$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa File: 628f9d70-75b3-4180-86d3-306061750e9f.roa (raw, json) Hash identifier: ul8i9QGSSFWsUzqLR8PVD/ZPkeTiUa9YhiDPv9ueyic= Subject key identifier: A8:B3:7F:04:97:09:95:CA:04:E0:BC:EF:02:08:BE:FC:53:CC:FB:3D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 50B9FC7DF4027ED8B264D59B7AFA1945C64CB412 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa Signing time: Mon 28 Sep 2026 00:00:07 +0000 ROA not before: Mon 28 Sep 2026 00:00:07 +0000 ROA not after: Sun 27 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b9:fc:7d:f4:02:7e:d8:b2:64:d5:9b:7a:fa:19:45:c6:4c:b4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 28 00:00:07 2026 GMT Not After : Dec 27 23:59:59 2026 GMT Subject: serialNumber=f1f1e4972146c3451475e3690d942fe247e6184cd6030e6d63a64a00db557308, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:dd:a4:00:cf:b8:c9:1f:48:67:e1:ae:6f: 35:55:5f:54:0c:49:7c:4c:79:00:89:a9:79:14:74: 7b:af:54:b8:7c:62:c4:fb:ed:40:88:a4:6c:00:70: 34:15:56:4e:8d:0d:8b:5c:27:22:4a:5a:a9:f7:c1: 20:d7:54:eb:61:b8:2d:04:95:5d:f0:03:77:2e:03: 2e:fd:44:2f:0b:ef:01:51:df:97:78:23:2f:2a:54: 86:89:a2:7a:db:7b:75:33:fb:d7:68:fc:23:17:da: f3:84:86:fc:d5:02:15:f6:96:2e:c7:c1:bc:b8:56: 6b:e1:78:09:76:11:e4:c1:97:56:c4:d0:b5:14:71: 31:b8:61:51:5f:50:30:c8:47:65:06:ba:d2:03:74: 5e:f1:7f:38:46:92:92:67:5e:9d:c2:c7:be:d7:46: 8c:b1:42:71:43:5a:b0:29:ad:00:9a:9c:e7:65:c5: 14:3e:3f:88:ff:4f:9d:25:0c:5c:63:82:6a:b0:6b: 90:66:77:76:0b:47:45:ef:12:65:da:4e:0e:7f:30: 23:88:40:51:5a:1f:8f:89:bd:c0:56:45:0f:c6:bb: de:22:17:ba:1e:64:65:d0:31:40:4a:de:8e:49:40: d3:40:26:c4:70:62:18:71:01:f7:2b:2f:d1:42:2f: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:7F:04:97:09:95:CA:04:E0:BC:EF:02:08:BE:FC:53:CC:FB:3D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:90::/44 Signature Algorithm: sha256WithRSAEncryption 7f:93:f8:9f:ea:b5:11:79:f7:01:1a:43:c1:dc:e0:31:cd:19: b7:0a:10:4b:77:52:52:75:b7:87:f3:99:79:e2:b2:e2:bf:46: d5:ed:9f:c2:e1:75:04:3f:f6:1d:7d:ba:65:68:0b:cb:fa:42: eb:94:57:79:6e:29:5c:fa:f0:1a:f4:7a:1b:c6:41:ac:a2:a1: 64:b9:75:8d:80:8f:3d:0c:5f:af:7e:06:df:e1:e5:92:5f:6a: 15:16:cc:a3:b9:3e:3c:9a:60:e0:55:6f:94:0c:34:77:94:2b: f0:dc:c8:84:39:12:c0:97:55:7d:6c:6e:9d:9c:50:c9:d5:e9: ba:af:52:f1:d4:7b:c8:87:79:15:bd:dd:7e:bb:f5:82:11:2b: d0:aa:ce:d1:b8:d6:4a:94:05:2b:11:02:ad:a4:d9:b9:dc:e1: 23:aa:32:95:f9:fb:da:0a:c0:45:b4:96:04:44:da:a5:7e:ad: 1a:34:30:37:36:68:93:81:49:ce:4f:98:fb:06:76:90:54:e8: 49:09:0d:2e:80:8c:19:33:6a:89:9c:89:19:1d:f2:23:68:90: 67:bc:59:0b:e0:df:81:1b:e0:00:d4:19:8f:8b:a1:76:c8:67: 3f:5b:7a:bc:af:3a:24:ff:7f:cb:be:19:e1:73:32:61:17:37: ee:28:31:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUULn8ffQCftiyZNWbevoZRcZMtBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTI4MDAwMDA3WhcNMjYxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWYxZTQ5NzIxNDZjMzQ1MTQ3NWUzNjkwZDk0MmZlMjQ3 ZTYxODRjZDYwMzBlNmQ2M2E2NGEwMGRiNTU3MzA4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfFt2kAM+4yR9IZ+GubzVVX1QMSXxMeQCJqXkUdHuvVLh8 YsT77UCIpGwAcDQVVk6NDYtcJyJKWqn3wSDXVOthuC0ElV3wA3cuAy79RC8L7wFR 35d4Iy8qVIaJonrbe3Uz+9do/CMX2vOEhvzVAhX2li7Hwby4VmvheAl2EeTBl1bE 0LUUcTG4YVFfUDDIR2UGutIDdF7xfzhGkpJnXp3Cx77XRoyxQnFDWrAprQCanOdl xRQ+P4j/T50lDFxjgmqwa5Bmd3YLR0XvEmXaTg5/MCOIQFFaH4+JvcBWRQ/Gu94i F7oeZGXQMUBK3o5JQNNAJsRwYhhxAfcrL9FCL/gLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqLN/BJcJlcoE4LzvAgi+/FPM+z0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYyOGY5ZDcwLTc1YjMtNDE4MC04NmQzLTMwNjA2MTc1MGU5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAJAwDQYJKoZIhvcNAQELBQADggEBAH+T+J/qtRF59wEaQ8Hc4DHN GbcKEEt3UlJ1t4fzmXnisuK/RtXtn8LhdQQ/9h19umVoC8v6QuuUV3luKVz68Br0 ehvGQayioWS5dY2Ajz0MX69+Bt/h5ZJfahUWzKO5PjyaYOBVb5QMNHeUK/DcyIQ5 EsCXVX1sbp2cUMnV6bqvUvHUe8iHeRW93X679YIRK9CqztG41kqUBSsRAq2k2bnc 4SOqMpX5+9oKwEW0lgRE2qV+rRo0MDc2aJOBSc5PmPsGdpBU6EkJDS6AjBkzaomc iRkd8iNokGe8WQvg34Eb4ADUGY+LoXbIZz9beryvOiT/f8u+GeFzMmEXN+4oMUg= -----END CERTIFICATE-----Generated at Mon Oct 26 07:32:05 2026 by rpki-client