$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa File: 453c474f-8fec-4be3-b48b-6e0047148c82.roa (raw, json) Hash identifier: +Cj1yp6qxby2gXweUzKtikpmPleeAZpmvplqEcedOCA= Subject key identifier: 53:08:58:BF:EF:99:C2:6C:27:11:E8:03:AF:3B:38:83:1E:02:A7:0A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 36E470D904695B3092E57D17BB6F89B3F21D67BD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa Signing time: Sun 20 Sep 2026 00:00:11 +0000 ROA not before: Sun 20 Sep 2026 00:00:11 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6027::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e4:70:d9:04:69:5b:30:92:e5:7d:17:bb:6f:89:b3:f2:1d:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:11 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=8bb069340bad86edb644bf5bc4f27369f84c3597e72803dc4c96c9e8b9c194ed, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:bd:45:d3:22:b9:fd:32:85:2e:16:f7:2a: 02:28:2d:9a:8c:8e:d0:d8:b0:65:cd:ee:4c:ec:af: 0b:eb:70:41:5b:15:fb:0b:ae:cb:f3:56:b8:22:96: 91:0c:0f:0f:d3:97:a8:25:67:ad:49:64:2d:a7:7e: 87:cc:97:ae:e0:5d:9d:37:e2:d4:a9:04:ac:1e:a1: 5e:68:ee:41:48:ad:02:e7:41:51:da:fb:75:8f:ca: bd:bb:50:33:ab:65:c8:cd:4e:9f:a7:b9:e3:54:b6: 3a:3a:ac:89:04:38:ee:39:11:fc:62:2d:d0:0a:31: 57:7e:34:e9:17:da:d9:1d:6b:50:db:92:85:80:73: e6:08:40:93:23:35:7c:39:03:df:92:61:94:e8:de: 81:8c:7e:ff:13:07:3d:fe:31:f2:a3:53:7d:be:8c: 6a:81:94:ce:7e:52:c1:58:4f:cd:8b:fd:77:d7:e6: 53:26:7a:1e:b5:46:ad:e3:03:95:4e:19:fe:50:f2: fb:b9:cf:f6:35:ce:1d:2a:33:25:ad:9f:13:ff:6d: 08:1a:03:35:85:c5:2f:7a:1f:bd:55:21:44:de:cf: d5:40:b5:c3:57:4b:79:56:e6:b8:a2:7d:26:e6:fc: 40:3f:72:73:dc:04:82:5e:19:f1:a3:c0:06:1e:55: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:58:BF:EF:99:C2:6C:27:11:E8:03:AF:3B:38:83:1E:02:A7:0A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6027::/48 Signature Algorithm: sha256WithRSAEncryption 0c:42:cf:7f:82:59:11:f0:93:b3:50:a6:f9:d4:78:13:2d:92: 06:74:1e:fd:24:54:65:b6:b2:3d:74:26:47:d3:a1:3c:e4:d5: 99:8b:69:1b:16:77:f8:60:81:ed:56:84:c1:b9:9a:73:3c:7f: 6d:80:86:37:08:04:a5:72:07:80:7f:41:ec:95:92:52:d7:01: f0:1e:5e:05:c9:ef:b6:1a:ad:24:5f:64:cf:b5:85:6c:d9:8c: f0:d6:fd:46:ed:71:ed:3c:f0:37:86:e0:27:b8:d2:bc:58:3f: 1b:57:69:dc:92:f1:00:95:08:dc:7e:6a:80:1e:f4:d1:f6:b1: 89:c9:6d:c9:2c:e1:24:b4:0e:b8:71:e6:cd:a9:48:c4:07:8d: a4:6a:ec:b4:18:a2:f0:5b:31:81:3d:5e:e9:e6:ed:9a:96:16: 8c:d2:73:91:f0:7d:0d:ff:ea:02:a3:d2:1d:90:5e:9c:3c:e1: ec:cc:36:a9:f4:c7:5d:85:53:e7:72:5d:21:b2:a2:c0:07:44: 9b:4d:03:94:f9:09:a8:fe:17:56:41:d0:d3:c5:40:f0:68:a8: 57:d6:7c:6f:93:dd:d7:b0:a5:9b:47:85:da:7e:77:e6:c9:fd: 53:0e:f5:b9:40:d6:9c:e0:7e:a7:8f:5f:57:96:d0:9a:94:36: da:9b:44:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNuRw2QRpWzCS5X0Xu2+Js/IdZ70wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDExWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmIwNjkzNDBiYWQ4NmVkYjY0NGJmNWJjNGYyNzM2OWY4 NGMzNTk3ZTcyODAzZGM0Yzk2YzllOGI5YzE5NGVkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9lb1F0yK5/TKFLhb3KgIoLZqMjtDYsGXN7kzsrwvrcEFb FfsLrsvzVrgilpEMDw/Tl6glZ61JZC2nfofMl67gXZ034tSpBKweoV5o7kFIrQLn QVHa+3WPyr27UDOrZcjNTp+nueNUtjo6rIkEOO45EfxiLdAKMVd+NOkX2tkda1Db koWAc+YIQJMjNXw5A9+SYZTo3oGMfv8TBz3+MfKjU32+jGqBlM5+UsFYT82L/XfX 5lMmeh61Rq3jA5VOGf5Q8vu5z/Y1zh0qMyWtnxP/bQgaAzWFxS96H71VIUTez9VA tcNXS3lW5riifSbm/EA/cnPcBIJeGfGjwAYeVX0RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUwhYv++ZwmwnEegDrzs4gx4CpwowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1M2M0NzRmLThmZWMtNGJlMy1iNDhiLTZlMDA0NzE0OGM4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCcwDQYJKoZIhvcNAQELBQADggEBAAxCz3+CWRHwk7NQpvnUeBMt kgZ0Hv0kVGW2sj10JkfToTzk1ZmLaRsWd/hgge1WhMG5mnM8f22AhjcIBKVyB4B/ QeyVklLXAfAeXgXJ77YarSRfZM+1hWzZjPDW/Ubtce088DeG4Ce40rxYPxtXadyS 8QCVCNx+aoAe9NH2sYnJbcks4SS0Drhx5s2pSMQHjaRq7LQYovBbMYE9Xunm7ZqW FozSc5HwfQ3/6gKj0h2QXpw84ezMNqn0x12FU+dyXSGyosAHRJtNA5T5Caj+F1ZB 0NPFQPBoqFfWfG+T3dewpZtHhdp+d+bJ/VMO9blA1pzgfqePX1eW0JqUNtqbRBs= -----END CERTIFICATE-----Generated at Sun Sep 20 12:39:24 2026 by rpki-client