$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bead51-915d-45f2-a1e4-3bc21d5bb383.roa File: 43bead51-915d-45f2-a1e4-3bc21d5bb383.roa (raw, json) Hash identifier: A/cvNPOLtgFEJiJ+pA/6eAn/FbgfP6ttaOb9QDfxMs8= Subject key identifier: F4:D4:81:EB:17:71:68:37:FE:1F:35:71:8D:A7:DE:F5:25:03:48:B3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 730D1FFD872034ED9EAE82D9FA6FE62D65BD6BA7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bead51-915d-45f2-a1e4-3bc21d5bb383.roa Signing time: Sat 12 Sep 2026 00:00:06 +0000 ROA not before: Sat 12 Sep 2026 00:00:06 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:c11d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0d:1f:fd:87:20:34:ed:9e:ae:82:d9:fa:6f:e6:2d:65:bd:6b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:06 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=e6dd7d4a41656efc59ec195e8a0b7476c35a920272a6cc0034e120d59c91f4d2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:0b:e9:13:aa:74:55:a6:52:97:1a:56:60: 92:0b:3c:24:fa:f3:b5:28:0e:22:f1:7d:70:f0:63: f2:9e:ac:8d:09:6b:11:fa:d1:69:36:24:d1:e5:db: de:f1:dc:a2:9f:49:7c:dc:bc:cc:6a:0d:fc:c4:f4: 55:51:bd:83:b2:c8:9e:41:6d:86:1d:42:69:87:15: 56:eb:db:e8:e2:b7:46:1f:4d:8d:29:e3:ca:26:d2: 19:aa:a5:d8:cc:79:a1:16:14:eb:6a:83:07:bc:11: 68:3d:da:44:13:56:f7:eb:c5:1d:b7:7c:86:09:b0: 5f:ac:cd:e1:b1:d3:b5:73:45:04:71:ae:98:66:f6: 3b:ea:83:79:a2:2f:59:11:19:53:55:20:78:a8:e1: 5e:99:66:b1:86:f9:78:45:1a:21:0e:1c:67:ff:3f: 68:90:4c:bd:a0:2d:56:48:d9:81:fe:1b:1f:f2:59: 8d:36:a2:9c:00:81:1a:f6:13:65:91:26:24:86:3e: fa:2f:7a:3b:1d:6f:0b:ff:37:07:80:b9:b0:aa:fb: 22:98:ec:cd:10:0b:6d:aa:27:12:e9:c1:06:9b:d1: b3:fe:1e:83:b5:32:66:f1:a3:2d:5e:e2:5c:50:43: 78:7a:cd:d0:e9:7e:b7:00:e3:60:3d:35:c1:f2:36: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:81:EB:17:71:68:37:FE:1F:35:71:8D:A7:DE:F5:25:03:48:B3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bead51-915d-45f2-a1e4-3bc21d5bb383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11d::/48 Signature Algorithm: sha256WithRSAEncryption 80:29:92:7a:98:53:22:4f:9f:25:58:c0:d5:6b:55:1b:39:5e: 1e:ec:9d:30:66:a9:bc:e3:fd:e3:dd:62:82:bb:97:b5:5f:b6: e9:50:11:5e:1c:6a:a2:4f:b8:fb:dd:60:79:b7:63:3d:c5:26: 5a:2d:61:0a:00:45:49:f5:82:b8:3f:67:06:47:49:73:9a:50: a7:7c:d8:ce:97:78:63:8c:16:88:f3:2f:76:e1:e1:8a:b1:25: cd:2b:d5:fe:5c:dd:88:ff:1d:e1:28:b6:a3:4f:b1:5c:30:94: 47:ee:3c:04:2d:83:a5:90:b6:f1:13:85:e0:a2:43:be:a6:70: 2b:c6:14:08:11:a1:18:99:d4:93:49:0b:a9:2c:3c:ce:5f:d6: 24:2d:9c:31:1f:7b:08:94:ff:29:36:db:fd:62:68:c9:58:f9: 5c:d5:d0:d6:b4:64:9a:0d:c3:bc:d1:e1:0a:29:b2:85:2e:98: f7:86:d7:f2:82:65:36:83:8f:07:9e:c1:74:bc:b8:a6:c6:85: fd:eb:50:fd:5a:61:aa:62:d8:6b:d3:b1:30:2f:40:3a:f1:dd: 41:f5:91:43:4f:5f:7b:8e:08:5d:07:3c:63:1a:38:3f:30:01: 8e:ae:00:1f:18:85:55:ec:23:e3:4a:ee:39:77:e7:6a:ef:17: cd:81:45:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcw0f/YcgNO2eroLZ+m/mLWW9a6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA2WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmRkN2Q0YTQxNjU2ZWZjNTllYzE5NWU4YTBiNzQ3NmMz NWE5MjAyNzJhNmNjMDAzNGUxMjBkNTljOTFmNGQyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzNQvpE6p0VaZSlxpWYJILPCT687UoDiLxfXDwY/KerI0J axH60Wk2JNHl297x3KKfSXzcvMxqDfzE9FVRvYOyyJ5BbYYdQmmHFVbr2+jit0Yf TY0p48om0hmqpdjMeaEWFOtqgwe8EWg92kQTVvfrxR23fIYJsF+szeGx07VzRQRx rphm9jvqg3miL1kRGVNVIHio4V6ZZrGG+XhFGiEOHGf/P2iQTL2gLVZI2YH+Gx/y WY02opwAgRr2E2WRJiSGPvovejsdbwv/NweAubCq+yKY7M0QC22qJxLpwQab0bP+ HoO1Mmbxoy1e4lxQQ3h6zdDpfrcA42A9NcHyNmR5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9NSB6xdxaDf+HzVxjafe9SUDSLMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzYmVhZDUxLTkxNWQtNDVmMi1hMWU0LTNiYzIxZDViYjM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR0wDQYJKoZIhvcNAQELBQADggEBAIApknqYUyJPnyVYwNVrVRs5 Xh7snTBmqbzj/ePdYoK7l7VftulQEV4caqJPuPvdYHm3Yz3FJlotYQoARUn1grg/ ZwZHSXOaUKd82M6XeGOMFojzL3bh4YqxJc0r1f5c3Yj/HeEotqNPsVwwlEfuPAQt g6WQtvETheCiQ76mcCvGFAgRoRiZ1JNJC6ksPM5f1iQtnDEfewiU/yk22/1iaMlY +VzV0Na0ZJoNw7zR4QopsoUumPeG1/KCZTaDjweewXS8uKbGhf3rUP1aYapi2GvT sTAvQDrx3UH1kUNPX3uOCF0HPGMaOD8wAY6uAB8YhVXsI+NK7jl352rvF82BRag= -----END CERTIFICATE-----Generated at Sun Sep 20 11:47:45 2026 by rpki-client