$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9d44e4e9-a81b-4fae-b741-fac0b3ab44a0.roa File: 9d44e4e9-a81b-4fae-b741-fac0b3ab44a0.roa (raw, json) Hash identifier: rdJCHD080vdr/L9VbwY7PrvWH36o50yN08zHNQ52KMQ= Subject key identifier: 5A:8E:2E:96:BA:4E:5C:A4:87:98:B4:7F:4E:79:B6:75:C1:AD:FC:E4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 098B849573D59DE831AD2C1F78B07C8021F04763 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9d44e4e9-a81b-4fae-b741-fac0b3ab44a0.roa Signing time: Fri 18 Sep 2026 00:00:03 +0000 ROA not before: Fri 18 Sep 2026 00:00:03 +0000 ROA not after: Thu 17 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7029::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:84:95:73:d5:9d:e8:31:ad:2c:1f:78:b0:7c:80:21:f0:47:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 18 00:00:03 2026 GMT Not After : Dec 17 23:59:59 2026 GMT Subject: serialNumber=bffae6e7fafc8bc6158334d452542d20d4a98357f6e2aa0366dfd9dccc20122c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:44:29:f5:b2:05:b6:a5:99:34:84:f0:0c: 88:f1:33:ac:88:80:1d:c2:45:8b:4c:8c:64:60:2f: 23:37:5c:c7:f9:b6:60:3a:f6:39:85:f0:35:2e:d8: 87:44:be:92:47:d5:7e:ce:75:8d:4f:98:4d:7b:ad: 5c:9d:03:18:88:f7:1b:4d:aa:d8:5e:56:52:1e:1b: a4:67:35:00:ea:20:6e:56:4d:28:da:17:c9:21:0e: 34:bb:6a:53:7b:c5:bc:fa:94:d7:b3:e0:ab:e8:d6: 9f:6b:54:04:c3:93:ee:37:45:83:4d:cb:8e:41:fa: 79:39:31:69:23:90:fd:32:87:bb:9f:0f:3c:c8:46: 55:0b:c9:3f:53:e1:b9:51:1a:d4:bc:01:da:e5:70: 0d:97:cf:46:7f:32:e4:9c:5c:4d:9c:06:da:33:3e: d5:94:8e:0b:06:b6:1a:dc:b8:55:e0:da:35:76:cf: bc:ed:5f:72:04:7c:c8:e1:4f:04:de:90:5e:4b:91: a3:4f:84:fb:78:fe:07:bf:67:6a:ee:88:2b:c4:e1: 63:4e:bd:ee:4e:59:db:e8:28:21:92:4d:72:3e:76: 10:9a:5e:3c:cd:bc:43:b8:ee:b1:45:8e:54:05:9b: a2:59:df:59:7c:2e:58:79:4a:6b:fb:80:65:9d:d0: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8E:2E:96:BA:4E:5C:A4:87:98:B4:7F:4E:79:B6:75:C1:AD:FC:E4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9d44e4e9-a81b-4fae-b741-fac0b3ab44a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7029::/48 Signature Algorithm: sha256WithRSAEncryption 2b:13:92:a7:60:0a:b4:29:6e:10:4d:24:fc:86:85:16:fe:2f: ae:19:2d:87:d3:6f:b5:48:bd:11:56:e1:53:27:07:e6:42:ae: 75:c1:53:33:70:e6:83:83:46:46:a6:24:0b:c2:b2:d3:8d:0e: dd:66:17:d7:c0:cf:ca:ce:0b:b6:09:da:92:38:88:97:19:d1: 9f:18:ae:e3:f1:29:79:9d:c0:48:fc:95:e5:dc:e8:eb:52:d2: be:89:18:a2:c0:5f:fc:37:16:5c:63:02:3f:c4:db:ed:60:f4: c4:c1:43:8a:8c:35:c4:93:4d:7a:b9:82:82:0f:74:ad:4b:82: 48:64:ee:4c:8b:71:d4:10:67:8f:a7:c7:2a:b7:85:1a:25:85: e2:56:c7:d5:a5:44:8a:fa:ce:ea:02:5f:e8:92:4b:82:96:76: 89:c1:11:10:66:9f:9f:b8:59:89:fc:1c:dc:90:d0:a7:5b:d6: 3a:61:e9:66:fd:b6:ae:93:54:13:98:ce:a3:eb:63:31:1c:81: 18:74:ff:ea:ca:d5:a9:39:ca:03:48:f6:55:51:a0:dd:16:25: 33:be:72:a0:13:4b:6b:22:76:f7:87:a0:a8:ee:09:b8:24:c2: e7:6a:a7:29:0d:54:cd:42:3a:66:7e:fc:7d:0b:67:55:f9:81: a6:dc:76:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCYuElXPVnegxrSwfeLB8gCHwR2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTE4MDAwMDAzWhcNMjYxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmZhZTZlN2ZhZmM4YmM2MTU4MzM0ZDQ1MjU0MmQyMGQ0 YTk4MzU3ZjZlMmFhMDM2NmRmZDlkY2NjMjAxMjJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm8kQp9bIFtqWZNITwDIjxM6yIgB3CRYtMjGRgLyM3XMf5 tmA69jmF8DUu2IdEvpJH1X7OdY1PmE17rVydAxiI9xtNqtheVlIeG6RnNQDqIG5W TSjaF8khDjS7alN7xbz6lNez4Kvo1p9rVATDk+43RYNNy45B+nk5MWkjkP0yh7uf DzzIRlULyT9T4blRGtS8AdrlcA2Xz0Z/MuScXE2cBtozPtWUjgsGthrcuFXg2jV2 z7ztX3IEfMjhTwTekF5LkaNPhPt4/ge/Z2ruiCvE4WNOve5OWdvoKCGSTXI+dhCa XjzNvEO47rFFjlQFm6JZ31l8Llh5Smv7gGWd0Mr5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWo4ulrpOXKSHmLR/Tnm2dcGt/OQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlkNDRlNGU5LWE4MWItNGZhZS1iNzQxLWZhYzBiM2FiNDRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycCkwDQYJKoZIhvcNAQELBQADggEBACsTkqdgCrQpbhBNJPyGhRb+ L64ZLYfTb7VIvRFW4VMnB+ZCrnXBUzNw5oODRkamJAvCstONDt1mF9fAz8rOC7YJ 2pI4iJcZ0Z8YruPxKXmdwEj8leXc6OtS0r6JGKLAX/w3FlxjAj/E2+1g9MTBQ4qM NcSTTXq5goIPdK1Lgkhk7kyLcdQQZ4+nxyq3hRolheJWx9WlRIr6zuoCX+iSS4KW donBERBmn5+4WYn8HNyQ0Kdb1jph6Wb9tq6TVBOYzqPrYzEcgRh0/+rK1ak5ygNI 9lVRoN0WJTO+cqATS2sidveHoKjuCbgkwudqpykNVM1COmZ+/H0LZ1X5gabcdhg= -----END CERTIFICATE-----Generated at Sun Sep 20 12:36:05 2026 by rpki-client