$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa File: e40236b0-984f-43cb-abc3-52e70df4a8c8.roa (raw, json) Hash identifier: N11RgkyWWDPR0vKqolOFHYNvTxpCYDdU+uD7/c9OnWE= Subject key identifier: 07:EA:1F:7E:45:EC:30:7A:76:8F:C1:C7:D0:94:A3:90:85:4D:2E:DB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 46269EA018F870817591B34E20AFD3002B30BC9E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa Signing time: Sun 11 Oct 2026 15:10:14 +0000 ROA not before: Sun 11 Oct 2026 15:10:14 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:26:9e:a0:18:f8:70:81:75:91:b3:4e:20:af:d3:00:2b:30:bc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:10:14 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=68082060f7042473b2df2bdd7f0f3fe78d5256aa8a4774ecd054c40472542bdd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:38:d9:1f:43:ba:37:ed:d0:d8:cc:35:9b: ed:41:c0:9a:6e:8d:6d:91:ed:13:9a:3a:92:ff:42: 0e:99:4a:5b:20:af:68:ce:aa:8c:19:68:35:e6:04: dd:f8:1e:13:2a:16:8c:f2:c7:58:7c:d8:c5:2a:18: 6b:33:4a:83:67:c1:1d:92:5a:76:78:c7:c1:e4:eb: 86:28:f1:82:88:79:61:44:eb:b6:4a:32:74:aa:08: 13:05:a4:9a:32:32:4e:ac:20:69:2e:ed:a0:a5:5e: 54:db:5b:37:ac:5c:4e:5c:40:8e:39:4d:27:d2:6f: e0:a1:76:bc:07:cf:28:5c:fa:0b:eb:a7:cf:ca:ea: 80:90:8c:33:7b:46:d0:be:48:73:c9:56:6f:0c:e3: 31:04:13:68:c9:93:26:76:71:64:a1:4f:5e:b6:4e: ab:7d:1d:46:74:32:75:88:db:fd:28:e8:cc:f3:97: 71:9b:c4:2c:05:68:47:13:ed:1a:c4:20:f8:37:8b: f9:82:8b:e6:79:14:e2:60:65:6e:04:3c:75:a0:a7: 79:28:2c:fd:c3:96:64:94:17:0f:1f:ff:f5:ae:a2: 27:71:65:4c:76:ab:59:68:06:a5:4a:c8:ef:ae:36: ef:6f:47:0d:6f:3c:35:e9:ab:aa:59:43:f9:bd:78: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:1F:7E:45:EC:30:7A:76:8F:C1:C7:D0:94:A3:90:85:4D:2E:DB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610c::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ac:e0:79:56:24:47:06:7d:a8:01:91:ea:1a:10:da:55:e7: d6:d2:06:bd:a0:f2:e4:a3:18:44:c4:69:94:7b:eb:55:15:83: 06:7a:b8:c6:31:69:62:82:d8:24:cf:6c:8d:1a:60:55:d2:b0: 25:db:f3:72:38:4d:e3:8a:f4:5b:dc:6b:50:7b:5b:5a:d5:00: 4e:5e:55:d1:81:ab:bf:61:3f:fe:1b:46:51:39:d4:80:48:9b: ec:18:dd:8c:11:50:ea:ac:d3:d1:56:25:57:21:2c:8c:d5:d7: 24:1d:b8:97:8f:e5:ee:55:9f:d8:f0:1f:ad:14:b6:e6:f7:de: 43:a4:64:2a:a9:36:93:cf:03:d8:97:f3:03:7b:8e:67:90:68: c1:da:58:2a:82:aa:a4:d0:54:28:c1:9d:0b:21:75:8e:0f:d9: 2e:a4:06:5b:1b:99:a4:dc:0e:87:a9:1b:2d:b4:cb:64:e2:22: 0a:fe:e3:5f:72:f1:fb:db:ef:71:87:68:ad:3c:b4:cd:fb:96: c8:07:e5:40:57:b1:6f:ad:b2:60:ab:33:5e:55:04:49:f1:95: d5:9e:b2:be:d1:fe:80:60:bc:e5:da:76:40:23:f5:81:ec:6a: 41:9b:33:20:51:c8:44:e9:a3:f4:da:e9:d8:9d:c8:71:61:bf: ed:27:74:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURiaeoBj4cIF1kbNOIK/TACswvJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUxMDE0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODA4MjA2MGY3MDQyNDczYjJkZjJiZGQ3ZjBmM2ZlNzhk NTI1NmFhOGE0Nzc0ZWNkMDU0YzQwNDcyNTQyYmRkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFNjjZH0O6N+3Q2Mw1m+1BwJpujW2R7ROaOpL/Qg6ZSlsg r2jOqowZaDXmBN34HhMqFozyx1h82MUqGGszSoNnwR2SWnZ4x8Hk64Yo8YKIeWFE 67ZKMnSqCBMFpJoyMk6sIGku7aClXlTbWzesXE5cQI45TSfSb+ChdrwHzyhc+gvr p8/K6oCQjDN7RtC+SHPJVm8M4zEEE2jJkyZ2cWShT162Tqt9HUZ0MnWI2/0o6Mzz l3GbxCwFaEcT7RrEIPg3i/mCi+Z5FOJgZW4EPHWgp3koLP3DlmSUFw8f//Wuoidx ZUx2q1loBqVKyO+uNu9vRw1vPDXpq6pZQ/m9eAXHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUB+offkXsMHp2j8HH0JSjkIVNLtswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U0MDIzNmIwLTk4NGYtNDNjYi1hYmMzLTUyZTcwZGY0YThjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQwwDQYJKoZIhvcNAQELBQADggEBAJ+s4HlWJEcGfagBkeoaENpV 59bSBr2g8uSjGETEaZR761UVgwZ6uMYxaWKC2CTPbI0aYFXSsCXb83I4TeOK9Fvc a1B7W1rVAE5eVdGBq79hP/4bRlE51IBIm+wY3YwRUOqs09FWJVchLIzV1yQduJeP 5e5Vn9jwH60Utub33kOkZCqpNpPPA9iX8wN7jmeQaMHaWCqCqqTQVCjBnQshdY4P 2S6kBlsbmaTcDoepGy20y2TiIgr+419y8fvb73GHaK08tM37lsgH5UBXsW+tsmCr M15VBEnxldWesr7R/oBgvOXadkAj9YHsakGbMyBRyETpo/Ta6didyHFhv+0ndOM= -----END CERTIFICATE-----Generated at Tue Oct 27 05:57:32 2026 by rpki-client