$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa File: f5b1d1bf-721f-4a57-a400-f549c190180c.roa (raw, json) Hash identifier: ygR5bDmX0jhkKUlN544kxth/DkTxJcN1+jW2hzZMZ3s= Subject key identifier: 57:E4:3E:D9:CA:9A:4B:94:78:15:3D:12:20:D1:1B:95:E3:9A:36:BD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0129E9068345565C9D6B9AB62C4AE583118318E9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa Signing time: Sun 11 Oct 2026 14:50:32 +0000 ROA not before: Sun 11 Oct 2026 14:50:32 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:29:e9:06:83:45:56:5c:9d:6b:9a:b6:2c:4a:e5:83:11:83:18:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:32 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=1571075cfc99ae7ba068761dc58c57f78075cfa1f4c09818d89698d8fb040f98, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:90:01:dd:f1:25:3f:c9:84:7b:7e:94:03: fe:52:bf:cf:b3:ca:92:81:6d:7b:08:f5:d2:7f:b1: dd:9c:83:42:0b:7e:16:10:34:34:b1:b2:37:f9:49: b0:5c:c2:86:94:ad:cb:cb:0f:9e:52:7a:3f:1e:85: 86:79:64:76:56:93:fc:52:aa:f3:9e:80:1e:cb:6d: 39:7e:a0:e9:f1:3c:7e:54:b6:47:19:17:ca:48:4e: 4f:9d:f6:c3:92:aa:e6:21:5c:54:11:c4:69:33:ba: 0b:bf:d6:32:38:e4:5b:b8:2a:39:2f:1d:35:da:1c: ef:4e:6e:9f:26:78:fa:ea:15:07:25:26:d1:c9:c2: df:78:91:9b:ed:a9:57:d0:73:16:53:40:14:f2:60: 89:cb:b2:29:73:cc:6b:e0:56:39:90:9b:2f:1d:7e: d1:aa:79:43:0a:03:4c:b8:2d:a8:85:4f:48:91:7c: 22:1d:03:60:42:51:c5:6f:fa:0d:8c:9a:f5:46:ba: c5:cf:23:a6:4d:8d:54:2b:77:ed:99:48:d0:17:48: 84:a3:03:93:0b:75:ee:e4:b2:d1:ad:10:d8:9f:65: 6e:93:dc:6c:ad:a5:a1:a0:59:29:50:e1:b9:09:48: dd:7c:63:c2:45:75:a6:3a:1d:cd:cb:74:87:f1:7a: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E4:3E:D9:CA:9A:4B:94:78:15:3D:12:20:D1:1B:95:E3:9A:36:BD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:400::/40 Signature Algorithm: sha256WithRSAEncryption 9a:dd:a0:9f:24:ec:51:d8:1a:32:20:da:34:d1:f2:55:aa:d2: 6d:ad:70:3d:0a:33:3c:a8:89:53:fc:3b:8f:52:4a:bb:c3:c6: b9:37:34:17:9e:aa:e0:a1:7a:e0:64:49:d2:4b:91:68:5f:f8: a3:22:d2:13:9c:9d:7e:0a:39:39:2b:b7:af:da:a6:3b:72:5a: 95:c3:f5:6a:d8:26:be:33:f6:79:c1:c8:73:ca:2e:d6:11:93: a9:12:d8:70:81:3b:b5:f6:81:26:5c:79:a8:dc:d4:04:8e:61: f2:35:b8:df:d1:b0:85:a0:d6:40:95:9a:70:57:9f:54:b9:43: ca:bf:25:ad:70:53:97:8d:8d:65:5c:a5:3b:01:4e:37:b5:40: c7:c7:ac:e8:d8:86:28:42:bf:54:41:fc:ee:bc:e7:94:62:c4: 05:f3:d1:93:91:0c:69:e5:b9:3b:39:00:77:59:46:ce:5d:c2: cc:b2:90:fb:fd:88:98:a3:d6:22:f1:f6:c8:ee:87:c0:5b:95: 44:d0:38:92:7c:a5:a0:99:83:2f:65:4e:33:ad:3d:d3:a6:fe: 9c:c1:84:9d:2c:ee:27:3c:81:54:19:c6:6f:90:fc:29:6f:c5: 5d:b6:97:c1:31:fb:37:e4:ba:cb:22:11:75:39:bf:c5:c8:b5: 59:19:53:81 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUASnpBoNFVlyda5q2LErlgxGDGOkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDMyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTcxMDc1Y2ZjOTlhZTdiYTA2ODc2MWRjNThjNTdmNzgw NzVjZmExZjRjMDk4MThkODk2OThkOGZiMDQwZjk4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2OZAB3fElP8mEe36UA/5Sv8+zypKBbXsI9dJ/sd2cg0IL fhYQNDSxsjf5SbBcwoaUrcvLD55Sej8ehYZ5ZHZWk/xSqvOegB7LbTl+oOnxPH5U tkcZF8pITk+d9sOSquYhXFQRxGkzugu/1jI45Fu4KjkvHTXaHO9Obp8mePrqFQcl JtHJwt94kZvtqVfQcxZTQBTyYInLsilzzGvgVjmQmy8dftGqeUMKA0y4LaiFT0iR fCIdA2BCUcVv+g2MmvVGusXPI6ZNjVQrd+2ZSNAXSISjA5MLde7kstGtENifZW6T 3GytpaGgWSlQ4bkJSN18Y8JFdaY6Hc3LdIfxegMpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUV+Q+2cqaS5R4FT0SINEbleOaNr0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y1YjFkMWJmLTcyMWYtNGE1Ny1hNDAwLWY1NDljMTkwMTgwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABDANBgkqhkiG9w0BAQsFAAOCAQEAmt2gnyTsUdgaMiDaNNHyVarS ba1wPQozPKiJU/w7j1JKu8PGuTc0F56q4KF64GRJ0kuRaF/4oyLSE5ydfgo5OSu3 r9qmO3JalcP1atgmvjP2ecHIc8ou1hGTqRLYcIE7tfaBJlx5qNzUBI5h8jW439Gw haDWQJWacFefVLlDyr8lrXBTl42NZVylOwFON7VAx8es6NiGKEK/VEH87rznlGLE BfPRk5EMaeW5OzkAd1lGzl3CzLKQ+/2ImKPWIvH2yO6HwFuVRNA4knyloJmDL2VO M60906b+nMGEnSzuJzyBVBnGb5D8KW/FXbaXwTH7N+S6yyIRdTm/xci1WRlTgQ== -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:30 2026 by rpki-client