$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa File: 0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json) Hash identifier: nSvyrvMqxLWcHBuTRaz7p6FrqnAJnLoneXNwoVl2Xf4= Subject key identifier: 05:9E:DE:D0:B2:8A:92:D1:DF:2A:51:F3:5C:9F:C6:2B:0D:08:97:05 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 18F338382AB97089E8A68C24DB8E6F4C62F9A42C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa Signing time: Fri 07 Aug 2026 04:10:09 +0000 ROA not before: Fri 07 Aug 2026 04:10:09 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f3:38:38:2a:b9:70:89:e8:a6:8c:24:db:8e:6f:4c:62:f9:a4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:09 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=958c6ba1ed7607cc31bd5920508902719ae4b85d0f09a14e58081081003a28be, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:2d:35:9a:b7:0c:09:86:da:56:3a:11:30: 27:e4:db:0c:cf:cd:76:f5:b1:f6:5a:b5:cd:e8:d1: a9:f0:bd:b5:fd:48:01:76:40:4e:bd:4f:97:02:39: 96:cb:6c:83:77:e3:55:45:e8:c1:85:93:f5:7c:bd: 07:87:3c:a8:f7:23:13:33:0a:34:46:85:b7:61:5e: c2:e2:3a:03:67:16:29:2b:0e:8c:ba:a7:88:10:5d: 5e:34:63:9e:2f:d1:bc:d2:8f:11:2a:cc:14:51:11: f1:28:85:8d:a1:1c:7a:07:67:40:4a:bd:c1:79:6c: 7f:f2:7e:60:18:a5:6b:8e:d5:e3:3a:af:c8:61:b1: 64:77:ca:25:07:74:6b:fc:fa:28:cc:65:2a:20:03: 8f:b0:b2:5a:76:63:ec:0e:d7:50:9e:f3:c3:5e:70: 60:a8:28:f9:aa:61:f7:0a:7e:a0:7d:c5:99:a8:df: b3:84:90:f5:59:18:d3:47:b8:2b:7c:fd:ff:f3:ea: 75:3b:b6:f1:4f:88:0e:56:f4:42:ce:cc:01:2b:be: 60:1c:95:8d:62:de:4c:c3:25:52:7a:d9:fa:e2:08: 6f:9a:d5:99:35:a4:23:3b:36:d5:67:71:09:a8:54: e9:ec:3b:0f:c2:8a:13:ce:09:bf:0a:21:a8:14:7b: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:DE:D0:B2:8A:92:D1:DF:2A:51:F3:5C:9F:C6:2B:0D:08:97:05 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 4e:6d:27:3f:aa:23:db:b6:86:73:d1:d4:3e:95:7f:3f:29:ad: 63:0c:90:2e:0a:5f:90:27:3b:57:14:7c:56:bd:0a:94:99:38: 45:62:56:a2:3c:56:00:6d:88:5f:13:f2:91:1f:99:1c:ee:3d: 9b:ad:77:b1:db:47:57:58:e5:7b:93:a1:6d:11:93:fd:48:b4: 2e:99:06:f4:ad:05:20:de:b5:1a:02:ac:5c:ff:fc:16:f2:04: 45:65:dc:91:47:c6:47:ef:9e:ac:99:df:33:a8:be:4e:75:a7: ab:4d:3b:44:a0:38:01:b0:e3:4e:2b:24:04:2f:98:05:79:5e: a9:29:a3:4b:f7:24:fc:05:56:d7:ca:08:73:04:8a:9d:5f:e7: 6c:0c:31:b9:1e:38:c6:d9:2f:12:94:48:e1:b6:7a:0a:2f:0e: 32:22:2e:de:7a:dd:5b:37:23:51:30:57:27:91:19:9b:1b:27: cd:02:c1:c0:02:57:e4:70:c0:34:45:8d:31:46:89:60:5e:7d: 64:9d:03:f1:9b:98:6a:54:57:b8:7d:5b:8d:b7:aa:fe:7b:d8: a7:f3:5c:b0:0e:09:27:87:07:0d:8d:a0:b9:f6:f5:d0:51:59: 5e:33:66:6d:c1:4c:f7:2f:f6:55:fb:3d:df:c7:3c:55:be:43: df:9b:dd:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGPM4OCq5cInopowk245vTGL5pCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDA5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NThjNmJhMWVkNzYwN2NjMzFiZDU5MjA1MDg5MDI3MTlh ZTRiODVkMGYwOWExNGU1ODA4MTA4MTAwM2EyOGJlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSMS01mrcMCYbaVjoRMCfk2wzPzXb1sfZatc3o0anwvbX9 SAF2QE69T5cCOZbLbIN341VF6MGFk/V8vQeHPKj3IxMzCjRGhbdhXsLiOgNnFikr Doy6p4gQXV40Y54v0bzSjxEqzBRREfEohY2hHHoHZ0BKvcF5bH/yfmAYpWuO1eM6 r8hhsWR3yiUHdGv8+ijMZSogA4+wslp2Y+wO11Ce88NecGCoKPmqYfcKfqB9xZmo 37OEkPVZGNNHuCt8/f/z6nU7tvFPiA5W9ELOzAErvmAclY1i3kzDJVJ62friCG+a 1Zk1pCM7NtVncQmoVOnsOw/CihPOCb8KIagUe1ZdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBZ7e0LKKktHfKlHzXJ/GKw0IlwUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiNDU2ZDlhLWI3OGQtNDViYS05OTQ5LWIwMGE5NTgxZjExOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAE5tJz+qI9u2hnPR1D6Vfz8p rWMMkC4KX5AnO1cUfFa9CpSZOEViVqI8VgBtiF8T8pEfmRzuPZutd7HbR1dY5XuT oW0Rk/1ItC6ZBvStBSDetRoCrFz//BbyBEVl3JFHxkfvnqyZ3zOovk51p6tNO0Sg OAGw404rJAQvmAV5Xqkpo0v3JPwFVtfKCHMEip1f52wMMbkeOMbZLxKUSOG2egov DjIiLt563Vs3I1EwVyeRGZsbJ80CwcACV+RwwDRFjTFGiWBefWSdA/GbmGpUV7h9 W423qv572KfzXLAOCSeHBw2NoLn29dBRWV4zZm3BTPcv9lX7Pd/HPFW+Q9+b3fs= -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:07 2026 by rpki-client