$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5bf98f4-844c-4500-8770-5d12c1bcf3a5.roa File: d5bf98f4-844c-4500-8770-5d12c1bcf3a5.roa (raw, json) Hash identifier: CFdawZmgNjuWEW3Dc5tBCukeBIgdexOX049zuPrwHYM= Subject key identifier: B4:E0:A1:2A:42:AC:E5:4A:A8:A3:68:5E:6D:EC:A2:48:71:76:88:93 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62CD4F6DFB30FB7DBA739DC730249BD83227B8F5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5bf98f4-844c-4500-8770-5d12c1bcf3a5.roa Signing time: Sun 20 Sep 2026 00:00:13 +0000 ROA not before: Sun 20 Sep 2026 00:00:13 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6023::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cd:4f:6d:fb:30:fb:7d:ba:73:9d:c7:30:24:9b:d8:32:27:b8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:13 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=99c635e4298f1a431c5ab42022fd0d5f222fe1a99edb71690247e17d14c6d9a3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:50:a2:ee:37:9c:61:6f:03:c4:aa:84:7d: 2f:52:94:3f:db:b0:a5:b0:4f:dc:99:46:0d:c4:e9: fe:e1:33:eb:4f:2e:da:5f:94:99:e2:b0:52:b5:02: 3b:c1:16:63:87:d0:a3:b7:fb:3d:14:05:c7:13:54: d8:e8:e2:7a:2f:d0:26:45:34:6f:b8:42:f7:da:5c: 5a:0d:a4:28:51:3f:c6:62:4f:79:95:0c:40:d5:b7: 6e:ab:e6:c4:e3:6b:55:fe:3c:22:51:a7:4e:45:25: 86:c6:e3:fa:5c:77:8f:f8:85:49:10:3f:f4:51:d6: 2a:c6:d9:ef:64:7b:8e:a2:4f:bb:c7:75:a5:5e:4a: 61:3c:61:69:1e:73:74:dd:45:cd:eb:fa:7a:92:03: 26:b2:77:16:4e:9b:61:f4:89:33:b5:47:5b:99:c8: 2e:f5:a2:3f:b2:13:b1:04:56:e5:b3:2a:d0:c2:3c: 17:46:9b:d8:fd:85:56:7a:ec:64:71:83:5b:06:e1: 81:d3:3c:2c:5e:27:3b:c9:d4:57:37:58:fb:e3:58: 90:1e:69:cf:bb:ea:d5:18:f2:11:09:aa:80:4d:4d: c5:19:e4:99:bd:78:fe:2f:82:7b:13:79:c0:29:ce: 61:11:29:5c:d2:12:d6:27:36:09:b2:32:d0:29:de: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:A1:2A:42:AC:E5:4A:A8:A3:68:5E:6D:EC:A2:48:71:76:88:93 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d5bf98f4-844c-4500-8770-5d12c1bcf3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6023::/48 Signature Algorithm: sha256WithRSAEncryption 0b:a0:29:9a:91:97:03:b3:96:b2:35:79:1c:38:54:76:62:31: 42:cd:63:89:6f:e7:94:af:24:e2:3b:47:90:77:46:2a:b5:4e: 60:6c:ef:4f:f9:c1:ce:04:7d:4d:1c:8d:a6:bb:6f:35:a4:60: 31:a5:a5:54:bd:ed:f2:b9:d4:46:2f:86:d3:02:26:60:92:62: 43:92:8a:e4:0a:f7:4f:d2:eb:01:0f:33:84:1e:0a:81:c6:83: bd:86:4d:b2:fd:9c:29:3d:a7:0c:39:73:c9:19:6f:55:09:c2: 3a:c6:a1:07:7d:a1:58:6a:b0:11:68:22:d1:e9:e4:8b:2e:42: 58:3f:4d:50:9a:20:76:fe:89:a7:e4:bd:98:f7:ea:48:d1:d3: 51:c3:24:e2:02:e3:b5:04:ac:0d:d6:a3:05:66:d4:f3:7e:d5: af:1d:2a:71:41:98:0f:56:7f:2f:52:24:76:e7:d7:14:bf:fb: 3c:33:cf:1f:2d:54:75:c8:58:0d:c4:2f:b3:5b:0a:ae:2b:0b: 9b:ab:22:d0:0a:34:8f:72:1e:59:bd:8f:45:5c:67:ba:a0:c5: c9:9c:ee:6f:84:06:41:84:5c:7c:77:4b:d2:74:b0:16:d3:a0: 71:3a:75:f8:60:36:f8:dc:e5:85:e9:2f:8c:e0:bb:ff:0a:05: c5:e5:e3:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYs1Pbfsw+326c53HMCSb2DInuPUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDEzWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWM2MzVlNDI5OGYxYTQzMWM1YWI0MjAyMmZkMGQ1ZjIy MmZlMWE5OWVkYjcxNjkwMjQ3ZTE3ZDE0YzZkOWEzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyWVCi7jecYW8DxKqEfS9SlD/bsKWwT9yZRg3E6f7hM+tP LtpflJnisFK1AjvBFmOH0KO3+z0UBccTVNjo4nov0CZFNG+4QvfaXFoNpChRP8Zi T3mVDEDVt26r5sTja1X+PCJRp05FJYbG4/pcd4/4hUkQP/RR1irG2e9ke46iT7vH daVeSmE8YWkec3TdRc3r+nqSAyaydxZOm2H0iTO1R1uZyC71oj+yE7EEVuWzKtDC PBdGm9j9hVZ67GRxg1sG4YHTPCxeJzvJ1Fc3WPvjWJAeac+76tUY8hEJqoBNTcUZ 5Jm9eP4vgnsTecApzmERKVzSEtYnNgmyMtAp3mPtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtOChKkKs5Uqoo2hebeyiSHF2iJMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q1YmY5OGY0LTg0NGMtNDUwMC04NzcwLTVkMTJjMWJjZjNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCMwDQYJKoZIhvcNAQELBQADggEBAAugKZqRlwOzlrI1eRw4VHZi MULNY4lv55SvJOI7R5B3Riq1TmBs70/5wc4EfU0cjaa7bzWkYDGlpVS97fK51EYv htMCJmCSYkOSiuQK90/S6wEPM4QeCoHGg72GTbL9nCk9pww5c8kZb1UJwjrGoQd9 oVhqsBFoItHp5IsuQlg/TVCaIHb+iafkvZj36kjR01HDJOIC47UErA3WowVm1PN+ 1a8dKnFBmA9Wfy9SJHbn1xS/+zwzzx8tVHXIWA3EL7NbCq4rC5urItAKNI9yHlm9 j0VcZ7qgxcmc7m+EBkGEXHx3S9J0sBbToHE6dfhgNvjc5YXpL4zgu/8KBcXl48Y= -----END CERTIFICATE-----Generated at Sun Sep 20 22:13:41 2026 by rpki-client