$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa File: ec42dc47-0cc9-474a-9470-19700f756d36.roa (raw, json) Hash identifier: aQg5PVlUDZBg3IMKvpw+hLoX97I7kPpXhGOMHQzQuiA= Subject key identifier: EF:25:BA:15:18:54:A1:04:5E:2E:5D:4E:AF:B9:0D:D2:BC:EA:26:52 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 42F3D271B08F2DD4CBB965BA1B4FB0E2C68D5693 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa Signing time: Mon 26 Oct 2026 04:10:38 +0000 ROA not before: Mon 26 Oct 2026 04:10:38 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:d2:71:b0:8f:2d:d4:cb:b9:65:ba:1b:4f:b0:e2:c6:8d:56:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:38 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=cd771ddb196d5ff5938661c4d29c322dc96ac3473ccfda8554a4a80211be1667, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:74:28:28:24:5e:b4:0a:2e:fe:54:eb:d2: f3:a1:05:3e:c8:66:5f:9d:b6:3a:c9:08:12:17:0b: 44:91:bb:24:67:1e:90:a8:d6:ac:26:bb:20:9a:6b: 45:d7:a8:3a:69:56:8e:19:b8:03:53:cb:08:8a:99: 85:73:19:39:11:e5:30:9f:c6:8d:9b:c0:bd:66:d6: 94:9e:5a:7a:3e:19:e5:a2:18:d8:c8:0f:e6:9d:54: de:b3:0e:df:43:c4:b8:be:88:65:a4:c1:41:59:7f: c8:32:fa:9b:4e:65:5d:2b:d5:54:5b:dc:53:66:da: d2:c9:df:eb:aa:c8:81:bb:5c:ff:03:22:5a:e3:f7: 32:26:9d:11:04:43:8e:95:82:41:d2:84:a0:7c:3b: 72:fa:79:c3:c0:35:a6:42:d9:17:8b:8a:d8:4f:35: eb:83:4f:a6:32:6b:81:13:61:2e:50:d5:45:cb:ae: 57:49:44:8f:20:f7:91:5f:e8:0f:24:ae:35:ed:08: e8:31:f9:cf:ee:a4:cb:a7:bb:a3:ff:a4:75:ec:e9: 3f:a3:10:7b:f5:f9:91:79:0f:82:6c:64:c4:a0:33: 42:05:45:a5:4c:77:f3:14:15:5e:25:99:fa:3f:e9: 6c:55:75:d9:55:37:ad:4f:a6:b8:75:10:dc:ab:5a: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:BA:15:18:54:A1:04:5E:2E:5D:4E:AF:B9:0D:D2:BC:EA:26:52 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ec42dc47-0cc9-474a-9470-19700f756d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551c::/48 Signature Algorithm: sha256WithRSAEncryption 3d:83:c1:8e:10:cf:e7:0b:da:b5:b8:3a:61:e3:15:c4:a7:1d: 84:07:6a:ac:9e:5d:13:32:5e:6c:dd:38:1c:5f:6f:6a:4e:1c: e6:61:17:a2:70:20:8b:8a:35:d4:e5:6b:f5:c9:77:d7:1e:0f: f9:f7:87:c9:89:1e:a6:01:d3:cb:9f:25:0b:e4:1e:a5:9f:f9: bb:bb:d0:19:56:47:4b:a9:5c:64:1d:a4:66:7d:4f:16:b6:7c: 1e:7c:51:e6:9b:6c:5a:84:77:8b:be:ef:b8:21:d0:46:5f:3f: 91:0d:cb:b6:ce:43:8f:f8:8c:71:be:2e:df:ea:b6:f9:e2:7c: 83:b2:56:81:bf:a8:50:07:e5:7f:d0:ae:8a:8f:f0:1f:92:06: 60:5c:74:fa:d0:f1:18:43:3a:94:97:1b:cb:4d:e4:44:f0:f6: 41:11:c4:3c:8d:d9:01:4a:66:c4:a2:39:79:d0:64:38:eb:d9: d5:13:7b:a3:4b:3a:e9:59:1e:ce:7b:79:82:e1:42:cb:ea:7f: ae:91:91:b0:92:89:31:0a:9a:c0:93:66:c7:fb:ce:d4:a2:cb: 82:25:7a:62:73:45:40:aa:66:b2:be:52:59:9f:24:25:7a:9f: 63:93:05:02:40:5e:70:0e:a9:b2:11:ba:57:21:86:e8:9e:4a: 74:b4:7c:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQvPScbCPLdTLuWW6G0+w4saNVpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDM4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDc3MWRkYjE5NmQ1ZmY1OTM4NjYxYzRkMjljMzIyZGM5 NmFjMzQ3M2NjZmRhODU1NGE0YTgwMjExYmUxNjY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpA3QoKCRetAou/lTr0vOhBT7IZl+dtjrJCBIXC0SRuyRn HpCo1qwmuyCaa0XXqDppVo4ZuANTywiKmYVzGTkR5TCfxo2bwL1m1pSeWno+GeWi GNjID+adVN6zDt9DxLi+iGWkwUFZf8gy+ptOZV0r1VRb3FNm2tLJ3+uqyIG7XP8D Ilrj9zImnREEQ46VgkHShKB8O3L6ecPANaZC2ReLithPNeuDT6Yya4ETYS5Q1UXL rldJRI8g95Ff6A8krjXtCOgx+c/upMunu6P/pHXs6T+jEHv1+ZF5D4JsZMSgM0IF RaVMd/MUFV4lmfo/6WxVddlVN61Pprh1ENyrWmJzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7yW6FRhUoQReLl1Or7kN0rzqJlIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VjNDJkYzQ3LTBjYzktNDc0YS05NDcwLTE5NzAwZjc1NmQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRwwDQYJKoZIhvcNAQELBQADggEBAD2DwY4Qz+cL2rW4OmHjFcSn HYQHaqyeXRMyXmzdOBxfb2pOHOZhF6JwIIuKNdTla/XJd9ceD/n3h8mJHqYB08uf JQvkHqWf+bu70BlWR0upXGQdpGZ9Txa2fB58UeabbFqEd4u+77gh0EZfP5ENy7bO Q4/4jHG+Lt/qtvnifIOyVoG/qFAH5X/QroqP8B+SBmBcdPrQ8RhDOpSXG8tN5ETw 9kERxDyN2QFKZsSiOXnQZDjr2dUTe6NLOulZHs57eYLhQsvqf66RkbCSiTEKmsCT Zsf7ztSiy4IlemJzRUCqZrK+UlmfJCV6n2OTBQJAXnAOqbIRulchhuieSnS0fCo= -----END CERTIFICATE-----Generated at Thu Nov 5 12:53:29 2026 by rpki-client