$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: 4vW6jTixCDKgOrnugpGcvWd6qHTBvVR2CQnvVjoV6Eg= Subject key identifier: 2A:C5:C9:F7:DA:F3:44:61:5C:B1:38:9C:84:17:AD:C1:7B:A2:5B:97 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 35E2AEBB53938BD72C61920D4C17A0D2F49A2C75 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Fri 07 Aug 2026 04:20:44 +0000 ROA not before: Fri 07 Aug 2026 04:20:44 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e2:ae:bb:53:93:8b:d7:2c:61:92:0d:4c:17:a0:d2:f4:9a:2c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:44 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=c86315095e8bb4953ba6fe956317f3102c750be5fe12b25a992c8f4c6d9b1947, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:89:f6:1f:d6:89:20:51:8e:f2:26:38:86: 3a:a1:2e:da:d3:e5:01:8a:13:3f:84:5e:f0:5a:4a: 6b:47:90:77:9f:14:9d:d3:b3:cf:1f:c9:f3:2a:02: c7:02:f7:dc:e3:a7:c0:7d:60:4d:46:df:6b:74:c8: 10:9b:66:38:55:c8:04:f9:63:f3:c2:a0:16:19:5e: fd:43:dd:49:e9:39:4c:2e:5a:55:de:a5:ca:8d:a8: 3b:ea:65:8e:1a:7c:18:28:9c:a5:0a:93:7a:a8:4a: b4:59:71:77:35:cd:8a:c1:b8:db:c4:77:a3:33:42: 4d:0a:46:b1:ad:8b:be:a4:59:24:28:84:53:8c:48: 9e:40:f9:1a:fb:1f:64:b4:61:2e:94:70:fb:34:18: 55:92:44:1f:42:bf:f7:55:ff:9e:c4:f0:49:8e:b0: aa:17:0a:d7:da:10:7f:cf:29:4b:1b:87:5a:1a:ed: b6:44:66:e7:a8:2a:9c:93:00:30:4a:69:a0:40:e6: 57:5a:67:c7:ea:d9:47:33:2d:04:72:bb:ad:3f:b6: 47:fb:bb:ce:a4:0a:e5:e5:10:38:64:68:72:52:95: 05:f2:24:95:66:12:a0:65:a3:cb:29:6a:f9:a2:eb: bf:25:c1:f5:e6:47:4c:d0:66:5f:a8:68:11:93:4b: 37:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:C9:F7:DA:F3:44:61:5C:B1:38:9C:84:17:AD:C1:7B:A2:5B:97 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 02:3b:f5:74:82:16:20:f0:4a:2d:cf:65:4b:4a:68:40:18:f6: f9:55:e4:ef:15:d0:6b:6c:74:28:36:a6:bd:a7:bc:0d:83:bf: c7:c3:ab:f3:57:4e:de:9b:b1:b3:14:d6:ef:39:25:24:b2:6c: 75:8c:2f:2b:81:df:d0:94:5f:7a:b6:b2:f5:ef:62:0f:c5:fe: ec:c1:37:4e:97:27:93:e6:e7:7b:e8:6a:12:7e:1f:fd:64:40: ea:6e:81:d0:45:fb:c1:48:1a:c1:ab:6b:d3:5a:40:57:6c:89: 6a:11:0f:56:52:fa:71:ef:d2:5b:fd:3f:8b:c1:27:28:5d:9a: e5:36:ec:56:a3:e3:f3:44:a1:ae:10:aa:60:86:63:c9:a5:d1: 01:d4:a4:9e:4a:45:81:64:f4:a0:94:a8:65:e6:82:b9:ba:fd: 42:0d:d7:04:e8:fa:ea:4e:38:0f:61:14:3c:38:bb:ca:58:73: 42:75:3a:48:f4:97:1a:67:c0:6d:f1:db:e2:b0:df:07:5a:00: 8a:f1:64:84:88:b7:7d:b8:a3:e0:87:ce:a4:36:87:9a:27:3c: 23:a5:59:3a:9b:05:9d:80:6b:cb:77:9d:f0:17:1d:81:0f:b7: f9:85:b8:a7:4a:0c:4a:c6:ce:c3:8f:dc:2d:45:ef:fc:42:bd: fd:d8:c9:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNeKuu1OTi9csYZINTBeg0vSaLHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQ0WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODYzMTUwOTVlOGJiNDk1M2JhNmZlOTU2MzE3ZjMxMDJj NzUwYmU1ZmUxMmIyNWE5OTJjOGY0YzZkOWIxOTQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo8Yn2H9aJIFGO8iY4hjqhLtrT5QGKEz+EXvBaSmtHkHef FJ3Ts88fyfMqAscC99zjp8B9YE1G32t0yBCbZjhVyAT5Y/PCoBYZXv1D3UnpOUwu WlXepcqNqDvqZY4afBgonKUKk3qoSrRZcXc1zYrBuNvEd6MzQk0KRrGti76kWSQo hFOMSJ5A+Rr7H2S0YS6UcPs0GFWSRB9Cv/dV/57E8EmOsKoXCtfaEH/PKUsbh1oa 7bZEZueoKpyTADBKaaBA5ldaZ8fq2UczLQRyu60/tkf7u86kCuXlEDhkaHJSlQXy JJVmEqBlo8spavmi678lwfXmR0zQZl+oaBGTSzcdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKsXJ99rzRGFcsTichBetwXuiW5cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAAI79XSCFiDwSi3PZUtKaEAY 9vlV5O8V0GtsdCg2pr2nvA2Dv8fDq/NXTt6bsbMU1u85JSSybHWMLyuB39CUX3q2 svXvYg/F/uzBN06XJ5Pm53voahJ+H/1kQOpugdBF+8FIGsGra9NaQFdsiWoRD1ZS +nHv0lv9P4vBJyhdmuU27Faj4/NEoa4QqmCGY8ml0QHUpJ5KRYFk9KCUqGXmgrm6 /UIN1wTo+upOOA9hFDw4u8pYc0J1Okj0lxpnwG3x2+Kw3wdaAIrxZISIt324o+CH zqQ2h5onPCOlWTqbBZ2Aa8t3nfAXHYEPt/mFuKdKDErGzsOP3C1F7/xCvf3YyeY= -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:35 2026 by rpki-client