$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: cqaKkVitS5fRCnfVGjTjcfu3O+XLIOdBiLSKx0STmH0= Subject key identifier: 97:01:70:31:1E:E8:5E:35:C0:A0:18:08:B5:0A:B0:1A:01:55:E2:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 322F7B71D905B97E2AC188F29648FBE34BBECF9C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Thu 08 Oct 2026 01:10:07 +0000 ROA not before: Thu 08 Oct 2026 01:10:07 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2f:7b:71:d9:05:b9:7e:2a:c1:88:f2:96:48:fb:e3:4b:be:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 8 01:10:07 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=c88e27cb5e7b82627133f04e813cb765489682f678cd42c03357bd4afd6da760, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:1c:d5:b2:e5:ad:c3:cc:0a:8a:8e:aa:19: 55:0c:b2:2e:2f:8f:fc:c1:81:25:75:c8:a3:80:61: c4:8a:d4:65:5a:d3:9f:a8:6e:dd:dc:2d:7d:d4:2e: d4:8a:cb:08:14:ca:6f:de:c2:7e:1f:42:d5:84:c4: ea:6a:0c:a1:77:bf:f0:fa:c5:d3:32:1c:8b:40:8f: 25:dd:e5:23:ae:15:6c:89:c7:39:e5:0e:87:57:81: 1b:5b:b5:c3:bd:61:2c:e6:ce:cb:ba:db:ef:d4:63: d0:d2:5c:58:17:a4:2d:2d:34:52:d5:3b:60:f0:5d: b1:c3:6c:11:e8:6b:0b:35:ee:89:af:8f:e8:6a:b7: f4:8b:c4:30:40:85:75:67:82:5c:e0:f0:5e:c4:d8: 6b:3f:dd:ef:7c:64:b8:f0:97:d6:85:95:d9:41:41: 84:4c:e6:cf:65:17:8a:d4:67:66:d1:98:25:b5:7f: 36:a8:93:7b:2d:a2:00:da:7e:9f:a5:3a:8a:05:69: 64:9c:75:b5:77:d6:63:25:87:47:9a:30:b1:af:bb: 3f:dc:f5:b1:8b:a4:f7:67:50:dc:a3:e5:e1:a3:d1: b0:94:bf:f1:fa:a3:f5:c7:41:70:5a:89:f0:75:e8: bb:a4:26:f2:5f:e4:da:8d:a5:be:90:ec:20:fc:8e: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:70:31:1E:E8:5E:35:C0:A0:18:08:B5:0A:B0:1A:01:55:E2:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 69:9f:68:35:a8:e9:91:9d:09:80:f9:39:b5:bf:e8:17:ee:95: bd:bb:85:9f:3d:15:c2:99:8a:ba:b2:33:fe:e0:27:3b:07:d0: ba:0d:f4:c5:dd:a6:22:7c:6a:3d:74:d4:1d:61:f5:c7:d4:9d: 32:68:12:ca:a9:c9:c1:9e:7b:9f:1c:90:f0:ec:c6:6f:12:db: 5b:d0:5a:44:36:e5:00:38:18:84:96:2f:13:2b:dc:20:a6:af: 1b:cc:e2:95:cd:92:ea:9a:58:ca:89:37:4c:3f:e2:1c:30:e8: 81:76:f9:f8:4f:0c:ab:13:58:00:5a:c2:68:a5:74:42:cf:77: ad:2a:37:4f:d6:3a:bc:0b:51:7d:d9:c3:6a:28:51:5c:98:ae: d5:c1:38:10:00:67:ea:7b:9e:0e:64:de:0d:82:3e:ab:21:1c: 31:d8:ad:2c:87:5f:2a:38:b6:28:b3:72:bb:18:c9:cb:cf:1b: a7:6e:b4:a8:21:3c:de:cd:43:25:ca:53:d4:9c:f1:4c:2c:47: 97:8e:5b:a5:4b:a3:e8:df:c5:ae:b2:52:b7:94:2d:10:95:ee: 48:bc:13:4d:17:6e:60:94:55:46:09:81:64:a4:5d:01:43:05: 00:f3:56:92:5c:08:42:12:30:e2:24:e7:68:52:a7:68:e5:cb: 1f:e8:58:a0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMi97cdkFuX4qwYjylkj740u+z5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA4MDExMDA3WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODhlMjdjYjVlN2I4MjYyNzEzM2YwNGU4MTNjYjc2NTQ4 OTY4MmY2NzhjZDQyYzAzMzU3YmQ0YWZkNmRhNzYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzUhzVsuWtw8wKio6qGVUMsi4vj/zBgSV1yKOAYcSK1GVa 05+obt3cLX3ULtSKywgUym/ewn4fQtWExOpqDKF3v/D6xdMyHItAjyXd5SOuFWyJ xznlDodXgRtbtcO9YSzmzsu62+/UY9DSXFgXpC0tNFLVO2DwXbHDbBHoaws17omv j+hqt/SLxDBAhXVnglzg8F7E2Gs/3e98ZLjwl9aFldlBQYRM5s9lF4rUZ2bRmCW1 fzaok3stogDafp+lOooFaWScdbV31mMlh0eaMLGvuz/c9bGLpPdnUNyj5eGj0bCU v/H6o/XHQXBaifB16LukJvJf5NqNpb6Q7CD8joyrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlwFwMR7oXjXAoBgItQqwGgFV4kIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAaZ9oNajpkZ0JgPk5tb/oF+6V vbuFnz0VwpmKurIz/uAnOwfQug30xd2mInxqPXTUHWH1x9SdMmgSyqnJwZ57nxyQ 8OzGbxLbW9BaRDblADgYhJYvEyvcIKavG8zilc2S6ppYyok3TD/iHDDogXb5+E8M qxNYAFrCaKV0Qs93rSo3T9Y6vAtRfdnDaihRXJiu1cE4EABn6nueDmTeDYI+qyEc MditLIdfKji2KLNyuxjJy88bp260qCE83s1DJcpT1JzxTCxHl45bpUuj6N/FrrJS t5QtEJXuSLwTTRduYJRVRgmBZKRdAUMFAPNWklwIQhIw4iTnaFKnaOXLH+hYoA== -----END CERTIFICATE-----Generated at Tue Oct 27 08:48:48 2026 by rpki-client