$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa File: a1083a01-360a-4b23-a3a3-630df82536fc.roa (raw, json) Hash identifier: ZiFkjz38seLfjB1bCgvNriZfiqiWQjenszN0PQ62l5Y= Subject key identifier: 92:14:02:31:83:8C:8D:8D:F6:9D:EB:B3:6D:C1:88:35:46:71:F8:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 434B70703D9FBCDB32F0B0F49B04EB3372AFA8BE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa Signing time: Mon 26 Oct 2026 04:10:07 +0000 ROA not before: Mon 26 Oct 2026 04:10:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4b:70:70:3d:9f:bc:db:32:f0:b0:f4:9b:04:eb:33:72:af:a8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=f9ef3e4e23cbda9812fc555776197e42ad1af751ef71b58feaeaa89cf9b31203, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:62:c1:ed:35:ea:38:e4:05:f2:ba:f7:c3: cb:bd:4c:9b:94:b8:d9:49:a0:6f:2b:78:d9:18:a4: cc:1e:0e:fd:aa:37:49:10:fd:d9:c1:7d:b4:72:12: b2:78:c1:a8:2f:9d:fd:d4:e8:74:37:dd:61:9e:06: 8a:b2:ba:01:5e:25:17:bf:3d:63:2c:46:ac:05:a2: 3f:3b:3d:9c:7f:c2:79:5c:49:1f:0a:0c:8d:eb:26: 53:95:47:d3:d3:fc:c9:cd:e0:f9:52:54:68:b9:89: c6:11:b5:ac:8d:f1:b9:1a:e7:e9:e5:1c:93:3e:57: e2:27:3d:b4:62:3e:69:b7:69:d0:84:d3:bc:1e:bc: 50:ea:cf:d5:84:e7:af:bf:fd:08:53:40:33:f2:b2: d7:6b:92:50:d0:4b:27:09:33:9a:db:58:4f:ef:01: b4:96:41:7b:20:52:77:4a:4e:33:d9:39:03:eb:4a: b6:82:58:a0:96:80:d0:30:8d:40:46:d6:a9:25:4b: d1:cc:b3:ac:b8:96:ca:54:15:9e:91:ec:71:47:fc: 9d:60:78:1b:e0:3e:1f:5f:a1:8c:5a:5c:c0:70:36: d6:ae:c1:46:8c:e7:57:61:29:bb:15:b1:cc:fe:eb: 0a:87:4a:60:0b:ea:11:2e:37:0a:6e:2a:2b:bb:f9: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:14:02:31:83:8C:8D:8D:F6:9D:EB:B3:6D:C1:88:35:46:71:F8:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:80::/48 Signature Algorithm: sha256WithRSAEncryption 88:c6:2c:25:ee:64:c6:99:39:e9:37:8e:a4:09:f0:2b:34:14: da:8f:70:12:bf:90:ef:0f:8b:a4:80:68:88:6e:18:57:bc:32: 30:3b:66:20:ff:fa:87:fd:75:b5:a3:67:71:6d:bd:00:ca:f5: cc:d5:e8:6b:e7:0c:e0:67:00:b6:10:76:98:99:08:bc:ea:a4: ec:7d:5c:ff:65:38:80:3e:dd:47:d1:06:4d:7a:4b:31:11:4f: a6:0d:8a:6d:e0:a3:5a:64:5d:e0:57:2d:16:ea:b8:e7:15:c2: 72:5c:dd:88:a9:64:37:59:33:50:d9:96:c0:58:4b:17:31:9c: f1:62:af:97:ca:2f:e3:36:8a:40:1c:34:2f:72:74:b3:23:9a: db:8c:45:dd:99:2d:74:8c:89:bc:e2:dc:13:5a:5b:ad:0f:14: f9:8e:b9:6b:b3:61:0a:58:2f:73:5f:1b:19:7d:fd:e2:d4:db: 5a:56:31:7d:0a:6a:cb:7f:7e:9b:1e:89:f6:eb:0d:0b:31:da: 1f:53:d7:14:3b:0e:ca:8b:3f:70:f4:ee:bd:03:73:3b:b0:45: 08:f0:91:05:73:93:bf:0f:9d:b8:39:51:03:b8:ea:a0:27:88: 80:ec:f6:fa:4e:d6:2e:3e:0a:ec:99:0a:6d:f9:c4:e8:56:5c: 27:05:47:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ0twcD2fvNsy8LD0mwTrM3KvqL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWVmM2U0ZTIzY2JkYTk4MTJmYzU1NTc3NjE5N2U0MmFk MWFmNzUxZWY3MWI1OGZlYWVhYTg5Y2Y5YjMxMjAzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOnmLB7TXqOOQF8rr3w8u9TJuUuNlJoG8reNkYpMweDv2q N0kQ/dnBfbRyErJ4wagvnf3U6HQ33WGeBoqyugFeJRe/PWMsRqwFoj87PZx/wnlc SR8KDI3rJlOVR9PT/MnN4PlSVGi5icYRtayN8bka5+nlHJM+V+InPbRiPmm3adCE 07wevFDqz9WE56+//QhTQDPystdrklDQSycJM5rbWE/vAbSWQXsgUndKTjPZOQPr SraCWKCWgNAwjUBG1qklS9HMs6y4lspUFZ6R7HFH/J1geBvgPh9foYxaXMBwNtau wUaM51dhKbsVscz+6wqHSmAL6hEuNwpuKiu7+QJfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkhQCMYOMjY32neuzbcGINUZx+KAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExMDgzYTAxLTM2MGEtNGIyMy1hM2EzLTYzMGRmODI1MzZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAIAwDQYJKoZIhvcNAQELBQADggEBAIjGLCXuZMaZOek3jqQJ8Cs0 FNqPcBK/kO8Pi6SAaIhuGFe8MjA7ZiD/+of9dbWjZ3FtvQDK9czV6GvnDOBnALYQ dpiZCLzqpOx9XP9lOIA+3UfRBk16SzERT6YNim3go1pkXeBXLRbquOcVwnJc3Yip ZDdZM1DZlsBYSxcxnPFir5fKL+M2ikAcNC9ydLMjmtuMRd2ZLXSMibzi3BNaW60P FPmOuWuzYQpYL3NfGxl9/eLU21pWMX0Kast/fpseifbrDQsx2h9T1xQ7DsqLP3D0 7r0DczuwRQjwkQVzk78Pnbg5UQO46qAniIDs9vpO1i4+CuyZCm35xOhWXCcFR/Q= -----END CERTIFICATE-----Generated at Sun Nov 8 16:58:19 2026 by rpki-client