$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa File: bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa (raw, json) Hash identifier: l3DYrqNcFxqCd5JoLzMBNgE/F+LLw7wwpWHw1fPV9mE= Subject key identifier: 51:CE:B2:A6:A0:BB:A5:0C:47:04:05:22:37:92:C0:95:F8:76:79:6E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 512510F03F7D590C7192655CDE37E228FBB01008 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa Signing time: Mon 26 Oct 2026 04:20:56 +0000 ROA not before: Mon 26 Oct 2026 04:20:56 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:10:f0:3f:7d:59:0c:71:92:65:5c:de:37:e2:28:fb:b0:10:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:20:56 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=36bd58f57a53718ece8bc77b74ccaaf40872e47188f17392f05f360a38713864, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:25:d1:09:e5:44:a5:a1:e6:53:63:b9:60: ea:8e:17:2b:e7:9a:14:39:22:ae:9f:a5:b3:51:4a: e7:35:30:c1:48:d2:ec:c5:d0:eb:2e:07:e9:3f:ac: 86:d9:21:c8:c0:4d:25:81:12:0e:08:f7:60:ff:3d: 4a:1f:1c:a2:14:e9:d2:ea:e1:a5:8e:66:02:d6:f3: 64:72:48:24:78:08:41:75:9f:48:b6:65:52:01:93: 77:40:1b:24:55:84:9c:db:ce:aa:b1:1a:0d:b6:f1: 29:93:b0:5b:45:a8:f1:cc:c1:76:1c:14:c5:d7:1e: 4b:03:b7:9f:ac:72:b8:82:32:cc:da:aa:d9:89:43: 1e:2e:49:61:28:07:11:97:bb:6e:1b:79:27:3b:c1: ee:6e:83:4e:78:b8:83:0e:c6:b3:b5:de:ae:6f:75: 25:9a:be:a5:63:7f:99:68:15:db:b7:3d:a6:93:f9: 50:ad:58:0f:27:58:f8:81:ec:db:3c:09:4f:66:2d: 2a:b6:6d:e8:41:fd:fe:14:18:d9:5b:3f:e5:4d:21: 7f:c9:6d:ea:2f:9e:49:57:5e:8e:b2:ef:b8:3f:5d: 7f:b0:8b:90:4a:e1:e2:e7:e8:89:fd:f7:78:43:15: 10:a5:18:8d:3b:1b:81:8a:80:02:8d:41:ce:da:1d: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:B2:A6:A0:BB:A5:0C:47:04:05:22:37:92:C0:95:F8:76:79:6E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 28:40:58:77:c4:7c:34:f5:92:7a:75:88:63:2d:cb:2a:d2:be: 09:6e:13:c9:5f:0a:be:b2:e4:3f:05:ee:a8:30:2a:da:cd:71: bb:94:ff:d0:60:9d:3d:68:c4:03:7f:fb:ed:d1:5d:fc:40:3f: 3d:a5:08:ab:42:71:b4:94:8e:0a:92:a6:5e:27:5c:05:48:50: ad:46:bc:2b:de:c8:c6:d4:c2:b8:8f:22:df:03:f5:c3:6f:9e: 9c:2a:ef:60:82:b2:88:d2:22:71:f7:5b:e2:f4:98:b7:d9:80: f2:26:30:84:21:60:d8:93:eb:b3:dc:e6:49:7f:74:5e:33:8a: eb:14:31:de:66:41:89:d5:be:e1:f3:33:34:1b:f6:62:93:52: 5c:36:c7:a6:d7:e3:c5:50:cf:6c:a2:c4:f2:53:cb:ee:98:f4: 32:b2:04:65:de:7a:07:d2:57:05:15:c3:9b:13:75:c5:1d:23: ec:11:36:fe:d7:49:af:d4:09:a9:49:8f:8c:d5:65:30:e5:c8: c7:04:7c:63:57:9c:ca:25:58:14:1f:2d:91:fb:c3:c6:ec:c5: 48:96:d2:e9:f1:e5:be:f1:31:28:c8:9d:1e:5c:44:79:1e:aa: fe:7d:dd:84:d7:ce:4c:4d:18:93:73:3f:9f:7e:dc:31:ac:ed: 53:83:18:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUSUQ8D99WQxxkmVc3jfiKPuwEAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDU2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmJkNThmNTdhNTM3MThlY2U4YmM3N2I3NGNjYWFmNDA4 NzJlNDcxODhmMTczOTJmMDVmMzYwYTM4NzEzODY0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/aSXRCeVEpaHmU2O5YOqOFyvnmhQ5Iq6fpbNRSuc1MMFI 0uzF0OsuB+k/rIbZIcjATSWBEg4I92D/PUofHKIU6dLq4aWOZgLW82RySCR4CEF1 n0i2ZVIBk3dAGyRVhJzbzqqxGg228SmTsFtFqPHMwXYcFMXXHksDt5+scriCMsza qtmJQx4uSWEoBxGXu24beSc7we5ug054uIMOxrO13q5vdSWavqVjf5loFdu3PaaT +VCtWA8nWPiB7Ns8CU9mLSq2behB/f4UGNlbP+VNIX/JbeovnklXXo6y77g/XX+w i5BK4eLn6In993hDFRClGI07G4GKgAKNQc7aHWK3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUc6ypqC7pQxHBAUiN5LAlfh2eW4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmOWE0NTMyLTMyNmUtNDVjOC1hMGQ3LWQ2MDA4YWEwZWQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQQAwDQYJKoZIhvcNAQELBQADggEBAChAWHfEfDT1knp1iGMtyyrS vgluE8lfCr6y5D8F7qgwKtrNcbuU/9BgnT1oxAN/++3RXfxAPz2lCKtCcbSUjgqS pl4nXAVIUK1GvCveyMbUwriPIt8D9cNvnpwq72CCsojSInH3W+L0mLfZgPImMIQh YNiT67Pc5kl/dF4ziusUMd5mQYnVvuHzMzQb9mKTUlw2x6bX48VQz2yixPJTy+6Y 9DKyBGXeegfSVwUVw5sTdcUdI+wRNv7XSa/UCalJj4zVZTDlyMcEfGNXnMolWBQf LZH7w8bsxUiW0unx5b7xMSjInR5cRHkeqv593YTXzkxNGJNzP59+3DGs7VODGBg= -----END CERTIFICATE-----Generated at Tue Oct 27 00:05:17 2026 by rpki-client