$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b36f294-8f01-4fd4-8ed1-d96cdca16ac7.roa File: 5b36f294-8f01-4fd4-8ed1-d96cdca16ac7.roa (raw, json) Hash identifier: X9swF3JOTWMWHuNV5/InqNefPQCQcRBn0IUMRk0R0Qo= Subject key identifier: CF:F5:FF:2F:C2:FD:E5:63:D6:80:AB:30:04:E2:50:F3:B1:13:CD:88 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 35DA0E9981B88B2BDCF33774755619EE5431E6F1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b36f294-8f01-4fd4-8ed1-d96cdca16ac7.roa Signing time: Fri 18 Sep 2026 00:00:04 +0000 ROA not before: Fri 18 Sep 2026 00:00:04 +0000 ROA not after: Thu 17 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:da:0e:99:81:b8:8b:2b:dc:f3:37:74:75:56:19:ee:54:31:e6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 18 00:00:04 2026 GMT Not After : Dec 17 23:59:59 2026 GMT Subject: serialNumber=fe764b44548ab41a0efc1ba5012c608f6937a319f6349c66569ba1c43c4a5ed9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:cf:44:8a:24:7b:28:7f:35:c9:ba:27:13: 2b:c7:15:de:b9:76:03:19:d6:36:a0:92:53:6c:69: fe:16:02:a7:53:38:58:d3:ab:04:87:ac:d3:63:1e: d0:98:1b:69:48:ed:df:68:e8:2a:22:2b:14:a4:f2: bd:c9:58:31:1a:a3:a4:f6:0e:f8:1a:d6:1a:b4:3c: ca:a0:a8:64:06:37:b6:d0:50:f0:b2:47:20:7b:a7: ce:5f:da:8f:09:a7:df:d4:7c:4d:ee:64:d9:d2:62: 9d:bb:00:02:c1:39:0c:5c:b7:0f:47:69:9b:e5:11: 19:24:82:45:e8:f2:03:28:46:c4:96:6e:15:92:ba: 77:cf:4c:bd:9e:a3:8f:d0:e4:52:a7:2e:c5:dc:82: 32:b9:43:6a:41:9d:a4:5e:8b:95:52:cb:e8:51:60: 12:89:25:4c:c3:c2:de:c1:28:a2:85:26:ed:a2:0e: 44:38:21:24:12:1c:69:96:1d:0e:6a:eb:95:ed:30: 94:11:b5:b8:8e:cb:cb:ca:f7:33:fb:9a:b9:07:9a: 11:79:05:7d:bb:de:b3:eb:8e:d4:2c:97:b5:ee:6e: 0b:8b:84:97:9d:8b:db:6f:aa:27:40:bb:3f:d8:1d: 3b:df:8b:ce:08:95:6a:2c:96:be:f1:02:3a:17:58: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F5:FF:2F:C2:FD:E5:63:D6:80:AB:30:04:E2:50:F3:B1:13:CD:88 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b36f294-8f01-4fd4-8ed1-d96cdca16ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7028::/48 Signature Algorithm: sha256WithRSAEncryption 85:2f:a5:90:9f:48:2c:3d:55:5f:22:9f:a6:9d:05:27:94:ed: 3e:00:b6:24:c3:33:69:b5:67:ac:3a:d3:c6:62:2f:27:83:c1: 69:3a:af:a5:12:d6:04:cd:05:b5:88:fe:bf:19:e4:73:25:a5: 23:d0:97:50:a3:d0:43:18:7e:6b:bd:f7:68:6a:e7:0e:30:49: 5a:e1:56:58:03:77:52:ea:c8:db:35:15:81:37:01:0b:85:5a: 51:a1:19:6f:9a:2b:f3:41:3d:ab:a8:3b:76:f4:bc:fe:88:e6: 6d:f4:b0:c4:44:a1:24:fd:76:9b:47:95:ba:7e:58:89:36:a5: ab:94:64:f5:00:6d:76:ec:77:e2:43:82:2e:2b:da:6b:c1:7c: f6:1a:26:46:3e:73:d8:4e:dd:73:65:4b:6e:7d:1b:89:d0:fb: da:06:44:ce:08:07:e7:d2:bd:cf:e1:16:17:93:74:21:32:4a: a8:82:11:ef:a1:f3:20:bf:09:3e:c4:4b:6c:4d:1c:ac:a7:c4: f1:b9:ac:7f:9f:17:c8:62:19:f3:bc:47:3d:1a:8c:e5:c1:d5: 68:1a:23:2e:f1:38:6a:12:25:00:10:71:fa:9d:0d:7c:9c:2d: 5e:5d:b3:78:66:f9:04:ee:b3:4b:fe:37:0a:9d:79:53:94:f6: 78:ea:97:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNdoOmYG4iyvc8zd0dVYZ7lQx5vEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTE4MDAwMDA0WhcNMjYxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTc2NGI0NDU0OGFiNDFhMGVmYzFiYTUwMTJjNjA4ZjY5 MzdhMzE5ZjYzNDljNjY1NjliYTFjNDNjNGE1ZWQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc/89EiiR7KH81ybonEyvHFd65dgMZ1jagklNsaf4WAqdT OFjTqwSHrNNjHtCYG2lI7d9o6CoiKxSk8r3JWDEao6T2Dvga1hq0PMqgqGQGN7bQ UPCyRyB7p85f2o8Jp9/UfE3uZNnSYp27AALBOQxctw9HaZvlERkkgkXo8gMoRsSW bhWSunfPTL2eo4/Q5FKnLsXcgjK5Q2pBnaRei5VSy+hRYBKJJUzDwt7BKKKFJu2i DkQ4ISQSHGmWHQ5q65XtMJQRtbiOy8vK9zP7mrkHmhF5BX273rPrjtQsl7XubguL hJedi9tvqidAuz/YHTvfi84IlWoslr7xAjoXWCQdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz/X/L8L95WPWgKswBOJQ87ETzYgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzViMzZmMjk0LThmMDEtNGZkNC04ZWQxLWQ5NmNkY2ExNmFjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycCgwDQYJKoZIhvcNAQELBQADggEBAIUvpZCfSCw9VV8in6adBSeU 7T4AtiTDM2m1Z6w608ZiLyeDwWk6r6US1gTNBbWI/r8Z5HMlpSPQl1Cj0EMYfmu9 92hq5w4wSVrhVlgDd1LqyNs1FYE3AQuFWlGhGW+aK/NBPauoO3b0vP6I5m30sMRE oST9dptHlbp+WIk2pauUZPUAbXbsd+JDgi4r2mvBfPYaJkY+c9hO3XNlS259G4nQ +9oGRM4IB+fSvc/hFheTdCEySqiCEe+h8yC/CT7ES2xNHKynxPG5rH+fF8hiGfO8 Rz0ajOXB1WgaIy7xOGoSJQAQcfqdDXycLV5ds3hm+QTus0v+NwqdeVOU9njql0I= -----END CERTIFICATE-----Generated at Sun Sep 20 12:36:19 2026 by rpki-client