$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa File: 1935c49d-401e-4cd4-8328-421b86afc75d.roa (raw, json) Hash identifier: Jm8ZvgVs3JhAl9lwqJe/xLZYn1K+W8wtIOw+t8ZuIAE= Subject key identifier: DF:79:67:D3:32:CE:EB:2A:79:EB:CA:03:FA:C8:AE:B1:41:03:91:EB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 147E10667BCFDE1A3D74FAC051BA8DEECD6ACA10 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa Signing time: Wed 30 Sep 2026 00:00:04 +0000 ROA not before: Wed 30 Sep 2026 00:00:04 +0000 ROA not after: Tue 29 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7e:10:66:7b:cf:de:1a:3d:74:fa:c0:51:ba:8d:ee:cd:6a:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 30 00:00:04 2026 GMT Not After : Dec 29 23:59:59 2026 GMT Subject: serialNumber=a8bbbd1443e72d72188b1b9bce5ad96bcde5b9f86dc2d644de128006a10b26f9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:18:93:30:52:00:7b:c7:ff:69:71:33:bf: 3c:c7:0d:6f:b2:06:3d:e3:9e:f0:93:cc:88:30:d7: 5b:19:7f:66:7f:62:e8:21:76:4c:c5:56:64:48:b8: bb:ab:a1:df:84:21:c2:85:70:bb:29:ae:7a:5d:9e: 44:48:67:4e:f9:1a:2a:da:47:f8:2a:7f:41:de:13: 74:ca:1d:e1:e9:5c:50:da:c0:92:b2:b8:24:68:51: 79:73:78:a8:7b:80:bb:63:5c:f1:1c:28:5b:60:d6: 48:48:08:94:63:87:24:5c:4c:8d:0e:3c:91:f2:53: 94:60:f4:c0:fb:91:23:53:a9:f6:b4:4f:6a:30:a4: 8c:ba:88:52:65:59:73:31:0a:ee:f7:03:40:bc:cb: 55:3f:d1:c6:d3:a0:97:ef:2b:08:b1:50:79:be:63: fe:5b:b8:e7:0f:aa:a0:f6:26:68:94:7a:46:d0:dc: 33:03:11:20:b1:cd:65:3f:d7:1b:19:97:d3:73:f8: 9b:a5:c2:72:d3:ec:c7:07:7e:98:90:fe:18:87:74: 5f:5b:30:fe:a2:8a:5f:d4:7f:f4:a5:7e:f6:5e:2b: d5:77:7e:7a:c9:21:df:cc:f8:ec:97:95:81:f1:28: 48:f1:7f:ac:02:04:5e:94:d7:c8:ff:69:37:d1:40: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:67:D3:32:CE:EB:2A:79:EB:CA:03:FA:C8:AE:B1:41:03:91:EB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5504::/48 Signature Algorithm: sha256WithRSAEncryption 75:d9:7a:73:c9:fc:11:4a:8b:7c:8e:4e:89:ae:02:84:a0:02: 2c:e3:f6:a7:36:48:d2:0e:a7:6a:a6:5c:67:86:5d:98:f1:94: b7:a7:39:9a:ab:75:0c:3c:a4:f1:cc:8d:90:be:03:ba:d2:4d: 70:f6:68:d2:c3:43:46:0f:e7:e8:a7:f6:07:37:06:04:6f:b7: de:08:40:74:c9:b8:53:8f:43:25:d5:32:0a:ea:10:ad:aa:1a: c9:ff:8d:ad:06:88:ca:96:8b:d1:ca:96:c6:39:f8:15:b6:24: 96:44:a6:49:16:18:31:a8:dc:0b:9b:ae:ac:0b:73:38:2a:90: 55:33:79:6d:98:02:a0:ca:e0:aa:90:32:ae:70:ee:b6:9a:c5: b1:b4:3e:0c:80:77:08:93:4e:cc:c1:18:19:2d:8a:a4:e0:b5: 27:dd:a7:1f:85:01:c4:38:4c:4d:b5:91:a0:16:9e:08:97:69: 26:ad:26:42:11:df:7c:e3:54:cf:e3:49:91:e4:05:fb:a0:03: 90:9a:ee:b4:0e:3e:87:9a:0c:18:ba:03:c2:94:4a:58:ee:e6: 6f:f2:5b:77:f9:f5:20:a4:8e:d5:42:df:00:a5:78:2d:dc:fe: 5f:bd:b4:49:db:1f:09:af:fc:1c:34:b0:0a:fa:c5:77:ac:06: 34:6e:b0:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFH4QZnvP3ho9dPrAUbqN7s1qyhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTMwMDAwMDA0WhcNMjYxMjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGJiYmQxNDQzZTcyZDcyMTg4YjFiOWJjZTVhZDk2YmNk ZTViOWY4NmRjMmQ2NDRkZTEyODAwNmExMGIyNmY5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDtRiTMFIAe8f/aXEzvzzHDW+yBj3jnvCTzIgw11sZf2Z/ YughdkzFVmRIuLurod+EIcKFcLsprnpdnkRIZ075GiraR/gqf0HeE3TKHeHpXFDa wJKyuCRoUXlzeKh7gLtjXPEcKFtg1khICJRjhyRcTI0OPJHyU5Rg9MD7kSNTqfa0 T2owpIy6iFJlWXMxCu73A0C8y1U/0cbToJfvKwixUHm+Y/5buOcPqqD2JmiUekbQ 3DMDESCxzWU/1xsZl9Nz+JulwnLT7McHfpiQ/hiHdF9bMP6iil/Uf/SlfvZeK9V3 fnrJId/M+OyXlYHxKEjxf6wCBF6U18j/aTfRQLiVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU33ln0zLO6yp568oD+siusUEDkeswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE5MzVjNDlkLTQwMWUtNGNkNC04MzI4LTQyMWI4NmFmYzc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQQwDQYJKoZIhvcNAQELBQADggEBAHXZenPJ/BFKi3yOTomuAoSg Aizj9qc2SNIOp2qmXGeGXZjxlLenOZqrdQw8pPHMjZC+A7rSTXD2aNLDQ0YP5+in 9gc3BgRvt94IQHTJuFOPQyXVMgrqEK2qGsn/ja0GiMqWi9HKlsY5+BW2JJZEpkkW GDGo3AubrqwLczgqkFUzeW2YAqDK4KqQMq5w7raaxbG0PgyAdwiTTszBGBktiqTg tSfdpx+FAcQ4TE21kaAWngiXaSatJkIR33zjVM/jSZHkBfugA5Ca7rQOPoeaDBi6 A8KUSlju5m/yW3f59SCkjtVC3wCleC3c/l+9tEnbHwmv/Bw0sAr6xXesBjRusJU= -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:05 2026 by rpki-client