$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5fcd505-6e9b-4ab1-9666-aed833408042.roa File: d5fcd505-6e9b-4ab1-9666-aed833408042.roa (raw, json) Hash identifier: C7IaIjNQw79ygmhfvYK6Paz5SzUKUqYgGtst00q1y0A= Subject key identifier: 13:BC:09:D5:82:E7:7F:B0:2E:C7:F7:38:D4:90:13:A5:7E:89:8C:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4639D23698E54DD7BC18A25D0FBADEDB98DA727A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5fcd505-6e9b-4ab1-9666-aed833408042.roa Signing time: Thu 08 Oct 2026 01:10:05 +0000 ROA not before: Thu 08 Oct 2026 01:10:05 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:39:d2:36:98:e5:4d:d7:bc:18:a2:5d:0f:ba:de:db:98:da:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 8 01:10:05 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=b3f63b38466575ba1e5db66d687cc3e4f9fffa1d77ab86082be284e509f218af, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:83:5e:7a:5a:ea:cd:ee:0d:ee:5e:74:86:e5: 64:bb:e6:cd:46:53:fd:83:a8:33:30:9a:a7:75:a2: 59:e0:d4:5c:65:bd:ef:6e:42:4d:99:ff:3b:08:b1: bc:2b:6e:48:62:9a:62:d7:28:4a:2e:f1:79:1a:d6: 71:38:30:b9:ef:9c:19:6a:61:2a:21:f5:62:10:0b: a1:c6:61:6f:2b:76:e9:80:99:c3:88:1f:fc:d9:95: c7:f3:61:99:78:87:03:15:27:03:53:3a:a7:82:3b: 1b:e7:d6:48:bc:b6:22:58:be:92:58:7d:b1:19:55: e1:e0:87:89:b6:ae:cb:b6:06:eb:46:09:2d:7e:49: 0e:74:35:30:f1:76:e5:57:1d:e0:62:18:aa:82:4e: e4:ad:59:61:55:8c:4c:df:b7:3d:a1:9b:27:64:de: 3a:91:47:b2:85:f2:01:82:33:aa:41:2b:96:bb:da: c2:77:be:e0:54:59:39:9b:f4:59:62:b7:7f:31:71: 35:ee:93:07:e8:9a:05:d1:b5:6c:6c:7d:bd:ab:9e: 7a:01:bc:e9:d5:a8:2c:c3:ac:b0:79:92:e4:de:b2: 1b:81:99:5e:58:b5:b1:5d:ce:cc:47:3a:60:62:4e: ad:4c:25:d4:a8:9b:d3:32:42:7f:b1:81:bd:41:f3: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BC:09:D5:82:E7:7F:B0:2E:C7:F7:38:D4:90:13:A5:7E:89:8C:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5fcd505-6e9b-4ab1-9666-aed833408042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6101::/48 Signature Algorithm: sha256WithRSAEncryption 0f:3f:56:ab:51:e7:9b:86:b1:07:09:f7:b9:68:17:b2:d8:bb: 5e:e3:c6:51:31:9f:29:2b:25:72:e4:df:c7:dc:de:f5:14:20: dd:e0:5a:65:e0:ac:7c:89:e0:5a:56:76:45:3e:93:07:46:fb: 0f:21:08:a1:ad:62:c7:2e:ca:18:c2:46:28:bc:57:8b:99:45: 19:f5:99:37:23:9e:26:02:ef:86:36:84:51:27:93:36:8e:2e: f5:c1:e9:af:38:78:2e:1e:90:f2:4d:7f:ff:6d:3b:97:73:7b: cf:9a:7a:7e:49:e8:ac:85:2e:ee:a6:6d:a6:44:31:ef:5b:22: 82:f0:41:cc:a9:29:f8:12:58:62:08:f5:f7:a6:ed:d7:46:6a: 01:e9:5d:17:f6:fb:8e:a4:3f:1c:bb:45:96:58:a6:9d:16:51: 78:6b:82:a8:67:82:96:cc:8b:1f:27:0e:94:29:cf:03:f2:4b: d2:ac:c1:67:dc:01:c0:15:59:3b:79:12:2e:0f:a8:90:3d:6d: 0b:05:70:a2:bb:48:51:29:5a:e4:22:42:09:05:4c:9b:e6:f9: af:5a:27:c3:37:58:bd:76:45:18:b9:b0:e3:0d:d7:6a:a1:6f: a9:71:71:92:a8:11:4c:7b:e1:54:31:dc:a7:eb:68:ac:c8:8b: 40:e4:62:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURjnSNpjlTde8GKJdD7re25jacnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA4MDExMDA1WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2Y2M2IzODQ2NjU3NWJhMWU1ZGI2NmQ2ODdjYzNlNGY5 ZmZmYTFkNzdhYjg2MDgyYmUyODRlNTA5ZjIxOGFmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjg156WurN7g3uXnSG5WS75s1GU/2DqDMwmqd1olng1Fxl ve9uQk2Z/zsIsbwrbkhimmLXKEou8Xka1nE4MLnvnBlqYSoh9WIQC6HGYW8rdumA mcOIH/zZlcfzYZl4hwMVJwNTOqeCOxvn1ki8tiJYvpJYfbEZVeHgh4m2rsu2ButG CS1+SQ50NTDxduVXHeBiGKqCTuStWWFVjEzftz2hmydk3jqRR7KF8gGCM6pBK5a7 2sJ3vuBUWTmb9Flit38xcTXukwfomgXRtWxsfb2rnnoBvOnVqCzDrLB5kuTeshuB mV5YtbFdzsxHOmBiTq1MJdSom9MyQn+xgb1B8weJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUE7wJ1YLnf7Aux/c41JATpX6JjCowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q1ZmNkNTA1LTZlOWItNGFiMS05NjY2LWFlZDgzMzQwODA0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQEwDQYJKoZIhvcNAQELBQADggEBAA8/VqtR55uGsQcJ97loF7LY u17jxlExnykrJXLk38fc3vUUIN3gWmXgrHyJ4FpWdkU+kwdG+w8hCKGtYscuyhjC Rii8V4uZRRn1mTcjniYC74Y2hFEnkzaOLvXB6a84eC4ekPJNf/9tO5dze8+aen5J 6KyFLu6mbaZEMe9bIoLwQcypKfgSWGII9fem7ddGagHpXRf2+46kPxy7RZZYpp0W UXhrgqhngpbMix8nDpQpzwPyS9KswWfcAcAVWTt5Ei4PqJA9bQsFcKK7SFEpWuQi QgkFTJvm+a9aJ8M3WL12RRi5sOMN12qhb6lxcZKoEUx74VQx3KfraKzIi0DkYj8= -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:37 2026 by rpki-client