$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa File: 1bc377fa-1761-4743-8aa4-75cb00b977af.roa (raw, json) Hash identifier: DQ2tg3nEJJ+yHPgP8rvX36feeBho32kgYbs67a4RUqs= Subject key identifier: 1E:94:45:47:77:70:38:3F:40:2F:4D:30:53:11:E9:12:93:F7:E7:76 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 76A4FD7F65C667C922381924F69F5A0884C6C199 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa Signing time: Sun 18 Oct 2026 01:20:07 +0000 ROA not before: Sun 18 Oct 2026 01:20:07 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a4:fd:7f:65:c6:67:c9:22:38:19:24:f6:9f:5a:08:84:c6:c1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 18 01:20:07 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=e42b5ba43e286dbbd18677cbe187540bed3348bc91ff87df5165426430297fe3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:a9:2a:1f:01:a6:ab:b4:af:ee:ad:a3:1e: 71:7e:cb:84:8b:63:8f:b3:8b:4e:d1:64:84:ff:a2: 4e:89:04:9d:71:cc:00:09:71:9d:35:6e:4f:0a:7d: 56:91:e6:3a:8a:18:92:53:02:59:7b:2d:b7:6c:b1: 82:3a:d5:5f:6d:c0:94:df:4c:48:3a:1d:0b:6d:52: 79:7d:2b:b2:cd:38:9d:1d:2c:cb:e7:b9:de:81:0e: 7f:83:3b:fe:6b:e4:4d:50:b0:86:4f:32:41:8a:2b: 36:9c:bf:ba:bf:7b:e0:a8:29:43:b8:a4:d2:d9:ba: b1:0e:5d:b6:4d:f5:92:55:16:c2:33:ad:cf:35:89: 1a:4d:67:b2:b7:59:89:77:b4:50:d0:00:84:5c:a2: 76:5a:fc:f5:33:35:7d:3c:65:89:e5:58:5b:1b:89: cf:6b:30:c6:2b:6b:9a:65:7d:09:ab:26:81:09:17: f6:37:e1:dc:3e:27:20:6e:84:3a:45:fd:b5:bd:34: 37:04:43:fe:0c:f4:65:b2:0a:cb:19:f5:b6:5b:25: 4e:94:fe:f3:f1:0f:47:1c:fd:02:fc:f6:26:20:46: 34:ea:82:be:5b:a6:46:a8:ac:a2:fd:63:44:82:dd: 13:ec:22:64:04:0f:3f:b9:54:67:47:8c:64:0f:1d: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:45:47:77:70:38:3F:40:2F:4D:30:53:11:E9:12:93:F7:E7:76 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1::/44 Signature Algorithm: sha256WithRSAEncryption 28:87:20:38:7b:0a:a3:35:85:d7:73:2d:51:7d:45:b9:4a:ba: 46:aa:01:3e:4f:9e:a4:87:e0:3e:1e:39:1e:74:ae:f2:d0:eb: 5b:a5:de:15:99:1b:b9:50:a2:7a:47:d7:a0:2f:83:08:a7:23: 8d:18:94:bd:b2:ac:47:d4:55:ea:3b:bf:f4:4b:68:1f:69:ac: 06:e3:28:42:f7:b1:33:28:e3:96:92:bf:58:3c:e9:9d:2a:cf: df:f6:e4:dd:fc:28:10:9b:5e:b0:73:b8:50:6e:76:11:63:a6: 38:f0:33:26:f9:4f:66:9c:98:ea:f1:dc:cd:f3:44:5a:44:d9: 56:8e:1f:3a:58:e6:31:cc:8a:60:fd:a2:ef:3f:e5:1f:2f:8e: 86:8d:5f:1c:d6:20:e4:86:4a:a4:4f:87:bd:1d:26:56:66:bb: 42:8f:fc:ef:e9:ba:f0:14:0f:15:64:a3:69:97:8a:9c:4b:37: f3:02:ac:e9:06:36:8e:92:9f:26:fd:19:4d:44:19:2c:fe:95: 81:8b:9e:c0:c5:f2:b3:c5:d7:b6:e9:eb:ce:dc:a6:37:05:69: ce:a9:02:f1:5c:8a:b9:e0:e8:82:9f:c3:de:e3:f3:57:9a:91: 0a:22:34:c3:49:0b:b3:1e:d0:3b:d0:61:46:6c:3b:b4:a3:26: 97:65:69:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdqT9f2XGZ8kiOBkk9p9aCITGwZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDA3WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDJiNWJhNDNlMjg2ZGJiZDE4Njc3Y2JlMTg3NTQwYmVk MzM0OGJjOTFmZjg3ZGY1MTY1NDI2NDMwMjk3ZmUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS5akqHwGmq7Sv7q2jHnF+y4SLY4+zi07RZIT/ok6JBJ1x zAAJcZ01bk8KfVaR5jqKGJJTAll7LbdssYI61V9twJTfTEg6HQttUnl9K7LNOJ0d LMvnud6BDn+DO/5r5E1QsIZPMkGKKzacv7q/e+CoKUO4pNLZurEOXbZN9ZJVFsIz rc81iRpNZ7K3WYl3tFDQAIRconZa/PUzNX08ZYnlWFsbic9rMMYra5plfQmrJoEJ F/Y34dw+JyBuhDpF/bW9NDcEQ/4M9GWyCssZ9bZbJU6U/vPxD0cc/QL89iYgRjTq gr5bpkaorKL9Y0SC3RPsImQEDz+5VGdHjGQPHYVzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHpRFR3dwOD9AL00wUxHpEpP353YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFiYzM3N2ZhLTE3NjEtNDc0My04YWE0LTc1Y2IwMGI5NzdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAAAwDQYJKoZIhvcNAQELBQADggEBACiHIDh7CqM1hddzLVF9RblK ukaqAT5PnqSH4D4eOR50rvLQ61ul3hWZG7lQonpH16AvgwinI40YlL2yrEfUVeo7 v/RLaB9prAbjKEL3sTMo45aSv1g86Z0qz9/25N38KBCbXrBzuFBudhFjpjjwMyb5 T2acmOrx3M3zRFpE2VaOHzpY5jHMimD9ou8/5R8vjoaNXxzWIOSGSqRPh70dJlZm u0KP/O/puvAUDxVko2mXipxLN/MCrOkGNo6Snyb9GU1EGSz+lYGLnsDF8rPF17bp 687cpjcFac6pAvFcirng6IKfw97j81eakQoiNMNJC7Me0DvQYUZsO7SjJpdlaZA= -----END CERTIFICATE-----Generated at Tue Nov 10 06:39:10 2026 by rpki-client