$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa File: 9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa (raw, json) Hash identifier: dwWRENhGaM4eP2C2lln/ie6FCe7XzJFRy0yYsrUaqtM= Subject key identifier: 91:BC:E5:3C:46:29:73:28:E9:CC:2E:EC:08:C5:AE:8D:5E:FD:D6:E8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6836A06ADF888C3163431690D47B945532E303BD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa Signing time: Fri 11 Sep 2026 00:00:07 +0000 ROA not before: Fri 11 Sep 2026 00:00:07 +0000 ROA not after: Thu 10 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:310::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:36:a0:6a:df:88:8c:31:63:43:16:90:d4:7b:94:55:32:e3:03:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 11 00:00:07 2026 GMT Not After : Dec 10 23:59:59 2026 GMT Subject: serialNumber=b5095515ffc5b4145b0a215438295d8f0392848324d3342dd8f55745daee69f0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:6f:13:06:47:0d:45:72:23:dd:58:82:5c: 74:43:3f:c9:68:d9:4d:ba:1a:b5:e5:69:4c:f0:76: 6c:de:db:69:6a:ca:9b:8b:26:0c:74:d7:3c:0b:fb: 32:93:b6:af:1c:a8:f4:33:34:82:4c:6e:2c:b9:86: 15:42:71:4b:cd:7c:d8:80:a0:e6:1b:3c:b5:0e:20: 11:70:16:75:c4:a4:08:36:0f:2c:d7:1e:e1:cf:31: c5:db:61:86:46:21:69:66:2d:07:49:65:38:d9:33: 05:f8:d8:b8:8d:64:40:1c:bd:df:84:ba:0e:ee:e9: 64:4b:6c:ea:92:88:4f:e1:1f:10:c6:a1:bf:d5:31: 0e:54:51:98:70:48:b0:9b:d5:c2:1a:82:a4:16:b8: aa:13:1b:3c:4a:e1:aa:30:85:eb:21:49:40:12:03: 8b:2e:a8:01:1e:cc:69:fb:fc:94:1d:15:02:21:10: 2e:78:d0:08:19:e3:8e:82:44:3c:5f:32:98:0b:22: 7e:6d:1c:79:09:21:be:df:eb:71:fd:11:88:c5:0b: 4b:cb:bb:1c:17:45:f8:79:20:e1:c8:d9:c5:f9:3a: ec:0f:34:e7:46:2c:d8:5e:02:b8:49:19:95:78:ab: df:01:03:e3:82:7b:9a:f6:99:23:ff:42:4c:04:d7: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:E5:3C:46:29:73:28:E9:CC:2E:EC:08:C5:AE:8D:5E:FD:D6:E8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:310::/44 Signature Algorithm: sha256WithRSAEncryption 4b:8e:9c:38:de:48:a7:eb:16:8f:5c:7d:a9:4e:1c:be:0c:05: f3:fc:39:d0:8d:3e:29:8e:c8:d6:62:ca:ff:bf:26:65:ff:35: fa:e6:68:8f:ec:b0:cc:e7:20:2a:28:94:51:7f:85:48:75:94: d9:c2:15:70:df:13:6b:77:30:d9:2e:79:99:2e:af:e4:97:12: d8:95:3b:cb:5c:71:a6:b4:28:06:ad:1e:45:19:33:a9:52:c4: fb:10:d0:52:2c:32:8e:cb:97:9c:af:7b:f6:9b:ea:49:31:69: bd:d3:94:cb:42:d9:02:88:c7:75:76:11:c8:9d:34:4f:ff:ea: 80:26:a1:a3:fb:b0:7c:e7:12:fc:6d:9d:a2:42:63:ce:b5:93: 91:50:ef:e6:51:c1:89:e2:3c:c8:7c:3e:6a:fd:28:e4:49:a2: 2a:a0:c4:60:9f:cd:1d:76:e9:53:7b:7e:e4:85:c9:01:a8:c1: 94:e3:66:ce:d9:d1:c4:d4:1e:90:e8:42:0f:27:24:d4:0a:ef: 2c:91:13:88:2c:c3:be:fd:33:72:5f:22:24:6a:d9:d4:21:9c: 4a:8b:f4:2a:0e:aa:f8:36:44:3e:8c:10:a7:bd:89:b2:4a:04: d0:4c:89:ea:c3:e8:2b:1d:79:cf:eb:a6:02:31:d1:c0:df:b8: 2c:88:a8:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaDagat+IjDFjQxaQ1HuUVTLjA70wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTExMDAwMDA3WhcNMjYxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTA5NTUxNWZmYzViNDE0NWIwYTIxNTQzODI5NWQ4ZjAz OTI4NDgzMjRkMzM0MmRkOGY1NTc0NWRhZWU2OWYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsjW8TBkcNRXIj3ViCXHRDP8lo2U26GrXlaUzwdmze22lq ypuLJgx01zwL+zKTtq8cqPQzNIJMbiy5hhVCcUvNfNiAoOYbPLUOIBFwFnXEpAg2 DyzXHuHPMcXbYYZGIWlmLQdJZTjZMwX42LiNZEAcvd+Eug7u6WRLbOqSiE/hHxDG ob/VMQ5UUZhwSLCb1cIagqQWuKoTGzxK4aowheshSUASA4suqAEezGn7/JQdFQIh EC540AgZ446CRDxfMpgLIn5tHHkJIb7f63H9EYjFC0vLuxwXRfh5IOHI2cX5OuwP NOdGLNheArhJGZV4q98BA+OCe5r2mSP/QkwE19ZrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkbzlPEYpcyjpzC7sCMWujV791ugwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzljNmNiMTY2LTdiMjgtNDUxMi1hZTNkLTVlODA1NGM2NjllZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAxAwDQYJKoZIhvcNAQELBQADggEBAEuOnDjeSKfrFo9cfalOHL4M BfP8OdCNPimOyNZiyv+/JmX/NfrmaI/ssMznICoolFF/hUh1lNnCFXDfE2t3MNku eZkur+SXEtiVO8tccaa0KAatHkUZM6lSxPsQ0FIsMo7Ll5yve/ab6kkxab3TlMtC 2QKIx3V2EcidNE//6oAmoaP7sHznEvxtnaJCY861k5FQ7+ZRwYniPMh8Pmr9KORJ oiqgxGCfzR126VN7fuSFyQGowZTjZs7Z0cTUHpDoQg8nJNQK7yyRE4gsw779M3Jf IiRq2dQhnEqL9CoOqvg2RD6MEKe9ibJKBNBMierD6Csdec/rpgIx0cDfuCyIqPc= -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:40 2026 by rpki-client