$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/446d452e-22d6-4f3a-b903-6a2d64e95867.roa File: 446d452e-22d6-4f3a-b903-6a2d64e95867.roa (raw, json) Hash identifier: CgcQzJ/txrP0vMmZ/wvt0vmGD5pYq/h7DaT2MgCcmW4= Subject key identifier: 5E:DA:51:5B:36:C5:4E:99:77:B9:57:37:3C:C8:25:EF:40:AB:6F:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 16E80663DD5BEE6F098A346B35BC086357413EF5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/446d452e-22d6-4f3a-b903-6a2d64e95867.roa Signing time: Thu 03 Sep 2026 00:00:10 +0000 ROA not before: Thu 03 Sep 2026 00:00:10 +0000 ROA not after: Wed 02 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e8:06:63:dd:5b:ee:6f:09:8a:34:6b:35:bc:08:63:57:41:3e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 3 00:00:10 2026 GMT Not After : Dec 2 23:59:59 2026 GMT Subject: serialNumber=75ac3825e875e96e862be89e7e093a36a6cf294bdf299c66959a2c966e7d280a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:8d:e8:e4:28:ec:bb:c7:b0:e5:c6:e4:61: c9:44:bc:54:ef:4d:d3:96:bb:be:0a:8d:14:27:83: 2a:ac:11:9e:a6:82:73:36:e7:91:5d:55:2a:fc:bb: 00:39:c5:fc:aa:ed:de:eb:49:be:48:45:22:ef:52: f6:ec:37:b2:be:cf:fe:64:62:1f:1d:37:3f:b7:a9: 96:71:a8:af:b0:36:ce:8d:31:95:d4:d8:2d:ea:30: 2d:c9:86:47:d0:b5:01:f5:b6:26:05:fd:24:2f:e8: f3:79:51:33:32:fa:43:04:76:46:f5:57:83:bf:d3: bd:bf:c3:e2:f4:14:7c:28:3c:48:37:7e:29:d5:95: 86:89:11:ae:ad:1a:ad:c5:0e:53:3b:98:62:1d:39: 87:9b:a6:42:a0:63:97:21:73:73:d5:74:ae:8d:bf: 38:62:80:cf:2a:a0:55:52:d1:9d:21:cc:30:67:59: 60:04:b8:5c:9d:31:bc:54:41:e9:1a:f8:b6:b4:93: 08:d8:09:06:c1:cd:ae:9c:25:42:5d:9b:e1:28:9a: 13:d0:2c:75:80:e7:b3:0f:15:4d:4c:6d:7b:2b:fb: f9:cf:8f:d1:8b:64:4e:bf:eb:bf:3b:04:0d:d8:a4: 32:f3:88:22:a4:d2:fc:8a:bc:a5:d4:f6:8c:60:90: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DA:51:5B:36:C5:4E:99:77:B9:57:37:3C:C8:25:EF:40:AB:6F:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/446d452e-22d6-4f3a-b903-6a2d64e95867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b03::/48 Signature Algorithm: sha256WithRSAEncryption 07:a8:03:5b:aa:6e:87:b4:34:c8:d9:c7:28:4c:85:ee:fc:4f: 0e:62:1b:5e:bf:ac:5e:d1:85:e4:9d:d6:34:79:d0:55:1b:ff: 76:7b:2e:97:d5:0a:40:ae:b3:45:27:bf:be:a4:d6:d9:82:da: d0:9f:a0:77:86:6b:27:c8:cd:37:ae:94:e7:2b:6b:71:7c:f2: 04:66:47:b5:7c:4a:1f:af:cd:85:70:b8:39:58:8c:92:c7:06: 59:66:a1:0a:3b:63:2a:43:98:aa:d9:71:60:fd:34:fc:71:53: 2c:18:1f:e5:da:13:d0:d5:3e:6b:64:f7:85:e8:4b:58:6f:6f: 93:24:33:4c:dd:04:42:3e:91:ce:83:79:8e:3d:9b:e9:5f:17: 8c:03:ca:05:91:2b:c3:3a:4c:48:4e:6d:75:90:0a:12:c9:17: f0:96:94:58:e3:ca:af:73:0e:67:de:43:56:ff:23:c0:44:49: 63:46:0a:39:00:38:0d:f7:1b:cf:67:fd:c2:90:54:5c:c6:e1: 50:0e:96:1e:e7:ef:9f:82:d3:b3:87:3c:e6:82:24:fc:96:97: f8:64:fd:17:fc:de:69:62:ad:1d:9d:6d:6e:c3:44:c1:c4:60: 97:8b:13:34:68:f7:69:82:3d:2f:6e:40:07:3f:21:51:a4:ac: 65:8f:55:da -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFugGY91b7m8JijRrNbwIY1dBPvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTAzMDAwMDEwWhcNMjYxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NWFjMzgyNWU4NzVlOTZlODYyYmU4OWU3ZTA5M2EzNmE2 Y2YyOTRiZGYyOTljNjY5NTlhMmM5NjZlN2QyODBhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKa43o5Cjsu8ew5cbkYclEvFTvTdOWu74KjRQngyqsEZ6m gnM255FdVSr8uwA5xfyq7d7rSb5IRSLvUvbsN7K+z/5kYh8dNz+3qZZxqK+wNs6N MZXU2C3qMC3JhkfQtQH1tiYF/SQv6PN5UTMy+kMEdkb1V4O/072/w+L0FHwoPEg3 finVlYaJEa6tGq3FDlM7mGIdOYebpkKgY5chc3PVdK6NvzhigM8qoFVS0Z0hzDBn WWAEuFydMbxUQeka+La0kwjYCQbBza6cJUJdm+EomhPQLHWA57MPFU1MbXsr+/nP j9GLZE6/6787BA3YpDLziCKk0vyKvKXU9oxgkNQBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXtpRWzbFTpl3uVc3PMgl70Crb/cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ0NmQ0NTJlLTIyZDYtNGYzYS1iOTAzLTZhMmQ2NGU5NTg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwMwDQYJKoZIhvcNAQELBQADggEBAAeoA1uqboe0NMjZxyhMhe78 Tw5iG16/rF7RheSd1jR50FUb/3Z7LpfVCkCus0Unv76k1tmC2tCfoHeGayfIzTeu lOcra3F88gRmR7V8Sh+vzYVwuDlYjJLHBllmoQo7YypDmKrZcWD9NPxxUywYH+Xa E9DVPmtk94XoS1hvb5MkM0zdBEI+kc6DeY49m+lfF4wDygWRK8M6TEhObXWQChLJ F/CWlFjjyq9zDmfeQ1b/I8BESWNGCjkAOA33G89n/cKQVFzG4VAOlh7n75+C07OH POaCJPyWl/hk/Rf83mlirR2dbW7DRMHEYJeLEzRo92mCPS9uQAc/IVGkrGWPVdo= -----END CERTIFICATE-----Generated at Sun Sep 20 11:46:33 2026 by rpki-client