$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa File: 1a6b8fe3-7a24-4908-a73d-425df209068f.roa (raw, json) Hash identifier: zJ0Ziy0qu/xO5/hHjnKIt4Yi9ZuRSnw4EL5sTJpevTw= Subject key identifier: 9F:A9:68:34:7E:9D:C7:E2:ED:F3:79:DC:F9:37:0F:3C:A6:43:3A:8C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4ED51C29BAF5C23FD5899DA6AE36266EBA502373 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa Signing time: Sun 11 Oct 2026 15:10:32 +0000 ROA not before: Sun 11 Oct 2026 15:10:32 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:1c:29:ba:f5:c2:3f:d5:89:9d:a6:ae:36:26:6e:ba:50:23:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:32 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=8b4fd782ca53e8d278a31454d1641d7bc8191875b6ec6f745772b6fd1757585b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:0c:9c:46:90:0f:15:4b:2e:af:66:43:07: 31:1f:77:c6:5e:aa:e3:55:5c:a9:b2:18:dc:0b:09: 95:77:9a:87:8c:d7:89:59:84:5f:5b:0c:d6:14:d3: 31:41:7e:bd:ce:3a:65:67:b1:37:47:17:43:44:a4: 78:f9:26:cf:39:a7:a8:50:36:8a:eb:26:4f:44:63: ce:2a:75:13:4b:9b:5b:aa:80:14:e0:db:88:26:e9: 34:3c:1f:fb:d5:7d:e1:a2:71:b2:e9:dc:c5:36:4b: fd:73:a0:23:7d:50:92:0b:1d:97:9c:36:e9:fb:0d: 78:62:1c:fa:f6:81:f7:f8:bd:d0:78:6f:64:85:52: da:6b:8a:0a:dc:95:9b:03:e7:33:3a:e4:08:45:39: 19:74:41:d5:43:70:94:29:d4:61:00:74:df:f3:88: b2:4d:be:ba:a4:7c:86:b4:37:fb:71:bc:85:f0:e7: a0:0e:5a:2a:d0:54:ac:69:37:53:36:09:67:20:ef: 3b:d8:5e:b0:fc:9a:b9:12:2e:89:00:42:de:ac:78: f3:61:30:50:d2:e0:0a:c1:00:64:e9:9f:5d:5c:2b: 88:f6:15:a4:95:7a:a4:45:3f:1a:9d:a6:28:1d:d3: b5:3e:09:44:7a:c2:c8:ca:1a:83:57:2b:d6:63:09: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:68:34:7E:9D:C7:E2:ED:F3:79:DC:F9:37:0F:3C:A6:43:3A:8C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1a6b8fe3-7a24-4908-a73d-425df209068f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611d::/48 Signature Algorithm: sha256WithRSAEncryption 10:c5:8e:39:c9:2b:d6:f0:fe:3e:86:ba:a3:5b:d9:a9:2e:5a: b4:82:1c:c0:d4:cd:17:e3:b2:c1:73:59:4f:9e:11:31:1a:01: ac:ef:e6:43:35:c2:a7:3b:6a:a2:4e:8e:76:21:c8:69:3f:5c: ad:34:da:e8:dc:2a:0f:6c:f8:e0:19:69:0b:b2:7f:66:0d:ba: 02:7e:19:4e:8c:8f:b7:77:2d:05:91:08:34:c5:46:35:dc:d1: 1f:24:f9:84:6d:d2:c4:9e:1c:de:5e:c7:ea:6c:0e:52:5d:97: 46:9f:84:f1:e2:c3:12:77:76:11:1e:a4:83:4c:6a:93:a5:96: 6d:e1:cb:06:ac:b9:0e:5f:c4:0b:1d:c1:e9:b5:9a:3e:8d:21: 6f:f5:6d:a4:ad:be:46:cb:e8:a4:bb:e5:58:00:57:78:61:f2: 07:30:a6:d1:e0:18:b1:77:7a:7e:39:e4:00:30:ec:bf:0e:07: ca:05:9f:e7:65:b6:ce:02:15:88:65:20:22:48:55:2a:97:20: 9a:51:85:d5:7a:44:39:75:39:17:6c:8f:2d:df:1e:c6:37:af: 71:a2:66:00:9a:d6:ae:02:48:50:4b:a0:fa:7f:df:2e:ba:44: 45:b0:ba:42:fb:0c:4f:bd:d0:c1:cf:f6:59:ab:ca:76:19:43: 2c:bd:e8:98 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTtUcKbr1wj/ViZ2mrjYmbrpQI3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDMyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjRmZDc4MmNhNTNlOGQyNzhhMzE0NTRkMTY0MWQ3YmM4 MTkxODc1YjZlYzZmNzQ1NzcyYjZmZDE3NTc1ODViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGHwycRpAPFUsur2ZDBzEfd8ZequNVXKmyGNwLCZV3moeM 14lZhF9bDNYU0zFBfr3OOmVnsTdHF0NEpHj5Js85p6hQNorrJk9EY84qdRNLm1uq gBTg24gm6TQ8H/vVfeGicbLp3MU2S/1zoCN9UJILHZecNun7DXhiHPr2gff4vdB4 b2SFUtprigrclZsD5zM65AhFORl0QdVDcJQp1GEAdN/ziLJNvrqkfIa0N/txvIXw 56AOWirQVKxpN1M2CWcg7zvYXrD8mrkSLokAQt6sePNhMFDS4ArBAGTpn11cK4j2 FaSVeqRFPxqdpigd07U+CUR6wsjKGoNXK9ZjCWwHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn6loNH6dx+Lt83nc+TcPPKZDOowwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFhNmI4ZmUzLTdhMjQtNDkwOC1hNzNkLTQyNWRmMjA5MDY4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR0wDQYJKoZIhvcNAQELBQADggEBABDFjjnJK9bw/j6GuqNb2aku WrSCHMDUzRfjssFzWU+eETEaAazv5kM1wqc7aqJOjnYhyGk/XK002ujcKg9s+OAZ aQuyf2YNugJ+GU6Mj7d3LQWRCDTFRjXc0R8k+YRt0sSeHN5ex+psDlJdl0afhPHi wxJ3dhEepINMapOllm3hywasuQ5fxAsdwem1mj6NIW/1baStvkbL6KS75VgAV3hh 8gcwptHgGLF3en455AAw7L8OB8oFn+dlts4CFYhlICJIVSqXIJpRhdV6RDl1ORds jy3fHsY3r3GiZgCa1q4CSFBLoPp/3y66REWwukL7DE+90MHP9lmrynYZQyy96Jg= -----END CERTIFICATE-----Generated at Tue Oct 13 12:47:49 2026 by rpki-client