$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d99a7fe-da55-41cb-b25f-b501222550b2.roa File: 1d99a7fe-da55-41cb-b25f-b501222550b2.roa (raw, json) Hash identifier: 24/6kWyCWR14Sh5unCmM3OhILa3r5CagDPgKSOzT5CY= Subject key identifier: FE:31:3F:13:98:3A:3B:9D:1A:D9:C4:09:6D:AB:95:38:FD:23:25:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7B6140829B340B0502385BCC9206995D2C9101DF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d99a7fe-da55-41cb-b25f-b501222550b2.roa Signing time: Thu 03 Sep 2026 10:01:56 +0000 ROA not before: Thu 03 Sep 2026 10:01:56 +0000 ROA not after: Wed 02 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:61:40:82:9b:34:0b:05:02:38:5b:cc:92:06:99:5d:2c:91:01:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 3 10:01:56 2026 GMT Not After : Dec 2 23:59:59 2026 GMT Subject: serialNumber=8597aee7a783f58556b0d981ddc8b5a95026677cca8b44c02581b4bac682c97b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:26:5f:0c:9f:2d:5e:d9:de:ca:d9:31:14: eb:6d:f4:cf:c3:00:47:ff:36:34:95:b8:68:98:d8: ce:17:62:54:ed:9f:7b:ed:9a:12:ba:90:5f:74:30: 96:8d:e1:7a:ea:69:c5:53:8e:42:83:f1:94:a1:20: 11:4b:41:67:1b:6e:33:b7:6b:89:0e:77:33:20:36: e0:7a:5e:ee:ce:ae:34:6f:69:4a:35:9a:48:61:2f: 73:20:27:62:75:53:09:bf:ae:d5:90:44:4e:06:17: d0:80:7e:a4:b2:24:8a:39:81:da:08:d0:17:5a:1e: 4f:9b:49:ad:27:46:64:98:19:7c:67:9e:e1:a9:80: e0:86:51:03:9e:0c:93:c9:cb:18:ee:f2:84:4f:12: dd:ea:d2:12:a8:f7:f6:71:1b:24:08:7e:f1:0e:8e: ac:50:87:4c:7a:7e:03:0a:98:4d:59:d9:c4:2b:8c: af:65:96:5a:1e:9f:6f:83:5f:a8:85:1e:cb:a9:76: 88:24:17:fd:f0:8e:24:fc:75:86:7b:40:66:fe:f2: fe:60:33:6e:15:99:97:23:2c:08:70:62:61:c3:41: 6c:18:9d:2f:d8:fb:7a:c4:ef:b7:5e:8a:a6:9c:88: 89:d7:9a:06:b2:c7:e3:16:6c:55:f9:6b:c7:a7:33: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:3F:13:98:3A:3B:9D:1A:D9:C4:09:6D:AB:95:38:FD:23:25:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d99a7fe-da55-41cb-b25f-b501222550b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6128::/48 Signature Algorithm: sha256WithRSAEncryption 8e:e2:2b:2b:a2:e7:18:34:94:f0:33:af:6e:b2:b4:5d:93:0a: e5:3e:86:3a:a4:23:e2:85:65:7a:2f:7b:2f:29:2b:10:d6:0b: 72:e1:0f:a5:5e:31:c2:20:3a:e1:f1:bd:ad:15:dc:8b:6d:54: 40:14:c4:06:4f:9e:18:92:54:d6:c9:06:03:2e:cf:e9:6c:4c: f3:d0:e7:c0:bb:8a:5a:d1:77:d2:c2:3c:32:5e:b7:1a:65:58: 88:d6:29:15:09:d4:6f:66:7b:53:8b:fb:af:dc:63:a9:d0:be: c7:c6:df:bc:06:18:f4:3e:ca:61:4a:cd:a8:78:2f:10:51:2d: 60:a0:f1:e7:60:e7:15:c5:e0:b4:22:cd:2d:1e:80:57:50:34: b3:54:01:3b:a2:28:7c:b4:6e:75:ac:ab:31:4e:21:e5:22:42: 2d:de:ba:c9:6d:6f:85:f7:d7:4f:67:89:90:e7:f1:52:e3:72: 96:77:9c:2c:4e:b1:3e:3e:b2:cd:d0:50:c5:3b:89:2c:da:52: ef:1d:77:57:4a:c2:8b:35:33:36:e0:82:80:41:c1:d8:f9:d5: 52:75:f3:03:19:40:c3:6c:16:11:57:e8:01:47:bb:ea:f8:96: e3:1a:fa:01:50:80:0f:ea:09:ce:5b:b1:6c:5d:d6:89:e9:2e: 16:0e:27:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe2FAgps0CwUCOFvMkgaZXSyRAd8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTAzMTAwMTU2WhcNMjYxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTk3YWVlN2E3ODNmNTg1NTZiMGQ5ODFkZGM4YjVhOTUw MjY2NzdjY2E4YjQ0YzAyNTgxYjRiYWM2ODJjOTdiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb8yZfDJ8tXtneytkxFOtt9M/DAEf/NjSVuGiY2M4XYlTt n3vtmhK6kF90MJaN4XrqacVTjkKD8ZShIBFLQWcbbjO3a4kOdzMgNuB6Xu7OrjRv aUo1mkhhL3MgJ2J1Uwm/rtWQRE4GF9CAfqSyJIo5gdoI0BdaHk+bSa0nRmSYGXxn nuGpgOCGUQOeDJPJyxju8oRPEt3q0hKo9/ZxGyQIfvEOjqxQh0x6fgMKmE1Z2cQr jK9llloen2+DX6iFHsupdogkF/3wjiT8dYZ7QGb+8v5gM24VmZcjLAhwYmHDQWwY nS/Y+3rE77deiqaciInXmgayx+MWbFX5a8enM+0nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/jE/E5g6O50a2cQJbauVOP0jJY4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFkOTlhN2ZlLWRhNTUtNDFjYi1iMjVmLWI1MDEyMjI1NTBiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSgwDQYJKoZIhvcNAQELBQADggEBAI7iKyui5xg0lPAzr26ytF2T CuU+hjqkI+KFZXovey8pKxDWC3LhD6VeMcIgOuHxva0V3IttVEAUxAZPnhiSVNbJ BgMuz+lsTPPQ58C7ilrRd9LCPDJetxplWIjWKRUJ1G9me1OL+6/cY6nQvsfG37wG GPQ+ymFKzah4LxBRLWCg8edg5xXF4LQizS0egFdQNLNUATuiKHy0bnWsqzFOIeUi Qi3eusltb4X3109niZDn8VLjcpZ3nCxOsT4+ss3QUMU7iSzaUu8dd1dKwos1Mzbg goBBwdj51VJ18wMZQMNsFhFX6AFHu+r4luMa+gFQgA/qCc5bsWxd1onpLhYOJ3o= -----END CERTIFICATE-----Generated at Sat Sep 5 08:05:47 2026 by rpki-client