$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa File: a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json) Hash identifier: wV4LvZ40yXIC1X+sDfB5SjsET5fkA72+ps+ephpZ/4Q= Subject key identifier: 13:BC:6D:3D:76:FA:41:47:FA:3D:C0:4D:F3:30:66:12:DC:16:E1:03 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0AB23024A907351CCBA846429F112B1CE2674912 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa Signing time: Mon 26 Oct 2026 04:10:36 +0000 ROA not before: Mon 26 Oct 2026 04:10:36 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:30:24:a9:07:35:1c:cb:a8:46:42:9f:11:2b:1c:e2:67:49:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:36 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=35303105a38f105f0d149750fd712cb45dd692c775b83735829a3670429a33a4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8f:ef:fc:00:75:a8:aa:2e:88:bb:96:b8:9b: c9:b4:ac:88:64:04:93:6b:29:7d:9c:be:47:b2:11: ec:f7:a1:af:78:bf:15:67:bb:ce:78:75:a1:e0:8f: 9b:89:56:16:07:e3:5d:ac:0b:c9:9d:48:79:1e:35: 2d:b1:a7:33:47:f6:0c:fb:00:85:6d:ec:52:9e:88: 8b:e0:aa:59:fb:ee:52:4d:e9:5e:af:13:d5:dd:5f: 74:b2:af:a2:e9:14:3a:c6:a6:a1:e3:ff:9a:c4:29: b4:e7:8b:5b:db:96:4a:0b:0b:b1:07:8d:dd:02:ba: ac:9e:0d:ce:dd:3c:55:3b:e2:36:fa:fe:f2:72:8c: d5:95:21:7b:da:eb:1a:b3:5b:05:36:7e:11:36:9a: 20:66:fc:20:a7:65:58:a9:65:80:27:62:5c:9c:72: 8b:5a:72:2c:31:a9:95:7f:19:e6:d7:cc:02:f0:c5: ce:b9:d0:7f:25:b9:1c:b9:2c:a0:83:b9:73:64:9e: 59:be:b5:89:66:73:72:1a:a1:e3:d7:6f:f5:9a:3c: 67:28:f6:5c:e4:12:d6:bd:c2:9e:ad:8b:d4:3f:cb: fc:f0:cc:10:e4:75:57:92:b1:fc:9b:f6:88:19:e5: 8e:73:7f:e9:33:8b:5d:42:a6:1b:29:48:40:e4:96: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BC:6D:3D:76:FA:41:47:FA:3D:C0:4D:F3:30:66:12:DC:16:E1:03 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 8b:ca:b2:af:8b:57:e9:6c:02:fa:c0:a8:43:f8:ce:bb:01:5a: 70:3b:72:db:9e:14:d7:e2:9a:a9:a7:fb:3b:6e:ac:51:23:b5: a0:b3:07:08:42:9e:3c:34:fc:5f:c8:e3:da:e3:c4:3c:7a:c5: c5:ee:47:53:b5:17:e2:f7:0e:6c:7f:20:5f:46:9f:78:75:47: 4f:0e:62:f6:88:70:47:5a:30:99:a0:62:f4:7e:bd:5a:e8:67: 90:a8:9f:11:70:b8:e3:af:d1:6d:91:3e:50:34:e8:aa:df:bf: 40:fd:f9:0b:a2:1a:55:77:c3:c8:ee:9a:c0:51:5b:23:c4:9b: 63:6f:5d:85:85:97:cf:b2:1c:86:12:b5:fc:68:f2:87:49:3f: fb:32:53:e0:be:51:11:3c:1e:c1:da:99:57:5d:db:7e:73:0f: da:51:c6:62:c0:b8:68:a8:8d:9b:fa:3c:79:2a:85:80:98:1b: 66:b4:c0:61:d4:0d:a9:28:3b:df:51:bc:f1:1a:ac:5c:79:ae: 0c:8e:ba:0c:4a:74:65:e1:2c:ed:3c:91:5f:61:82:f5:89:f9: 73:c5:91:9d:76:94:9b:46:c4:b6:d5:d0:ed:f3:d6:67:13:46: 0c:c3:01:a2:16:43:5d:43:ae:ed:08:54:e0:0e:b4:19:16:dc: 2b:24:f3:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCrIwJKkHNRzLqEZCnxErHOJnSRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDM2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTMwMzEwNWEzOGYxMDVmMGQxNDk3NTBmZDcxMmNiNDVk ZDY5MmM3NzViODM3MzU4MjlhMzY3MDQyOWEzM2E0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnj+/8AHWoqi6Iu5a4m8m0rIhkBJNrKX2cvkeyEez3oa94 vxVnu854daHgj5uJVhYH412sC8mdSHkeNS2xpzNH9gz7AIVt7FKeiIvgqln77lJN 6V6vE9XdX3Syr6LpFDrGpqHj/5rEKbTni1vblkoLC7EHjd0CuqyeDc7dPFU74jb6 /vJyjNWVIXva6xqzWwU2fhE2miBm/CCnZVipZYAnYlyccotaciwxqZV/GebXzALw xc650H8luRy5LKCDuXNknlm+tYlmc3IaoePXb/WaPGco9lzkEta9wp6ti9Q/y/zw zBDkdVeSsfyb9ogZ5Y5zf+kzi11CphspSEDkll/FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUE7xtPXb6QUf6PcBN8zBmEtwW4QMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwMDI0ZTAwLWY5MzctNGI2My05MWRmLWQ0NWNlMGE2YTI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBAIvKsq+LV+lsAvrAqEP4zrsB WnA7ctueFNfimqmn+zturFEjtaCzBwhCnjw0/F/I49rjxDx6xcXuR1O1F+L3Dmx/ IF9Gn3h1R08OYvaIcEdaMJmgYvR+vVroZ5ConxFwuOOv0W2RPlA06Krfv0D9+Qui GlV3w8jumsBRWyPEm2NvXYWFl8+yHIYStfxo8odJP/syU+C+URE8HsHamVdd235z D9pRxmLAuGiojZv6PHkqhYCYG2a0wGHUDakoO99RvPEarFx5rgyOugxKdGXhLO08 kV9hgvWJ+XPFkZ12lJtGxLbV0O3z1mcTRgzDAaIWQ11Dru0IVOAOtBkW3Csk83c= -----END CERTIFICATE-----Generated at Tue Oct 27 06:01:10 2026 by rpki-client