$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa File: 34d2989d-a347-4758-b589-d1d15187e581.roa (raw, json) Hash identifier: dfjXTrF7Y2U8/QlULcjssVWmYw9uEvubbzBqXiQj5wE= Subject key identifier: 6B:E6:D3:54:96:A8:03:27:E3:ED:AC:6B:D1:66:AB:0B:D4:54:57:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1371DF5D83642C7EE7B9E262EC195C26F8CA22B4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa Signing time: Sun 20 Sep 2026 00:00:11 +0000 ROA not before: Sun 20 Sep 2026 00:00:11 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:71:df:5d:83:64:2c:7e:e7:b9:e2:62:ec:19:5c:26:f8:ca:22:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:11 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=a87b04308e01b4012901e58038e64994964b3a926953eab79adf8d391df43275, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:41:82:94:0a:fe:10:6d:d6:e5:ba:eb:f9: 0f:45:d9:87:95:18:4d:a7:f4:09:a3:55:b2:ec:98: 83:df:2f:4b:ef:8c:d0:f7:ef:f5:28:7f:a6:3f:e5: 31:54:2a:8f:ca:48:b8:3b:d3:40:c0:4d:90:f8:54: 1c:0b:3c:61:26:f5:8d:bb:76:86:a8:9d:15:ba:b8: 0f:2c:76:5e:53:23:15:5c:9f:c8:15:aa:7b:6a:69: 6a:40:82:18:be:0e:3c:fc:e2:09:2a:13:72:a9:bb: 78:19:17:0f:0b:96:15:45:7a:e6:94:64:49:11:e5: 2c:9c:07:b3:53:08:4c:8d:d9:6f:03:cd:33:6f:ca: b0:de:a6:f8:3f:ad:ac:03:a0:58:ce:07:fe:22:bd: fb:d2:f1:38:24:61:a2:0b:87:1f:ba:a3:5c:6a:78: da:18:5d:8c:f9:9d:f3:5f:ea:b4:8c:bf:2b:9e:1b: a1:c7:24:d4:22:bc:4b:18:a9:2b:fa:3f:37:44:c8: 95:7c:a6:32:27:f4:6b:47:13:ff:13:41:e6:7b:6d: 45:4b:c9:b4:11:24:c9:ff:ee:ec:4f:d0:bf:43:a1: e1:4d:f1:fd:71:2c:b8:ef:65:e7:00:0e:b9:7c:f3: 51:e9:33:04:c8:ca:44:ff:d3:49:fc:aa:e0:03:29: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E6:D3:54:96:A8:03:27:E3:ED:AC:6B:D1:66:AB:0B:D4:54:57:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6025::/48 Signature Algorithm: sha256WithRSAEncryption 2e:49:30:43:fd:f1:e5:76:11:6f:e7:de:45:a7:a4:e5:b4:f1: 2f:84:b7:b2:cb:ef:49:87:ac:f8:c0:72:51:9b:8b:91:6c:f0: 3e:e2:7e:e0:67:2e:01:d4:49:f8:a7:3d:21:91:c5:64:b7:8d: e9:76:73:fc:fd:00:f3:88:0e:a6:00:42:19:25:d3:fe:4c:e2: 70:3e:c6:ff:90:77:8d:8d:04:ca:a7:8b:96:d7:c7:be:8a:16: ec:0d:54:d2:4f:96:fd:00:9f:a3:ed:55:04:a0:67:7a:10:24: bc:0d:6d:5c:15:ec:ab:aa:41:27:c6:95:44:c1:a1:0e:1b:f2: 2f:f6:d2:b8:93:10:41:30:9b:9e:af:35:8d:04:af:6c:e5:23: f5:57:bf:53:19:f6:9c:95:f2:28:f4:db:66:8e:ab:96:8a:a2: f2:21:73:1b:46:ee:45:3c:71:41:00:63:b2:a1:63:3c:36:2e: e2:5a:81:5a:0b:10:b4:01:18:dd:da:cc:35:a8:7a:24:9a:d2: c1:11:e1:86:2a:0c:92:78:36:28:17:53:54:0f:16:f9:08:cb: 31:d9:9a:96:82:fa:60:06:1d:4a:15:fb:b7:37:6d:20:5d:2e: 5a:c2:45:ac:54:f6:f3:24:fd:b5:32:70:ee:b8:3b:00:3a:80: 25:c2:a6:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE3HfXYNkLH7nueJi7BlcJvjKIrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDExWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODdiMDQzMDhlMDFiNDAxMjkwMWU1ODAzOGU2NDk5NDk2 NGIzYTkyNjk1M2VhYjc5YWRmOGQzOTFkZjQzMjc1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/MkGClAr+EG3W5brr+Q9F2YeVGE2n9AmjVbLsmIPfL0vv jND37/Uof6Y/5TFUKo/KSLg700DATZD4VBwLPGEm9Y27doaonRW6uA8sdl5TIxVc n8gVqntqaWpAghi+Djz84gkqE3Kpu3gZFw8LlhVFeuaUZEkR5SycB7NTCEyN2W8D zTNvyrDepvg/rawDoFjOB/4ivfvS8TgkYaILhx+6o1xqeNoYXYz5nfNf6rSMvyue G6HHJNQivEsYqSv6PzdEyJV8pjIn9GtHE/8TQeZ7bUVLybQRJMn/7uxP0L9DoeFN 8f1xLLjvZecADrl881HpMwTIykT/00n8quADKVpVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa+bTVJaoAyfj7axr0WarC9RUVyYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM0ZDI5ODlkLWEzNDctNDc1OC1iNTg5LWQxZDE1MTg3ZTU4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCUwDQYJKoZIhvcNAQELBQADggEBAC5JMEP98eV2EW/n3kWnpOW0 8S+Et7LL70mHrPjAclGbi5Fs8D7ifuBnLgHUSfinPSGRxWS3jel2c/z9APOIDqYA Qhkl0/5M4nA+xv+Qd42NBMqni5bXx76KFuwNVNJPlv0An6PtVQSgZ3oQJLwNbVwV 7KuqQSfGlUTBoQ4b8i/20riTEEEwm56vNY0Er2zlI/VXv1MZ9pyV8ij022aOq5aK ovIhcxtG7kU8cUEAY7KhYzw2LuJagVoLELQBGN3azDWoeiSa0sER4YYqDJJ4NigX U1QPFvkIyzHZmpaC+mAGHUoV+7c3bSBdLlrCRaxU9vMk/bUycO64OwA6gCXCpog= -----END CERTIFICATE-----Generated at Mon Sep 21 01:46:29 2026 by rpki-client