$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa File: 3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa (raw, json) Hash identifier: YzCO82yz0htqj1rj0HapqrNIHIRPU1xnk4Ra1/U0b8I= Subject key identifier: 34:BE:37:BA:01:EE:07:FD:17:AC:D1:9C:41:50:C1:91:89:00:35:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 454117B1D76F0E99F3445F6B015D527B8F171861 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa Signing time: Sat 12 Sep 2026 00:00:07 +0000 ROA not before: Sat 12 Sep 2026 00:00:07 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c11d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:41:17:b1:d7:6f:0e:99:f3:44:5f:6b:01:5d:52:7b:8f:17:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:07 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=834a2d7d191d334ad3e20c6bd8303fc66c0121f178dfc7d8b383526c0d255a7d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:64:b1:89:ec:84:5f:d4:67:74:9d:85:5c: 8c:a2:32:20:b0:4e:b2:89:c2:64:5c:e7:91:78:62: ea:91:03:ee:e3:3f:0c:5a:4b:2e:d4:f5:15:a7:a4: 78:c0:0b:9d:84:e1:9c:f8:93:28:a3:c7:b6:9c:5d: d2:68:4c:00:c5:57:ae:75:47:4c:4c:71:71:4d:b9: 25:e4:3b:0c:d2:c4:da:da:c8:63:63:dc:74:60:8e: 47:9e:aa:7f:65:40:fc:6c:28:f8:ce:60:da:a1:66: cd:99:47:ef:18:03:0a:57:5e:2c:be:ee:47:3a:70: 0b:ab:51:ef:0f:22:d6:9b:71:04:c0:12:0f:d4:a5: 33:26:59:79:47:28:90:35:c5:1c:f1:c4:1c:5f:c8: c8:9a:35:18:59:55:70:df:db:cb:0b:6e:26:f1:33: a5:70:f5:57:9f:86:3c:d9:c0:a0:ce:85:25:7d:45: 3e:5f:6a:6d:c3:26:f2:7a:3c:52:96:94:cd:d3:96: df:b2:de:a3:50:fd:c7:fb:3e:6c:4a:aa:a5:31:64: d0:72:e5:ee:72:11:77:b3:d3:a5:10:71:fa:76:ce: 11:81:17:40:ac:44:14:91:74:db:1a:70:a2:b0:1f: 7d:d1:17:87:ed:3f:8d:7c:33:c3:cb:ac:14:49:ca: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BE:37:BA:01:EE:07:FD:17:AC:D1:9C:41:50:C1:91:89:00:35:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11d::/48 Signature Algorithm: sha256WithRSAEncryption 7b:f9:ea:0c:9e:32:36:6d:e3:ee:47:10:44:2f:05:cd:64:5d: 25:9f:9e:5d:81:05:cf:5f:83:af:84:5a:7f:ba:7b:01:a0:f6: 54:c1:f3:80:04:61:3d:a0:3a:67:c2:fe:b5:13:69:01:89:d7: 82:7b:20:18:33:0b:94:5e:7e:f3:10:e2:30:2f:fc:3d:1a:11: 9c:bc:76:93:2a:1d:e9:18:0a:71:26:b9:2d:ba:0c:75:7b:1b: 96:5a:9d:a3:52:e9:6f:7d:26:20:a6:82:96:d8:de:31:f7:be: 40:34:ba:5e:b8:1d:d3:fb:b1:31:b1:4a:62:1c:e6:7d:70:e3: 64:7a:7a:3b:c4:23:91:38:25:5a:d0:d7:63:03:28:7b:79:7c: e9:5a:ba:ab:ec:66:dc:66:21:0a:4e:81:bd:ac:30:15:3f:bf: bf:69:43:8c:30:f6:d3:d6:ba:1a:9a:6f:8a:dc:c2:02:58:c6: fb:5a:03:41:1a:ba:7c:62:ca:2c:ad:e2:e4:d1:ac:ee:b3:df: f2:a5:72:6a:87:0a:73:06:02:f7:90:72:ce:9f:cb:c0:8a:db: 34:fb:51:67:26:d7:82:a9:42:ee:5f:21:b9:f8:fb:a6:ef:92: 00:28:70:43:9f:ce:36:7a:1a:c2:8c:83:0e:49:6d:b2:84:39: f6:d6:58:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURUEXsddvDpnzRF9rAV1Se48XGGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA3WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzRhMmQ3ZDE5MWQzMzRhZDNlMjBjNmJkODMwM2ZjNjZj MDEyMWYxNzhkZmM3ZDhiMzgzNTI2YzBkMjU1YTdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/tGSxieyEX9RndJ2FXIyiMiCwTrKJwmRc55F4YuqRA+7j PwxaSy7U9RWnpHjAC52E4Zz4kyijx7acXdJoTADFV651R0xMcXFNuSXkOwzSxNra yGNj3HRgjkeeqn9lQPxsKPjOYNqhZs2ZR+8YAwpXXiy+7kc6cAurUe8PItabcQTA Eg/UpTMmWXlHKJA1xRzxxBxfyMiaNRhZVXDf28sLbibxM6Vw9VefhjzZwKDOhSV9 RT5fam3DJvJ6PFKWlM3Tlt+y3qNQ/cf7PmxKqqUxZNBy5e5yEXez06UQcfp2zhGB F0CsRBSRdNsacKKwH33RF4ftP418M8PLrBRJyjv5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNL43ugHuB/0XrNGcQVDBkYkANaAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5NzdmYTU5LTNhNzAtNGFjMy04N2NmLWE4ZjIxY2NiN2Y5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR0wDQYJKoZIhvcNAQELBQADggEBAHv56gyeMjZt4+5HEEQvBc1k XSWfnl2BBc9fg6+EWn+6ewGg9lTB84AEYT2gOmfC/rUTaQGJ14J7IBgzC5RefvMQ 4jAv/D0aEZy8dpMqHekYCnEmuS26DHV7G5ZanaNS6W99JiCmgpbY3jH3vkA0ul64 HdP7sTGxSmIc5n1w42R6ejvEI5E4JVrQ12MDKHt5fOlauqvsZtxmIQpOgb2sMBU/ v79pQ4ww9tPWuhqab4rcwgJYxvtaA0Eaunxiyiyt4uTRrO6z3/KlcmqHCnMGAveQ cs6fy8CK2zT7UWcm14KpQu5fIbn4+6bvkgAocEOfzjZ6GsKMgw5JbbKEOfbWWNc= -----END CERTIFICATE-----Generated at Mon Sep 21 22:14:06 2026 by rpki-client