$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa File: 0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa (raw, json) Hash identifier: u4Txj3bN+2n5D2sbujt07Q1FqOoGLJavZDnB6PKndWE= Subject key identifier: 81:E7:8B:0D:A0:FA:55:79:9C:2A:DA:D6:6E:11:70:4A:9D:B5:56:23 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3823BDDBDBFD5958C8BEEADC0FCDF3A21538AEB4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa Signing time: Fri 07 Aug 2026 04:20:30 +0000 ROA not before: Fri 07 Aug 2026 04:20:30 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:23:bd:db:db:fd:59:58:c8:be:ea:dc:0f:cd:f3:a2:15:38:ae:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:30 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4d203b5fec11850bcaec104371b3dc98682e44cdd58bf05feb4ac1a51e5a0911, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:50:2b:90:03:35:25:cc:63:6d:05:6e:0f: fe:67:65:f3:b1:64:d5:de:db:88:49:30:60:c2:02: aa:e1:db:43:45:b5:d8:71:d5:17:78:15:14:79:8f: 8d:0c:c9:ff:8d:8a:52:c6:ba:2c:d9:68:41:13:30: 0f:6a:db:61:7c:04:95:ed:fd:bd:5f:c2:7e:60:34: 41:a4:b8:6a:dc:00:94:12:ad:fc:1b:79:3a:8f:53: 44:fd:08:18:5c:a2:66:54:28:13:6f:e3:fe:a5:b8: fc:ba:f7:28:f0:a4:94:ef:d8:78:b9:ef:42:23:64: c0:65:0f:f6:01:be:16:3d:6f:1b:10:53:10:b0:86: 9f:59:10:56:f4:bb:e4:ff:dd:a9:f1:e0:a3:9d:ac: bd:8d:4e:e2:b4:d2:3a:18:67:de:d3:96:9c:95:62: da:53:a8:20:42:20:13:d4:15:2d:19:48:7f:9e:34: 57:49:12:e0:57:0a:ae:1d:83:95:14:e4:9a:38:a6: cc:5b:f6:e8:d6:e4:0d:e3:6a:44:97:e1:93:3f:0d: 34:ef:73:6b:0a:50:6d:20:83:f9:f0:dd:d4:c1:dc: d3:43:ad:bc:33:0e:ca:8d:d3:96:52:3e:cb:71:87: a0:d0:d9:8d:0d:58:e7:0d:67:b9:32:73:49:67:fc: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E7:8B:0D:A0:FA:55:79:9C:2A:DA:D6:6E:11:70:4A:9D:B5:56:23 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:20::/48 Signature Algorithm: sha256WithRSAEncryption 09:2e:35:2e:eb:c6:d5:0c:f4:61:7f:2d:d1:e2:09:eb:fc:7d: 98:8f:fc:84:2f:f7:c5:4d:df:19:3b:9f:2c:71:41:11:0b:51: 4a:07:da:02:b1:f3:7f:8b:94:ca:4d:43:71:00:9d:19:f2:52: e4:e5:1d:fe:94:3f:2f:33:37:53:10:d8:d5:75:66:93:12:7d: 4d:19:f2:dd:d3:09:d4:ac:0b:bb:dd:f3:7c:29:6b:3a:be:7f: c9:8e:81:ea:3f:f1:93:cf:04:6e:ed:93:6a:7b:10:1e:a0:7a: 21:fe:d6:c6:7c:52:12:47:e1:48:9e:a7:dc:d1:40:ab:e7:f3: bc:7a:34:7b:cc:2a:d8:7a:18:77:8c:1e:c0:0a:4c:6b:0e:16: f6:8f:33:06:d4:d2:94:23:ae:a7:71:ad:18:5f:23:05:ee:85: 37:5b:8f:41:84:9d:74:34:27:f2:82:cb:ee:ec:7a:91:ff:24: b6:b5:dd:92:8f:9b:f4:c8:bf:fd:d8:15:25:ea:03:a0:42:f4: 1f:67:b1:0e:d4:48:77:ff:2c:17:ca:1e:89:03:27:86:c8:4f: 1e:50:b0:a6:a5:71:aa:28:47:cd:bb:91:e0:12:d4:95:84:e4: 6c:ed:88:93:d8:66:4e:1b:76:f6:0c:75:dd:fd:30:a6:02:89: fe:c4:77:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOCO929v9WVjIvurcD83zohU4rrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDMwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDIwM2I1ZmVjMTE4NTBiY2FlYzEwNDM3MWIzZGM5ODY4 MmU0NGNkZDU4YmYwNWZlYjRhYzFhNTFlNWEwOTExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjo1ArkAM1JcxjbQVuD/5nZfOxZNXe24hJMGDCAqrh20NF tdhx1Rd4FRR5j40Myf+NilLGuizZaEETMA9q22F8BJXt/b1fwn5gNEGkuGrcAJQS rfwbeTqPU0T9CBhcomZUKBNv4/6luPy69yjwpJTv2Hi570IjZMBlD/YBvhY9bxsQ UxCwhp9ZEFb0u+T/3anx4KOdrL2NTuK00joYZ97TlpyVYtpTqCBCIBPUFS0ZSH+e NFdJEuBXCq4dg5UU5Jo4psxb9ujW5A3jakSX4ZM/DTTvc2sKUG0gg/nw3dTB3NND rbwzDsqN05ZSPstxh6DQ2Y0NWOcNZ7kyc0ln/FcxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgeeLDaD6VXmcKtrWbhFwSp21ViMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiODljNGZlLTY3MzAtNGY2MC1iYzRjLWVhMTZiMTljMmMzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwACAwDQYJKoZIhvcNAQELBQADggEBAAkuNS7rxtUM9GF/LdHiCev8 fZiP/IQv98VN3xk7nyxxQRELUUoH2gKx83+LlMpNQ3EAnRnyUuTlHf6UPy8zN1MQ 2NV1ZpMSfU0Z8t3TCdSsC7vd83wpazq+f8mOgeo/8ZPPBG7tk2p7EB6geiH+1sZ8 UhJH4Uiep9zRQKvn87x6NHvMKth6GHeMHsAKTGsOFvaPMwbU0pQjrqdxrRhfIwXu hTdbj0GEnXQ0J/KCy+7sepH/JLa13ZKPm/TIv/3YFSXqA6BC9B9nsQ7USHf/LBfK HokDJ4bITx5QsKalcaooR827keAS1JWE5GztiJPYZk4bdvYMdd39MKYCif7Ed7U= -----END CERTIFICATE-----Generated at Mon Aug 24 06:44:59 2026 by rpki-client