$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa File: 100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json) Hash identifier: mZKG/himK01jJHCt44nuA4L8JqtUqVlYMCemlYE8Po0= Subject key identifier: CA:82:F6:61:1C:3E:77:8A:38:37:DB:49:30:AB:2A:75:BF:DC:B2:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24C4C73A17676C41AAFED5F825706CC10E7D9725 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa Signing time: Fri 07 Aug 2026 04:10:11 +0000 ROA not before: Fri 07 Aug 2026 04:10:11 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c4:c7:3a:17:67:6c:41:aa:fe:d5:f8:25:70:6c:c1:0e:7d:97:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:11 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4eef0d1e8a5353ef6378566a92d7dfbeb99f6cb3afc18497b22c56469f7632f4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:86:16:2d:50:7b:32:89:81:0d:9c:46:77: 3d:07:b1:da:a5:a3:1e:03:11:51:4c:f8:3a:a2:50: 20:e8:c1:6e:d7:84:06:9b:24:98:c2:73:d0:81:fa: 28:ed:73:da:e3:7d:f7:93:c1:d2:0d:36:a0:cd:b3: be:99:93:e0:41:f6:b9:3e:6a:44:fe:f9:01:07:ed: d2:3d:56:eb:6f:16:00:08:ca:17:06:ed:d2:12:db: 36:85:80:ac:65:2a:3c:a8:bb:57:f8:16:f9:bc:57: b3:c5:fc:a7:1c:a4:9b:89:ad:50:3c:ee:5e:df:9b: 9c:a6:22:0a:c8:79:bc:0d:80:a4:c9:e8:c2:4d:91: 6d:6b:9d:90:61:5e:3c:fd:8d:82:40:1e:96:6b:90: ee:77:3a:1c:62:61:a4:f4:92:2f:94:9e:67:a5:55: ab:4a:f0:89:bc:2c:ff:04:80:4f:ca:0a:81:e4:6f: 91:02:0d:c2:7c:33:d5:20:8a:93:5a:d1:94:99:98: 13:8e:38:56:9d:d7:01:17:f5:ef:2d:eb:8f:f2:b3: 91:92:75:f7:39:d2:80:32:30:e3:fb:19:38:30:72: a1:e8:7f:26:4c:f1:d8:04:6c:37:36:c9:9e:a9:c2: 78:9d:fb:dc:0e:2a:1b:c8:7e:d8:99:b5:8c:3c:81: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:82:F6:61:1C:3E:77:8A:38:37:DB:49:30:AB:2A:75:BF:DC:B2:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 96:fe:42:5b:50:de:40:7d:ca:c4:9b:14:00:f5:f1:c9:90:2f: 38:ea:de:60:3f:06:95:7d:cd:00:58:18:04:ed:5e:81:9c:ac: 37:7d:4b:0e:99:1f:40:fb:3d:7d:15:5a:16:06:8c:42:bb:1f: b3:37:73:e3:59:fd:7f:af:03:8a:b6:03:08:fc:6d:7f:c6:7b: 6a:fe:e3:c6:44:75:ac:de:ae:4d:df:70:08:9c:74:59:56:5d: df:d3:3c:46:3e:2e:f3:76:a8:d5:25:36:14:33:22:90:5f:0c: 5d:3b:7e:74:b0:b7:72:fd:4d:cd:fe:82:70:15:79:98:47:bd: 47:e8:00:51:02:77:d0:05:53:83:f1:de:ef:93:d2:45:48:da: af:34:6f:8a:61:8e:cb:88:f1:ca:4a:21:53:b8:dc:ad:77:9f: 63:e0:81:c8:fb:73:ff:91:10:3d:be:bb:2e:10:d9:5f:6b:90: 6a:9e:1d:8f:73:d6:0f:ba:2d:e3:71:48:c7:3c:46:b3:09:77: 75:87:47:8e:97:96:b1:81:01:8d:ab:5b:fc:49:21:b8:88:ef: ea:02:7a:e4:1b:a0:37:e1:d1:47:93:36:8b:b8:8a:3f:9c:d3: 82:2a:8b:56:1f:11:0c:e1:db:51:1a:c6:79:96:e9:d3:d5:f0: 0e:3f:f4:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJMTHOhdnbEGq/tX4JXBswQ59lyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDExWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWVmMGQxZThhNTM1M2VmNjM3ODU2NmE5MmQ3ZGZiZWI5 OWY2Y2IzYWZjMTg0OTdiMjJjNTY0NjlmNzYzMmY0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHv4YWLVB7MomBDZxGdz0Hsdqlox4DEVFM+DqiUCDowW7X hAabJJjCc9CB+ijtc9rjffeTwdINNqDNs76Zk+BB9rk+akT++QEH7dI9VutvFgAI yhcG7dIS2zaFgKxlKjyou1f4Fvm8V7PF/KccpJuJrVA87l7fm5ymIgrIebwNgKTJ 6MJNkW1rnZBhXjz9jYJAHpZrkO53OhxiYaT0ki+UnmelVatK8Im8LP8EgE/KCoHk b5ECDcJ8M9UgipNa0ZSZmBOOOFad1wEX9e8t64/ys5GSdfc50oAyMOP7GTgwcqHo fyZM8dgEbDc2yZ6pwnid+9wOKhvIftiZtYw8gUDRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyoL2YRw+d4o4N9tJMKsqdb/csr0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAJb+QltQ3kB9ysSbFAD18cmQ Lzjq3mA/BpV9zQBYGATtXoGcrDd9Sw6ZH0D7PX0VWhYGjEK7H7M3c+NZ/X+vA4q2 Awj8bX/Ge2r+48ZEdazerk3fcAicdFlWXd/TPEY+LvN2qNUlNhQzIpBfDF07fnSw t3L9Tc3+gnAVeZhHvUfoAFECd9AFU4Px3u+T0kVI2q80b4phjsuI8cpKIVO43K13 n2Pggcj7c/+RED2+uy4Q2V9rkGqeHY9z1g+6LeNxSMc8RrMJd3WHR46XlrGBAY2r W/xJIbiI7+oCeuQboDfh0UeTNou4ij+c04Iqi1YfEQzh21EaxnmW6dPV8A4/9II= -----END CERTIFICATE-----Generated at Mon Sep 14 08:22:33 2026 by rpki-client