$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa File: fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa (raw, json) Hash identifier: Wc+CzcvyI29vtXjzwzxSeU8WGTUMbtdSAqa/96PI/0o= Subject key identifier: 49:C5:6A:52:E0:AA:54:7A:D5:78:09:A2:EB:92:D0:F0:AC:44:0C:0F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 21A20EBC948195D4B6093FDBD25964B022B5E36F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa Signing time: Sun 20 Sep 2026 00:00:13 +0000 ROA not before: Sun 20 Sep 2026 00:00:13 +0000 ROA not after: Sat 19 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6026::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a2:0e:bc:94:81:95:d4:b6:09:3f:db:d2:59:64:b0:22:b5:e3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 20 00:00:13 2026 GMT Not After : Dec 19 23:59:59 2026 GMT Subject: serialNumber=f72b8abf4318c5f88e474339eb23e4e33037ef42f74b8744d742988f0e7b257a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:97:a3:ed:f7:ed:20:86:e2:aa:66:8a:5a: 4d:82:d0:7f:78:e3:95:29:cb:81:a2:1d:2d:8b:e4: ce:c6:dc:6b:8e:94:6b:04:7c:59:d3:1c:f3:81:8d: 3e:a8:34:ad:b0:97:9f:c7:c6:18:aa:72:2a:15:9e: 94:97:6f:da:74:a3:f6:b8:96:d7:72:a3:6c:63:3b: 6d:22:53:56:4b:66:84:82:d0:f3:67:1c:36:ef:43: eb:c6:32:70:42:10:00:cc:01:89:58:6f:f4:b2:98: aa:6c:33:a3:dc:1a:6d:8d:f4:fc:70:6a:76:0b:12: 5a:c9:fc:c3:ee:da:87:bb:7a:05:35:a0:32:d0:34: 6c:26:67:c9:33:42:1a:94:54:76:d3:09:d9:06:eb: 57:c9:24:8e:e1:63:40:48:e9:90:9a:a2:82:4d:0c: d3:24:1b:eb:e3:02:88:15:a4:b4:ad:2e:97:5a:9e: 05:88:fa:a5:ad:4a:0f:06:c3:a3:6d:05:0a:95:60: e0:92:d2:dd:15:c4:08:e4:da:68:aa:fb:71:20:bb: c6:3b:7d:1a:93:cf:45:f0:45:82:32:86:f4:ac:dd: 07:2f:09:b3:89:95:9f:26:ef:b0:f0:45:0f:62:2f: 69:b5:76:b9:58:e5:7f:1f:fa:f5:c1:95:a6:80:9f: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C5:6A:52:E0:AA:54:7A:D5:78:09:A2:EB:92:D0:F0:AC:44:0C:0F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6026::/48 Signature Algorithm: sha256WithRSAEncryption 67:ec:be:11:e5:0f:bd:77:14:e8:ef:ff:c5:cd:b5:50:53:fd: 91:1f:5b:79:85:43:b7:1b:29:f0:cb:82:7f:e4:61:58:fc:05: 2d:1a:a9:14:d4:88:35:b4:d8:5e:77:88:0b:e9:3d:9f:b7:02: 6c:25:2f:66:85:97:4f:cf:2d:29:b9:93:c3:a9:9a:73:26:80: 98:82:ce:ce:d4:65:37:21:63:8c:d1:8f:29:38:44:db:9a:d9: c4:c6:1d:b2:a3:ef:49:db:fd:17:f2:90:a9:4e:36:f2:7b:08: 8d:6b:62:61:d2:1d:57:85:1c:e2:13:d0:02:59:3d:e7:3f:ba: 3d:20:89:93:08:ca:6c:65:00:08:34:04:53:50:26:8b:bb:c4: b4:f2:cb:e5:7a:a4:76:5e:b5:68:ba:12:e0:c8:c9:d4:f9:65: 4a:e4:bd:eb:98:27:e8:2f:01:10:b8:f2:c3:04:29:10:43:96: 46:9e:1a:d6:44:f4:04:0c:47:af:36:17:4b:ee:51:ae:7f:19: 25:f5:fb:1d:68:6b:fa:d8:29:ff:ee:44:85:a5:1f:89:87:70: 83:ec:e0:8e:53:c4:7a:74:8f:43:36:cf:55:46:c8:c2:1f:62: b7:ff:91:15:ed:f7:7d:f3:44:7e:a6:25:9f:25:c9:ef:d5:92: 65:b4:e7:68 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIaIOvJSBldS2CT/b0llksCK1428wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTIwMDAwMDEzWhcNMjYxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzJiOGFiZjQzMThjNWY4OGU0NzQzMzllYjIzZTRlMzMw MzdlZjQyZjc0Yjg3NDRkNzQyOTg4ZjBlN2IyNTdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWLJej7fftIIbiqmaKWk2C0H9445Upy4GiHS2L5M7G3GuO lGsEfFnTHPOBjT6oNK2wl5/HxhiqcioVnpSXb9p0o/a4ltdyo2xjO20iU1ZLZoSC 0PNnHDbvQ+vGMnBCEADMAYlYb/SymKpsM6PcGm2N9PxwanYLElrJ/MPu2oe7egU1 oDLQNGwmZ8kzQhqUVHbTCdkG61fJJI7hY0BI6ZCaooJNDNMkG+vjAogVpLStLpda ngWI+qWtSg8Gw6NtBQqVYOCS0t0VxAjk2miq+3Egu8Y7fRqTz0XwRYIyhvSs3Qcv CbOJlZ8m77DwRQ9iL2m1drlY5X8f+vXBlaaAnzNBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUScVqUuCqVHrVeAmi65LQ8KxEDA8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZlMTYzZGJjLTQ4ZWMtNDdlNC05ODJhLTFmOWI4MjA5NmM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCYwDQYJKoZIhvcNAQELBQADggEBAGfsvhHlD713FOjv/8XNtVBT /ZEfW3mFQ7cbKfDLgn/kYVj8BS0aqRTUiDW02F53iAvpPZ+3AmwlL2aFl0/PLSm5 k8OpmnMmgJiCzs7UZTchY4zRjyk4RNua2cTGHbKj70nb/RfykKlONvJ7CI1rYmHS HVeFHOIT0AJZPec/uj0giZMIymxlAAg0BFNQJou7xLTyy+V6pHZetWi6EuDIydT5 ZUrkveuYJ+gvARC48sMEKRBDlkaeGtZE9AQMR682F0vuUa5/GSX1+x1oa/rYKf/u RIWlH4mHcIPs4I5TxHp0j0M2z1VGyMIfYrf/kRXt933zRH6mJZ8lye/VkmW052g= -----END CERTIFICATE-----Generated at Sun Sep 20 12:40:39 2026 by rpki-client