$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa File: bbfbc983-8785-4005-ba44-919d00df7ff9.roa (raw, json) Hash identifier: yZM4mTBkhJIjkOvO5rBilG7wVldIPV+8qK/ghUlafqE= Subject key identifier: 33:AD:E5:DA:53:29:58:38:B8:A8:8F:0D:3A:F1:A5:A8:4C:8C:07:8D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0C280438AFE49A5D60530F9643CE4F44A5E53B73 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa Signing time: Sun 20 Sep 2026 00:00:12 +0000 ROA not before: Sun 20 Sep 2026 00:00:12 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:28:04:38:af:e4:9a:5d:60:53:0f:96:43:ce:4f:44:a5:e5:3b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:12 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=528a17af58cae8488e1446d82de9211d6f15ae0f3d3a917436f567affa891936, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:55:cd:e7:11:34:54:ae:4a:fc:23:49:80: 0f:ec:07:6a:bd:2d:9b:17:5f:a1:27:51:1c:8f:e4: 37:ee:4d:38:17:4b:52:fb:e6:91:9f:36:1a:fc:48: e5:d6:7e:38:66:1e:25:bc:26:a5:5f:4a:67:f4:7f: e2:57:be:6f:2c:ac:da:6b:2f:15:7d:ca:9a:5a:1d: 24:0d:eb:06:07:79:ce:cf:10:2f:11:3d:08:93:30: 13:69:59:3d:89:f6:9a:26:e0:b6:49:3f:a9:3a:95: 07:9a:fc:ee:2f:22:3d:b6:ad:e4:57:7e:d4:c9:98: bc:c2:4c:ac:0a:17:80:0c:64:78:29:98:8c:e6:7e: ff:b0:96:f0:2b:2b:10:fc:81:a9:40:c1:c5:b8:11: 7b:96:f2:e9:54:8f:7d:20:0f:68:2e:c3:a9:fe:88: 95:5f:a5:35:51:c5:f6:70:7d:51:1d:b6:f9:65:46: 63:50:d6:c1:1a:27:8d:43:8a:b5:56:92:fa:13:57: 21:b1:3b:09:76:d0:36:31:9b:8b:f7:d1:a7:46:1a: 0c:c9:e9:94:2e:fc:6c:7c:7a:a8:d6:2f:c1:b3:9d: 35:4b:28:39:79:0e:c4:02:a5:43:12:68:e4:c6:3c: 79:d4:c7:fe:a4:70:65:26:a0:ff:fd:c0:75:f0:db: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:E5:DA:53:29:58:38:B8:A8:8F:0D:3A:F1:A5:A8:4C:8C:07:8D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6020::/44 Signature Algorithm: sha256WithRSAEncryption 51:7a:8b:70:69:64:38:cd:3d:5c:3d:4f:52:cd:f7:fa:2b:78: bf:d7:62:a7:62:71:a6:27:1f:18:11:6a:22:6e:96:a5:98:20: 54:16:be:2e:7d:d2:31:a8:0f:fd:be:8b:28:82:2f:17:74:e5: 68:41:a1:82:c1:d3:e5:d6:b6:9b:f7:dc:ee:34:2d:74:dc:68: 34:1a:4a:c5:cf:f2:ca:47:ea:71:f5:24:8c:64:c5:21:69:f0: 73:0e:0e:97:a0:29:c7:42:c2:db:f4:f5:33:9f:d2:49:c5:42: 7d:a6:49:ee:10:5b:52:4d:3f:27:91:fe:00:21:49:02:42:b8: e5:e8:5e:f1:2a:d5:75:8b:ca:41:17:c9:58:46:ca:e3:89:79: 56:36:e1:45:ea:59:3f:df:43:7a:76:40:8d:8a:f5:96:2e:b0: 75:ae:d9:e1:a4:a1:f2:27:2b:ee:90:cf:dd:09:73:1b:be:9e: 8d:38:82:26:0c:6a:1f:5d:13:4b:58:40:c1:a2:12:fc:44:d5: 63:cc:24:b8:b3:fd:f8:da:36:e9:ed:9e:96:ad:2d:83:c8:fe: 05:3a:99:1f:54:6a:55:20:e1:58:6c:fd:d4:00:77:28:b2:a8: 71:cf:f4:2a:5d:0f:c8:83:e8:b6:0c:8d:80:b2:7e:60:c4:9b: e2:05:b9:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDCgEOK/kml1gUw+WQ85PRKXlO3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDEyWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjhhMTdhZjU4Y2FlODQ4OGUxNDQ2ZDgyZGU5MjExZDZm MTVhZTBmM2QzYTkxNzQzNmY1NjdhZmZhODkxOTM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIo1XN5xE0VK5K/CNJgA/sB2q9LZsXX6EnURyP5DfuTTgX S1L75pGfNhr8SOXWfjhmHiW8JqVfSmf0f+JXvm8srNprLxV9yppaHSQN6wYHec7P EC8RPQiTMBNpWT2J9pom4LZJP6k6lQea/O4vIj22reRXftTJmLzCTKwKF4AMZHgp mIzmfv+wlvArKxD8galAwcW4EXuW8ulUj30gD2guw6n+iJVfpTVRxfZwfVEdtvll RmNQ1sEaJ41DirVWkvoTVyGxOwl20DYxm4v30adGGgzJ6ZQu/Gx8eqjWL8GznTVL KDl5DsQCpUMSaOTGPHnUx/6kcGUmoP/9wHXw2/wlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM63l2lMpWDi4qI8NOvGlqEyMB40wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiZmJjOTgzLTg3ODUtNDAwNS1iYTQ0LTkxOWQwMGRmN2ZmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYCAwDQYJKoZIhvcNAQELBQADggEBAFF6i3BpZDjNPVw9T1LN9/or eL/XYqdicaYnHxgRaiJulqWYIFQWvi590jGoD/2+iyiCLxd05WhBoYLB0+XWtpv3 3O40LXTcaDQaSsXP8spH6nH1JIxkxSFp8HMODpegKcdCwtv09TOf0knFQn2mSe4Q W1JNPyeR/gAhSQJCuOXoXvEq1XWLykEXyVhGyuOJeVY24UXqWT/fQ3p2QI2K9ZYu sHWu2eGkofInK+6Qz90Jcxu+no04giYMah9dE0tYQMGiEvxE1WPMJLiz/fjaNunt npatLYPI/gU6mR9UalUg4Vhs/dQAdyiyqHHP9CpdD8iD6LYMjYCyfmDEm+IFuSs= -----END CERTIFICATE-----Generated at Sun Sep 20 11:46:41 2026 by rpki-client