$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa File: bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa (raw, json) Hash identifier: RwtR9DQy9aGL8lonokCDRpLvTkUQD49iOHl77AaWPVk= Subject key identifier: E5:5D:52:BD:01:B1:D9:27:1E:82:5D:5C:45:11:F2:5E:B5:B6:58:E8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24A440185F3DB7CBD66020035B2B7BF72D16F939 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa Signing time: Mon 26 Oct 2026 04:20:09 +0000 ROA not before: Mon 26 Oct 2026 04:20:09 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a4:40:18:5f:3d:b7:cb:d6:60:20:03:5b:2b:7b:f7:2d:16:f9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:09 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=5956a5aefa80640c4054f76f8e887ded6d80dd14fed9e813253021763bdb5778, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:1a:9a:39:b3:57:94:51:66:4e:d6:b9:ec: c0:9e:ec:af:0b:0f:f6:d1:f6:67:81:eb:ed:18:f9: 21:41:e7:af:8a:02:3b:0f:ce:ac:5e:1e:99:be:40: c6:1d:1f:c8:52:bc:72:93:e9:91:1c:7c:9d:66:dc: 02:83:d2:16:cc:48:14:e8:10:97:74:be:e3:c9:21: cf:2a:44:23:72:7e:23:5f:23:31:83:4f:7a:6e:c8: db:93:a7:05:bb:75:ca:1a:6c:50:11:f6:98:6a:0d: b3:81:57:58:d2:d8:0a:bb:9b:2f:c4:58:68:cd:62: 12:d8:7f:e8:f5:17:f3:9a:9a:28:a5:5c:76:99:dc: 39:90:0e:c2:ba:49:69:f2:c0:ab:8e:66:99:65:97: a2:ee:15:59:18:ac:c0:71:cc:db:33:1c:94:46:07: d1:a4:72:74:f0:b0:a7:df:96:bf:48:80:e7:0c:b7: 5c:0d:db:e8:35:76:17:6d:60:b8:84:56:53:92:af: 3b:21:6f:9b:80:7b:fc:06:d3:a2:1f:f6:6e:32:bf: 68:70:07:93:b5:17:0a:bc:4b:2c:08:fa:03:c3:06: 63:2c:5c:21:ab:e5:4c:c6:01:18:4d:e1:a0:99:fa: e0:72:cb:79:5c:67:7d:fc:9f:ce:83:d7:93:ba:c7: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5D:52:BD:01:B1:D9:27:1E:82:5D:5C:45:11:F2:5E:B5:B6:58:E8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5519::/48 Signature Algorithm: sha256WithRSAEncryption 71:73:9d:47:8d:3a:2b:7e:76:ff:58:fc:10:28:3d:a9:21:79: 34:8a:18:65:bd:18:b8:e7:4d:84:47:87:52:3e:d9:fd:48:1c: 79:90:72:25:ed:34:23:72:f8:a0:3e:db:ab:ec:d2:cc:18:53: 1a:a1:6e:90:16:8c:98:af:af:b8:9b:aa:24:19:c5:fd:cb:77: 11:cd:0d:c3:fe:36:93:3f:76:41:c4:fb:37:ea:c0:27:3e:bd: 5c:3d:ed:c8:32:ce:c6:a0:e8:9c:80:fe:53:c0:1d:cc:0a:c8: 00:e5:f2:d2:e6:fe:e8:9f:4d:26:5b:94:82:58:15:49:c2:db: b9:4d:4c:98:d4:14:21:91:e7:03:1c:e7:c4:58:98:f4:29:ff: cd:13:9c:40:38:18:2b:6e:a6:76:04:31:f5:d5:d9:5c:cb:ee: 34:c6:d7:8a:c5:32:70:ca:61:03:63:2f:b4:67:ff:8a:5f:61: 88:ad:63:b0:2b:3b:39:46:53:ba:30:b9:4b:df:e5:94:27:09: 92:ff:a0:c9:53:bd:aa:d8:55:9f:ef:b4:76:6e:e6:6f:7b:dc: 63:86:84:5e:9e:04:b9:f7:2f:26:2e:f8:3c:71:39:85:42:d9: 0b:8f:d1:8a:5b:ee:32:f8:ce:49:96:8e:e3:c2:97:bf:40:15: a1:a6:a5:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJKRAGF89t8vWYCADWyt79y0W+TkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDA5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTU2YTVhZWZhODA2NDBjNDA1NGY3NmY4ZTg4N2RlZDZk ODBkZDE0ZmVkOWU4MTMyNTMwMjE3NjNiZGI1Nzc4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxpBqaObNXlFFmTta57MCe7K8LD/bR9meB6+0Y+SFB56+K AjsPzqxeHpm+QMYdH8hSvHKT6ZEcfJ1m3AKD0hbMSBToEJd0vuPJIc8qRCNyfiNf IzGDT3puyNuTpwW7dcoabFAR9phqDbOBV1jS2Aq7my/EWGjNYhLYf+j1F/Oamiil XHaZ3DmQDsK6SWnywKuOZplll6LuFVkYrMBxzNszHJRGB9GkcnTwsKfflr9IgOcM t1wN2+g1dhdtYLiEVlOSrzshb5uAe/wG06If9m4yv2hwB5O1Fwq8SywI+gPDBmMs XCGr5UzGARhN4aCZ+uByy3lcZ338n86D15O6xy1lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5V1SvQGx2Scegl1cRRHyXrW2WOgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkYTMzODAwLTEwOGQtNGViNy1iYmM4LWYxZjNhNWEwODhlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRkwDQYJKoZIhvcNAQELBQADggEBAHFznUeNOit+dv9Y/BAoPakh eTSKGGW9GLjnTYRHh1I+2f1IHHmQciXtNCNy+KA+26vs0swYUxqhbpAWjJivr7ib qiQZxf3LdxHNDcP+NpM/dkHE+zfqwCc+vVw97cgyzsag6JyA/lPAHcwKyADl8tLm /uifTSZblIJYFUnC27lNTJjUFCGR5wMc58RYmPQp/80TnEA4GCtupnYEMfXV2VzL 7jTG14rFMnDKYQNjL7Rn/4pfYYitY7ArOzlGU7owuUvf5ZQnCZL/oMlTvarYVZ/v tHZu5m973GOGhF6eBLn3LyYu+DxxOYVC2QuP0Ypb7jL4zkmWjuPCl79AFaGmpfY= -----END CERTIFICATE-----Generated at Sun Nov 8 16:49:46 2026 by rpki-client