$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa File: 20df74ce-1a64-4df1-b616-115d4493a969.roa (raw, json) Hash identifier: u4EIfRmi4LINHz+3Cn3cOU7U5FFql3A0RUr1jflq0g8= Subject key identifier: C5:83:38:FD:37:82:6F:63:48:8D:29:DE:72:06:60:E8:20:6C:1D:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 54382F229FA5054533B49D12F949959D6D338789 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa Signing time: Fri 07 Aug 2026 04:10:37 +0000 ROA not before: Fri 07 Aug 2026 04:10:37 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:38:2f:22:9f:a5:05:45:33:b4:9d:12:f9:49:95:9d:6d:33:87:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:37 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=696231deeeefbd0f14f16178fcef4c1b4222c922be7def15ff5c0ab65894e9cf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:48:d6:10:f8:2d:ec:da:72:03:68:ca:87: 43:c3:1d:19:9d:72:e2:cf:b9:0e:6f:73:64:b9:e6: c7:9b:13:40:41:9a:77:7a:b6:e0:00:7f:07:0f:77: 74:b7:50:e0:e1:95:41:c6:06:7b:76:45:4e:7a:be: 1a:ef:97:84:a6:34:94:b0:63:50:de:f2:5a:de:75: 5c:90:ec:1a:50:73:db:30:79:90:25:90:f8:96:b9: b2:96:00:72:c1:7a:43:b9:5a:fd:72:78:9d:6a:95: b1:ea:4b:70:ec:7c:d2:85:8f:ee:11:46:65:0b:9a: 4b:63:aa:0b:93:69:1f:4c:a1:26:20:fa:e2:bd:37: 90:4c:97:84:69:f4:c0:04:24:3b:9d:16:34:24:9f: b7:8a:1d:51:0c:27:10:f1:da:bb:ab:69:03:94:b1: 40:31:3b:3d:38:e7:bc:af:bc:34:9b:e4:f6:c9:d4: 82:e2:07:74:f7:84:67:4b:08:65:66:1b:ff:3a:94: fa:bf:99:a8:dc:d5:f1:20:ec:74:9e:da:11:78:96: dc:11:78:db:6f:44:68:cf:79:0c:27:b4:e3:ea:ff: 98:40:37:9e:89:8c:93:2b:40:09:df:d6:4d:50:9c: 09:e3:ad:c3:e0:6c:9b:8c:55:84:5e:4c:f4:01:e3: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:83:38:FD:37:82:6F:63:48:8D:29:DE:72:06:60:E8:20:6C:1D:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:200::/40 Signature Algorithm: sha256WithRSAEncryption 60:55:6e:7d:6f:21:61:a2:af:28:ed:4c:52:f8:3e:50:21:02: e7:9d:9f:7e:06:91:7e:f9:a3:ee:ee:f1:90:03:5c:72:5c:36: 68:5d:7e:0c:68:66:32:60:b4:b4:0e:71:d7:f5:fb:d3:f1:57: fe:ab:85:53:47:70:7a:20:34:a3:76:21:c8:2a:9a:17:c0:0a: f7:ac:8f:16:31:82:e6:7f:88:29:ba:42:ad:15:c9:43:74:c3: b5:6d:e0:31:99:14:b3:5e:0c:9e:97:45:d9:52:03:3a:1e:fd: 0e:13:43:8c:6e:18:ca:3b:85:16:06:21:97:6a:cd:48:1f:af: 47:c7:79:38:36:e5:e3:70:e7:8d:f7:68:30:28:a7:dc:1d:2e: aa:c5:aa:61:dd:c6:bd:2e:b6:5f:69:4f:87:db:80:09:7e:53: 8d:7a:fa:cb:5d:34:91:3f:a9:d9:35:f6:8a:00:db:7f:94:8b: ed:bc:6a:e0:75:06:00:2a:bf:35:01:ac:e2:a9:f4:e9:40:8e: 5e:db:d6:11:19:fe:92:b1:d6:a0:4d:09:67:3c:eb:ab:b5:26: d6:af:c5:ee:c8:0c:5a:29:e9:81:70:23:bf:4d:fe:53:e7:17: aa:64:28:8d:38:18:37:aa:ed:4d:e1:4b:7f:dd:e9:59:d8:88: d9:ce:5f:28 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVDgvIp+lBUUztJ0S+UmVnW0zh4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDM3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTYyMzFkZWVlZWZiZDBmMTRmMTYxNzhmY2VmNGMxYjQy MjJjOTIyYmU3ZGVmMTVmZjVjMGFiNjU4OTRlOWNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1LkjWEPgt7NpyA2jKh0PDHRmdcuLPuQ5vc2S55sebE0BB mnd6tuAAfwcPd3S3UODhlUHGBnt2RU56vhrvl4SmNJSwY1De8lredVyQ7BpQc9sw eZAlkPiWubKWAHLBekO5Wv1yeJ1qlbHqS3DsfNKFj+4RRmULmktjqguTaR9MoSYg +uK9N5BMl4Rp9MAEJDudFjQkn7eKHVEMJxDx2ruraQOUsUAxOz0457yvvDSb5PbJ 1ILiB3T3hGdLCGVmG/86lPq/majc1fEg7HSe2hF4ltwReNtvRGjPeQwntOPq/5hA N56JjJMrQAnf1k1QnAnjrcPgbJuMVYReTPQB4xdxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxYM4/TeCb2NIjSnecgZg6CBsHTgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIwZGY3NGNlLTFhNjQtNGRmMS1iNjE2LTExNWQ0NDkzYTk2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwAjANBgkqhkiG9w0BAQsFAAOCAQEAYFVufW8hYaKvKO1MUvg+UCEC 552ffgaRfvmj7u7xkANcclw2aF1+DGhmMmC0tA5x1/X70/FX/quFU0dweiA0o3Yh yCqaF8AK96yPFjGC5n+IKbpCrRXJQ3TDtW3gMZkUs14MnpdF2VIDOh79DhNDjG4Y yjuFFgYhl2rNSB+vR8d5ODbl43DnjfdoMCin3B0uqsWqYd3GvS62X2lPh9uACX5T jXr6y100kT+p2TX2igDbf5SL7bxq4HUGACq/NQGs4qn06UCOXtvWERn+krHWoE0J Zzzrq7Um1q/F7sgMWinpgXAjv03+U+cXqmQojTgYN6rtTeFLf93pWdiI2c5fKA== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:41 2026 by rpki-client