$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa File: 13d95532-571e-4655-86b3-383b815023ba.roa (raw, json) Hash identifier: oqW2oKeSpUiACKUS7PrEomBsov/XcfQEg6letosJFJY= Subject key identifier: 4B:AA:4C:0E:4D:FB:8D:20:B2:FE:28:40:9A:CD:C5:F7:BA:9B:08:33 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2AD5F5C728BE6013F8B49064AD767628F71FC513 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa Signing time: Fri 07 Aug 2026 04:10:25 +0000 ROA not before: Fri 07 Aug 2026 04:10:25 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d5:f5:c7:28:be:60:13:f8:b4:90:64:ad:76:76:28:f7:1f:c5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:25 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=5803bbabe43f08c2633ce843bcae3b5e1e68f173be582212323683fcf978af14, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:e6:d8:4a:9c:68:a5:c4:6a:7b:7a:9a:8a: f8:11:d8:f2:57:38:ff:08:3c:d9:7c:1f:9b:c4:62: 3a:77:56:ed:e1:24:89:73:a9:41:d0:c0:f9:77:f6: eb:a5:6a:54:3e:71:de:5e:bc:65:81:28:8a:52:88: bf:02:44:0d:10:e2:91:17:9c:f6:e4:07:69:93:b0: 1c:3c:2a:03:01:e6:22:3a:cb:42:a3:c0:32:31:75: 58:fb:e7:3a:08:e2:87:da:2e:05:80:86:49:3b:ef: 2b:69:67:f1:79:16:61:04:7b:ff:7b:a8:66:eb:4a: 84:ec:c1:26:fe:da:9c:dd:c6:1f:01:2f:48:8a:48: 44:c2:af:19:67:d1:d2:d6:90:f7:e0:06:3f:fc:37: 5e:c3:ec:f7:17:83:14:b2:74:4c:05:33:f5:a5:d3: 1f:52:38:48:95:99:02:1b:1d:d6:06:b4:60:ad:f9: 95:19:d3:a2:92:b6:00:3a:9e:aa:0e:6f:ec:26:35: bb:8d:72:33:eb:0e:b8:b3:f8:be:35:c1:d7:4e:25: b0:90:0a:59:1f:89:90:ec:79:5b:c0:a7:da:ce:c7: bf:9f:36:9b:f0:f7:e1:d9:a6:53:83:ab:2f:18:b5: 47:28:64:b1:30:c3:e0:35:72:e0:ec:e4:13:30:60: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:4C:0E:4D:FB:8D:20:B2:FE:28:40:9A:CD:C5:F7:BA:9B:08:33 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption 91:c8:77:62:05:62:aa:b2:14:d5:37:07:d2:d2:b1:c7:d0:36: f5:db:01:16:a6:2e:eb:9a:44:16:da:11:1a:6c:9a:ee:a6:6f: 71:26:ce:75:79:7e:04:6b:f3:f6:98:18:32:ae:75:79:dd:6f: e2:c4:8a:c9:0c:91:4d:c4:3c:2c:a1:95:cc:da:fb:c2:02:cd: c6:9c:3c:4c:36:c8:60:26:4f:f7:86:3d:77:85:00:01:24:5c: 26:71:3b:fc:92:ee:72:e7:66:c3:a2:b1:8d:4b:86:76:c8:2a: 6d:10:21:1e:b5:dc:a9:8b:10:2b:74:eb:ab:c6:f6:9a:e8:5a: 40:dd:76:b0:d2:d5:42:fe:bf:6c:28:97:7f:cf:34:6a:37:9d: 3f:52:79:2a:56:28:be:da:f9:75:9d:ba:4b:6e:eb:bd:90:84: 41:c7:08:d6:eb:77:4d:67:43:70:77:b0:a8:9a:15:25:84:22: 9a:d8:b1:98:cb:de:f7:1d:c9:a7:64:8c:b2:90:a2:e5:4a:ae: 6e:42:83:5c:d3:ad:0e:21:60:c3:ee:1b:01:8d:9f:42:64:3e: 99:15:e6:91:54:1c:e4:cd:52:f6:76:20:48:f6:96:db:6a:07: a7:b8:42:68:b7:35:84:b8:8c:49:f8:c6:a1:17:93:e0:6b:b5: eb:b6:cb:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKtX1xyi+YBP4tJBkrXZ2KPcfxRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDI1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODAzYmJhYmU0M2YwOGMyNjMzY2U4NDNiY2FlM2I1ZTFl NjhmMTczYmU1ODIyMTIzMjM2ODNmY2Y5NzhhZjE0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/ZObYSpxopcRqe3qaivgR2PJXOP8IPNl8H5vEYjp3Vu3h JIlzqUHQwPl39uulalQ+cd5evGWBKIpSiL8CRA0Q4pEXnPbkB2mTsBw8KgMB5iI6 y0KjwDIxdVj75zoI4ofaLgWAhkk77ytpZ/F5FmEEe/97qGbrSoTswSb+2pzdxh8B L0iKSETCrxln0dLWkPfgBj/8N17D7PcXgxSydEwFM/Wl0x9SOEiVmQIbHdYGtGCt +ZUZ06KStgA6nqoOb+wmNbuNcjPrDriz+L41wddOJbCQClkfiZDseVvAp9rOx7+f Npvw9+HZplODqy8YtUcoZLEww+A1cuDs5BMwYEbXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUS6pMDk37jSCy/ihAms3F97qbCDMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEzZDk1NTMyLTU3MWUtNDY1NS04NmIzLTM4M2I4MTUwMjNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEAkch3YgViqrIU1TcH0tKxx9A2 9dsBFqYu65pEFtoRGmya7qZvcSbOdXl+BGvz9pgYMq51ed1v4sSKyQyRTcQ8LKGV zNr7wgLNxpw8TDbIYCZP94Y9d4UAASRcJnE7/JLucudmw6KxjUuGdsgqbRAhHrXc qYsQK3Trq8b2muhaQN12sNLVQv6/bCiXf880ajedP1J5KlYovtr5dZ26S27rvZCE QccI1ut3TWdDcHewqJoVJYQimtixmMve9x3Jp2SMspCi5UqubkKDXNOtDiFgw+4b AY2fQmQ+mRXmkVQc5M1S9nYgSPaW22oHp7hCaLc1hLiMSfjGoReT4Gu167bL8w== -----END CERTIFICATE-----Generated at Fri Sep 11 07:38:02 2026 by rpki-client