:03:6e:0f:c2:9d: 82:83:35:ff:8e:ef:a3:47:d9:8f:e2:04:9d:f9:e6:f0:44:73: c2:2e:0f:c4:36:c9:a0:46:fa:e0:ed:5b:28:77:11:4b:40:a0: 9c:3d:28:11:37:75:e5:a0:cc:d1:d9:2e:b5:7b:52:15:7d:4a: 6f:e3:28:55:b6:ba:9b:18:1e:ab:fe:3b:3a:0f:1c:88:d1:01: 2c:a2:c7:66:4e:61:24:df:9b:75:96:f2:16:64:89:a0:af:02: a8:27:d8:33 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTrwmp1X7E6mU3BosgE5lgWIVQLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA3MjE0MzEzWhcNMjcwMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjA1NDNhYmIxYTgzZTQwYzQ1MThhOWExNWUyZGMxYzFm ZWI5ZDcxOWI1MDJjMjRjMTgxYzUxYzUzMzJkNTgyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+dyND8lr3lWxacWbGL+l+EHlUFwkQPaJFdab0dWa4O06O xukK98EhbmjmgB15rxmJ+zyA314Yw7jeDS76Mifl2Kw7hRH2AMOJz9gRdr1dj4/a bWGCO+q9c2ZxmDmHk+4IarILGPFg+WIZ02HpJmNweCWQo63W1/i3UDMKsYjFnbyC wkB7T5bEQ6zxTI+cH42mXYR5sUtG+XpcW7F4OeuRKxFEgfEUehe5jn3L9GRu6wIn kalFGhxXUlwAUjS0vCBxaKgVanH0NgYDLLSf+usoV05yPQ2xSAx83lL0gW0+MiFp 6DGPBjjqxlGjC0x5aNRb06uaL7bUq8SepXV5/LRdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrN2O0fqsTCPG0ahMyGdst+D9j5swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0NjllMDMzLWU5OTYtNDBjNi04YTg0LWQxYjEzZTJlOTYyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAkwDQYJKoZIhvcNAQELBQADggEBAIxPhQ/0iS/GXK166Eo8lqAY 4D+IMT6ctBnPsqF4jYocUpZyUzqFB0hT9wXv2kESyWahfqAxhgGfXLLThHVdDFPH TGm8iIOVd9sMROKmWFc1zrY6DWR+gcN4YxGVuuuS5R5keVVnBTJ21gzMycHIFzpA o2/jWKhG2FmAbR5gmyHtsRVZpZtvlSM+CS4qfJEaj6vThttM6t5+XhIqVNcDbg/C nYKDNf+O76NH2Y/iBJ355vBEc8IuD8Q2yaBG+uDtWyh3EUtAoJw9KBE3deWgzNHZ LrV7UhV9Sm/jKFW2upsYHqv+OzoPHIjRASyix2ZOYSTfm3WW8hZkiaCvAqgn2DM= -----END CERTIFICATE-----Generated at Sun Oct 11 09:21:12 2026 by rpki-client