$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa File: 1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa (raw, json) Hash identifier: YWTfpLXIGQrXFEoyhjUWodIrFIks7tUdOkHwh7dQKno= Subject key identifier: 1C:E2:68:80:CE:EC:1F:32:D6:3F:38:5D:CA:05:84:7D:63:F9:76:39 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3CDF6F23C9858540216C6D9A9C07E65325483C2F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa Signing time: Tue 27 Oct 2026 00:50:27 +0000 ROA not before: Tue 27 Oct 2026 00:50:27 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:6f:23:c9:85:85:40:21:6c:6d:9a:9c:07:e6:53:25:48:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:27 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=a1a802283b0607a4ddb8c4650d299014db653093be89c2258ce53776e49076d3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:e7:c4:c8:03:43:21:43:e0:b9:4e:cc:1b: 2a:95:44:07:67:f7:5f:e8:45:e7:03:3e:a7:c8:a4: bb:6d:b9:8e:79:36:d6:f1:8f:05:d8:76:17:6d:cc: e2:d4:b8:2e:60:aa:6e:f5:8a:72:30:ab:4b:af:68: a0:5f:24:56:12:ec:7a:40:76:70:e3:05:3b:42:93: b3:48:1f:69:7c:e5:f1:b5:16:0e:c4:15:37:ad:17: 5a:17:40:05:e5:c1:f7:ef:54:82:62:f2:17:cb:61: 64:74:85:74:a7:93:d2:0d:c3:b0:b9:3f:87:b0:07: 96:72:e6:54:a3:3b:19:83:5a:90:cd:f4:c5:f4:09: d3:b9:bf:ed:f8:af:37:de:40:88:29:77:9e:59:d5: db:1f:05:46:94:7d:4e:78:c6:90:06:b8:ac:08:12: 86:de:57:0e:fe:8c:f3:b0:fc:06:cc:27:d1:ab:88: 65:88:be:f5:72:97:31:f7:38:fa:9b:ed:77:eb:cd: 0a:8b:33:59:c3:ac:98:c1:c0:ad:19:29:98:db:e1: 48:85:ce:62:9a:f4:26:09:bd:52:7f:c4:d6:3c:84: 28:27:83:e6:aa:20:a1:46:89:cd:e3:09:77:e0:f7: ec:d7:37:ba:97:f8:8d:97:9c:d1:4e:56:dd:f8:c6: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E2:68:80:CE:EC:1F:32:D6:3F:38:5D:CA:05:84:7D:63:F9:76:39 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 7a:cd:ed:b5:b3:9c:43:ae:0e:33:d3:88:f3:a9:e5:74:40:e0: f6:fc:5d:56:f9:cd:5d:ee:7c:51:b6:5f:33:54:c1:1e:a2:83: 9b:2d:ec:d6:ba:a8:94:3f:f4:9a:84:7c:9f:d8:39:65:e3:10: 62:23:b7:c0:f1:5f:10:9f:ec:7f:11:15:0e:d5:d0:f0:a3:31: 6d:20:22:e9:b9:bc:b8:37:94:b5:9e:78:2a:85:9e:95:85:cd: fa:fc:52:c3:5a:33:06:dd:3d:40:c6:54:60:8d:01:bb:5b:9c: a3:21:67:b1:ee:57:c0:6c:39:f2:7b:49:46:9f:09:78:88:b2: aa:51:e9:a9:03:95:37:46:e2:13:69:e0:09:45:64:28:9c:04: be:3f:ad:0d:53:99:1d:95:5a:47:ac:a1:55:17:19:18:6d:c1: 20:f0:ac:6c:6a:a2:c8:49:45:2e:41:71:17:97:4e:bb:d9:1a: cd:b4:0e:d6:2d:c3:16:28:3c:1c:76:71:87:9e:49:d0:9f:78: 6d:3b:3d:59:38:0c:07:ec:08:d4:b7:51:0e:36:94:05:28:69: 2a:b5:94:d1:a8:0e:2f:c5:ef:f5:a7:4d:5a:23:57:23:a5:82: 51:7b:9b:9d:00:8d:25:70:b9:cb:87:ce:3b:f7:17:63:d8:7c: f5:1d:10:67 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPN9vI8mFhUAhbG2anAfmUyVIPC8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDI3WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWE4MDIyODNiMDYwN2E0ZGRiOGM0NjUwZDI5OTAxNGRi NjUzMDkzYmU4OWMyMjU4Y2U1Mzc3NmU0OTA3NmQzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwN+fEyANDIUPguU7MGyqVRAdn91/oRecDPqfIpLttuY55 NtbxjwXYdhdtzOLUuC5gqm71inIwq0uvaKBfJFYS7HpAdnDjBTtCk7NIH2l85fG1 Fg7EFTetF1oXQAXlwffvVIJi8hfLYWR0hXSnk9INw7C5P4ewB5Zy5lSjOxmDWpDN 9MX0CdO5v+34rzfeQIgpd55Z1dsfBUaUfU54xpAGuKwIEobeVw7+jPOw/AbMJ9Gr iGWIvvVylzH3OPqb7XfrzQqLM1nDrJjBwK0ZKZjb4UiFzmKa9CYJvVJ/xNY8hCgn g+aqIKFGic3jCXfg9+zXN7qX+I2XnNFOVt34xutBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHOJogM7sHzLWPzhdygWEfWP5djkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFkZjRhODJhLTA4NzUtNDdiNi05ZmMwLWI2N2MwOTdiYzQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxiDANBgkqhkiG9w0BAQsFAAOCAQEAes3ttbOcQ64OM9OI86nldEDg 9vxdVvnNXe58UbZfM1TBHqKDmy3s1rqolD/0moR8n9g5ZeMQYiO3wPFfEJ/sfxEV DtXQ8KMxbSAi6bm8uDeUtZ54KoWelYXN+vxSw1ozBt09QMZUYI0Bu1ucoyFnse5X wGw58ntJRp8JeIiyqlHpqQOVN0biE2ngCUVkKJwEvj+tDVOZHZVaR6yhVRcZGG3B IPCsbGqiyElFLkFxF5dOu9kazbQO1i3DFig8HHZxh55J0J94bTs9WTgMB+wI1LdR DjaUBShpKrWU0agOL8Xv9adNWiNXI6WCUXubnQCNJXC5y4fOO/cXY9h89R0QZw== -----END CERTIFICATE-----Generated at Thu Nov 5 15:20:07 2026 by rpki-client