$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa File: 14518d87-9a80-47da-80c6-efeb62f0643b.roa (raw, json) Hash identifier: DJV5pEYPe5Xwk8q65HYRCiqvR7SmF1y2idBKiwwHNz8= Subject key identifier: E4:FA:5D:91:C5:05:0B:66:E4:38:1F:CD:AC:64:2E:46:C7:3B:22:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B2B9FEA55898A423079E58A001C55EB29CDFFE8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa Signing time: Mon 26 Oct 2026 04:20:26 +0000 ROA not before: Mon 26 Oct 2026 04:20:26 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2b:9f:ea:55:89:8a:42:30:79:e5:8a:00:1c:55:eb:29:cd:ff:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:26 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b85140d305bf620424bcae6442f884963f40748e0306d9d032a503d704fd209e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:74:6c:64:6d:d8:fa:fa:70:ab:ee:77:52: c0:af:9a:0e:c0:bc:ed:91:38:b4:f0:c1:cc:57:21: ff:67:b4:26:20:21:53:b8:f1:2a:e1:bc:07:2b:39: cd:21:7d:90:8c:4b:76:61:07:55:52:f3:f0:19:cc: fc:c9:52:ed:8b:16:f3:b0:28:01:ed:15:d4:4a:72: d8:d5:ea:80:27:46:f5:ec:b9:f7:8e:0f:c3:2e:e7: a3:49:c2:15:fa:7b:64:67:72:21:d2:b7:70:22:72: f8:4e:9b:26:ec:25:57:92:db:bf:30:eb:f4:19:54: 4e:33:6b:6f:2d:5e:71:e0:50:ea:e4:8b:6f:c6:75: e5:a3:ab:5f:c4:48:0b:34:16:4f:db:2e:c7:b1:c7: dd:91:d7:7b:05:fa:6d:61:49:82:4b:04:f2:c2:77: a0:93:81:98:c0:90:e0:09:67:7e:5a:45:2f:1d:70: 5e:56:ee:5e:07:85:08:e3:da:68:d0:0a:eb:bb:4d: c2:08:29:5d:4f:30:de:74:e3:46:b4:48:1d:84:ae: 83:c7:d4:f7:96:08:e5:ae:f3:0c:a0:34:79:e3:74: bb:fe:41:8a:9d:7a:ab:53:63:8a:42:0e:fd:a2:b2: 0c:c5:e7:5d:7e:f5:bb:79:0b:54:64:26:f9:fc:c4: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FA:5D:91:C5:05:0B:66:E4:38:1F:CD:AC:64:2E:46:C7:3B:22:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:3::/48 Signature Algorithm: sha256WithRSAEncryption a1:01:44:41:13:07:11:60:6a:62:46:cc:d2:92:a4:d7:9d:ff: d4:2d:c4:4e:ef:4f:42:8c:41:0f:54:9e:9a:9a:ea:cf:8f:86: c8:3a:36:5f:78:ed:3a:f8:4a:97:d5:46:38:ca:84:49:fe:a0: 4d:cd:0c:aa:8e:7b:c4:fa:69:09:b6:5a:08:d1:bf:0e:1d:64: 8d:d8:c7:f3:31:7c:19:81:9f:55:4d:40:22:a6:7b:59:1e:10: af:72:b8:7a:fa:7f:11:b0:2e:1e:7d:b9:62:c1:3c:8f:dd:e7: de:61:23:67:d4:86:f2:0d:cd:73:c4:f8:e7:79:58:f3:7d:88: 7a:2c:b6:e3:b1:68:72:c8:46:a6:96:b9:78:7e:b6:c1:6d:20: d4:99:d6:6a:1d:8d:bc:aa:40:86:6d:5a:19:d3:29:0c:49:d2: a1:d0:a5:4b:c7:29:f2:40:02:12:c9:ac:23:6e:26:ae:29:2f: 10:fa:f8:32:81:eb:cf:23:98:f3:34:3e:47:97:5d:ab:3e:5d: 44:48:77:6b:a1:a8:7a:79:56:fb:ca:64:46:de:62:8d:17:d3: 6a:55:7a:49:c9:8a:c5:1d:33:f7:9a:c5:17:89:73:e3:0e:87: 02:81:75:85:d9:92:64:e9:e6:0c:6b:00:88:1b:1c:18:cc:0e: a9:e1:3c:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSyuf6lWJikIweeWKABxV6ynN/+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDI2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODUxNDBkMzA1YmY2MjA0MjRiY2FlNjQ0MmY4ODQ5NjNm NDA3NDhlMDMwNmQ5ZDAzMmE1MDNkNzA0ZmQyMDllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIG3RsZG3Y+vpwq+53UsCvmg7AvO2ROLTwwcxXIf9ntCYg IVO48SrhvAcrOc0hfZCMS3ZhB1VS8/AZzPzJUu2LFvOwKAHtFdRKctjV6oAnRvXs ufeOD8Mu56NJwhX6e2RnciHSt3AicvhOmybsJVeS278w6/QZVE4za28tXnHgUOrk i2/GdeWjq1/ESAs0Fk/bLsexx92R13sF+m1hSYJLBPLCd6CTgZjAkOAJZ35aRS8d cF5W7l4HhQjj2mjQCuu7TcIIKV1PMN5040a0SB2EroPH1PeWCOWu8wygNHnjdLv+ QYqdeqtTY4pCDv2isgzF511+9bt5C1RkJvn8xMM7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5PpdkcUFC2bkOB/NrGQuRsc7IpswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0NTE4ZDg3LTlhODAtNDdkYS04MGM2LWVmZWI2MmYwNjQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAMwDQYJKoZIhvcNAQELBQADggEBAKEBREETBxFgamJGzNKSpNed /9QtxE7vT0KMQQ9Unpqa6s+Phsg6Nl947Tr4SpfVRjjKhEn+oE3NDKqOe8T6aQm2 WgjRvw4dZI3Yx/MxfBmBn1VNQCKme1keEK9yuHr6fxGwLh59uWLBPI/d595hI2fU hvINzXPE+Od5WPN9iHostuOxaHLIRqaWuXh+tsFtINSZ1modjbyqQIZtWhnTKQxJ 0qHQpUvHKfJAAhLJrCNuJq4pLxD6+DKB688jmPM0PkeXXas+XURId2uhqHp5VvvK ZEbeYo0X02pVeknJisUdM/eaxReJc+MOhwKBdYXZkmTp5gxrAIgbHBjMDqnhPFk= -----END CERTIFICATE-----Generated at Thu Nov 5 14:25:29 2026 by rpki-client