$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39477929-04bd-4c16-aeeb-a71a4e38bbcc.roa File: 39477929-04bd-4c16-aeeb-a71a4e38bbcc.roa (raw, json) Hash identifier: X/2FTsPfJJyP0KGfH8/H44ULLlxd1BdFsBsLH62b8Is= Subject key identifier: 6B:D4:A9:00:75:A5:98:38:F2:31:33:86:42:FB:CF:B9:97:3E:44:F2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 385F3388A39B70B094259D95F7EE1F610484E70C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39477929-04bd-4c16-aeeb-a71a4e38bbcc.roa Signing time: Sat 12 Sep 2026 00:00:05 +0000 ROA not before: Sat 12 Sep 2026 00:00:05 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2600:f0f0:c11e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5f:33:88:a3:9b:70:b0:94:25:9d:95:f7:ee:1f:61:04:84:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:05 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=b8ab20d1caaac3f26b17ef971da7901e165bb6faa031d149f5ec1387c562404f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:30:7b:31:fd:4c:6c:f3:6e:aa:09:63:fb: 6f:7e:8f:d5:fc:bd:2a:30:0d:ef:f0:52:f6:ee:fd: 44:89:a8:45:fc:c7:12:44:b4:de:35:b2:fc:fc:4d: 4a:00:fc:f8:c1:65:c8:48:9c:11:19:ca:af:89:43: d4:dc:13:42:b9:4f:a0:0f:e8:68:0f:00:e6:00:a3: 00:1c:7a:b3:29:6a:3b:e2:17:8c:9e:d6:9b:4b:40: 22:9b:84:34:dc:29:19:c2:d1:d1:2e:ae:fd:fb:1c: 7f:c3:fd:42:96:77:8a:14:45:5c:7d:2f:17:ad:61: 7c:57:9f:74:84:e0:b5:ca:75:5b:84:93:a6:66:e0: 95:52:9a:4e:32:05:31:e2:96:1c:45:4d:43:2c:03: bc:5f:25:33:a0:e4:54:c6:81:7a:d4:48:b2:1f:0e: df:ff:18:b3:de:b9:59:50:b8:ce:38:ec:c2:4e:ae: 67:e6:f3:4d:cc:32:2b:91:f7:91:de:8e:8f:ef:f5: 38:8d:82:53:24:57:bd:b4:8a:4e:bc:a3:0f:73:e7: a9:23:5f:a5:81:b1:dd:17:8b:2d:35:d6:6f:22:55: 55:a6:22:5e:f9:0f:ff:cc:a9:e8:f4:bc:c3:d1:94: 42:6f:01:ba:dd:87:e3:1a:61:96:34:df:28:8e:87: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:A9:00:75:A5:98:38:F2:31:33:86:42:FB:CF:B9:97:3E:44:F2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39477929-04bd-4c16-aeeb-a71a4e38bbcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11e::/48 Signature Algorithm: sha256WithRSAEncryption 0f:68:51:3b:f4:73:f6:74:73:08:02:0d:34:15:4e:3e:a6:0c: b9:58:f4:b0:f1:0a:d2:26:3f:8d:77:1b:6b:c7:d9:cb:2c:a7: 6a:44:7b:73:28:f8:fd:01:03:11:35:3f:4e:01:9a:2a:36:af: ce:9d:42:e9:a6:34:df:6c:bd:d6:f8:9b:ff:16:d9:22:9b:ee: 1a:18:6b:54:dc:45:d9:8b:96:0f:6b:8f:ff:bc:11:26:ed:4e: 8b:7d:ab:d8:10:8b:89:ad:c6:b9:b9:a2:38:9f:68:a0:ac:04: b0:2b:01:35:e5:01:22:6f:60:a1:51:71:ae:6a:58:31:9c:ea: ba:22:ef:c9:0d:c2:81:46:3a:14:f3:28:ae:2c:06:e3:07:ff: ab:d6:71:28:fb:09:2f:c4:e9:f9:c4:eb:3a:41:7c:95:55:67: 9f:49:e4:da:fe:c1:09:71:fe:dd:28:81:98:7e:d7:2c:70:62: 7d:da:c2:dd:48:1a:10:cd:0d:a3:02:cc:2b:9c:c9:40:0b:03: 52:e4:4e:41:37:da:3f:24:ba:0e:ae:ac:95:58:8e:82:25:13: 40:51:87:ee:8a:36:ea:f9:53:12:1c:e3:e6:07:4b:e5:30:c0: 8b:5a:51:59:c1:b7:be:09:7e:a8:ae:8d:e1:44:e8:11:17:34: 36:a7:76:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOF8ziKObcLCUJZ2V9+4fYQSE5wwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA1WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGFiMjBkMWNhYWFjM2YyNmIxN2VmOTcxZGE3OTAxZTE2 NWJiNmZhYTAzMWQxNDlmNWVjMTM4N2M1NjI0MDRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1XTB7Mf1MbPNuqglj+29+j9X8vSowDe/wUvbu/USJqEX8 xxJEtN41svz8TUoA/PjBZchInBEZyq+JQ9TcE0K5T6AP6GgPAOYAowAcerMpajvi F4ye1ptLQCKbhDTcKRnC0dEurv37HH/D/UKWd4oURVx9LxetYXxXn3SE4LXKdVuE k6Zm4JVSmk4yBTHilhxFTUMsA7xfJTOg5FTGgXrUSLIfDt//GLPeuVlQuM447MJO rmfm803MMiuR95Hejo/v9TiNglMkV720ik68ow9z56kjX6WBsd0Xiy011m8iVVWm Il75D//Mqej0vMPRlEJvAbrdh+MaYZY03yiOhxyvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa9SpAHWlmDjyMTOGQvvPuZc+RPIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5NDc3OTI5LTA0YmQtNGMxNi1hZWViLWE3MWE0ZTM4YmJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR4wDQYJKoZIhvcNAQELBQADggEBAA9oUTv0c/Z0cwgCDTQVTj6m DLlY9LDxCtImP413G2vH2cssp2pEe3Mo+P0BAxE1P04Bmio2r86dQummNN9svdb4 m/8W2SKb7hoYa1TcRdmLlg9rj/+8ESbtTot9q9gQi4mtxrm5ojifaKCsBLArATXl ASJvYKFRca5qWDGc6roi78kNwoFGOhTzKK4sBuMH/6vWcSj7CS/E6fnE6zpBfJVV Z59J5Nr+wQlx/t0ogZh+1yxwYn3awt1IGhDNDaMCzCucyUALA1LkTkE32j8kug6u rJVYjoIlE0BRh+6KNur5UxIc4+YHS+UwwItaUVnBt74JfqiujeFE6BEXNDandls= -----END CERTIFICATE-----Generated at Sun Sep 20 20:57:44 2026 by rpki-client