$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa File: 3253695d-b576-4052-8dca-b631c73a2924.roa (raw, json) Hash identifier: 0EpTmFHDDcZaCrunf5BkGt9BTza8T/TFXmv1O0bpsQ4= Subject key identifier: 1F:83:2C:EA:99:4F:A2:0C:A1:79:06:F8:93:45:75:96:F5:DF:45:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6EC6B2AEF976262A8B5ECB57E956EDE93A2CE8D4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa Signing time: Tue 25 Aug 2026 00:00:07 +0000 ROA not before: Tue 25 Aug 2026 00:00:07 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c6:b2:ae:f9:76:26:2a:8b:5e:cb:57:e9:56:ed:e9:3a:2c:e8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 25 00:00:07 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=a9fd31548d3d885cc0af2c7e195f5367c1847da83f4ef88fa7854e5d8baffc87, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:02:97:d9:fe:37:54:13:ee:7f:74:60:d8:17: 8e:e0:a0:72:03:ef:49:78:92:ec:21:fe:6d:05:65: a0:5c:ca:df:93:8f:8f:3a:c7:95:c3:d5:bf:2c:ac: c7:45:89:af:8e:d7:48:4f:3a:da:42:7d:56:ea:0e: bf:68:16:9d:f1:83:4e:b8:79:b4:f3:f4:5e:8c:24: c5:af:e4:48:d8:9f:86:fa:d4:36:44:61:87:25:bb: b5:dd:75:51:8f:28:3a:04:d8:43:47:0c:76:84:5d: de:96:33:03:3b:dc:66:3a:13:35:07:0b:e4:20:aa: 8a:6c:fc:cb:84:38:ab:2d:ce:b1:c1:bb:ba:fc:bf: 82:ff:fa:b8:0f:59:0c:1f:5a:19:ce:ed:88:bb:51: 9f:aa:d1:c7:09:f9:9e:cd:ef:6c:b3:2e:a2:f2:c9: 57:04:5e:e4:3c:c1:67:23:33:8e:eb:68:65:61:bb: 27:30:67:7f:e9:ae:a0:ad:ca:51:d5:de:79:43:fe: 24:0e:f3:2d:fc:12:8c:ad:dd:66:d6:59:d7:0f:3a: ce:bd:e9:a9:14:b0:93:21:b4:ca:96:b8:95:99:06: b6:a5:3e:76:b9:04:c7:28:11:b2:83:5c:6a:61:ba: 99:3f:4e:87:cb:ef:55:56:6a:ea:06:b9:ac:94:9f: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:83:2C:EA:99:4F:A2:0C:A1:79:06:F8:93:45:75:96:F5:DF:45:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:10::/44 Signature Algorithm: sha256WithRSAEncryption 8b:62:60:49:3e:ab:d1:d9:0a:71:2c:e2:9b:91:c7:b5:25:e7: a7:0f:be:e4:69:ec:cf:5e:87:71:90:66:e5:9a:de:75:b9:74: 51:e0:26:b7:e9:ba:16:89:2a:1e:ee:5e:e7:cc:5f:bc:ec:5c: d7:42:2a:75:09:9f:9f:f3:79:45:0f:84:bd:b1:68:5c:eb:70: 88:f2:a8:cf:f3:7f:70:1a:31:4c:ca:81:1b:8f:81:1c:e9:d7: 87:9d:39:b4:b6:53:45:77:62:56:05:b5:1e:cd:cd:be:90:8c: 10:38:6e:10:47:32:c2:89:7c:ba:24:97:c7:07:55:f9:43:be: 50:8d:9e:42:4a:43:d5:17:e7:ad:ff:0a:7a:bd:22:7e:3d:a1: 18:a2:e0:48:c2:d6:c2:6c:65:ae:5a:69:fb:06:4c:64:3b:3a: 87:a8:fb:d4:b9:16:cf:28:3f:97:6f:5b:c6:bc:c7:26:03:f8: ab:d8:3d:82:fe:1d:7a:b6:04:d1:6c:25:fe:6e:7d:99:64:58: d6:b3:24:92:aa:fe:88:86:9a:d6:f7:de:cf:2b:34:ff:99:1e: c8:7e:87:ee:08:e5:08:13:ee:5a:f1:dc:80:b3:e7:45:65:71: 07:cb:d7:02:89:17:28:08:83:d7:04:64:4e:6a:4f:5b:e8:d1: ed:30:24:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbsayrvl2JiqLXstX6Vbt6Tos6NQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODI1MDAwMDA3WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWZkMzE1NDhkM2Q4ODVjYzBhZjJjN2UxOTVmNTM2N2Mx ODQ3ZGE4M2Y0ZWY4OGZhNzg1NGU1ZDhiYWZmYzg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2ApfZ/jdUE+5/dGDYF47goHID70l4kuwh/m0FZaBcyt+T j486x5XD1b8srMdFia+O10hPOtpCfVbqDr9oFp3xg064ebTz9F6MJMWv5EjYn4b6 1DZEYYclu7XddVGPKDoE2ENHDHaEXd6WMwM73GY6EzUHC+Qgqops/MuEOKstzrHB u7r8v4L/+rgPWQwfWhnO7Yi7UZ+q0ccJ+Z7N72yzLqLyyVcEXuQ8wWcjM47raGVh uycwZ3/prqCtylHV3nlD/iQO8y38Eoyt3WbWWdcPOs696akUsJMhtMqWuJWZBral Pna5BMcoEbKDXGphupk/TofL71VWauoGuayUn81HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUH4Ms6plPogyheQb4k0V1lvXfRaEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyNTM2OTVkLWI1NzYtNDA1Mi04ZGNhLWI2MzFjNzNhMjkyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxABAwDQYJKoZIhvcNAQELBQADggEBAItiYEk+q9HZCnEs4puRx7Ul 56cPvuRp7M9eh3GQZuWa3nW5dFHgJrfpuhaJKh7uXufMX7zsXNdCKnUJn5/zeUUP hL2xaFzrcIjyqM/zf3AaMUzKgRuPgRzp14edObS2U0V3YlYFtR7Nzb6QjBA4bhBH MsKJfLokl8cHVflDvlCNnkJKQ9UX563/Cnq9In49oRii4EjC1sJsZa5aafsGTGQ7 Ooeo+9S5Fs8oP5dvW8a8xyYD+KvYPYL+HXq2BNFsJf5ufZlkWNazJJKq/oiGmtb3 3s8rNP+ZHsh+h+4I5QgT7lrx3ICz50VlcQfL1wKJFygIg9cEZE5qT1vo0e0wJHU= -----END CERTIFICATE-----Generated at Thu Sep 17 15:06:40 2026 by rpki-client