$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa File: 100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json) Hash identifier: ss/ocRt+FRvOQkeuOaIysL4jNI25HAS8Hk4ZYjpI/zM= Subject key identifier: 3D:94:06:72:9A:87:4E:6D:E6:7B:95:7E:2F:FF:07:21:B6:2A:D1:21 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5AF3C38474655723B2DCE47653813114479D346B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa Signing time: Mon 26 Oct 2026 04:10:11 +0000 ROA not before: Mon 26 Oct 2026 04:10:11 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f3:c3:84:74:65:57:23:b2:dc:e4:76:53:81:31:14:47:9d:34:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:11 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=dec293c7d606b8b5648f289d0510da80badeac1644491bce0a61ae497a8f115b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:65:64:65:5f:90:d2:fd:d9:4a:88:13:6d: db:e7:ba:52:b4:fe:98:4c:c7:5f:54:af:27:a5:0f: 4b:62:2c:06:6c:a5:d3:6a:4e:34:ba:8a:a0:39:0a: 8e:e1:ca:fe:55:43:38:03:c9:41:df:53:16:4d:2f: a6:bf:e9:4f:61:c9:09:fc:12:92:6b:6a:2d:ee:3e: dd:dc:0a:c3:bf:c0:3a:f0:14:02:19:3b:c9:94:b4: ac:1f:64:6a:fb:17:16:09:01:4d:1d:1c:22:11:f4: c2:ba:46:18:f2:cd:81:85:60:e1:05:9c:48:93:84: 8f:8f:f8:56:35:96:da:0c:50:7d:08:59:f7:d5:24: 2c:da:ad:cc:f8:e7:6b:88:ee:8f:ab:40:a4:93:7f: 33:2e:3a:d4:15:6e:25:2e:8c:da:02:71:5f:ac:d7: ea:de:e2:d5:92:f8:b0:76:f7:29:5c:7e:21:b2:36: d5:7e:94:3d:74:07:f8:96:85:4f:e0:d8:8e:d3:dd: 0c:f4:f7:f6:70:8c:85:8e:16:32:29:8f:91:60:7f: 73:e8:47:b8:13:39:f0:24:11:ab:81:4d:f1:c9:d8: 81:5a:4f:c8:46:7c:6c:48:a1:9f:bf:52:6a:2b:eb: 71:87:cc:37:2a:36:4c:93:d3:17:7d:2d:25:96:2f: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:06:72:9A:87:4E:6D:E6:7B:95:7E:2F:FF:07:21:B6:2A:D1:21 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 9a:ef:08:5b:b6:1d:af:b2:a2:9e:c2:62:b4:ba:c6:f9:11:39: 98:50:a2:4a:84:6a:f3:6a:88:b6:94:38:a2:be:9e:52:d5:79: f8:c7:3c:8e:84:12:dc:a1:35:51:6c:28:32:5c:d3:01:be:e9: e9:09:a3:ec:d6:93:d0:bc:76:55:a0:e8:47:eb:36:0d:d0:82: 6d:d8:31:b4:7a:bf:cc:08:e7:8a:dc:96:54:20:da:3b:5c:d5: ab:bc:eb:81:44:0d:d7:7d:3a:7d:10:bc:60:33:61:90:6e:cc: e6:e3:da:f3:0c:79:a7:a9:7c:fa:a7:73:c8:ba:57:ce:d8:e8: 3a:e7:03:06:97:0c:c2:0b:b2:2e:b2:6d:05:c4:fc:ff:e4:2c: 3f:4c:41:42:2b:b7:3c:d8:6e:ed:a3:34:da:db:47:9c:db:89: 5a:55:aa:74:9f:39:ea:ef:c3:b4:43:d6:16:2f:9a:60:05:06: f8:da:c8:f6:9a:0c:df:7d:bb:49:23:1a:59:85:11:78:19:f1: b1:a6:b3:b4:18:c1:6f:19:fc:53:8a:92:71:16:59:b3:d7:43: 72:3a:7a:ff:cd:62:92:3b:8a:7e:df:22:13:77:58:32:9e:8b: fb:5d:eb:14:5b:09:57:85:e2:eb:e2:4f:96:64:38:81:0c:cf: e1:ce:44:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWvPDhHRlVyOy3OR2U4ExFEedNGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDExWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWMyOTNjN2Q2MDZiOGI1NjQ4ZjI4OWQwNTEwZGE4MGJh ZGVhYzE2NDQ0OTFiY2UwYTYxYWU0OTdhOGYxMTViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/eGVkZV+Q0v3ZSogTbdvnulK0/phMx19UryelD0tiLAZs pdNqTjS6iqA5Co7hyv5VQzgDyUHfUxZNL6a/6U9hyQn8EpJrai3uPt3cCsO/wDrw FAIZO8mUtKwfZGr7FxYJAU0dHCIR9MK6RhjyzYGFYOEFnEiThI+P+FY1ltoMUH0I WffVJCzarcz452uI7o+rQKSTfzMuOtQVbiUujNoCcV+s1+re4tWS+LB29ylcfiGy NtV+lD10B/iWhU/g2I7T3Qz09/ZwjIWOFjIpj5Fgf3PoR7gTOfAkEauBTfHJ2IFa T8hGfGxIoZ+/Umor63GHzDcqNkyT0xd9LSWWL97NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPZQGcpqHTm3me5V+L/8HIbYq0SEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAJrvCFu2Ha+yop7CYrS6xvkR OZhQokqEavNqiLaUOKK+nlLVefjHPI6EEtyhNVFsKDJc0wG+6ekJo+zWk9C8dlWg 6EfrNg3Qgm3YMbR6v8wI54rcllQg2jtc1au864FEDdd9On0QvGAzYZBuzObj2vMM eaepfPqnc8i6V87Y6DrnAwaXDMILsi6ybQXE/P/kLD9MQUIrtzzYbu2jNNrbR5zb iVpVqnSfOervw7RD1hYvmmAFBvjayPaaDN99u0kjGlmFEXgZ8bGms7QYwW8Z/FOK knEWWbPXQ3I6ev/NYpI7in7fIhN3WDKei/td6xRbCVeF4uviT5ZkOIEMz+HORLg= -----END CERTIFICATE-----Generated at Thu Nov 5 07:18:36 2026 by rpki-client