$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa File: f30a276d-715e-46ee-8158-fd4576a10978.roa (raw, json) Hash identifier: npspB+UYqkptJjSWHlu4oTxQ/JJ2h/KTL42UJjRVEYY= Subject key identifier: 3D:50:6F:FF:BB:E4:D6:F8:8F:B3:90:43:B3:79:45:D1:9E:B9:25:12 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 41BA65107C5CAC80C1E3F74ABCD0CEFCF401ED18 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa Signing time: Mon 26 Oct 2026 04:10:06 +0000 ROA not before: Mon 26 Oct 2026 04:10:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:65:10:7c:5c:ac:80:c1:e3:f7:4a:bc:d0:ce:fc:f4:01:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c530a949458d2a5ff1db6fb79349e58de9f2cd3691882b0a777ce88ff81e9f2b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:77:63:aa:84:29:9c:1f:c8:08:b2:4a:2f: d9:1b:08:5a:8f:d4:36:cf:f0:12:e8:6e:de:8f:f3: 7a:d9:7c:e4:3f:51:af:08:80:21:bb:a5:96:08:d4: 50:48:c4:ea:af:8d:64:23:7e:ff:0c:8f:e1:20:8e: df:ef:ed:85:45:9d:aa:f2:9e:f6:fe:19:67:e3:62: 16:fa:f4:c5:ec:7d:49:98:ca:70:da:8c:ef:f0:bc: 64:2d:08:b7:07:47:e1:77:2d:9d:3a:99:ae:0f:e6: 85:84:7e:6c:b9:be:c9:d4:b3:17:08:a3:83:2c:95: 41:25:be:bc:ab:ae:8a:57:65:b6:34:cb:87:e2:a0: a7:67:87:b5:e9:7c:31:e4:5c:c0:94:2c:2c:03:b0: 0d:f0:08:d6:2c:e5:8f:23:0b:4d:48:5a:79:8f:91: a9:af:91:d6:24:0d:18:d9:c2:01:21:20:cb:31:ff: 6a:03:85:da:3f:9a:58:8d:32:87:48:eb:1f:a7:01: 8a:ac:81:71:2d:2d:c7:81:3c:df:f6:11:3d:e0:87: bd:93:ff:58:9d:71:0e:eb:f7:be:7a:c8:d1:4e:49: c5:09:13:c3:63:d5:ae:8b:01:86:f8:97:a9:40:2d: 4a:f7:8d:9c:9c:f1:b9:e4:a2:39:0e:60:9c:e4:4f: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:6F:FF:BB:E4:D6:F8:8F:B3:90:43:B3:79:45:D1:9E:B9:25:12 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 24:e2:b6:da:68:d7:21:ff:b4:65:d9:ad:b0:e9:37:2f:5a:64: 27:5a:03:ca:03:63:5c:48:24:9d:2c:6a:0d:18:cf:e6:6c:ad: 1e:1b:f0:bc:26:f0:0d:b4:0a:91:2d:9a:2a:98:5d:97:a4:1b: 6e:09:6a:5d:a6:88:7b:01:9b:08:4f:4e:1b:4f:df:0f:f8:72: db:90:bd:67:be:ec:0a:fc:1a:0b:df:cd:19:53:01:27:aa:b9: e1:f7:e4:65:dd:11:8f:b4:8f:b7:ff:11:81:43:fd:2b:fc:36: 4d:8c:34:ea:b9:5f:d8:81:17:1f:9f:57:0e:50:7d:74:29:fa: aa:e9:e4:35:fc:bd:ad:52:e4:7c:a3:21:1b:52:b4:fc:c8:76: 9a:38:14:cc:92:89:3d:bc:5c:2c:11:5b:8c:30:7d:bb:a4:7e: 03:2e:20:5a:fc:a9:1e:e4:ed:e5:c6:22:fd:04:e6:19:9b:2a: 91:fc:15:74:57:f4:cd:74:60:2f:c5:6b:fe:18:53:f6:a3:73: 3a:ef:e7:25:5d:3a:44:b8:3a:dc:15:29:2d:d7:9d:f3:e2:fc: 7e:6e:e5:90:13:27:ba:bc:d4:a1:af:f6:60:04:81:e4:22:e9: 58:f0:eb:17:c1:8d:a6:fe:41:6d:42:62:17:9b:fa:5a:d3:52: 54:b5:22:52 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQbplEHxcrIDB4/dKvNDO/PQB7RgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTMwYTk0OTQ1OGQyYTVmZjFkYjZmYjc5MzQ5ZTU4ZGU5 ZjJjZDM2OTE4ODJiMGE3NzdjZTg4ZmY4MWU5ZjJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyl3djqoQpnB/ICLJKL9kbCFqP1DbP8BLobt6P83rZfOQ/ Ua8IgCG7pZYI1FBIxOqvjWQjfv8Mj+Egjt/v7YVFnarynvb+GWfjYhb69MXsfUmY ynDajO/wvGQtCLcHR+F3LZ06ma4P5oWEfmy5vsnUsxcIo4MslUElvryrropXZbY0 y4fioKdnh7XpfDHkXMCULCwDsA3wCNYs5Y8jC01IWnmPkamvkdYkDRjZwgEhIMsx /2oDhdo/mliNModI6x+nAYqsgXEtLceBPN/2ET3gh72T/1idcQ7r9756yNFOScUJ E8Nj1a6LAYb4l6lALUr3jZyc8bnkojkOYJzkT4GrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPVBv/7vk1viPs5BDs3lF0Z65JRIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzMGEyNzZkLTcxNWUtNDZlZS04MTU4LWZkNDU3NmExMDk3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAJOK22mjXIf+0ZdmtsOk3L1pk J1oDygNjXEgknSxqDRjP5mytHhvwvCbwDbQKkS2aKphdl6QbbglqXaaIewGbCE9O G0/fD/hy25C9Z77sCvwaC9/NGVMBJ6q54ffkZd0Rj7SPt/8RgUP9K/w2TYw06rlf 2IEXH59XDlB9dCn6qunkNfy9rVLkfKMhG1K0/Mh2mjgUzJKJPbxcLBFbjDB9u6R+ Ay4gWvypHuTt5cYi/QTmGZsqkfwVdFf0zXRgL8Vr/hhT9qNzOu/nJV06RLg63BUp Lded8+L8fm7lkBMnurzUoa/2YASB5CLpWPDrF8GNpv5BbUJiF5v6WtNSVLUiUg== -----END CERTIFICATE-----Generated at Thu Nov 5 10:45:37 2026 by rpki-client