$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa File: 5f9da082-c31f-421c-897d-e746677541ef.roa (raw, json) Hash identifier: 0WCHEL/zERR6ZplGrmtGcdE4yDKv01S2gOMcfZLLqsc= Subject key identifier: 7F:AD:45:BF:7D:97:D4:89:A3:F4:EA:59:F7:B9:6D:83:9A:7A:53:35 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 20CAA01430D7A1217B2E1484EB68B3B965EB9C31 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa Signing time: Thu 15 Oct 2026 03:20:23 +0000 ROA not before: Thu 15 Oct 2026 03:20:23 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ca:a0:14:30:d7:a1:21:7b:2e:14:84:eb:68:b3:b9:65:eb:9c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:23 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=503f760b8a3733a0444e8012b3294c2b7539b9533c085eb81a2fbbb1352f18a4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:4e:06:2e:cf:6f:4c:46:37:e3:4a:b7:6a: ac:15:30:0e:c8:88:3a:7a:43:b0:5b:67:f0:3e:43: b4:b1:5f:8b:63:9f:4b:9d:67:25:14:16:4f:d9:82: a4:d6:10:83:bb:c4:4e:0c:17:7a:1f:5d:d0:53:08: b0:51:ec:18:50:10:b9:38:94:3b:09:26:18:44:49: 10:fb:a6:fc:25:c4:27:24:58:87:81:30:ea:80:de: 3f:5c:ae:0c:d4:ca:81:cb:8f:4a:db:b1:7b:7d:5e: b0:68:9c:60:2e:29:57:44:2c:be:02:b8:89:cf:d7: c6:16:0d:d5:fd:3d:1a:57:32:2d:a5:76:06:9e:6c: 80:ec:27:fc:bd:d1:69:aa:98:70:2b:1f:f8:f2:6a: b0:a5:dd:b8:21:11:f1:7c:3f:ba:99:30:ab:69:da: 11:f6:28:09:03:9e:95:8d:b9:84:00:48:ca:7c:d4: 0e:cb:08:2f:45:15:49:67:2a:7b:8b:76:3a:ea:4f: 50:ff:2d:1d:46:d4:e7:31:a6:2a:22:94:72:31:f9: a9:ca:8f:a6:41:c9:19:e0:7a:b9:3c:48:58:2e:12: 0c:53:d9:c1:38:c7:73:c2:46:e3:f3:0a:95:4f:39: c5:9c:36:7d:5f:52:c3:2e:70:3c:fe:cf:16:3a:62: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AD:45:BF:7D:97:D4:89:A3:F4:EA:59:F7:B9:6D:83:9A:7A:53:35 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 8b:b4:0d:02:2b:a5:09:d3:88:66:bb:e6:d7:c1:7a:35:38:e9: 86:7a:c4:a7:36:f3:d0:7e:ee:bf:e0:0a:57:0b:c8:df:58:47: 28:7c:89:82:64:f6:96:da:e0:38:4a:d9:dc:45:da:a0:2c:53: 0d:46:60:fa:19:da:48:75:81:3b:0d:11:a1:ed:26:d7:c4:5b: 61:13:de:3c:bd:86:d3:12:ca:2b:78:97:7f:c5:eb:da:72:21: d1:46:5f:0f:ae:89:c2:0e:4d:9f:ee:b5:79:5c:57:de:0e:78: 6e:bc:0e:d7:12:f2:d3:49:c2:f6:f2:fe:90:37:14:7c:d7:90: c4:8c:db:9d:6a:ce:b9:a7:5d:da:68:18:de:c1:9a:5e:14:08: fa:b3:fa:38:60:2c:5e:38:4f:c2:68:b7:56:a9:ef:1a:a0:5f: 08:1c:34:01:3b:db:0b:ce:35:b6:e1:00:7b:85:68:d7:8a:00: 13:4f:54:f2:d4:64:53:12:d0:7b:c3:c3:ca:2b:29:23:cc:d7: 00:1b:e8:4f:c8:40:3e:d3:90:8f:9d:74:c9:e3:c4:60:06:e7: b9:05:a8:d5:ff:1e:81:37:95:76:b2:76:37:d4:28:12:01:74: bb:1c:5c:2e:0a:85:66:a1:7f:58:00:eb:0a:49:6e:78:c9:26: 97:07:7f:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIMqgFDDXoSF7LhSE62izuWXrnDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDIzWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDNmNzYwYjhhMzczM2EwNDQ0ZTgwMTJiMzI5NGMyYjc1 MzliOTUzM2MwODVlYjgxYTJmYmJiMTM1MmYxOGE0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdhk4GLs9vTEY340q3aqwVMA7IiDp6Q7BbZ/A+Q7SxX4tj n0udZyUUFk/ZgqTWEIO7xE4MF3ofXdBTCLBR7BhQELk4lDsJJhhESRD7pvwlxCck WIeBMOqA3j9crgzUyoHLj0rbsXt9XrBonGAuKVdELL4CuInP18YWDdX9PRpXMi2l dgaebIDsJ/y90WmqmHArH/jyarCl3bghEfF8P7qZMKtp2hH2KAkDnpWNuYQASMp8 1A7LCC9FFUlnKnuLdjrqT1D/LR1G1OcxpioilHIx+anKj6ZByRngerk8SFguEgxT 2cE4x3PCRuPzCpVPOcWcNn1fUsMucDz+zxY6YkiBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf61Fv32X1Imj9OpZ97ltg5p6UzUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVmOWRhMDgyLWMzMWYtNDIxYy04OTdkLWU3NDY2Nzc1NDFlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAIu0DQIrpQnTiGa75tfBejU4 6YZ6xKc289B+7r/gClcLyN9YRyh8iYJk9pba4DhK2dxF2qAsUw1GYPoZ2kh1gTsN EaHtJtfEW2ET3jy9htMSyit4l3/F69pyIdFGXw+uicIOTZ/utXlcV94OeG68DtcS 8tNJwvby/pA3FHzXkMSM251qzrmnXdpoGN7Bml4UCPqz+jhgLF44T8Jot1ap7xqg XwgcNAE72wvONbbhAHuFaNeKABNPVPLUZFMS0HvDw8orKSPM1wAb6E/IQD7TkI+d dMnjxGAG57kFqNX/HoE3lXaydjfUKBIBdLscXC4KhWahf1gA6wpJbnjJJpcHf2Y= -----END CERTIFICATE-----Generated at Thu Nov 5 11:21:45 2026 by rpki-client