$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa File: c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa (raw, json) Hash identifier: dP9gPTgvGkdXioioOdcrG8A3U6TvG1/Vedlh8FEGPQo= Subject key identifier: BF:12:2E:28:D7:A9:40:9B:33:80:93:78:1F:CA:94:20:6C:44:BF:95 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5BC2895522E3C79A08D8A61A762B279FA8AB232C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa Signing time: Mon 26 Oct 2026 04:20:42 +0000 ROA not before: Mon 26 Oct 2026 04:20:42 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c2:89:55:22:e3:c7:9a:08:d8:a6:1a:76:2b:27:9f:a8:ab:23:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:42 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b0a78ae93fb750c2949570f3fc097579e8d0a343aa4446359af1b3a4a4a0fdfd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:45:5f:2c:29:16:e0:e5:14:a2:9b:08:40: 0f:69:90:70:d3:31:cf:4d:b4:cd:ea:1e:63:a7:41: 93:4f:3d:28:50:09:87:65:40:61:ae:e2:9f:d7:ac: c5:bc:48:38:f4:1b:fd:76:4d:45:1f:f4:bd:6b:8d: 70:8f:9a:fa:0a:77:f3:3c:65:93:fc:c2:2c:56:4f: cb:22:00:51:b2:9d:32:3a:00:af:a2:15:50:ae:cf: b9:05:9d:ad:dd:5f:17:36:d5:65:b7:77:de:4a:e2: 7c:72:82:28:b7:1b:dd:0b:1d:d3:f3:ee:ad:05:04: d2:97:90:31:11:5e:b2:fb:72:9b:49:03:d7:bd:05: ff:ec:d5:d8:f3:bc:83:48:6a:35:8e:53:81:3e:dd: 8d:c7:38:0e:eb:9f:bc:f4:7a:6f:1d:51:1a:f1:06: 60:e0:52:b4:41:fd:79:ed:0a:45:e5:e9:4d:48:8e: 3d:10:cb:9c:a1:e7:b9:76:9a:7e:3b:b2:62:7e:43: f1:cf:4a:3d:51:76:e0:7e:5d:b2:3d:54:72:d0:f0: 87:a5:c0:54:34:65:77:7a:c4:53:64:15:5d:eb:a3: 33:26:05:b3:51:b9:d8:95:fa:78:d8:f2:b0:9d:5a: ed:da:b9:86:bb:cd:50:df:ea:89:92:88:91:2d:69: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:12:2E:28:D7:A9:40:9B:33:80:93:78:1F:CA:94:20:6C:44:BF:95 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/42 Signature Algorithm: sha256WithRSAEncryption 1b:6e:13:bb:a4:45:57:6c:d6:c9:10:c1:6d:c1:70:47:2f:d8: 51:94:4b:36:64:2a:f1:70:2d:d9:15:01:6e:c9:1f:c0:ba:21: 62:41:c8:9e:6c:d6:27:2b:6e:58:4d:33:12:51:0e:d2:cb:0a: d2:35:b3:67:1b:a7:32:15:54:14:97:0d:61:ca:52:5a:03:c8: 47:5b:89:8e:c3:2f:82:e6:37:a1:8a:7b:9a:ea:81:08:e1:f1: 78:42:f5:fb:bc:47:cf:3c:fc:79:80:ef:18:55:bc:80:53:8a: 2a:5a:19:cf:78:2c:d7:31:f2:56:d5:42:3e:6d:4e:9f:a1:ca: 50:7e:33:8f:03:fd:5e:e2:0f:3e:f7:5f:0b:91:99:5e:1d:0c: 26:34:4e:f8:e4:04:c2:5e:2c:47:d8:aa:b0:fe:d1:5e:50:47: a1:ad:57:77:aa:0c:48:db:32:3b:65:fd:bf:bf:02:f4:6c:bd: f7:4d:77:03:fc:60:23:68:d3:98:76:48:c9:fd:ad:56:9b:43: 22:e4:aa:ae:b7:21:56:8a:85:f9:1e:04:91:f3:fe:1b:eb:2e: 3d:61:d7:7a:2d:5e:8c:8f:b4:0d:70:89:7c:4c:f0:d9:00:b9: e9:70:11:ab:79:e6:c0:02:3a:61:98:fb:f1:9b:97:9c:f2:45: bf:b2:52:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW8KJVSLjx5oI2KYadisnn6irIywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDQyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGE3OGFlOTNmYjc1MGMyOTQ5NTcwZjNmYzA5NzU3OWU4 ZDBhMzQzYWE0NDQ2MzU5YWYxYjNhNGE0YTBmZGZkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrNUVfLCkW4OUUopsIQA9pkHDTMc9NtM3qHmOnQZNPPShQ CYdlQGGu4p/XrMW8SDj0G/12TUUf9L1rjXCPmvoKd/M8ZZP8wixWT8siAFGynTI6 AK+iFVCuz7kFna3dXxc21WW3d95K4nxygii3G90LHdPz7q0FBNKXkDERXrL7cptJ A9e9Bf/s1djzvINIajWOU4E+3Y3HOA7rn7z0em8dURrxBmDgUrRB/XntCkXl6U1I jj0Qy5yh57l2mn47smJ+Q/HPSj1RduB+XbI9VHLQ8IelwFQ0ZXd6xFNkFV3rozMm BbNRudiV+njY8rCdWu3auYa7zVDf6omSiJEtaf8hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvxIuKNepQJszgJN4H8qUIGxEv5UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0ZTUyYWJmLTRkN2UtNDcwNy1iZDRlLTFjZWJhNjRlMThjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75gAwDQYJKoZIhvcNAQELBQADggEBABtuE7ukRVds1skQwW3BcEcv 2FGUSzZkKvFwLdkVAW7JH8C6IWJByJ5s1icrblhNMxJRDtLLCtI1s2cbpzIVVBSX DWHKUloDyEdbiY7DL4LmN6GKe5rqgQjh8XhC9fu8R888/HmA7xhVvIBTiipaGc94 LNcx8lbVQj5tTp+hylB+M48D/V7iDz73XwuRmV4dDCY0TvjkBMJeLEfYqrD+0V5Q R6GtV3eqDEjbMjtl/b+/AvRsvfdNdwP8YCNo05h2SMn9rVabQyLkqq63IVaKhfke BJHz/hvrLj1h13otXoyPtA1wiXxM8NkAuelwEat55sACOmGY+/Gbl5zyRb+yUn4= -----END CERTIFICATE-----Generated at Thu Nov 5 11:15:10 2026 by rpki-client