$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1d1c516-e440-4d64-a47b-a654df5e192f.roa File: a1d1c516-e440-4d64-a47b-a654df5e192f.roa (raw, json) Hash identifier: tbEShV8MYOwsqSAAGdYVOXni0kbajnqwv++WNq9orUw= Subject key identifier: DD:E0:C3:14:A6:51:11:43:BC:64:95:85:1A:69:4B:23:68:A5:69:04 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 671D2210132F9940C480A9AA9DDB6CA22183FA3E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1d1c516-e440-4d64-a47b-a654df5e192f.roa Signing time: Fri 13 Nov 2026 21:34:17 +0000 ROA not before: Fri 13 Nov 2026 21:34:17 +0000 ROA not after: Thu 11 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:431c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1d:22:10:13:2f:99:40:c4:80:a9:aa:9d:db:6c:a2:21:83:fa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 13 21:34:17 2026 GMT Not After : Feb 11 23:59:59 2027 GMT Subject: serialNumber=931acecb1e01bdc3c7bd25aaa9baf29f2c142cfde486d8949f87a7c5929a3ff9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:57:e8:67:4e:9f:c9:27:d4:88:86:af:7e:e0: d3:e6:3d:40:99:03:cd:60:23:02:fd:46:01:63:f5: 89:dc:57:4c:d1:3e:cd:cc:2b:a6:0b:32:a8:ef:c6: 17:ff:ac:86:6b:26:2f:f5:ca:78:be:a9:0e:8f:8f: fa:fa:23:3a:d1:3b:28:23:41:94:5a:83:bb:7f:b0: fd:eb:7d:f2:34:33:a2:c8:f6:a4:4c:84:02:94:68: 76:40:65:5f:2d:04:a2:b1:9c:84:a2:d0:2b:ef:7f: 63:b0:87:5d:01:02:60:fd:6a:c3:2a:4c:ab:1f:26: 95:a3:4a:ce:ff:72:1d:0d:16:e0:68:d2:bc:f1:25: eb:1a:74:2e:d3:3c:f6:47:2b:b6:ec:d1:94:7b:52: 99:54:b1:9e:fd:5f:0e:4f:22:7a:e9:04:00:ca:dc: 8a:59:47:d4:fd:c8:d0:fd:d3:24:94:e6:91:3e:29: 36:86:6b:1d:fb:e6:72:a6:df:ef:4d:60:1d:c4:9d: 5b:cd:55:1c:45:09:b3:f4:84:e7:f5:d4:84:f0:a6: 22:cd:9d:87:1f:b6:cb:60:b5:ba:88:88:5c:24:bd: 4a:c3:f0:29:b8:ed:07:5f:f8:56:30:95:8b:25:f5: 22:f1:88:d6:c1:4c:bc:6a:8f:26:66:e6:48:d8:db: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E0:C3:14:A6:51:11:43:BC:64:95:85:1A:69:4B:23:68:A5:69:04 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1d1c516-e440-4d64-a47b-a654df5e192f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:431c::/46 Signature Algorithm: sha256WithRSAEncryption a0:d1:ed:5d:19:c3:31:6f:c3:88:c0:27:3a:1b:49:d7:e7:d4: 5b:aa:29:5f:ae:3e:bf:f2:ea:d5:4f:d6:94:dd:ed:ab:8f:3e: 8a:98:5c:5a:93:98:25:b1:25:17:c5:a1:6d:fc:17:41:e7:d3: cd:b5:d5:1c:84:a1:43:c8:95:b7:73:00:87:ef:3a:ab:21:1f: c7:cb:4d:35:5e:b8:bf:b8:2b:6f:71:a6:cd:bb:4e:1a:58:cd: 27:b6:74:e0:16:cf:5e:8d:1b:97:1a:a1:57:72:99:a4:5d:fd: 76:06:0b:20:94:3f:ab:1d:c8:a8:69:28:a7:82:e4:df:ed:b9: fd:63:3e:34:62:28:ea:99:84:77:88:13:29:80:12:7f:41:93: f8:3f:ee:74:64:8d:de:3e:ce:c4:06:c1:4d:09:1b:ba:26:3e: 87:3a:8d:57:90:63:0f:6b:a9:20:20:0c:c8:bf:58:c8:2e:4b: 2b:63:d7:84:0d:5d:01:8f:99:7a:c9:c3:4c:b9:99:26:c7:bd: aa:86:a2:2c:84:82:b9:d4:52:94:e8:d6:df:fa:f5:d0:a5:b2: 20:c2:b8:94:9b:0a:54:37:b9:62:b3:dd:73:9c:3e:a4:fd:ba: 28:1d:7e:e3:52:a0:0f:c1:69:64:d2:3d:6a:6a:9e:cd:2b:46: 7b:0b:20:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZx0iEBMvmUDEgKmqndtsoiGD+j4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMTEzMjEzNDE3WhcNMjcwMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzFhY2VjYjFlMDFiZGMzYzdiZDI1YWFhOWJhZjI5ZjJj MTQyY2ZkZTQ4NmQ4OTQ5Zjg3YTdjNTkyOWEzZmY5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrV+hnTp/JJ9SIhq9+4NPmPUCZA81gIwL9RgFj9YncV0zR Ps3MK6YLMqjvxhf/rIZrJi/1yni+qQ6Pj/r6IzrROygjQZRag7t/sP3rffI0M6LI 9qRMhAKUaHZAZV8tBKKxnISi0Cvvf2Owh10BAmD9asMqTKsfJpWjSs7/ch0NFuBo 0rzxJesadC7TPPZHK7bs0ZR7UplUsZ79Xw5PInrpBADK3IpZR9T9yND90ySU5pE+ KTaGax375nKm3+9NYB3EnVvNVRxFCbP0hOf11ITwpiLNnYcftstgtbqIiFwkvUrD 8Cm47Qdf+FYwlYsl9SLxiNbBTLxqjyZm5kjY29wzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3eDDFKZREUO8ZJWFGmlLI2ilaQQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExZDFjNTE2LWU0NDAtNGQ2NC1hNDdiLWE2NTRkZjVlMTkyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwQxwwDQYJKoZIhvcNAQELBQADggEBAKDR7V0ZwzFvw4jAJzobSdfn 1FuqKV+uPr/y6tVP1pTd7auPPoqYXFqTmCWxJRfFoW38F0Hn08211RyEoUPIlbdz AIfvOqshH8fLTTVeuL+4K29xps27ThpYzSe2dOAWz16NG5caoVdymaRd/XYGCyCU P6sdyKhpKKeC5N/tuf1jPjRiKOqZhHeIEymAEn9Bk/g/7nRkjd4+zsQGwU0JG7om Poc6jVeQYw9rqSAgDMi/WMguSytj14QNXQGPmXrJw0y5mSbHvaqGoiyEgrnUUpTo 1t/69dClsiDCuJSbClQ3uWKz3XOcPqT9uigdfuNSoA/BaWTSPWpqns0rRnsLIFc= -----END CERTIFICATE-----Generated at Sun Nov 15 05:41:46 2026 by rpki-client