$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5fc4be6-63dd-42ce-86b6-0bb1f84932d8.roa File: f5fc4be6-63dd-42ce-86b6-0bb1f84932d8.roa (raw, json) Hash identifier: zt/o9f4DZa8Drm6dxVo2XWK4uxu70VWz9X6wTRnzKgo= Subject key identifier: A8:F8:F9:E0:AF:ED:5E:2B:B3:B0:23:13:FD:0B:35:5D:28:2E:CD:25 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 17CB67154012230375AD08CEC60126E43E93F9A8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5fc4be6-63dd-42ce-86b6-0bb1f84932d8.roa Signing time: Sat 12 Sep 2026 00:00:06 +0000 ROA not before: Sat 12 Sep 2026 00:00:06 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2600:f0f0:c11d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cb:67:15:40:12:23:03:75:ad:08:ce:c6:01:26:e4:3e:93:f9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:06 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=8d46091bf0d8eb49151c13a9a589e93974853ec6bec39e49e79b7b8a72de6d1f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:12:41:c2:e5:f3:46:f7:c1:33:ca:1e:4c: 43:f3:2a:d8:be:b2:f7:91:21:b4:c4:03:1d:5c:48: 01:41:bc:29:53:fd:14:ee:34:aa:f5:0c:6a:56:d0: e8:45:37:b7:a5:cf:5b:a5:04:68:4c:65:e2:f6:bd: 60:5c:fc:dc:4f:67:28:08:9c:2c:3e:c2:f1:2f:a8: 4f:d5:54:8e:74:55:d9:0c:00:e7:66:00:4e:62:f4: 90:62:15:37:0f:7a:b1:36:01:30:f9:78:48:00:eb: bd:1f:6e:ab:2a:14:1c:ab:28:23:ef:6c:59:16:07: 4b:0d:ce:eb:90:e0:33:46:f9:b6:0f:28:a8:f0:fe: 19:65:75:3e:ce:72:36:86:5b:16:81:d4:6f:cc:c0: fd:b9:25:b9:8c:23:30:f0:6d:a0:ae:a6:1a:20:3e: 1f:dc:0f:58:52:64:61:74:6f:9d:79:23:2b:cd:53: 1c:c0:e1:59:05:00:2f:d1:8d:ac:e1:29:cf:19:d4: c7:21:f9:64:46:d8:d5:9e:c4:59:ff:d9:39:02:e1: a0:28:73:41:45:b0:b1:b6:df:33:22:e7:20:60:6e: 12:f1:ab:2a:b0:ca:4b:bc:82:75:88:b0:f8:d5:3a: 82:88:bb:72:bc:6a:60:fc:0e:96:3d:ec:e6:2d:60: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:F9:E0:AF:ED:5E:2B:B3:B0:23:13:FD:0B:35:5D:28:2E:CD:25 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5fc4be6-63dd-42ce-86b6-0bb1f84932d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11d::/48 Signature Algorithm: sha256WithRSAEncryption 70:a2:ff:32:b1:47:a1:e4:05:9b:6a:90:f8:d4:0b:25:2e:82: 2d:2a:85:66:f1:d6:c6:5f:8d:59:4d:d2:be:fb:2e:15:7a:1d: 17:ff:48:46:79:04:06:71:91:cd:02:ca:e7:55:5c:89:01:89: ba:da:f4:72:45:58:09:90:c0:2b:28:a5:db:e2:4e:b7:ed:57: a6:a5:70:91:d2:9e:50:18:9f:8f:27:dc:dc:25:b3:db:dd:72: 38:1f:99:fe:8f:fd:30:36:bd:9e:a9:82:e5:8e:9b:9f:d9:06: aa:19:f5:a5:5c:2c:1f:33:42:ba:1b:87:0f:92:55:49:6b:6f: ba:ac:f5:d0:11:e7:7a:0f:26:1c:46:02:84:42:1f:c0:61:36: fc:85:4f:c3:d4:58:ae:70:d2:97:7b:b9:db:ea:53:4f:73:6d: 16:b2:76:ca:52:f9:30:f8:49:a3:b5:3f:14:12:b4:16:bc:ff: 14:d9:1c:98:70:98:57:df:f4:5d:6d:06:43:ad:4d:51:3a:1c: ae:a7:2d:4a:32:c5:fb:f2:28:fb:10:e9:ca:f2:8d:00:63:94: 41:96:5e:22:55:7a:b7:c0:10:26:20:e2:aa:b2:f4:60:4f:a2: 39:02:b0:25:64:e9:05:b5:97:c8:12:60:58:43:5e:3f:ef:24: b4:5a:ec:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF8tnFUASIwN1rQjOxgEm5D6T+agwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA2WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDQ2MDkxYmYwZDhlYjQ5MTUxYzEzYTlhNTg5ZTkzOTc0 ODUzZWM2YmVjMzllNDllNzliN2I4YTcyZGU2ZDFmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh0RJBwuXzRvfBM8oeTEPzKti+sveRIbTEAx1cSAFBvClT /RTuNKr1DGpW0OhFN7elz1ulBGhMZeL2vWBc/NxPZygInCw+wvEvqE/VVI50VdkM AOdmAE5i9JBiFTcPerE2ATD5eEgA670fbqsqFByrKCPvbFkWB0sNzuuQ4DNG+bYP KKjw/hlldT7OcjaGWxaB1G/MwP25JbmMIzDwbaCuphogPh/cD1hSZGF0b515IyvN UxzA4VkFAC/RjazhKc8Z1Mch+WRG2NWexFn/2TkC4aAoc0FFsLG23zMi5yBgbhLx qyqwyku8gnWIsPjVOoKIu3K8amD8DpY97OYtYKDPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqPj54K/tXiuzsCMT/Qs1XSguzSUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1ZmM0YmU2LTYzZGQtNDJjZS04NmI2LTBiYjFmODQ5MzJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR0wDQYJKoZIhvcNAQELBQADggEBAHCi/zKxR6HkBZtqkPjUCyUu gi0qhWbx1sZfjVlN0r77LhV6HRf/SEZ5BAZxkc0CyudVXIkBibra9HJFWAmQwCso pdviTrftV6alcJHSnlAYn48n3Nwls9vdcjgfmf6P/TA2vZ6pguWOm5/ZBqoZ9aVc LB8zQrobhw+SVUlrb7qs9dAR53oPJhxGAoRCH8BhNvyFT8PUWK5w0pd7udvqU09z bRaydspS+TD4SaO1PxQStBa8/xTZHJhwmFff9F1tBkOtTVE6HK6nLUoyxfvyKPsQ 6cryjQBjlEGWXiJVerfAECYg4qqy9GBPojkCsCVk6QW1l8gSYFhDXj/vJLRa7LI= -----END CERTIFICATE-----Generated at Sun Sep 20 09:29:47 2026 by rpki-client