$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa File: 99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa (raw, json) Hash identifier: /vTaWTfsPW3ePVBjtcm1AO42IoeCY9hz1xndBw6ughg= Subject key identifier: 43:01:38:25:11:B9:9E:62:01:93:E5:F3:DB:75:AE:29:36:9C:C6:49 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 095C84EBD7BBBDA4A9B12ABA950EDCFC3717C6C7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa Signing time: Mon 28 Sep 2026 00:00:08 +0000 ROA not before: Mon 28 Sep 2026 00:00:08 +0000 ROA not after: Sun 27 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5c:84:eb:d7:bb:bd:a4:a9:b1:2a:ba:95:0e:dc:fc:37:17:c6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 28 00:00:08 2026 GMT Not After : Dec 27 23:59:59 2026 GMT Subject: serialNumber=63ff037a60b9d031c98a59ed27b8d392eb728096c7017ef2de3b2bcc69333c85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:e7:92:fb:69:42:3d:71:2d:49:50:e8:68: 3b:43:c4:41:90:58:30:a0:9f:2b:ad:e4:d8:72:41: d4:6a:8a:e9:11:5d:2d:1a:6e:82:e5:4b:55:a0:42: a6:f7:8e:db:f9:45:5c:c7:73:08:77:8e:e9:0c:6a: ec:c5:0d:d2:bc:91:6d:1a:d2:50:7f:48:8c:3f:a0: d4:51:89:cb:9b:91:6a:a9:17:54:b5:0d:8d:f1:cb: 67:48:46:d0:ec:31:7b:6c:54:fa:da:a0:bf:24:dd: 7f:34:2c:62:80:87:3f:bc:aa:0e:f1:bf:5b:ea:6d: 78:6c:4e:0d:6e:f8:45:16:3c:0e:7a:98:55:4b:ea: 1d:04:b7:66:73:a4:63:dc:cf:58:6a:64:a5:1c:a3: c9:0f:8b:41:6a:f3:e8:e9:96:5b:50:66:81:27:a0: 05:ce:20:1c:f9:03:fd:36:e6:92:64:e6:52:30:dd: b6:2c:ae:61:a7:b4:70:47:b8:24:6c:75:a4:80:83: 50:fe:dc:8a:4e:af:15:1c:cf:a5:6b:0a:3e:f4:b2: 80:56:67:d7:e0:76:21:3f:6a:57:c0:89:7e:f9:71: f6:5b:86:50:43:ae:d7:b0:4b:27:c8:86:31:79:0e: ab:f2:14:7f:9b:23:24:a7:fc:60:ca:95:d6:23:be: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:01:38:25:11:B9:9E:62:01:93:E5:F3:DB:75:AE:29:36:9C:C6:49 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4200::/40 Signature Algorithm: sha256WithRSAEncryption 03:00:09:fd:e6:66:3b:2c:35:44:13:4d:de:fe:79:a1:01:51: 79:0d:d7:f6:56:53:b5:46:38:95:6d:0d:22:ab:26:53:b1:56: 74:22:4d:5a:d9:f6:e5:39:bb:8f:3a:a7:94:e5:3a:17:54:8d: de:72:70:82:bb:a4:fa:b2:8f:d8:94:ef:42:50:cf:1d:9b:e7: 73:d0:a2:69:0b:ce:63:90:48:45:d3:20:09:8a:c2:82:dd:cc: e5:5e:92:7a:0e:1e:85:61:4b:82:c7:b3:57:68:7e:27:55:b9: 56:62:50:45:53:ba:6a:bb:ae:c8:71:0f:c2:06:e9:0d:fd:25: 30:c5:c4:34:b6:e2:fb:2c:69:23:67:03:84:1f:e1:2b:a5:10: cc:f2:57:1f:b7:f7:d5:50:ca:49:6d:93:a7:1b:2d:a6:7c:fb: 03:94:d4:ac:40:cc:1d:40:a1:98:d0:65:3c:19:1a:89:4c:3b: 70:79:dd:b6:8d:4b:0d:ab:c7:a7:a8:4f:97:e3:d0:c2:45:5e: d3:68:20:d3:5e:34:1d:51:40:45:cd:e1:93:a6:a5:23:65:8a: de:7b:3c:da:8e:06:13:42:f3:d6:da:8b:1a:86:27:ed:69:c6: f4:2a:b6:2a:0f:1c:1a:ae:f7:49:c8:81:fe:5f:70:6e:8d:de: fe:75:ed:b8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCVyE69e7vaSpsSq6lQ7c/DcXxscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTI4MDAwMDA4WhcNMjYxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2ZmMDM3YTYwYjlkMDMxYzk4YTU5ZWQyN2I4ZDM5MmVi NzI4MDk2YzcwMTdlZjJkZTNiMmJjYzY5MzMzYzg1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX5ueS+2lCPXEtSVDoaDtDxEGQWDCgnyut5NhyQdRqiukR XS0aboLlS1WgQqb3jtv5RVzHcwh3jukMauzFDdK8kW0a0lB/SIw/oNRRicubkWqp F1S1DY3xy2dIRtDsMXtsVPraoL8k3X80LGKAhz+8qg7xv1vqbXhsTg1u+EUWPA56 mFVL6h0Et2ZzpGPcz1hqZKUco8kPi0Fq8+jplltQZoEnoAXOIBz5A/025pJk5lIw 3bYsrmGntHBHuCRsdaSAg1D+3IpOrxUcz6VrCj70soBWZ9fgdiE/alfAiX75cfZb hlBDrtewSyfIhjF5DqvyFH+bIySn/GDKldYjvs97AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQwE4JRG5nmIBk+Xz23WuKTacxkkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk5ZWJjMmJkLTkyODEtNDliMi1hMmE0LTc0NDRlYmJiMzgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQjANBgkqhkiG9w0BAQsFAAOCAQEAAwAJ/eZmOyw1RBNN3v55oQFR eQ3X9lZTtUY4lW0NIqsmU7FWdCJNWtn25Tm7jzqnlOU6F1SN3nJwgruk+rKP2JTv QlDPHZvnc9CiaQvOY5BIRdMgCYrCgt3M5V6Seg4ehWFLgsezV2h+J1W5VmJQRVO6 aruuyHEPwgbpDf0lMMXENLbi+yxpI2cDhB/hK6UQzPJXH7f31VDKSW2Tpxstpnz7 A5TUrEDMHUChmNBlPBkaiUw7cHndto1LDavHp6hPl+PQwkVe02gg0140HVFARc3h k6alI2WK3ns82o4GE0Lz1tqLGoYn7WnG9Cq2Kg8cGq73SciB/l9wbo3e/nXtuA== -----END CERTIFICATE-----Generated at Mon Oct 12 00:46:29 2026 by rpki-client