$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa File: e9a4c690-0bd7-418d-a82c-90364d58e928.roa (raw, json) Hash identifier: SeJtShVAj7mLzZqXak4BcOjGDupcu/MDUrCwnraq1bk= Subject key identifier: A1:03:83:16:DC:A3:9E:2C:0B:17:37:5E:44:77:4C:A1:F7:8E:76:F8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: CEA418C629DC37894B761B1589B9682398B9BF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa Signing time: Sun 27 Sep 2026 00:00:09 +0000 ROA not before: Sun 27 Sep 2026 00:00:09 +0000 ROA not after: Sat 26 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8a10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ce:a4:18:c6:29:dc:37:89:4b:76:1b:15:89:b9:68:23:98:b9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:00:09 2026 GMT Not After : Dec 26 23:59:59 2026 GMT Subject: serialNumber=eb25816b9fffc07fb70c8c10ff661ea9798b7fe7661e294515736a47fe85aa49, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:37:73:99:39:5b:2c:23:cf:6d:4c:76:4f: db:94:5f:a2:8f:b9:26:7b:5d:37:0f:c4:fb:af:b7: 14:06:b1:40:76:57:35:02:fd:a8:07:af:08:9f:4f: 02:7c:64:c6:04:fe:0f:eb:b1:99:43:4d:13:c7:40: 21:de:06:a4:5e:27:fb:ed:7c:be:3b:7e:4e:c2:04: b7:4d:0d:cd:73:1a:8d:9d:3f:ce:f3:64:9e:d2:e8: 3e:eb:78:95:64:9d:52:a4:40:93:93:b6:78:52:a9: ac:3d:4c:74:ac:40:4d:a4:9b:b9:22:15:40:31:2e: f2:a3:61:c4:54:fe:3e:a1:ad:1b:b4:2e:b9:e9:0a: 9d:0f:3b:2e:5e:cd:b9:02:52:bf:2b:85:f8:91:5f: 0a:d2:24:db:a4:e8:be:a4:5a:61:e7:00:a8:aa:a2: 08:90:81:17:09:2f:c6:f7:05:4e:e2:a8:b4:90:1a: 5d:63:6d:18:cf:55:34:ea:26:6b:32:b1:62:44:7a: 8e:3b:2d:d8:81:40:e2:f5:ed:79:eb:36:ca:35:8f: 5d:a8:16:d3:54:34:5a:0c:bf:00:32:6e:46:e1:ff: 00:8c:7b:e6:f6:45:04:d5:4b:ab:86:df:f2:58:64: 1b:8a:20:57:b1:c3:2b:8a:c8:24:29:02:d6:96:93: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:83:16:DC:A3:9E:2C:0B:17:37:5E:44:77:4C:A1:F7:8E:76:F8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a10::/48 Signature Algorithm: sha256WithRSAEncryption 42:c4:93:b1:f1:78:3c:11:37:1a:2d:1e:da:44:67:e1:da:ef: 12:56:e8:b2:79:45:be:71:11:54:91:cc:ed:46:da:ce:9d:39: de:23:68:45:4d:e6:e2:56:68:de:6b:81:23:2e:ac:ee:39:b9: fe:15:0f:2a:57:fc:a3:49:47:38:49:11:62:c4:66:fa:3e:2d: 41:e6:f1:ee:58:59:26:f8:4b:87:eb:40:16:f2:41:cc:0e:c8: f6:b0:34:72:03:e9:ba:15:47:4f:ce:f5:27:b5:21:f0:fe:5f: 52:3a:83:79:73:55:bb:df:0c:70:30:f1:c5:97:6c:56:a7:71: b6:4c:07:e1:86:b6:c8:a9:11:db:d6:0f:e2:39:d1:cc:44:fc: 0e:38:81:19:cb:70:a7:15:c3:f2:2c:71:62:1e:b6:36:1e:43: cc:ce:56:be:86:7c:4d:29:c0:b1:21:d6:cb:f8:d4:82:eb:5c: 07:ce:d7:94:a2:c7:bd:60:44:2c:64:2f:08:43:5a:06:bc:a7: 41:e0:9c:cd:64:e1:66:e1:51:bb:b5:d0:f5:0f:61:2f:b0:a2: da:18:52:14:5b:f9:70:e7:6c:55:cf:29:ec:3b:3d:0d:8f:31: 5b:86:a5:17:27:cb:46:3e:4c:a6:d2:ed:fb:bc:36:8d:1c:b3: 77:27:92:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAM6kGMYp3DeJS3YbFYm5aCOYub8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTI3MDAwMDA5WhcNMjYxMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjI1ODE2YjlmZmZjMDdmYjcwYzhjMTBmZjY2MWVhOTc5 OGI3ZmU3NjYxZTI5NDUxNTczNmE0N2ZlODVhYTQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnoTdzmTlbLCPPbUx2T9uUX6KPuSZ7XTcPxPuvtxQGsUB2 VzUC/agHrwifTwJ8ZMYE/g/rsZlDTRPHQCHeBqReJ/vtfL47fk7CBLdNDc1zGo2d P87zZJ7S6D7reJVknVKkQJOTtnhSqaw9THSsQE2km7kiFUAxLvKjYcRU/j6hrRu0 LrnpCp0POy5ezbkCUr8rhfiRXwrSJNuk6L6kWmHnAKiqogiQgRcJL8b3BU7iqLSQ Gl1jbRjPVTTqJmsysWJEeo47LdiBQOL17XnrNso1j12oFtNUNFoMvwAybkbh/wCM e+b2RQTVS6uG3/JYZBuKIFexwyuKyCQpAtaWk0spAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoQODFtyjniwLFzdeRHdMofeOdvgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U5YTRjNjkwLTBiZDctNDE4ZC1hODJjLTkwMzY0ZDU4ZTkyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxihAwDQYJKoZIhvcNAQELBQADggEBAELEk7HxeDwRNxotHtpEZ+Ha 7xJW6LJ5Rb5xEVSRzO1G2s6dOd4jaEVN5uJWaN5rgSMurO45uf4VDypX/KNJRzhJ EWLEZvo+LUHm8e5YWSb4S4frQBbyQcwOyPawNHID6boVR0/O9Se1IfD+X1I6g3lz VbvfDHAw8cWXbFancbZMB+GGtsipEdvWD+I50cxE/A44gRnLcKcVw/IscWIetjYe Q8zOVr6GfE0pwLEh1sv41ILrXAfO15Six71gRCxkLwhDWga8p0HgnM1k4WbhUbu1 0PUPYS+wotoYUhRb+XDnbFXPKew7PQ2PMVuGpRcny0Y+TKbS7fu8No0cs3cnkuQ= -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:06 2026 by rpki-client