$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa File: 1e601690-d98c-4d0d-8f50-2f457decb102.roa (raw, json) Hash identifier: DOgOYYz3QlFd3ELbvBbItNuljKCoJ3uywu2ZHU1Sb7M= Subject key identifier: 1C:78:B6:FA:2D:78:4D:FE:C0:15:81:82:58:20:15:35:87:FC:14:53 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 748FA8015321E92CD1330B194F4A89409C363B83 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa Signing time: Mon 26 Oct 2026 04:20:52 +0000 ROA not before: Mon 26 Oct 2026 04:20:52 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8f:a8:01:53:21:e9:2c:d1:33:0b:19:4f:4a:89:40:9c:36:3b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:52 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=89fedbfb5fb61239cf95a71caa4adca6d0000c8575ca998e06f1107a7325b03d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:bf:3f:53:95:a3:15:b2:64:29:cf:78:32: 2a:ca:25:b0:5d:95:79:ed:dd:c9:f5:0f:90:0a:01: f4:ed:09:f9:85:b2:6d:9a:b4:c9:05:d6:85:62:5a: e3:a4:31:f9:30:18:82:19:b9:a3:24:7c:75:a8:d5: b1:b0:e8:b6:26:3f:a3:58:4f:94:c8:37:4c:c1:44: 10:90:92:ec:73:ff:b1:ae:6c:c6:78:a5:93:af:79: 11:c5:10:0f:ae:09:58:f1:07:18:fe:9f:57:04:70: be:6b:46:a3:ef:2f:26:f7:e7:12:84:0a:eb:9e:9e: 6c:68:97:47:b0:1e:77:64:bf:05:4d:20:2e:dc:e3: 90:0a:41:98:dd:6e:e9:76:94:09:86:c0:43:31:e3: 77:74:fb:ea:0b:54:1e:fa:71:7e:9d:0e:22:2d:0e: 5e:df:42:23:a9:9c:60:c0:3a:bd:a3:40:42:17:52: 57:29:b8:2d:c5:10:78:90:e7:3f:38:6e:88:05:7b: 89:d7:a8:24:1c:71:1e:0e:fd:ec:d8:64:14:0a:8f: 84:c0:e9:b3:f8:6e:4a:58:f5:90:e9:af:50:e1:d5: 61:26:f1:95:ad:66:21:cc:94:e7:28:3e:e5:8c:10: ff:a2:06:63:b6:61:01:f5:13:4b:a7:f3:5c:95:6e: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:78:B6:FA:2D:78:4D:FE:C0:15:81:82:58:20:15:35:87:FC:14:53 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 0c:58:93:97:0f:a9:c6:dc:ca:de:56:dd:ec:5c:72:e3:36:e4: ba:c2:3c:3d:f3:a3:cb:6e:d2:2f:fe:a1:e2:da:46:a6:a7:54: b8:d6:67:62:48:0a:41:0a:1a:f5:dc:d9:db:eb:90:13:6b:5f: 5f:01:8a:4b:e7:2f:03:90:73:34:26:ed:c5:90:9d:25:02:8d: 7b:14:c7:e5:6c:9b:72:08:e8:dd:00:dd:4a:7d:fb:7f:f9:0c: 2b:64:98:9e:0d:23:2e:d4:8a:6e:f4:fe:b4:9a:4d:fa:42:63: df:54:bf:5f:2f:c5:af:82:04:94:d1:43:30:c6:d6:9e:53:fb: 2a:83:98:07:3c:ca:a7:f3:ef:e1:a3:4f:23:42:1f:11:39:e6: d6:be:80:ed:08:85:31:71:25:e2:06:98:b6:9b:49:4f:1e:08: 3f:e6:65:90:49:8c:72:09:19:8f:be:78:d3:57:a1:5b:73:0b: 96:98:b3:48:7a:db:14:bf:0f:ce:9c:7a:c5:2b:09:24:93:44: 64:30:a7:55:d4:f7:41:f3:7e:ba:75:f2:bf:66:8d:12:66:ea: 92:4d:48:c4:3f:dd:a5:fc:a7:ec:08:08:7b:e5:2c:c4:fa:d3: 90:7c:ac:b8:e5:a4:7f:7b:86:99:9a:d8:a1:fc:fb:70:51:c0: 40:ba:85:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdI+oAVMh6SzRMwsZT0qJQJw2O4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDUyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWZlZGJmYjVmYjYxMjM5Y2Y5NWE3MWNhYTRhZGNhNmQw MDAwYzg1NzVjYTk5OGUwNmYxMTA3YTczMjViMDNkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsRb8/U5WjFbJkKc94MirKJbBdlXnt3cn1D5AKAfTtCfmF sm2atMkF1oViWuOkMfkwGIIZuaMkfHWo1bGw6LYmP6NYT5TIN0zBRBCQkuxz/7Gu bMZ4pZOveRHFEA+uCVjxBxj+n1cEcL5rRqPvLyb35xKECuuenmxol0ewHndkvwVN IC7c45AKQZjdbul2lAmGwEMx43d0++oLVB76cX6dDiItDl7fQiOpnGDAOr2jQEIX UlcpuC3FEHiQ5z84bogFe4nXqCQccR4O/ezYZBQKj4TA6bP4bkpY9ZDpr1Dh1WEm 8ZWtZiHMlOcoPuWMEP+iBmO2YQH1E0un81yVbl5JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHHi2+i14Tf7AFYGCWCAVNYf8FFMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlNjAxNjkwLWQ5OGMtNGQwZC04ZjUwLTJmNDU3ZGVjYjEwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAAxYk5cPqcbcyt5W3exccuM2 5LrCPD3zo8tu0i/+oeLaRqanVLjWZ2JICkEKGvXc2dvrkBNrX18BikvnLwOQczQm 7cWQnSUCjXsUx+Vsm3II6N0A3Up9+3/5DCtkmJ4NIy7Uim70/rSaTfpCY99Uv18v xa+CBJTRQzDG1p5T+yqDmAc8yqfz7+GjTyNCHxE55ta+gO0IhTFxJeIGmLabSU8e CD/mZZBJjHIJGY++eNNXoVtzC5aYs0h62xS/D86cesUrCSSTRGQwp1XU90Hzfrp1 8r9mjRJm6pJNSMQ/3aX8p+wICHvlLMT605B8rLjlpH97hpma2KH8+3BRwEC6hfM= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:41 2026 by rpki-client