$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa File: dc372e7b-796d-474f-9081-c4d593d48cd3.roa (raw, json) Hash identifier: ryJ1N/anMxXXW4taYsScc+PpZdjRf+RhX8vyseI6GCI= Subject key identifier: 07:C7:15:23:7D:AB:71:7B:BE:42:FE:F7:A7:47:E0:D5:C3:90:4F:AF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2F5B249D4C1C9B9505AC9B2444F99DFC35E46CC4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa Signing time: Wed 28 Oct 2026 00:02:13 +0000 ROA not before: Wed 28 Oct 2026 00:02:13 +0000 ROA not after: Tue 26 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5b:24:9d:4c:1c:9b:95:05:ac:9b:24:44:f9:9d:fc:35:e4:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 28 00:02:13 2026 GMT Not After : Jan 26 23:59:59 2027 GMT Subject: serialNumber=446185a2f8a120d6f1d715e91e2bbaaee7ece56f4333fcf2eba833392f30de84, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:be:04:5d:7e:86:77:bc:8c:f9:96:5d:fa: 83:79:98:9c:81:14:66:27:8d:ff:fe:1c:6f:58:82: 33:3c:dc:4f:aa:e0:1b:69:6f:1b:a9:8f:0f:b1:99: 65:4c:c8:44:af:ae:dd:e1:3f:1c:ed:a8:1c:07:47: ab:33:17:86:6a:f0:b3:be:7f:a0:04:93:0c:63:39: df:57:83:49:cc:80:cb:56:72:8a:30:e3:af:47:d0: 4b:91:c8:b2:46:df:48:9d:78:01:08:50:83:5a:4c: 3d:41:6b:6a:0b:83:7b:2b:1f:83:cc:9e:46:1f:af: d5:49:81:79:dd:43:42:84:21:ea:71:bd:cb:b4:c9: a4:6a:e7:d7:94:6b:cb:35:da:a7:68:e0:33:7b:27: 34:d8:8a:99:e6:03:d3:19:54:b3:a3:d6:90:1c:92: 99:3f:9a:f7:4e:7d:08:db:48:d1:de:be:30:c9:aa: 26:72:07:79:2e:1a:9b:25:0c:f1:fc:a3:63:4b:58: 24:f2:7e:a6:b1:33:2e:9f:11:78:e7:e2:52:05:0d: 0b:2f:41:e7:aa:22:92:12:d6:ae:29:df:89:0a:c6: 78:02:14:30:77:bd:d6:fa:3f:b6:c2:bf:90:ae:8a: 69:80:3f:d8:2b:27:5b:8a:72:90:a6:33:f5:f7:f7: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C7:15:23:7D:AB:71:7B:BE:42:FE:F7:A7:47:E0:D5:C3:90:4F:AF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8100::/40 Signature Algorithm: sha256WithRSAEncryption 61:42:62:63:eb:84:d8:84:7b:c8:c5:2f:b4:09:bd:a5:d1:f3: fd:04:64:95:72:bf:70:c5:6d:2a:24:25:34:d7:f9:bb:66:40: 69:8c:a1:40:bf:a3:3e:60:2c:b8:35:f9:68:72:78:4d:29:28: 08:f7:c4:be:df:e9:3f:1f:2b:8a:b5:1f:21:96:07:2c:cd:24: 00:05:31:8e:a8:ce:6d:3f:8d:40:d9:98:87:71:ea:85:02:e1: 17:b2:07:b5:c6:89:69:91:e2:4e:b5:01:30:32:cb:0c:1a:ee: 89:16:d9:b2:66:7d:07:29:2f:a4:8e:4b:69:4a:a2:2b:1a:aa: f5:ea:15:21:af:ec:1c:ec:d6:ab:1b:2a:84:a1:d9:d0:93:b1: e1:d3:d0:10:df:86:c4:50:87:3a:34:c4:b2:2f:69:14:c1:4d: f2:be:0c:13:69:a3:05:41:d1:04:ba:d3:93:f9:91:04:48:50: d9:43:ee:ec:f4:e5:67:82:84:a4:d9:22:c1:eb:6a:a1:c9:44: c0:e2:46:b8:a9:af:6e:49:cb:c0:23:04:8c:86:63:de:40:dd: 3a:ec:b3:3b:e8:8f:d1:a2:f5:fc:68:39:2b:8b:a4:58:61:07: 2d:d4:ad:43:61:f9:5a:c7:b4:8b:3b:7e:b3:7c:eb:8b:e8:6b: 11:7a:65:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUL1sknUwcm5UFrJskRPmd/DXkbMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI4MDAwMjEzWhcNMjcwMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDYxODVhMmY4YTEyMGQ2ZjFkNzE1ZTkxZTJiYmFhZWU3 ZWNlNTZmNDMzM2ZjZjJlYmE4MzMzOTJmMzBkZTg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOOr4EXX6Gd7yM+ZZd+oN5mJyBFGYnjf/+HG9YgjM83E+q 4Btpbxupjw+xmWVMyESvrt3hPxztqBwHR6szF4Zq8LO+f6AEkwxjOd9Xg0nMgMtW coow469H0EuRyLJG30ideAEIUINaTD1Ba2oLg3srH4PMnkYfr9VJgXndQ0KEIepx vcu0yaRq59eUa8s12qdo4DN7JzTYipnmA9MZVLOj1pAckpk/mvdOfQjbSNHevjDJ qiZyB3kuGpslDPH8o2NLWCTyfqaxMy6fEXjn4lIFDQsvQeeqIpIS1q4p34kKxngC FDB3vdb6P7bCv5CuimmAP9grJ1uKcpCmM/X39+TJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB8cVI32rcXu+Qv73p0fg1cOQT68wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RjMzcyZTdiLTc5NmQtNDc0Zi05MDgxLWM0ZDU5M2Q0OGNkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgTANBgkqhkiG9w0BAQsFAAOCAQEAYUJiY+uE2IR7yMUvtAm9pdHz /QRklXK/cMVtKiQlNNf5u2ZAaYyhQL+jPmAsuDX5aHJ4TSkoCPfEvt/pPx8rirUf IZYHLM0kAAUxjqjObT+NQNmYh3HqhQLhF7IHtcaJaZHiTrUBMDLLDBruiRbZsmZ9 BykvpI5LaUqiKxqq9eoVIa/sHOzWqxsqhKHZ0JOx4dPQEN+GxFCHOjTEsi9pFMFN 8r4ME2mjBUHRBLrTk/mRBEhQ2UPu7PTlZ4KEpNkiwetqoclEwOJGuKmvbknLwCME jIZj3kDdOuyzO+iP0aL1/Gg5K4ukWGEHLdStQ2H5Wse0izt+s3zri+hrEXplWA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:21:22 2026 by rpki-client