$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: y9rxhVAuCqKrscZOiiHTKW76rvRXUUtZ4MaAESRPlpE= Subject key identifier: 75:78:A4:74:66:2A:59:89:CE:6D:36:72:BA:9A:62:80:4A:B8:D6:C7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5CA7D2A14D89130DECC77CD9E2B6CA71DF5E894E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Mon 26 Oct 2026 04:20:53 +0000 ROA not before: Mon 26 Oct 2026 04:20:53 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a7:d2:a1:4d:89:13:0d:ec:c7:7c:d9:e2:b6:ca:71:df:5e:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:53 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=bfdae18a2837501df26884b97ebe3a77232a25137b522dd0154aad7f08ef706a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:72:ba:ac:8a:aa:91:f9:54:53:3e:82:46: 32:23:a4:c5:b5:51:93:76:72:11:09:7a:f6:41:76: 86:c0:57:f8:f8:f4:0f:56:bf:06:58:a8:84:cc:bd: 21:af:35:4b:0a:cd:5b:c3:88:79:3c:b6:a0:a2:9e: b9:08:0a:ab:53:2c:3a:9f:01:8d:5d:56:cd:92:1c: 64:09:0b:c6:93:55:b5:a2:bf:18:99:1c:52:5b:74: 64:ac:df:4b:2c:aa:3c:8d:a7:1b:99:d0:ec:32:27: 10:5a:aa:a2:3f:d1:c1:9c:18:4e:d2:4d:c6:28:a4: fe:e6:dd:01:59:38:26:46:a2:c7:52:e5:56:18:3e: 65:08:5f:56:52:6e:92:99:a1:e1:20:62:b6:c1:72: 78:e7:44:83:c1:60:bf:97:a3:aa:af:6a:56:65:45: 42:cd:b6:3b:7e:40:bc:12:79:a5:55:fa:10:51:ea: 2e:a4:53:c7:b9:4f:8d:8f:60:5f:22:06:70:2e:14: 12:d4:79:65:d6:5e:5c:09:99:e9:bb:ef:51:93:d6: 72:64:7c:ca:c3:6f:68:84:de:90:b3:49:e3:91:cf: 7d:96:e0:60:98:7a:b0:23:f6:d7:57:6d:ed:97:eb: 8e:a2:24:35:ff:f5:52:0b:3b:8b:33:50:54:83:62: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:A4:74:66:2A:59:89:CE:6D:36:72:BA:9A:62:80:4A:B8:D6:C7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 98:bb:9f:7a:be:52:df:19:8d:37:a6:0e:0e:01:09:2d:f0:80: 41:d7:1f:35:5c:55:a5:3b:3e:56:12:44:2a:91:ab:77:b6:24: 7c:55:c5:55:d9:97:36:f6:df:2e:c6:cc:af:b3:66:80:0b:1c: 39:1c:93:27:d9:5d:ef:e7:b4:bb:4c:10:9a:59:56:d2:2d:36: 91:2d:10:b7:3f:48:96:42:79:88:62:5a:b6:86:3e:a5:34:77: a8:15:6f:84:ee:94:3c:f3:24:8a:b5:69:44:e1:ac:b8:c9:3b: e7:ee:ef:69:6b:b9:97:20:1d:e7:6e:85:f1:07:c4:ac:3d:d4: 62:46:1c:e3:a8:e7:e1:5d:74:46:dc:95:7d:2c:26:d5:27:c8: 3a:5d:45:6a:a6:f3:9d:82:c5:b5:53:e0:1a:72:7d:96:fc:c1: fc:80:a3:18:2e:f6:03:60:ee:15:37:f7:2c:3f:2d:39:84:f7: 25:dd:11:22:65:2d:ff:90:28:72:7b:71:03:ab:08:c6:d7:a4: b8:00:e8:f7:51:4c:48:b4:2f:ef:e5:21:bd:58:ee:9b:dd:03: 3b:ca:49:b7:22:55:0f:02:bb:d8:0d:fe:a1:ad:9a:76:72:ab: fb:ae:88:ff:a9:9d:9f:bc:f3:e8:15:3e:e4:7d:af:f2:03:50: d7:1f:e7:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXKfSoU2JEw3sx3zZ4rbKcd9eiU4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDUzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmRhZTE4YTI4Mzc1MDFkZjI2ODg0Yjk3ZWJlM2E3NzIz MmEyNTEzN2I1MjJkZDAxNTRhYWQ3ZjA4ZWY3MDZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNznK6rIqqkflUUz6CRjIjpMW1UZN2chEJevZBdobAV/j4 9A9WvwZYqITMvSGvNUsKzVvDiHk8tqCinrkICqtTLDqfAY1dVs2SHGQJC8aTVbWi vxiZHFJbdGSs30ssqjyNpxuZ0OwyJxBaqqI/0cGcGE7STcYopP7m3QFZOCZGosdS 5VYYPmUIX1ZSbpKZoeEgYrbBcnjnRIPBYL+Xo6qvalZlRULNtjt+QLwSeaVV+hBR 6i6kU8e5T42PYF8iBnAuFBLUeWXWXlwJmem771GT1nJkfMrDb2iE3pCzSeORz32W 4GCYerAj9tdXbe2X646iJDX/9VILO4szUFSDYp/9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdXikdGYqWYnObTZyuppigEq41scwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBAJi7n3q+Ut8ZjTemDg4BCS3w gEHXHzVcVaU7PlYSRCqRq3e2JHxVxVXZlzb23y7GzK+zZoALHDkckyfZXe/ntLtM EJpZVtItNpEtELc/SJZCeYhiWraGPqU0d6gVb4TulDzzJIq1aUThrLjJO+fu72lr uZcgHeduhfEHxKw91GJGHOOo5+FddEbclX0sJtUnyDpdRWqm852CxbVT4BpyfZb8 wfyAoxgu9gNg7hU39yw/LTmE9yXdESJlLf+QKHJ7cQOrCMbXpLgA6PdRTEi0L+/l Ib1Y7pvdAzvKSbciVQ8Cu9gN/qGtmnZyq/uuiP+pnZ+88+gVPuR9r/IDUNcf5/U= -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:42 2026 by rpki-client