$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa File: 37975e87-9196-4469-ae20-4f749fae5aab.roa (raw, json) Hash identifier: WeYMBL4Jz7oyGy7jMkCvCdahgkJzip6rgJhQnIG/LKA= Subject key identifier: 2C:16:7E:13:45:83:73:C3:CB:7D:AE:45:A5:50:71:A0:A6:4A:FE:7F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6F49EF9F42DA22B50B6C5A3DAA73A89E578CD3F8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa Signing time: Sun 20 Sep 2026 00:00:12 +0000 ROA not before: Sun 20 Sep 2026 00:00:12 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:49:ef:9f:42:da:22:b5:0b:6c:5a:3d:aa:73:a8:9e:57:8c:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:12 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=aab5ba492c9b50fa4604821d0b457b4b87b9824867cfb54330bc7a2d4e5d1e22, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:19:fb:06:d8:fb:fe:e9:b6:e6:43:7c:59: aa:c1:1e:a7:dd:fc:47:4f:38:81:ee:31:46:0e:8c: ef:5c:f1:55:42:0e:3c:f2:46:e8:c3:ea:c3:ed:bf: 24:f9:09:81:37:14:a6:50:0d:be:da:37:45:18:06: fb:6f:2b:c1:52:8c:91:84:58:08:63:13:ad:0a:8e: cd:a9:62:1f:b0:a9:9c:13:91:ce:20:da:80:f8:65: cf:c8:02:2e:67:ff:85:6b:10:50:a1:2c:45:99:80: a5:a4:9a:51:4c:66:66:e5:97:0c:d1:e7:f0:41:94: 5a:ca:8c:1c:40:0c:cf:ac:6f:8c:25:0a:37:16:41: ef:07:9f:41:17:49:21:5a:20:28:78:6c:1a:78:08: cf:00:b5:73:0a:45:42:c1:70:8b:cf:9a:c3:dd:fb: d5:87:f3:fa:d0:77:3a:be:7a:e8:42:2d:46:e6:b5: 4b:79:43:2d:09:8c:34:d2:f6:46:d2:2e:c1:85:33: 6f:51:38:2b:25:75:e1:c0:c8:fa:15:34:e6:fd:31: 06:71:20:bf:69:9d:1f:78:88:91:01:86:2c:22:de: 96:2c:5d:51:2b:89:f4:d7:c6:c2:a3:9d:aa:9c:b4: 1c:34:d6:71:b1:b3:5f:67:27:06:45:1d:19:a9:9e: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:7E:13:45:83:73:C3:CB:7D:AE:45:A5:50:71:A0:A6:4A:FE:7F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6028::/48 Signature Algorithm: sha256WithRSAEncryption 5f:37:48:50:fc:43:42:6d:3f:8b:1a:ea:ad:88:f0:91:86:56: f6:1f:e7:c2:eb:bc:07:6e:70:50:04:fe:0a:0e:ae:c3:e8:ce: fb:ca:1d:14:36:38:f7:ae:60:20:9c:08:e9:c5:e6:5d:8b:61: e7:05:d5:f5:69:a6:16:6d:76:09:6a:f0:19:e3:59:e6:cd:04: 2f:72:fd:cc:36:ba:13:11:bf:ad:7c:71:70:35:f7:ae:fe:0a: 73:9a:43:67:24:f2:f2:21:6e:d7:68:67:4d:17:08:f6:b3:b2: 7f:6b:79:1d:46:44:2c:46:ae:4b:40:e2:ed:90:d8:f9:c5:f7: 09:74:d8:24:e1:45:54:ca:58:5e:a9:43:e2:9a:3b:bd:40:f7: 75:a9:86:7a:4c:6e:95:6c:a3:61:f0:b8:c1:78:4b:b9:bc:5b: b2:d1:64:03:42:1b:11:47:fb:c3:56:c1:e1:73:0d:9d:a1:25: c9:2d:18:7d:c3:f5:0f:a6:34:14:98:bb:74:bc:b0:73:a4:f7: fa:34:d4:82:cb:e7:61:57:df:5c:e7:ba:61:e2:54:47:e6:82: 89:8f:fc:57:88:d7:f1:5f:e0:5b:1f:34:05:e0:69:22:1f:f2: eb:4a:2c:1a:ca:6c:70:26:3c:7c:e3:50:f2:86:6a:2f:db:5a: 1b:7b:a3:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb0nvn0LaIrULbFo9qnOonleM0/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDEyWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWI1YmE0OTJjOWI1MGZhNDYwNDgyMWQwYjQ1N2I0Yjg3 Yjk4MjQ4NjdjZmI1NDMzMGJjN2EyZDRlNWQxZTIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl3xn7Btj7/um25kN8WarBHqfd/EdPOIHuMUYOjO9c8VVC DjzyRujD6sPtvyT5CYE3FKZQDb7aN0UYBvtvK8FSjJGEWAhjE60Kjs2pYh+wqZwT kc4g2oD4Zc/IAi5n/4VrEFChLEWZgKWkmlFMZmbllwzR5/BBlFrKjBxADM+sb4wl CjcWQe8Hn0EXSSFaICh4bBp4CM8AtXMKRULBcIvPmsPd+9WH8/rQdzq+euhCLUbm tUt5Qy0JjDTS9kbSLsGFM29ROCsldeHAyPoVNOb9MQZxIL9pnR94iJEBhiwi3pYs XVErifTXxsKjnaqctBw01nGxs19nJwZFHRmpnjcrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULBZ+E0WDc8PLfa5FpVBxoKZK/n8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3OTc1ZTg3LTkxOTYtNDQ2OS1hZTIwLTRmNzQ5ZmFlNWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCgwDQYJKoZIhvcNAQELBQADggEBAF83SFD8Q0JtP4sa6q2I8JGG VvYf58LrvAducFAE/goOrsPozvvKHRQ2OPeuYCCcCOnF5l2LYecF1fVpphZtdglq 8BnjWebNBC9y/cw2uhMRv618cXA1967+CnOaQ2ck8vIhbtdoZ00XCPazsn9reR1G RCxGrktA4u2Q2PnF9wl02CThRVTKWF6pQ+KaO71A93WphnpMbpVso2HwuMF4S7m8 W7LRZANCGxFH+8NWweFzDZ2hJcktGH3D9Q+mNBSYu3S8sHOk9/o01ILL52FX31zn umHiVEfmgomP/FeI1/Ff4FsfNAXgaSIf8utKLBrKbHAmPHzjUPKGai/bWht7o64= -----END CERTIFICATE-----Generated at Sun Sep 20 16:43:05 2026 by rpki-client