$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1f114b0-d940-4fa0-8376-bac93d2868fc.roa File: e1f114b0-d940-4fa0-8376-bac93d2868fc.roa (raw, json) Hash identifier: n4IpcsmjmUtHkwHlaLMLXWUGIbCwtbuEm9s+Bs1t0xg= Subject key identifier: 6E:F2:1D:53:89:5C:38:D6:EC:B8:A2:3E:40:77:33:D2:34:2F:C1:4C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7778B0C7D9E8636F93205815005938D3AF15D66F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1f114b0-d940-4fa0-8376-bac93d2868fc.roa Signing time: Sun 04 Oct 2026 00:30:16 +0000 ROA not before: Sun 04 Oct 2026 00:30:16 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:78:b0:c7:d9:e8:63:6f:93:20:58:15:00:59:38:d3:af:15:d6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 4 00:30:16 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=5ec7ccd2d0c6644a9f845f9065b6f024f5181a3a09ab486bbc2c298b6f3c40ad, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:71:d4:eb:2a:9f:95:35:e7:79:05:ed:fb: dd:4c:91:87:64:7c:64:7a:69:fb:4a:6d:92:8a:7f: 73:6f:d6:66:b3:09:f8:f9:76:a0:0e:a4:a1:ba:a2: 14:6d:c5:7f:70:ce:43:b0:ae:e5:f9:0d:05:9c:b2: d1:d9:c8:39:03:79:fb:cd:64:3d:27:b1:57:00:a8: 5a:fb:af:c3:f7:11:87:6f:79:a9:77:28:23:73:05: 21:10:bd:28:da:61:54:57:f2:4b:b3:0c:04:20:a4: c5:41:53:58:d7:16:b3:a1:2e:46:b4:70:dc:e1:9c: 36:09:df:55:e3:4e:82:92:47:a7:6a:1e:80:2f:08: 97:f7:c0:3e:03:a9:43:c6:12:59:db:c7:5d:5f:48: 33:3a:a8:29:6b:15:c0:44:40:4b:f3:69:0f:22:b8: bc:7a:81:ba:74:8b:8f:0e:1b:5b:ab:1c:0d:d3:e7: 41:95:37:e0:2a:4f:38:c7:a9:61:aa:4f:ea:6d:58: fc:41:dd:90:71:d6:9a:58:b5:03:61:b6:cc:91:5c: 8e:18:3c:b4:3b:d3:2a:08:3e:01:0d:f0:ec:da:be: 72:00:7e:f7:a8:7d:42:a3:de:8a:de:07:18:66:f9: ac:d6:d0:cd:99:e4:92:77:c9:a6:50:d6:22:b3:5c: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:1D:53:89:5C:38:D6:EC:B8:A2:3E:40:77:33:D2:34:2F:C1:4C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1f114b0-d940-4fa0-8376-bac93d2868fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/40 Signature Algorithm: sha256WithRSAEncryption a1:f6:5e:a8:1c:d8:a4:13:5c:80:72:2a:26:22:10:cf:c5:f7: c8:97:6f:08:0a:27:89:96:35:c4:45:55:a7:0b:d4:71:aa:d5: 55:a4:3c:e5:ff:38:e7:04:eb:52:af:9d:ac:3d:d5:fe:c6:d2: 6b:f6:5c:0a:51:1b:31:48:7f:77:9f:44:1e:0f:0a:bc:a9:f4: 0b:73:86:96:be:ad:62:dd:25:0c:21:95:d8:00:25:9b:ad:43: dc:79:60:7f:36:7a:f0:cb:5c:81:9e:98:69:8a:87:5d:31:66: 49:1c:bc:a7:46:2a:c6:71:64:14:54:a8:8e:74:40:5e:02:e6: c9:d8:11:ca:b1:e8:a9:2f:57:20:f3:31:5e:7c:cc:f4:8d:b4: 68:db:0c:6b:fa:f9:b9:13:f6:7d:56:bf:43:5c:23:70:09:ca: 7f:8c:59:a8:a9:d3:e0:d9:34:f9:23:35:9e:e1:9c:0f:5d:2a: 44:7e:33:ae:e1:29:ed:d3:ac:bb:7f:4e:f7:fc:5d:da:65:df: 28:51:3a:ec:e9:64:77:e1:d3:38:d2:69:26:29:a8:67:80:b0: 67:c4:0b:f6:79:99:53:36:e7:5c:04:f9:d3:af:0c:b3:56:43: a1:0a:da:cb:e1:68:9f:2b:e9:21:d8:a7:2e:a8:bf:26:01:49: a7:03:56:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUd3iwx9noY2+TIFgVAFk4068V1m8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA0MDAzMDE2WhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWM3Y2NkMmQwYzY2NDRhOWY4NDVmOTA2NWI2ZjAyNGY1 MTgxYTNhMDlhYjQ4NmJiYzJjMjk4YjZmM2M0MGFkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX2HHU6yqflTXneQXt+91MkYdkfGR6aftKbZKKf3Nv1maz Cfj5dqAOpKG6ohRtxX9wzkOwruX5DQWcstHZyDkDefvNZD0nsVcAqFr7r8P3EYdv eal3KCNzBSEQvSjaYVRX8kuzDAQgpMVBU1jXFrOhLka0cNzhnDYJ31XjToKSR6dq HoAvCJf3wD4DqUPGElnbx11fSDM6qClrFcBEQEvzaQ8iuLx6gbp0i48OG1urHA3T 50GVN+AqTzjHqWGqT+ptWPxB3ZBx1ppYtQNhtsyRXI4YPLQ70yoIPgEN8OzavnIA fveofUKj3oreBxhm+azW0M2Z5JJ3yaZQ1iKzXAW5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUbvIdU4lcONbsuKI+QHcz0jQvwUwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UxZjExNGIwLWQ5NDAtNGZhMC04Mzc2LWJhYzkzZDI4NjhmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQTANBgkqhkiG9w0BAQsFAAOCAQEAofZeqBzYpBNcgHIqJiIQz8X3 yJdvCAoniZY1xEVVpwvUcarVVaQ85f845wTrUq+drD3V/sbSa/ZcClEbMUh/d59E Hg8KvKn0C3OGlr6tYt0lDCGV2AAlm61D3HlgfzZ68MtcgZ6YaYqHXTFmSRy8p0Yq xnFkFFSojnRAXgLmydgRyrHoqS9XIPMxXnzM9I20aNsMa/r5uRP2fVa/Q1wjcAnK f4xZqKnT4Nk0+SM1nuGcD10qRH4zruEp7dOsu39O9/xd2mXfKFE67Olkd+HTONJp JimoZ4CwZ8QL9nmZUzbnXAT5068Ms1ZDoQray+FonyvpIdinLqi/JgFJpwNWmQ== -----END CERTIFICATE-----Generated at Sun Nov 8 16:49:23 2026 by rpki-client