$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa File: 1e46b344-1c35-4502-912b-8ec7b80005d8.roa (raw, json) Hash identifier: zYi8q7KOrN0IeY8bTkl8bK6xaMth9baflqygJ4sGLZg= Subject key identifier: 1C:7A:B9:4C:00:93:8F:6A:6D:79:03:F8:3F:AB:10:1E:50:BA:7F:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B602FBD37A20DD660D4FB6E6384E3ADA4493AD3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa Signing time: Sun 11 Oct 2026 15:10:26 +0000 ROA not before: Sun 11 Oct 2026 15:10:26 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:60:2f:bd:37:a2:0d:d6:60:d4:fb:6e:63:84:e3:ad:a4:49:3a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:26 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=948f626cc83ce4d6237067490dcf9a8fe95f23d15771df47d7e5cfb3682f7a6b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:5e:e5:18:e9:67:b0:9a:a5:d1:79:b7:0d: b5:bc:a3:c3:0e:51:b2:d2:fd:02:2a:ee:5a:e1:cc: ed:2a:2d:9f:cd:e2:dc:0c:9a:a0:56:5b:d5:0e:5d: 57:db:89:64:c2:13:26:ce:de:ad:78:41:b9:8b:a9: 38:24:72:c6:f4:90:e2:6d:e9:de:b3:93:d1:e5:dd: 43:48:06:4b:06:4a:19:84:ac:18:48:0c:74:b6:83: ea:24:79:9a:af:73:92:97:4b:d8:a8:73:f2:7a:25: e5:dd:7e:0a:39:5d:8b:46:a7:ea:7e:32:43:c1:59: 90:4f:cf:74:3b:b2:4e:5d:aa:a9:19:e8:91:58:10: c8:75:5f:0c:12:ee:05:7e:6b:fa:c8:a7:5a:6c:24: 2d:d7:eb:52:99:51:39:76:d3:d4:9b:98:b4:48:30: 05:4f:5f:dd:c7:7a:37:0e:68:17:3b:62:66:a4:fd: ef:60:a1:bd:d0:37:59:ee:6a:5f:38:98:e9:3a:42: 55:52:44:9c:4b:40:3e:8f:1f:a4:59:af:df:92:0c: 9e:5c:1e:92:6d:cf:82:19:15:ac:5a:f0:c4:bc:87: db:eb:78:5e:1a:66:b1:0b:92:3c:d0:98:60:4a:40: 4a:e1:8d:89:db:8d:31:23:c8:60:8f:3c:b0:9e:48: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7A:B9:4C:00:93:8F:6A:6D:79:03:F8:3F:AB:10:1E:50:BA:7F:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610f::/48 Signature Algorithm: sha256WithRSAEncryption 2e:b1:3d:fd:d7:bf:eb:47:cb:51:da:51:14:eb:88:27:2d:11: 8c:d2:67:82:f4:75:6d:fc:d6:d2:7e:89:e8:61:7d:d8:ed:dd: 26:74:45:8f:64:c4:a8:f1:d8:2e:09:d9:45:3d:39:8f:67:50: de:e8:07:bd:f3:cb:14:54:c6:16:55:b4:42:09:77:32:74:35: 5a:97:97:6e:44:0a:a1:8c:0a:30:54:8b:08:cf:bf:e7:27:36: f6:be:86:53:4b:1c:84:df:ac:e3:ae:98:31:c5:47:0a:63:93: c2:20:42:dd:3a:31:cc:0d:49:e4:56:a2:53:76:57:64:cb:1e: 2a:98:a5:b1:fa:37:5b:ad:ab:a4:30:32:00:3f:04:c3:0b:39: 98:5c:03:a6:04:6f:32:19:7b:95:6e:46:70:ed:5e:2c:04:d0: 57:5e:9d:26:94:2d:2a:cf:c4:48:ac:d2:6a:a8:ac:7d:4a:a8: c9:c9:ee:16:7d:df:ba:3f:e5:db:e4:aa:29:90:09:8e:81:14: 27:90:c6:03:4a:1d:d0:e3:ec:b7:07:81:72:b3:c9:eb:9a:9d: 9e:bb:9b:c5:80:1d:f9:ab:4d:7a:d4:aa:58:17:33:97:1c:22: 66:53:61:f1:79:ec:bf:3c:07:bb:b6:d6:9b:20:a7:9b:fc:b0: 9f:39:6a:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG2AvvTeiDdZg1PtuY4TjraRJOtMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDI2WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDhmNjI2Y2M4M2NlNGQ2MjM3MDY3NDkwZGNmOWE4ZmU5 NWYyM2QxNTc3MWRmNDdkN2U1Y2ZiMzY4MmY3YTZiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDml7lGOlnsJql0Xm3DbW8o8MOUbLS/QIq7lrhzO0qLZ/N 4twMmqBWW9UOXVfbiWTCEybO3q14QbmLqTgkcsb0kOJt6d6zk9Hl3UNIBksGShmE rBhIDHS2g+okeZqvc5KXS9ioc/J6JeXdfgo5XYtGp+p+MkPBWZBPz3Q7sk5dqqkZ 6JFYEMh1XwwS7gV+a/rIp1psJC3X61KZUTl209SbmLRIMAVPX93HejcOaBc7Ymak /e9gob3QN1nual84mOk6QlVSRJxLQD6PH6RZr9+SDJ5cHpJtz4IZFaxa8MS8h9vr eF4aZrELkjzQmGBKQErhjYnbjTEjyGCPPLCeSGk5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHHq5TACTj2pteQP4P6sQHlC6f+IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlNDZiMzQ0LTFjMzUtNDUwMi05MTJiLThlYzdiODAwMDVkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ8wDQYJKoZIhvcNAQELBQADggEBAC6xPf3Xv+tHy1HaURTriCct EYzSZ4L0dW381tJ+iehhfdjt3SZ0RY9kxKjx2C4J2UU9OY9nUN7oB73zyxRUxhZV tEIJdzJ0NVqXl25ECqGMCjBUiwjPv+cnNva+hlNLHITfrOOumDHFRwpjk8IgQt06 McwNSeRWolN2V2TLHiqYpbH6N1utq6QwMgA/BMMLOZhcA6YEbzIZe5VuRnDtXiwE 0FdenSaULSrPxEis0mqorH1KqMnJ7hZ937o/5dvkqimQCY6BFCeQxgNKHdDj7LcH gXKzyeuanZ67m8WAHfmrTXrUqlgXM5ccImZTYfF57L88B7u21psgp5v8sJ85auY= -----END CERTIFICATE-----Generated at Tue Oct 27 06:01:46 2026 by rpki-client