$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa File: 5f4411f4-d7d7-440d-94e8-36abe496c512.roa (raw, json) Hash identifier: RLEnz524j/R7ctut2ZstnoLSllYFgqOvGeYm1ENORlo= Subject key identifier: 6D:E5:1D:0B:81:C4:1A:AA:94:5A:B3:C7:31:C7:56:B1:16:56:99:39 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4561D02A240C244341D92D5C1EFC876E84F3E3F3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa Signing time: Fri 16 Oct 2026 00:40:05 +0000 ROA not before: Fri 16 Oct 2026 00:40:05 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f3:f000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:61:d0:2a:24:0c:24:43:41:d9:2d:5c:1e:fc:87:6e:84:f3:e3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 16 00:40:05 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=e98a15874cae284dc6c437d6902d50fb123acad0180e6010f67dc7e5e0c0763b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:5e:2e:3b:f9:2e:e3:94:90:1d:3f:16:01: 4d:1a:85:6f:6b:aa:8f:60:01:07:3c:e3:40:6f:73: c6:57:04:80:86:49:16:c8:21:b3:b0:d0:55:12:b2: 23:30:46:4c:27:c8:a4:b8:c9:bd:07:8c:91:3e:6b: bd:c9:17:07:a9:b4:f8:65:13:5a:c0:ec:c8:1e:37: 1f:f4:b3:33:04:41:f5:33:3b:3f:bf:a2:05:8f:37: 35:fc:51:35:f1:dc:ba:bd:82:a1:ee:39:b3:b9:0e: 83:5b:1a:3f:33:a7:da:5e:22:1a:8c:8c:8d:f3:04: 4d:8b:29:31:fd:bb:86:d5:86:fe:8b:b8:ba:11:8f: 5e:c7:90:97:ab:c6:a8:02:1a:dd:78:c4:36:65:e7: 36:26:88:f0:8b:54:98:d8:af:cc:d5:fb:39:63:69: 0a:10:59:49:99:da:e2:ab:ec:4c:78:20:61:af:db: 0a:92:15:55:9e:a0:5d:9b:e9:48:fe:28:51:64:17: 1d:3b:df:4d:76:c1:9f:e3:d7:55:12:b0:16:f5:d0: 45:d7:d9:63:50:58:2a:50:9f:fe:01:6d:91:7e:b3: 42:75:fa:7c:c6:f5:6e:57:06:fc:b6:37:33:f5:26: f0:61:02:c9:fe:f7:1f:61:70:ea:b1:19:08:ea:1e: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E5:1D:0B:81:C4:1A:AA:94:5A:B3:C7:31:C7:56:B1:16:56:99:39 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/47 Signature Algorithm: sha256WithRSAEncryption 96:57:57:ba:87:55:82:4a:61:4c:ea:36:0a:ef:79:78:02:ea: ce:d7:ec:53:aa:ac:a1:52:23:9a:07:a9:7d:0d:f3:cf:e2:5d: 86:06:af:33:8c:29:56:38:e6:c1:14:f0:0d:f7:bd:a3:b7:c0: f9:be:08:f1:61:49:30:9c:3a:42:76:e9:73:51:8d:26:53:dd: 13:7e:66:4f:e1:df:83:6a:e0:81:2e:bc:01:3a:6e:c5:2c:f7: 77:82:74:fd:d9:ed:a1:02:11:2a:43:45:09:58:3f:f4:c8:3b: 8a:7b:bb:2e:af:d6:12:9b:ce:50:f2:70:d3:fd:24:29:40:a3: dd:29:68:a0:47:fc:44:a2:e4:d3:2b:10:54:e4:6a:4b:e1:23: ae:e3:3e:d1:2b:31:58:35:24:11:4b:fc:dd:da:48:2c:af:5d: 21:c2:b5:8d:ff:8a:b7:ee:32:cd:a5:12:52:b1:7a:b0:78:b2: 49:7d:0a:88:41:bf:7e:58:0f:32:ac:b6:7d:05:b3:70:a4:5d: 6d:59:59:c3:e2:c3:08:da:1f:66:03:ba:2d:6e:2f:59:cd:dc: ee:db:8b:ce:87:45:6f:11:0f:eb:f5:f1:3a:e6:d9:34:97:dd: c9:25:8c:61:c9:17:3d:91:b7:f1:fa:c3:db:a0:cb:59:c0:56: 4c:14:08:2f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURWHQKiQMJENB2S1cHvyHboTz4/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE2MDA0MDA1WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOThhMTU4NzRjYWUyODRkYzZjNDM3ZDY5MDJkNTBmYjEy M2FjYWQwMTgwZTYwMTBmNjdkYzdlNWUwYzA3NjNiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbaF4uO/ku45SQHT8WAU0ahW9rqo9gAQc840Bvc8ZXBICG SRbIIbOw0FUSsiMwRkwnyKS4yb0HjJE+a73JFweptPhlE1rA7MgeNx/0szMEQfUz Oz+/ogWPNzX8UTXx3Lq9gqHuObO5DoNbGj8zp9peIhqMjI3zBE2LKTH9u4bVhv6L uLoRj17HkJerxqgCGt14xDZl5zYmiPCLVJjYr8zV+zljaQoQWUmZ2uKr7Ex4IGGv 2wqSFVWeoF2b6Uj+KFFkFx073012wZ/j11USsBb10EXX2WNQWCpQn/4BbZF+s0J1 +nzG9W5XBvy2NzP1JvBhAsn+9x9hcOqxGQjqHjdLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbeUdC4HEGqqUWrPHMcdWsRZWmTkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVmNDQxMWY0LWQ3ZDctNDQwZC05NGU4LTM2YWJlNDk2YzUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAJZXV7qHVYJKYUzqNgrveXgC 6s7X7FOqrKFSI5oHqX0N88/iXYYGrzOMKVY45sEU8A33vaO3wPm+CPFhSTCcOkJ2 6XNRjSZT3RN+Zk/h34Nq4IEuvAE6bsUs93eCdP3Z7aECESpDRQlYP/TIO4p7uy6v 1hKbzlDycNP9JClAo90paKBH/ESi5NMrEFTkakvhI67jPtErMVg1JBFL/N3aSCyv XSHCtY3/irfuMs2lElKxerB4skl9CohBv35YDzKstn0Fs3CkXW1ZWcPiwwjaH2YD ui1uL1nN3O7bi86HRW8RD+v18Trm2TSX3ckljGHJFz2Rt/H6w9ugy1nAVkwUCC8= -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:16 2026 by rpki-client