$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a64a335-1962-4306-9dd6-beb2565ad283.roa File: 6a64a335-1962-4306-9dd6-beb2565ad283.roa (raw, json) Hash identifier: +i7cQiz/2DnO0lrERaLH0ZLD9fYtk4TfbenbqdRtCdM= Subject key identifier: 4A:2E:FA:26:7C:7E:55:DB:22:2C:11:43:CF:9F:10:6E:0A:48:DB:49 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5C3580A975DC52ABB0412F6005F43FB8F8124528 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a64a335-1962-4306-9dd6-beb2565ad283.roa Signing time: Sun 06 Sep 2026 00:00:06 +0000 ROA not before: Sun 06 Sep 2026 00:00:06 +0000 ROA not after: Sat 05 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:35:80:a9:75:dc:52:ab:b0:41:2f:60:05:f4:3f:b8:f8:12:45:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 6 00:00:06 2026 GMT Not After : Dec 5 23:59:59 2026 GMT Subject: serialNumber=2520f20134412b3bcf6e8aadb485e2c87f2290c5dad036c9616d13a3bb23dd1e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:fe:e3:5e:2e:c0:6b:ae:fe:5d:86:de:ff: c6:64:b7:45:44:98:ad:9e:28:4a:13:6c:de:51:25: 21:5d:09:ac:27:50:46:79:ff:be:14:da:14:54:3f: 61:b4:57:5f:44:c8:f5:fb:ad:07:51:d0:eb:4a:65: aa:4b:d2:34:cb:6c:fd:92:ad:66:25:2f:c9:3a:65: 58:de:77:06:13:11:52:16:bf:3f:34:51:5f:7f:f8: c6:78:a5:4e:9d:27:bd:2b:ae:96:4b:be:0c:ff:6e: 47:d2:88:ec:26:ab:96:55:ef:0d:70:d7:63:4a:bb: b7:cf:e7:00:e1:9d:a3:25:8e:50:a5:4e:81:f8:10: ab:dc:21:9e:2a:ad:77:42:af:2a:92:26:04:3f:81: d2:70:c6:50:2c:3d:33:c5:96:05:db:50:be:60:e7: df:79:91:1d:3b:b5:c8:4a:ad:07:23:20:b3:cd:52: 68:dd:ef:40:e1:c7:96:f7:0d:7c:fd:1e:35:fd:12: 17:17:3f:9a:68:82:5d:1a:e0:9c:f5:76:fb:9f:47: 4b:23:8b:21:4a:98:f8:6e:8e:c2:3a:23:81:cb:71: e7:17:f4:a1:57:e0:7d:1e:67:da:b3:11:ec:c5:eb: fd:26:94:e3:d2:71:de:44:c3:0a:52:b0:2b:b3:d8: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:FA:26:7C:7E:55:DB:22:2C:11:43:CF:9F:10:6E:0A:48:DB:49 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a64a335-1962-4306-9dd6-beb2565ad283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c00::/40 Signature Algorithm: sha256WithRSAEncryption 9d:e5:0e:d2:99:9a:09:72:3e:da:f5:ea:79:66:2f:da:85:b3: 2e:3a:de:69:b0:fd:4c:25:aa:b5:d3:0b:c3:03:18:54:60:da: 25:c2:17:6c:ab:73:72:16:48:a5:df:e0:2f:3a:79:b1:e9:b5: 2b:b3:f1:f4:b9:30:cc:91:e8:cb:0c:b9:df:98:8d:a6:b3:8e: 6f:9a:30:a8:d0:99:2f:a8:20:a4:98:6c:a9:0b:f3:ec:b1:66: 38:60:8b:16:8a:87:bb:bc:d3:b7:fb:98:f5:09:b0:d9:3a:47: f8:34:33:e5:f7:90:96:50:38:22:f3:41:4b:5d:68:7f:e1:91: 1b:65:33:06:83:a9:23:f8:7f:ab:24:5e:1f:07:71:9e:da:5e: eb:82:00:b0:8e:db:09:9f:e8:b1:38:9e:5f:a7:01:0a:73:f4: a0:94:c7:75:24:f9:80:d2:14:03:c9:e3:1e:88:d1:b9:56:a3: 30:c2:74:e7:26:02:db:fb:b5:fa:76:6e:b8:4e:a6:b8:88:81: a9:c1:dd:43:a5:5e:6b:01:1f:1f:b0:2f:a9:d7:2f:55:cc:f0: eb:a2:18:80:bc:10:82:12:51:b3:45:1f:94:93:0b:72:c7:3e: 09:32:f5:02:1d:c1:81:8a:3a:61:ac:73:42:b2:d3:da:51:b3: f2:b8:55:c0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXDWAqXXcUquwQS9gBfQ/uPgSRSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTA2MDAwMDA2WhcNMjYxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTIwZjIwMTM0NDEyYjNiY2Y2ZThhYWRiNDg1ZTJjODdm MjI5MGM1ZGFkMDM2Yzk2MTZkMTNhM2JiMjNkZDFlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdBP7jXi7Aa67+XYbe/8Zkt0VEmK2eKEoTbN5RJSFdCawn UEZ5/74U2hRUP2G0V19EyPX7rQdR0OtKZapL0jTLbP2SrWYlL8k6ZVjedwYTEVIW vz80UV9/+MZ4pU6dJ70rrpZLvgz/bkfSiOwmq5ZV7w1w12NKu7fP5wDhnaMljlCl ToH4EKvcIZ4qrXdCryqSJgQ/gdJwxlAsPTPFlgXbUL5g5995kR07tchKrQcjILPN Umjd70Dhx5b3DXz9HjX9EhcXP5pogl0a4Jz1dvufR0sjiyFKmPhujsI6I4HLcecX 9KFX4H0eZ9qzEezF6/0mlOPScd5EwwpSsCuz2AxFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSi76Jnx+VdsiLBFDz58QbgpI20kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhNjRhMzM1LTE5NjItNDMwNi05ZGQ2LWJlYjI1NjVhZDI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDDANBgkqhkiG9w0BAQsFAAOCAQEAneUO0pmaCXI+2vXqeWYv2oWz LjreabD9TCWqtdMLwwMYVGDaJcIXbKtzchZIpd/gLzp5sem1K7Px9LkwzJHoywy5 35iNprOOb5owqNCZL6ggpJhsqQvz7LFmOGCLFoqHu7zTt/uY9Qmw2TpH+DQz5feQ llA4IvNBS11of+GRG2UzBoOpI/h/qyReHwdxntpe64IAsI7bCZ/osTieX6cBCnP0 oJTHdST5gNIUA8njHojRuVajMMJ05yYC2/u1+nZuuE6muIiBqcHdQ6VeawEfH7Av qdcvVczw66IYgLwQghJRs0UflJMLcsc+CTL1Ah3BgYo6YaxzQrLT2lGz8rhVwA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:09:08 2026 by rpki-client