$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa File: 9f647429-dee3-462f-9ab5-be55ce250b9b.roa (raw, json) Hash identifier: lG4qRVDHmAwcdx49ZxWADnWvVgW6uiouDMsD/4/sZPc= Subject key identifier: 2C:F3:4F:34:7C:AF:DA:63:3F:9A:D5:92:32:DE:FD:6A:9E:28:FB:07 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0D71C220D8046FC7F9D4472FFF1510AAE7E49E0B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa Signing time: Thu 10 Sep 2026 00:20:04 +0000 ROA not before: Thu 10 Sep 2026 00:20:04 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:71:c2:20:d8:04:6f:c7:f9:d4:47:2f:ff:15:10:aa:e7:e4:9e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 10 00:20:04 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=2d1ce526c04412e011f897e5e930540bfd63e8e9aeaf65b31814375960881e89, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4e:3e:a5:34:62:3e:6c:d2:e0:44:38:71:04: 91:cc:43:5f:7a:a4:01:33:50:bd:7d:75:b9:84:2d: 9a:59:4b:f4:f9:49:f2:f8:0d:1c:db:cf:b4:af:ae: b8:03:ee:8e:42:39:43:ef:06:d2:e9:11:92:83:6f: d1:f4:10:9f:fc:36:fb:0c:b2:52:3f:dd:08:e9:d4: b5:d4:2f:87:54:3f:dc:2e:f0:e1:0d:ca:e7:ff:d1: b1:39:ce:42:05:dd:f7:36:38:ac:1a:d1:97:77:ad: ac:42:f6:d5:29:83:0e:50:fb:fd:31:9d:a0:42:04: 18:ee:3a:15:61:52:06:df:f5:7f:3b:23:29:3d:f0: 5a:1e:84:36:41:aa:00:5a:9d:d3:0b:66:27:93:6b: af:4a:db:42:92:f8:3b:87:01:ae:ba:bd:9b:43:10: 18:cc:0b:d1:0e:78:7b:71:25:79:75:12:a3:9e:69: 8d:bf:89:48:3b:4d:4b:e2:cf:93:c8:67:7a:e2:93: 50:db:e8:9f:96:6d:fc:d7:f8:bd:73:5f:4a:02:ef: c6:70:49:6f:3b:b3:b7:a3:fe:b7:39:10:f7:3a:25: 2c:cc:b5:03:2a:8a:8f:b4:61:f2:9a:7e:32:43:fc: 58:d1:f0:c8:ca:69:a1:25:ab:ed:aa:3a:92:86:aa: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:4F:34:7C:AF:DA:63:3F:9A:D5:92:32:DE:FD:6A:9E:28:FB:07 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:70::/44 Signature Algorithm: sha256WithRSAEncryption 2c:0d:ae:cc:28:b9:9b:f4:b9:ea:8c:7d:a5:37:0d:73:66:fb: e4:ec:17:9a:9b:ca:4e:db:e7:ed:71:98:d1:ee:d0:ae:85:b4: e3:85:7d:40:02:ed:1b:35:18:d3:ea:45:47:03:a3:9e:98:59: 9e:0d:71:33:ac:c0:53:45:b4:04:8e:f3:3f:32:c8:51:92:17: ee:82:dc:79:a0:fe:d9:46:19:b0:3d:62:ac:45:90:74:f9:b9: 84:0a:05:e7:e5:c2:72:cb:2f:3b:27:fc:c8:a5:31:0c:5d:0c: c3:c6:ed:f0:67:39:2d:b7:ae:8a:fd:13:f4:8c:11:13:20:6e: 78:32:76:1f:13:89:0f:e4:00:1a:60:40:74:08:15:02:c0:a2: cc:21:0e:6c:33:ee:a7:f9:65:6f:58:61:24:61:d6:78:3b:ba: 0c:d1:c2:5e:e5:b6:4a:fe:65:89:07:0a:c1:49:10:59:60:f3: af:0f:8e:f8:42:1f:8b:c3:7b:ba:07:29:4d:92:63:23:96:fb: c8:d8:7c:99:b8:85:dd:5d:d1:15:69:40:a9:1a:8c:a8:e9:97: 44:6d:c7:3d:61:27:3e:48:34:7a:39:89:ab:7e:75:5b:df:42: 3c:72:0c:8e:40:66:9c:f4:67:62:01:c0:c7:44:d7:6b:e5:13: 87:05:09:cc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDXHCINgEb8f51Ecv/xUQqufkngswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEwMDAyMDA0WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDFjZTUyNmMwNDQxMmUwMTFmODk3ZTVlOTMwNTQwYmZk NjNlOGU5YWVhZjY1YjMxODE0Mzc1OTYwODgxZTg5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKTj6lNGI+bNLgRDhxBJHMQ196pAEzUL19dbmELZpZS/T5 SfL4DRzbz7SvrrgD7o5COUPvBtLpEZKDb9H0EJ/8NvsMslI/3Qjp1LXUL4dUP9wu 8OENyuf/0bE5zkIF3fc2OKwa0Zd3raxC9tUpgw5Q+/0xnaBCBBjuOhVhUgbf9X87 Iyk98FoehDZBqgBandMLZieTa69K20KS+DuHAa66vZtDEBjMC9EOeHtxJXl1EqOe aY2/iUg7TUviz5PIZ3rik1Db6J+WbfzX+L1zX0oC78ZwSW87s7ej/rc5EPc6JSzM tQMqio+0YfKafjJD/FjR8MjKaaElq+2qOpKGqtV3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULPNPNHyv2mM/mtWSMt79ap4o+wcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlmNjQ3NDI5LWRlZTMtNDYyZi05YWI1LWJlNTVjZTI1MGI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAHAwDQYJKoZIhvcNAQELBQADggEBACwNrswouZv0ueqMfaU3DXNm ++TsF5qbyk7b5+1xmNHu0K6FtOOFfUAC7Rs1GNPqRUcDo56YWZ4NcTOswFNFtASO 8z8yyFGSF+6C3Hmg/tlGGbA9YqxFkHT5uYQKBeflwnLLLzsn/MilMQxdDMPG7fBn OS23ror9E/SMERMgbngydh8TiQ/kABpgQHQIFQLAoswhDmwz7qf5ZW9YYSRh1ng7 ugzRwl7ltkr+ZYkHCsFJEFlg868PjvhCH4vDe7oHKU2SYyOW+8jYfJm4hd1d0RVp QKkajKjpl0Rtxz1hJz5INHo5iat+dVvfQjxyDI5AZpz0Z2IBwMdE12vlE4cFCcw= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:08 2026 by rpki-client