$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a88a0636-6de9-4bbc-972d-e65a2c9dcd4e.roa File: a88a0636-6de9-4bbc-972d-e65a2c9dcd4e.roa (raw, json) Hash identifier: 0HZrLgNmhQronDv/3NP1lxddk6oEYcLWstBPixd5Vp0= Subject key identifier: F3:83:C3:91:CE:11:A9:7F:36:88:17:E8:59:BA:DB:53:2C:DB:6D:52 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5F7915058D8AF18459BCDE2F8C4B2C7863EA574B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a88a0636-6de9-4bbc-972d-e65a2c9dcd4e.roa Signing time: Thu 10 Sep 2026 00:20:05 +0000 ROA not before: Thu 10 Sep 2026 00:20:05 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:79:15:05:8d:8a:f1:84:59:bc:de:2f:8c:4b:2c:78:63:ea:57:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 10 00:20:05 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=536b0381cca0949ad8d96cf09b37c0e2098f8c2bd3b68701c81e4b4513959ed1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:09:60:34:aa:48:d9:fa:0c:b2:6a:1a:e6:c2: c6:09:bb:ee:02:43:80:bc:af:09:2e:34:08:e2:07: 6b:7f:65:13:4e:5f:3b:a1:e9:cc:24:6d:5c:0a:47: 39:a6:53:7f:f7:e0:91:e3:64:e7:5a:df:c3:56:0c: 21:9e:55:0d:d9:3b:98:b3:12:1b:01:cc:7d:21:51: 7d:99:1a:07:3f:aa:ac:9b:04:71:36:ff:f5:b8:c6: 28:01:53:30:6b:40:c4:87:23:8d:40:d7:62:ca:f1: 72:f5:1f:33:30:f6:ef:c2:7a:9b:e6:91:2e:85:45: d9:85:de:8f:c9:28:19:bc:50:67:f2:4e:b5:fd:be: cb:10:56:d8:f0:f6:fc:48:34:3f:d9:d3:e4:79:c2: 85:b8:84:2a:9a:d5:03:5f:c1:b9:e4:a9:4d:dc:4f: fb:b4:9b:f9:e8:0b:b2:2f:77:3c:66:29:fb:51:77: 98:dc:e6:48:a0:94:4e:19:92:b5:b4:a1:97:d8:20: 66:52:86:3d:56:1f:2a:fb:6a:b0:15:27:38:17:4c: f2:41:cc:ca:71:f6:73:39:f4:b9:1d:58:dd:96:ec: 68:6f:e3:25:71:77:86:53:cd:8a:90:19:2f:e4:2b: b5:f4:64:f4:41:f6:01:b1:17:39:14:3e:15:08:74: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:83:C3:91:CE:11:A9:7F:36:88:17:E8:59:BA:DB:53:2C:DB:6D:52 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a88a0636-6de9-4bbc-972d-e65a2c9dcd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:70::/44 Signature Algorithm: sha256WithRSAEncryption 0e:85:a9:b4:5b:d4:15:9d:3f:3e:bf:60:66:00:4a:76:76:b1: 69:64:46:a4:52:43:3b:d9:1c:13:d2:52:b1:4b:ff:e6:de:c3: 78:17:a5:9a:d0:8a:34:db:31:af:c9:8d:7c:9e:76:47:95:73: 6d:36:05:80:5d:4f:52:cd:b3:16:bd:be:3d:85:2a:21:91:fb: ce:47:0a:af:8a:f7:d4:73:64:7d:1d:d7:41:5b:75:64:35:93: 20:48:67:2e:bd:c3:f9:06:41:9c:83:4f:ad:9f:a0:09:0d:76: 66:40:28:42:5e:21:c8:a9:d6:4d:08:7d:57:c2:5b:8a:1c:30: a1:22:af:ea:76:cd:f7:9c:58:fa:02:64:b7:d5:f0:26:0d:6b: 66:80:bf:4f:b8:89:26:e6:22:b9:cf:ae:1a:41:be:f3:d0:a3: a3:f5:05:55:be:68:fb:fc:c3:21:0b:94:05:36:0e:f9:41:02: 58:07:c8:ad:54:45:b1:bf:9f:db:17:8a:2f:ef:e5:ff:7d:ad: 5e:bb:8d:ad:61:2f:dc:0c:ee:33:d7:1a:5f:47:4c:d0:9f:9f: 8e:f8:68:85:dc:bf:27:c7:19:ce:15:77:63:79:55:a8:8d:0c: ee:f9:6c:c8:af:70:27:a9:f0:48:df:de:77:27:a6:de:c2:c9: 51:23:3a:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX3kVBY2K8YRZvN4vjEsseGPqV0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEwMDAyMDA1WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzZiMDM4MWNjYTA5NDlhZDhkOTZjZjA5YjM3YzBlMjA5 OGY4YzJiZDNiNjg3MDFjODFlNGI0NTEzOTU5ZWQxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrCWA0qkjZ+gyyahrmwsYJu+4CQ4C8rwkuNAjiB2t/ZRNO Xzuh6cwkbVwKRzmmU3/34JHjZOda38NWDCGeVQ3ZO5izEhsBzH0hUX2ZGgc/qqyb BHE2//W4xigBUzBrQMSHI41A12LK8XL1HzMw9u/CepvmkS6FRdmF3o/JKBm8UGfy TrX9vssQVtjw9vxIND/Z0+R5woW4hCqa1QNfwbnkqU3cT/u0m/noC7IvdzxmKftR d5jc5kiglE4ZkrW0oZfYIGZShj1WHyr7arAVJzgXTPJBzMpx9nM59LkdWN2W7Ghv 4yVxd4ZTzYqQGS/kK7X0ZPRB9gGxFzkUPhUIdIeRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU84PDkc4RqX82iBfoWbrbUyzbbVIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E4OGEwNjM2LTZkZTktNGJiYy05NzJkLWU2NWEyYzlkY2Q0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAHAwDQYJKoZIhvcNAQELBQADggEBAA6FqbRb1BWdPz6/YGYASnZ2 sWlkRqRSQzvZHBPSUrFL/+bew3gXpZrQijTbMa/JjXyedkeVc202BYBdT1LNsxa9 vj2FKiGR+85HCq+K99RzZH0d10FbdWQ1kyBIZy69w/kGQZyDT62foAkNdmZAKEJe Icip1k0IfVfCW4ocMKEir+p2zfecWPoCZLfV8CYNa2aAv0+4iSbmIrnPrhpBvvPQ o6P1BVW+aPv8wyELlAU2DvlBAlgHyK1URbG/n9sXii/v5f99rV67ja1hL9wM7jPX Gl9HTNCfn474aIXcvyfHGc4Vd2N5VaiNDO75bMivcCep8Ejf3ncnpt7CyVEjOq4= -----END CERTIFICATE-----Generated at Sun Sep 20 16:17:28 2026 by rpki-client