$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5915706c-1c3c-43d3-bfa4-289c63552306.roa File: 5915706c-1c3c-43d3-bfa4-289c63552306.roa (raw, json) Hash identifier: oVevQ4Lu/KGSbvaLL9ClAbMi2gxwTqRz/2+2FPVfRoQ= Subject key identifier: EE:8F:10:A0:48:68:68:87:A0:C4:BF:C2:58:63:1E:47:49:11:CE:68 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7AF5C2B5E43D5982E0077E9286085434A2C41822 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5915706c-1c3c-43d3-bfa4-289c63552306.roa Signing time: Sun 20 Sep 2026 00:00:14 +0000 ROA not before: Sun 20 Sep 2026 00:00:14 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f5:c2:b5:e4:3d:59:82:e0:07:7e:92:86:08:54:34:a2:c4:18:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:14 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=61271f78d911177780450ed071e256b2652743ea1379ea64028425a0b4cc7394, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:0b:32:bb:d0:d1:5e:9a:69:7d:68:7d:ad: 90:64:23:e2:c1:eb:76:6d:96:70:ca:d2:e4:e3:45: 73:b4:d8:f2:0c:33:36:82:1f:73:b2:8d:3b:d6:20: d8:50:61:e7:1e:38:98:7c:b5:8b:9e:a7:35:c1:70: ce:65:3d:95:94:90:8b:9c:d7:57:39:5b:75:33:9f: 16:64:46:74:9f:7e:e5:e0:80:61:3f:dc:db:a1:aa: 8e:96:b8:d4:cb:7d:59:2d:56:25:2f:90:4c:b4:14: b8:05:95:c5:b1:2f:73:d5:f9:ed:05:e2:a2:1f:32: ea:23:99:c3:eb:82:6c:88:9b:39:9e:d9:16:08:a3: 1c:c9:9a:17:c8:81:f6:cb:5e:90:8e:fe:62:7f:c1: 94:9b:6f:a6:68:f1:ac:72:7c:9a:e7:78:b1:b2:b2: 40:3c:2c:50:0b:cc:e7:59:50:19:db:23:06:9f:3b: a1:76:ff:17:04:eb:31:cf:d6:dc:f6:a4:b2:3d:8d: cf:b7:87:73:8d:ba:d6:92:e3:0d:61:60:ff:f7:c2: b5:6d:91:bd:f5:91:5f:75:ce:f9:1c:08:ba:18:f8: 73:b4:47:90:8d:0d:07:80:37:f2:29:31:42:40:d0: 74:f6:b5:5e:64:8c:c0:af:06:3d:0b:c7:9e:57:2f: 38:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8F:10:A0:48:68:68:87:A0:C4:BF:C2:58:63:1E:47:49:11:CE:68 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5915706c-1c3c-43d3-bfa4-289c63552306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6020::/48 Signature Algorithm: sha256WithRSAEncryption 06:82:13:bc:61:3f:b8:d7:29:27:07:4e:ed:36:11:52:8c:21: 82:08:51:91:25:da:ad:8c:c5:9f:bf:55:2f:2b:67:dd:dd:9b: 4b:16:1a:fe:3c:84:10:46:bd:64:a5:20:e8:c1:f4:8b:7e:6a: 3f:0e:d4:ec:6b:0c:73:ab:65:9c:71:96:64:b2:b5:6c:e4:d3: 59:a2:1c:1e:aa:c3:9c:f6:ec:b4:b2:ee:29:0d:5d:18:4a:fe: 5c:63:6f:e7:4e:a6:f9:66:fa:22:1d:1f:26:d6:e3:ec:5d:95: f3:e7:95:0b:87:9a:83:0f:6b:f6:3b:d7:93:38:2f:d4:b6:bf: cc:a9:56:ed:f1:14:ad:2e:4c:35:95:dc:c1:cb:0c:0d:64:56: 60:f0:92:99:e7:4c:7b:53:8a:6b:f8:13:c3:08:60:81:7a:cb: 20:44:34:76:bf:b4:43:c4:70:2a:e6:a5:58:27:1f:aa:06:cd: cd:b2:6d:e6:ab:85:be:16:af:19:fd:91:11:59:f5:11:25:2e: 98:56:22:da:b4:41:85:d7:63:5c:69:de:51:d6:f5:da:62:02: fa:7d:f3:61:e1:a3:6a:a6:55:59:a9:4b:1d:34:1b:38:1a:f9: 2a:f5:95:d8:2e:d0:47:15:64:3e:16:db:bc:30:bc:6d:bc:20: c0:71:00:e9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUevXCteQ9WYLgB36ShghUNKLEGCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDE0WhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTI3MWY3OGQ5MTExNzc3ODA0NTBlZDA3MWUyNTZiMjY1 Mjc0M2VhMTM3OWVhNjQwMjg0MjVhMGI0Y2M3Mzk0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe7gsyu9DRXpppfWh9rZBkI+LB63ZtlnDK0uTjRXO02PIM MzaCH3OyjTvWINhQYeceOJh8tYuepzXBcM5lPZWUkIuc11c5W3UznxZkRnSffuXg gGE/3Nuhqo6WuNTLfVktViUvkEy0FLgFlcWxL3PV+e0F4qIfMuojmcPrgmyImzme 2RYIoxzJmhfIgfbLXpCO/mJ/wZSbb6Zo8axyfJrneLGyskA8LFALzOdZUBnbIwaf O6F2/xcE6zHP1tz2pLI9jc+3h3ONutaS4w1hYP/3wrVtkb31kV91zvkcCLoY+HO0 R5CNDQeAN/IpMUJA0HT2tV5kjMCvBj0Lx55XLzjZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7o8QoEhoaIegxL/CWGMeR0kRzmgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU5MTU3MDZjLTFjM2MtNDNkMy1iZmE0LTI4OWM2MzU1MjMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCAwDQYJKoZIhvcNAQELBQADggEBAAaCE7xhP7jXKScHTu02EVKM IYIIUZEl2q2MxZ+/VS8rZ93dm0sWGv48hBBGvWSlIOjB9It+aj8O1OxrDHOrZZxx lmSytWzk01miHB6qw5z27LSy7ikNXRhK/lxjb+dOpvlm+iIdHybW4+xdlfPnlQuH moMPa/Y715M4L9S2v8ypVu3xFK0uTDWV3MHLDA1kVmDwkpnnTHtTimv4E8MIYIF6 yyBENHa/tEPEcCrmpVgnH6oGzc2ybearhb4Wrxn9kRFZ9RElLphWItq0QYXXY1xp 3lHW9dpiAvp982Hho2qmVVmpSx00Gzga+Sr1ldgu0EcVZD4W27wwvG28IMBxAOk= -----END CERTIFICATE-----Generated at Mon Sep 21 04:51:17 2026 by rpki-client