$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4787e95e-82f9-45f0-9418-beeac14166bd.roa File: 4787e95e-82f9-45f0-9418-beeac14166bd.roa (raw, json) Hash identifier: NwCUjrG6jvyGagy7QZtlkFgzqEITbEgDue1hw3h2ML4= Subject key identifier: 91:49:B5:FA:FC:5C:9B:7C:0D:F3:9D:3B:12:E5:85:3A:71:F7:89:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 72E65CD30AA96B68B357DE90B4A0435B216CB9AE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4787e95e-82f9-45f0-9418-beeac14166bd.roa Signing time: Fri 11 Sep 2026 18:12:53 +0000 ROA not before: Fri 11 Sep 2026 18:12:53 +0000 ROA not after: Thu 10 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e6:5c:d3:0a:a9:6b:68:b3:57:de:90:b4:a0:43:5b:21:6c:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 11 18:12:53 2026 GMT Not After : Dec 10 23:59:59 2026 GMT Subject: serialNumber=8cc1169af479a25c0d82587b24ded52223b33f6ab0fa529f3e686986e8d9e589, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:b8:42:b6:6d:d4:31:0e:12:7c:c1:69:56: fb:c2:d2:f4:f6:92:f2:ac:22:a0:28:14:10:c2:63: d2:44:61:bc:b6:a7:bd:7f:ea:a5:3b:b4:8e:ac:d7: 00:be:3a:a8:52:0d:d4:28:96:0e:da:d2:cb:f9:91: 1a:f6:7d:b6:51:04:36:d6:8a:4e:ad:ef:a0:bf:45: 71:44:01:57:5b:79:8d:e8:b0:19:1e:73:a6:e7:ce: 4a:1c:a1:7d:5f:ca:36:03:bd:b8:69:88:0f:03:42: 6a:58:41:7f:1b:29:7c:e6:5b:be:4c:11:e0:cb:19: 73:d7:17:85:c2:4a:f0:14:6f:96:d4:8a:b7:01:1f: e7:1e:0e:5e:14:47:26:41:6b:fa:c6:01:f8:31:f1: c0:a7:29:04:c3:19:fa:85:a9:71:9a:96:09:11:d9: 63:f4:d8:6e:fb:76:ab:ca:4d:eb:8c:76:0c:54:59: ef:fc:5d:2d:0d:fb:69:af:39:f8:54:83:21:98:fe: d8:c9:e8:6c:4f:40:06:1a:7e:b2:f3:8c:f4:bc:d1: 1a:5d:40:57:14:d6:16:cb:17:ff:47:15:94:0e:1b: e8:4a:af:51:40:3d:cc:a7:de:23:a8:79:53:a4:44: ee:54:39:04:00:84:e7:b5:10:92:6c:c5:02:5a:79: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:B5:FA:FC:5C:9B:7C:0D:F3:9D:3B:12:E5:85:3A:71:F7:89:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4787e95e-82f9-45f0-9418-beeac14166bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b04::/48 Signature Algorithm: sha256WithRSAEncryption 48:dd:b4:a1:44:d2:af:aa:a3:97:dd:04:dc:00:f4:11:e4:ac: ae:0d:c9:63:88:6b:e2:9a:ad:3b:4c:74:fd:f6:ce:eb:6a:17: 3b:2f:14:ad:ee:d9:ec:c9:1f:b1:48:d5:a1:d8:f2:ea:a2:7f: d3:27:26:04:37:c1:ff:1b:54:d1:63:23:42:27:7f:f2:a1:40: 29:d3:dd:83:2a:07:2a:70:97:ae:36:da:e1:cd:bc:c1:82:dc: 84:ee:73:43:20:bd:41:12:19:86:e6:34:a7:e9:a7:a2:7e:ba: 7e:97:f9:8e:ec:af:14:a5:23:17:a5:b6:b5:26:ea:99:3e:d5: a2:55:1c:3c:1f:b7:b3:af:b8:d8:c3:15:e8:33:b6:2e:d9:f2: 34:08:a1:86:6c:d6:f8:b0:1f:81:8a:34:95:a6:f6:0b:67:5c: a7:e0:17:13:95:b4:0f:49:f6:11:51:9b:6b:89:0b:69:c4:75: 68:72:57:e8:36:9a:4f:e7:97:88:b5:c7:84:6e:ba:8d:80:df: 2d:27:d8:f7:f9:88:b2:74:50:b9:6c:04:c1:77:a7:ad:e0:5c: 83:74:29:b1:14:f1:3f:a3:df:a3:d4:72:e7:10:00:10:c4:a2: be:e1:81:74:56:67:db:c4:28:04:95:f1:89:be:22:e4:e8:f7: 8b:d6:70:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcuZc0wqpa2izV96QtKBDWyFsua4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTExMTgxMjUzWhcNMjYxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2MxMTY5YWY0NzlhMjVjMGQ4MjU4N2IyNGRlZDUyMjIz YjMzZjZhYjBmYTUyOWYzZTY4Njk4NmU4ZDllNTg5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCKbhCtm3UMQ4SfMFpVvvC0vT2kvKsIqAoFBDCY9JEYby2 p71/6qU7tI6s1wC+OqhSDdQolg7a0sv5kRr2fbZRBDbWik6t76C/RXFEAVdbeY3o sBkec6bnzkocoX1fyjYDvbhpiA8DQmpYQX8bKXzmW75MEeDLGXPXF4XCSvAUb5bU ircBH+ceDl4URyZBa/rGAfgx8cCnKQTDGfqFqXGalgkR2WP02G77dqvKTeuMdgxU We/8XS0N+2mvOfhUgyGY/tjJ6GxPQAYafrLzjPS80RpdQFcU1hbLF/9HFZQOG+hK r1FAPcyn3iOoeVOkRO5UOQQAhOe1EJJsxQJaeUF1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkUm1+vxcm3wN8507EuWFOnH3iQYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ3ODdlOTVlLTgyZjktNDVmMC05NDE4LWJlZWFjMTQxNjZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwQwDQYJKoZIhvcNAQELBQADggEBAEjdtKFE0q+qo5fdBNwA9BHk rK4NyWOIa+KarTtMdP32zutqFzsvFK3u2ezJH7FI1aHY8uqif9MnJgQ3wf8bVNFj I0Inf/KhQCnT3YMqBypwl6422uHNvMGC3ITuc0MgvUESGYbmNKfpp6J+un6X+Y7s rxSlIxeltrUm6pk+1aJVHDwft7OvuNjDFegzti7Z8jQIoYZs1viwH4GKNJWm9gtn XKfgFxOVtA9J9hFRm2uJC2nEdWhyV+g2mk/nl4i1x4Ruuo2A3y0n2Pf5iLJ0ULls BMF3p63gXIN0KbEU8T+j36PUcucQABDEor7hgXRWZ9vEKASV8Ym+IuTo94vWcLc= -----END CERTIFICATE-----Generated at Mon Sep 14 08:21:03 2026 by rpki-client