$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa File: 43de5aff-1abc-4ba4-ac76-194395f6be8f.roa (raw, json) Hash identifier: mQJSfI0FOUuW7jnINoP8NVLZOuCbsX91kUyurN5QIIw= Subject key identifier: 7C:50:9B:D6:D1:7D:10:64:59:E6:FE:EC:9D:9D:1E:4E:D6:62:61:4A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 220DCE8CC197EE582C8210DADA841BA1E7AD2445 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa Signing time: Mon 03 Aug 2026 00:40:04 +0000 ROA not before: Mon 03 Aug 2026 00:40:04 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0d:ce:8c:c1:97:ee:58:2c:82:10:da:da:84:1b:a1:e7:ad:24:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 3 00:40:04 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=b07a1cbdb06ae6ac2f1e4ce1923eb22107fe61743d2221fcd1bec80ce15a66fe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:54:2c:07:bf:7a:4b:90:6b:07:49:cc:fb: 02:f7:8e:7d:04:47:a5:9c:ee:cc:ba:d0:63:14:48: b7:ee:d0:69:54:82:87:f1:c8:be:88:67:91:f4:d3: b9:06:1b:59:42:32:4b:19:28:3c:0f:83:23:e4:ff: 21:85:34:52:20:79:96:19:69:11:20:9a:17:b2:e2: 94:51:55:f6:2b:0f:0d:ac:57:92:3f:f5:9a:dc:b7: 25:8d:67:53:63:80:4b:c7:45:62:d3:db:7f:01:0c: 7b:5a:40:ae:b1:49:ba:f9:5a:bb:07:0d:d8:91:ff: 57:9e:9a:3f:57:3b:99:35:91:88:f1:14:20:8c:1d: a4:c5:9e:70:fd:8d:b7:be:ed:6b:59:54:1e:4d:bb: fd:69:c8:9a:28:b2:67:50:6c:bb:d4:fe:57:8e:75: 96:d2:c7:c3:85:30:04:37:16:87:fb:5b:47:c4:78: 00:25:4d:e9:23:40:36:91:9a:3e:0e:f8:88:ba:93: 75:d3:44:37:d4:3b:bf:43:d4:84:9d:0a:73:3d:78: 9b:c4:52:3f:b6:db:58:1d:07:20:c5:0d:cb:d0:dd: ba:e9:92:72:39:95:30:d4:3b:db:3d:cc:f3:a5:9f: 46:b3:26:65:e6:35:c1:8d:ae:c3:e6:0d:b5:ef:9a: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:50:9B:D6:D1:7D:10:64:59:E6:FE:EC:9D:9D:1E:4E:D6:62:61:4A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b00::/48 Signature Algorithm: sha256WithRSAEncryption 6e:03:2c:44:5a:88:7f:9c:27:f8:c9:cf:dc:60:fb:91:a4:1a: 24:ff:05:d2:5d:f6:fc:f3:cc:a0:db:aa:45:4e:f6:88:dc:6a: 0c:7f:13:9d:f3:92:d2:ff:eb:2c:be:39:6b:16:9c:f5:22:a3: 14:41:25:3f:12:82:e0:0e:ce:b6:5e:d0:b1:2c:e1:08:ea:db: 1c:62:cf:bb:f6:f3:b0:c2:93:a9:83:00:9a:9d:1b:7e:69:36: 12:58:e7:a4:2b:42:ce:c7:ce:ea:ce:55:f8:ca:ac:f1:26:2e: 55:73:ae:d7:5b:50:01:9a:9a:7e:78:8f:74:05:e1:8e:af:61: 89:cf:8b:14:41:34:e6:94:68:67:66:27:ac:f9:db:6e:c9:3b: a3:ab:c6:c5:51:3f:d1:7b:3c:b7:1e:4e:50:e0:2d:47:fd:5d: 9b:94:b5:ff:63:23:37:42:5e:8e:47:ea:1b:3f:51:49:88:40: ed:af:9d:68:81:1e:48:12:74:c1:78:a1:2c:db:1f:1e:05:fe: 16:50:8e:db:65:20:13:67:49:30:86:14:0e:6c:9e:30:55:6b: 4d:ea:c8:7b:0f:0c:23:35:9b:94:3a:e0:e3:da:de:be:dd:65: 95:07:0a:c4:c9:88:05:55:43:ae:d6:83:5b:4c:0d:9a:49:c2: fc:98:99:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIg3OjMGX7lgsghDa2oQboeetJEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAzMDA0MDA0WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDdhMWNiZGIwNmFlNmFjMmYxZTRjZTE5MjNlYjIyMTA3 ZmU2MTc0M2QyMjIxZmNkMWJlYzgwY2UxNWE2NmZlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYKFQsB796S5BrB0nM+wL3jn0ER6Wc7sy60GMUSLfu0GlU gofxyL6IZ5H007kGG1lCMksZKDwPgyPk/yGFNFIgeZYZaREgmhey4pRRVfYrDw2s V5I/9ZrctyWNZ1NjgEvHRWLT238BDHtaQK6xSbr5WrsHDdiR/1eemj9XO5k1kYjx FCCMHaTFnnD9jbe+7WtZVB5Nu/1pyJoosmdQbLvU/leOdZbSx8OFMAQ3Fof7W0fE eAAlTekjQDaRmj4O+Ii6k3XTRDfUO79D1ISdCnM9eJvEUj+221gdByDFDcvQ3brp knI5lTDUO9s9zPOln0azJmXmNcGNrsPmDbXvmvofAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfFCb1tF9EGRZ5v7snZ0eTtZiYUowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzZGU1YWZmLTFhYmMtNGJhNC1hYzc2LTE5NDM5NWY2YmU4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwAwDQYJKoZIhvcNAQELBQADggEBAG4DLERaiH+cJ/jJz9xg+5Gk GiT/BdJd9vzzzKDbqkVO9ojcagx/E53zktL/6yy+OWsWnPUioxRBJT8SguAOzrZe 0LEs4Qjq2xxiz7v287DCk6mDAJqdG35pNhJY56QrQs7HzurOVfjKrPEmLlVzrtdb UAGamn54j3QF4Y6vYYnPixRBNOaUaGdmJ6z5227JO6OrxsVRP9F7PLceTlDgLUf9 XZuUtf9jIzdCXo5H6hs/UUmIQO2vnWiBHkgSdMF4oSzbHx4F/hZQjttlIBNnSTCG FA5snjBVa03qyHsPDCM1m5Q64OPa3r7dZZUHCsTJiAVVQ67Wg1tMDZpJwvyYmfc= -----END CERTIFICATE-----Generated at Thu Aug 27 04:01:10 2026 by rpki-client