$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa File: 4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa (raw, json) Hash identifier: f7z1jemIU8hPKxixiOqBl9zFLfrqXP39Id6UebOZFS4= Subject key identifier: 5A:DD:AD:0F:BA:54:1C:CA:F7:D4:EB:FE:41:A4:00:8C:87:A2:AA:3F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E5FE5007741A0AA1046EC7277D79431F6B497DC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa Signing time: Fri 07 Aug 2026 04:20:40 +0000 ROA not before: Fri 07 Aug 2026 04:20:40 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5f:e5:00:77:41:a0:aa:10:46:ec:72:77:d7:94:31:f6:b4:97:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:40 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=664fcbfe716055c4aebe6afffb7425392d5a7984385ee50d82b03697263f3589, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:c3:34:d1:2d:11:a5:c4:57:f8:aa:67:fe: 2b:85:70:f1:39:54:75:f7:b8:5c:b0:16:ca:bd:16: 04:53:da:7b:e0:66:de:9b:b2:13:3b:3a:fd:ce:cb: d8:9b:23:75:20:1e:7d:04:60:61:35:8a:e6:b0:1e: 4a:15:07:f1:6d:c5:f1:ed:05:06:3c:e2:c8:47:db: f2:aa:ac:3e:9a:3a:b1:73:53:f6:53:b8:b7:6e:85: e5:0c:2d:23:af:db:dc:7d:c8:ba:2c:dd:7a:cf:f8: 38:e1:61:6e:f9:83:96:b1:63:83:45:f3:41:50:e2: 1d:53:2f:18:c2:0d:d2:38:b9:40:56:7a:e8:fc:9f: 24:ab:83:5b:25:be:86:3c:d9:41:61:eb:9a:52:cf: 54:a6:8c:a4:6c:dd:a8:e0:ee:fb:95:86:a0:c9:9b: 7e:bb:03:df:38:15:8d:06:22:e1:82:27:1d:d7:74: 1e:ed:de:d2:f8:c1:5e:71:a2:df:4d:04:eb:0e:38: 6d:7e:0b:6e:07:b9:ca:06:49:dc:bc:65:d8:15:39: b6:aa:a4:c9:18:e3:87:10:6e:cd:2b:e1:8e:ba:a2: d0:72:4e:73:10:e3:f6:e1:d1:3a:3b:22:6f:7c:64: 40:f8:ca:f8:9a:4b:49:c1:3f:18:58:c4:19:14:a3: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DD:AD:0F:BA:54:1C:CA:F7:D4:EB:FE:41:A4:00:8C:87:A2:AA:3F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:f6:1a:70:15:c0:2b:c3:65:be:3a:b1:d2:cf:7e:83:f1:38: a3:00:1f:74:21:50:d1:08:6f:cc:8f:0c:e7:0d:fc:85:57:2c: 26:49:02:10:de:27:23:b5:ec:4d:8d:e1:f3:8e:82:25:a9:93: f3:34:5f:a1:83:e9:d2:4f:5b:91:10:78:4d:96:cf:46:3f:46: 59:92:47:79:c8:34:0c:74:b8:7b:01:80:9a:f2:2a:bb:3a:29: 7d:75:5d:2e:ca:bc:58:d0:19:e9:3d:9a:2e:b4:1a:9b:7a:11: b0:4e:96:b2:e5:74:b8:52:89:0a:2e:77:a8:d0:43:43:ae:5e: 39:d4:b5:b9:f4:51:47:67:81:c5:33:95:e9:ae:ad:29:9f:4d: cc:bc:55:c3:27:fd:14:1e:f8:3e:78:f1:1d:95:1b:32:45:d3: b8:72:b3:7e:4d:52:27:42:b5:ef:c7:b7:71:d9:4a:b0:46:ef: 76:a2:ea:1e:1f:24:a5:51:24:2e:55:6a:b1:77:6c:a9:ec:ff: 5d:d4:d3:0a:6b:71:de:95:54:94:d1:f7:6b:c9:c9:3e:10:d0: d1:57:6a:e3:a0:30:f9:8f:18:16:f6:f4:61:53:73:ab:21:5f: 73:5e:49:3e:94:0a:32:ab:5c:66:77:c3:44:66:14:b5:2c:e4: 34:e6:a6:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULl/lAHdBoKoQRuxyd9eUMfa0l9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjRmY2JmZTcxNjA1NWM0YWViZTZhZmZmYjc0MjUzOTJk NWE3OTg0Mzg1ZWU1MGQ4MmIwMzY5NzI2M2YzNTg5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAKsM00S0RpcRX+Kpn/iuFcPE5VHX3uFywFsq9FgRT2nvg Zt6bshM7Ov3Oy9ibI3UgHn0EYGE1iuawHkoVB/FtxfHtBQY84shH2/KqrD6aOrFz U/ZTuLduheUMLSOv29x9yLos3XrP+DjhYW75g5axY4NF80FQ4h1TLxjCDdI4uUBW euj8nySrg1slvoY82UFh65pSz1SmjKRs3ajg7vuVhqDJm367A984FY0GIuGCJx3X dB7t3tL4wV5xot9NBOsOOG1+C24HucoGSdy8ZdgVObaqpMkY44cQbs0r4Y66otBy TnMQ4/bh0To7Im98ZED4yviaS0nBPxhYxBkUoyuxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWt2tD7pUHMr31Ov+QaQAjIeiqj8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRhODYyM2M0LTEwYTAtNDZiNi1hNWY1LWM5NGU4NGM1Njg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAI32GnAVwCvDZb46sdLPfoPx OKMAH3QhUNEIb8yPDOcN/IVXLCZJAhDeJyO17E2N4fOOgiWpk/M0X6GD6dJPW5EQ eE2Wz0Y/RlmSR3nINAx0uHsBgJryKrs6KX11XS7KvFjQGek9mi60Gpt6EbBOlrLl dLhSiQoud6jQQ0OuXjnUtbn0UUdngcUzlemurSmfTcy8VcMn/RQe+D548R2VGzJF 07hys35NUidCte/Ht3HZSrBG73ai6h4fJKVRJC5VarF3bKns/13U0wprcd6VVJTR 92vJyT4Q0NFXauOgMPmPGBb29GFTc6shX3NeST6UCjKrXGZ3w0RmFLUs5DTmpmE= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:51 2026 by rpki-client