$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa File: 0668f39a-0950-45e9-b174-8f7a83ff26e9.roa (raw, json) Hash identifier: ydT9iVSgMOwzR1RzH7+JSVPMbUPaQp247Bp7lVbfEJM= Subject key identifier: BB:76:8A:2F:F5:C6:11:D2:1B:00:80:A3:B2:3F:BC:CA:1F:34:FB:7C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6E21E9755886492983F2CBFF67E794B9DBAC6222 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa Signing time: Fri 07 Aug 2026 04:20:09 +0000 ROA not before: Fri 07 Aug 2026 04:20:09 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:e9:75:58:86:49:29:83:f2:cb:ff:67:e7:94:b9:db:ac:62:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:09 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=5da87edc2b95cbd9eb253aeb2c6a6e9e6158915d108e0924c528805f145add78, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:7d:fc:e0:1e:65:7d:34:14:71:bd:bf:2e: 10:10:96:d0:83:49:9f:1d:63:5c:cb:23:cd:bc:15: 11:9e:4a:c9:06:49:e7:52:e9:3c:d6:1e:9e:52:98: 8f:71:79:ef:b7:76:b0:f6:3f:2e:f6:24:57:ec:fd: a6:f6:b9:24:ca:84:c6:57:35:42:0a:9a:d5:28:6d: e5:13:94:69:06:56:ab:91:12:23:c4:46:8d:48:a7: 60:6d:93:1c:82:20:3e:21:a8:ae:20:41:66:c5:65: a3:3e:8e:41:59:c9:4a:bb:08:b9:af:b7:f6:cb:9c: c0:42:fb:06:c9:57:63:71:f1:a1:fc:87:00:0e:72: ee:67:79:ef:15:a2:a7:12:34:17:c4:cc:64:c0:50: 90:82:2e:7c:bd:30:f0:81:9c:89:06:2b:3e:17:95: 00:71:39:f3:ce:68:fd:f7:9a:c6:0f:35:9e:7c:75: af:3c:87:60:ca:ff:28:2a:4b:45:ec:00:7e:f5:cc: fa:89:bd:d6:cf:3f:1f:44:8b:7b:99:1c:2a:7c:03: e5:c9:90:24:9c:2f:7d:c2:aa:ab:f8:44:07:21:e9: 90:cd:54:ab:6f:e4:51:f1:0e:50:c7:70:fa:98:1a: ca:50:2d:a5:00:ce:6f:62:c7:91:b0:5f:ca:70:88: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:8A:2F:F5:C6:11:D2:1B:00:80:A3:B2:3F:BC:CA:1F:34:FB:7C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 91:f8:88:76:03:e1:64:fb:d2:75:8a:95:47:c5:1c:8a:93:65: eb:56:6a:1c:55:3b:3c:6d:e7:0d:47:4d:8a:36:89:85:09:8e: 06:a9:dd:39:d3:6d:05:f0:f8:2c:46:91:12:0f:b3:7c:b5:df: 8f:0d:dd:33:85:0f:9b:a1:f2:fd:da:e0:c8:46:d5:9d:a8:de: 7e:91:dc:b9:02:59:26:fd:68:8a:c0:0c:be:dc:be:a9:95:dc: 88:30:38:44:fa:e7:f0:16:54:5f:35:fb:76:d7:e6:82:1d:9c: 88:da:79:7e:cc:ea:c9:b6:e3:a3:c9:ec:83:24:62:69:d7:da: a6:95:10:3d:0d:3d:d7:b1:8d:f3:65:f6:05:f1:f2:f0:4c:dc: aa:c9:22:d0:07:dd:64:be:65:92:5d:2d:05:83:21:e8:7f:14: 19:6e:e9:d1:1d:90:86:be:42:aa:5e:f6:b7:f9:2c:04:36:41: 14:85:90:67:7d:0e:80:b7:82:fb:6a:e1:2f:39:fe:18:be:f0: 0a:46:ed:9f:2f:ba:32:2e:a2:9c:98:8c:f4:b1:e7:38:5b:b6: 8e:cf:01:ad:34:0d:e1:24:df:8c:b7:5f:21:ca:13:10:01:e5: 69:d8:6b:95:47:82:f7:46:45:07:eb:2f:35:31:7f:38:4a:ae: a1:df:c5:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbiHpdViGSSmD8sv/Z+eUudusYiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDA5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGE4N2VkYzJiOTVjYmQ5ZWIyNTNhZWIyYzZhNmU5ZTYx NTg5MTVkMTA4ZTA5MjRjNTI4ODA1ZjE0NWFkZDc4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV1H384B5lfTQUcb2/LhAQltCDSZ8dY1zLI828FRGeSskG SedS6TzWHp5SmI9xee+3drD2Py72JFfs/ab2uSTKhMZXNUIKmtUobeUTlGkGVquR EiPERo1Ip2BtkxyCID4hqK4gQWbFZaM+jkFZyUq7CLmvt/bLnMBC+wbJV2Nx8aH8 hwAOcu5nee8VoqcSNBfEzGTAUJCCLny9MPCBnIkGKz4XlQBxOfPOaP33msYPNZ58 da88h2DK/ygqS0XsAH71zPqJvdbPPx9Ei3uZHCp8A+XJkCScL33Cqqv4RAch6ZDN VKtv5FHxDlDHcPqYGspQLaUAzm9ix5GwX8pwiNBtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUu3aKL/XGEdIbAICjsj+8yh80+3wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2NjhmMzlhLTA5NTAtNDVlOS1iMTc0LThmN2E4M2ZmMjZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAJH4iHYD4WT70nWKlUfFHIqT ZetWahxVOzxt5w1HTYo2iYUJjgap3TnTbQXw+CxGkRIPs3y1348N3TOFD5uh8v3a 4MhG1Z2o3n6R3LkCWSb9aIrADL7cvqmV3IgwOET65/AWVF81+3bX5oIdnIjaeX7M 6sm246PJ7IMkYmnX2qaVED0NPdexjfNl9gXx8vBM3KrJItAH3WS+ZZJdLQWDIeh/ FBlu6dEdkIa+Qqpe9rf5LAQ2QRSFkGd9DoC3gvtq4S85/hi+8ApG7Z8vujIuopyY jPSx5zhbto7PAa00DeEk34y3XyHKExAB5WnYa5VHgvdGRQfrLzUxfzhKrqHfxaM= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:47 2026 by rpki-client