$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa File: 5457865c-05cc-496e-9344-9ec7d5266e2c.roa (raw, json) Hash identifier: IWf+Hap6x8kb2TgbY/oCY2ZBA8YI8EXUhec+8PDBRWg= Subject key identifier: A2:F0:E9:17:32:9B:BC:9D:43:1E:D5:2D:84:F1:EB:3E:E6:2F:68:3E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 238B54FCDC9E0BF56DE2C659C6009272CC192313 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa Signing time: Tue 27 Oct 2026 00:50:07 +0000 ROA not before: Tue 27 Oct 2026 00:50:07 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8b:54:fc:dc:9e:0b:f5:6d:e2:c6:59:c6:00:92:72:cc:19:23:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 27 00:50:07 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=041f0aaa77c359dfc0b819001c13310fe235dc2071704d4d3ccbc47a47b354e3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:8e:52:92:f9:a1:57:b1:dc:5b:88:f8:e5: 98:13:c2:31:5e:ba:a8:43:1a:b1:7b:49:09:ac:8f: f8:a5:cd:40:32:cc:05:25:0a:03:b4:82:4a:cd:96: 00:b7:05:9b:cf:14:6a:04:3f:07:e1:2d:23:4b:55: ef:d0:48:36:15:be:3c:0c:ac:26:34:01:1f:34:66: 2d:97:43:da:d7:5e:75:d0:c0:b4:58:08:d2:db:45: 89:67:44:c6:35:8a:04:b9:00:a6:c9:78:86:c2:df: a5:ab:34:95:6e:df:4d:ed:ce:14:8f:9d:ca:65:c1: d2:87:86:c2:04:f4:e6:d5:2c:94:5a:df:89:fb:e5: bc:94:c9:43:6d:9c:db:27:e8:d4:75:29:35:ca:3e: 13:23:10:4b:62:9f:3a:0d:e5:37:5e:ef:12:a9:90: 8c:bf:e7:88:48:fa:10:72:5b:20:c3:5a:84:c8:bf: 37:80:91:cf:0e:ac:fb:7a:20:a2:4b:ed:59:de:42: 6e:66:89:3a:f2:e1:a5:5c:29:54:04:81:3d:f1:c9: 57:c2:1f:51:c9:7a:bf:0e:d9:a9:a5:eb:68:b2:9f: 51:9a:a8:8f:dc:fc:09:65:54:d0:bc:a1:fa:69:8f: 8a:3a:25:39:8b:fb:25:99:90:7c:2b:bb:9c:d0:9f: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F0:E9:17:32:9B:BC:9D:43:1E:D5:2D:84:F1:EB:3E:E6:2F:68:3E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/48 Signature Algorithm: sha256WithRSAEncryption 9f:d8:16:11:fa:5a:d3:a4:7a:50:09:f3:69:4f:73:81:5f:e4: 8a:8a:5d:4b:52:0d:d6:c0:bd:9e:ff:47:b8:e4:c4:05:36:93: 7d:56:be:a4:cc:61:18:43:99:73:ff:d4:76:29:8e:74:66:51: fa:70:e6:53:30:b1:0f:db:ee:ec:bc:f2:1a:36:3d:8a:f6:af: 7d:9c:6b:41:34:1c:9e:77:b8:ee:97:9a:8a:ca:64:ec:96:2f: d4:17:62:b4:40:46:fb:57:41:8a:17:af:43:08:0d:a2:dc:00: a6:e8:69:30:9f:10:e0:b1:ea:42:e1:c4:ae:53:85:0f:7d:e6: 14:4e:69:76:75:2f:a8:f4:7c:5f:0b:28:74:6b:c1:d9:6c:e2: 8a:68:a1:4b:77:73:12:da:6e:aa:06:31:9b:35:3d:3b:d6:5e: e4:87:54:1a:45:bb:3e:1e:0c:4d:93:f5:da:0d:60:91:bf:b4: d5:7e:fe:63:4a:d3:66:f0:22:56:ce:ae:11:8e:c3:30:5c:13: 8d:13:75:ad:d9:a9:92:ee:f6:f2:32:65:d0:69:16:bc:ae:90: b4:33:04:e7:48:e9:2b:3d:c3:43:5e:49:d4:c3:f2:eb:c0:11: 1a:19:34:fc:9a:4a:c7:04:33:d6:48:eb:45:9f:eb:34:25:20: d2:84:bd:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI4tU/NyeC/Vt4sZZxgCScswZIxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDA3WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDFmMGFhYTc3YzM1OWRmYzBiODE5MDAxYzEzMzEwZmUy MzVkYzIwNzE3MDRkNGQzY2NiYzQ3YTQ3YjM1NGUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy7o5SkvmhV7HcW4j45ZgTwjFeuqhDGrF7SQmsj/ilzUAy zAUlCgO0gkrNlgC3BZvPFGoEPwfhLSNLVe/QSDYVvjwMrCY0AR80Zi2XQ9rXXnXQ wLRYCNLbRYlnRMY1igS5AKbJeIbC36WrNJVu303tzhSPncplwdKHhsIE9ObVLJRa 34n75byUyUNtnNsn6NR1KTXKPhMjEEtinzoN5Tde7xKpkIy/54hI+hByWyDDWoTI vzeAkc8OrPt6IKJL7VneQm5miTry4aVcKVQEgT3xyVfCH1HJer8O2aml62iyn1Ga qI/c/AllVNC8ofppj4o6JTmL+yWZkHwru5zQn4U1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUovDpFzKbvJ1DHtUthPHrPuYvaD4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU0NTc4NjVjLTA1Y2MtNDk2ZS05MzQ0LTllYzdkNTI2NmUyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QAwDQYJKoZIhvcNAQELBQADggEBAJ/YFhH6WtOkelAJ82lPc4Ff 5IqKXUtSDdbAvZ7/R7jkxAU2k31WvqTMYRhDmXP/1HYpjnRmUfpw5lMwsQ/b7uy8 8ho2PYr2r32ca0E0HJ53uO6XmorKZOyWL9QXYrRARvtXQYoXr0MIDaLcAKboaTCf EOCx6kLhxK5ThQ995hROaXZ1L6j0fF8LKHRrwdls4opooUt3cxLabqoGMZs1PTvW XuSHVBpFuz4eDE2T9doNYJG/tNV+/mNK02bwIlbOrhGOwzBcE40Tda3ZqZLu9vIy ZdBpFryukLQzBOdI6Ss9w0NeSdTD8uvAERoZNPyaSscEM9ZI60Wf6zQlINKEvZY= -----END CERTIFICATE-----Generated at Mon Nov 9 12:08:09 2026 by rpki-client