$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa File: 4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa (raw, json) Hash identifier: ZIkbKu8SGFg4wAqGr38kaWmZe0HdOPdCx/9ysObKDFE= Subject key identifier: 38:16:9A:A8:CF:33:2B:C5:0C:CF:DE:FC:F6:43:3D:C1:6A:20:9E:DA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C6C7F232ED7533773D9E339AFD85D28013616E7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa Signing time: Fri 07 Aug 2026 04:30:13 +0000 ROA not before: Fri 07 Aug 2026 04:30:13 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6c:7f:23:2e:d7:53:37:73:d9:e3:39:af:d8:5d:28:01:36:16:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:30:13 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=d14a859511892e0076fb71e1af7219e878b640ad2fc2baf64b891eee97186aa1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:f0:81:ff:b6:9e:6d:a4:98:6f:25:6b:53: e7:d5:7b:4b:1c:18:10:6d:6b:c7:06:1f:de:88:ff: af:2c:73:dc:03:92:0e:11:f6:6f:22:6e:13:e8:ab: c1:ef:25:5d:49:aa:a9:6b:80:d2:39:c0:a4:89:a6: e1:1c:b5:74:e0:70:7b:bc:7d:76:8d:6b:37:47:fc: b7:1d:57:46:e1:52:ee:00:4e:15:a4:ee:62:1f:e1: b5:a0:0c:6e:56:dd:b8:74:dd:86:11:0e:86:97:89: 60:e3:1a:42:82:a4:72:01:d2:b9:49:2c:b1:17:d0: 6b:6c:0a:23:e0:d5:5e:f6:0e:20:bd:ee:31:9c:e8: 38:51:23:f1:ad:21:ea:b9:b1:cd:d9:91:62:4f:9d: f8:8d:59:ae:e1:a3:76:71:b4:64:94:22:e5:b5:24: de:36:75:6e:61:08:58:ee:ca:58:95:54:82:6a:cd: 5e:0b:86:32:ad:71:f9:b2:d5:c1:18:3e:c5:8e:71: b4:05:47:fd:e7:1d:3c:a9:d6:01:98:8f:3e:33:e8: a7:7c:3e:cc:75:91:0d:f6:9b:c0:36:14:96:48:d6: 52:2c:1a:f1:21:fb:1f:02:47:48:ca:5f:53:b2:93: 52:66:49:ac:ff:d7:88:63:da:74:2f:8d:40:9e:42: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:9A:A8:CF:33:2B:C5:0C:CF:DE:FC:F6:43:3D:C1:6A:20:9E:DA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5520::/44 Signature Algorithm: sha256WithRSAEncryption 2d:ff:d1:2a:ca:a3:40:f1:a7:11:28:4a:3d:4b:20:a5:ca:fe: 5b:b7:89:10:a2:4a:69:eb:18:89:c5:82:26:64:08:d0:ee:41: b8:44:cb:1b:6d:24:0f:52:24:55:50:b7:31:64:1b:a5:d1:18: 04:85:c5:ec:0d:4f:fc:12:5c:c8:83:9c:85:72:81:58:ce:2a: 56:0c:ec:af:49:f3:81:12:06:0f:a0:f3:52:d6:52:e2:86:e7: 8d:5a:e4:17:40:77:fc:9e:11:41:ba:84:aa:8d:ad:42:c2:67: e2:fa:10:0d:63:c1:52:3a:97:cd:90:e1:59:84:5e:6b:64:5d: 53:6f:d7:3d:94:4e:f2:24:f2:b2:6a:95:59:8b:2e:80:9f:1b: 3d:31:d2:88:06:07:6b:94:ac:7c:cd:7c:2a:01:8a:b5:27:16: 4d:0b:84:f1:70:5c:e8:b2:59:9e:30:b9:00:ca:dd:09:f3:b7: b6:45:70:f1:bc:78:a3:b9:44:2a:f6:76:b7:f4:dd:fb:0a:2b: 7e:31:b9:4e:af:fb:6c:98:73:4c:20:cc:fd:30:ee:55:07:8a: 61:da:a4:91:ba:f2:5e:b8:51:b5:f7:cc:eb:36:59:f6:32:4f: db:cf:96:2c:67:80:f9:63:ef:fd:26:10:52:5a:24:e2:e9:ca: 30:e4:94:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfGx/Iy7XUzdz2eM5r9hdKAE2FucwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQzMDEzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTRhODU5NTExODkyZTAwNzZmYjcxZTFhZjcyMTllODc4 YjY0MGFkMmZjMmJhZjY0Yjg5MWVlZTk3MTg2YWExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJsvCB/7aebaSYbyVrU+fVe0scGBBta8cGH96I/68sc9wD kg4R9m8ibhPoq8HvJV1JqqlrgNI5wKSJpuEctXTgcHu8fXaNazdH/LcdV0bhUu4A ThWk7mIf4bWgDG5W3bh03YYRDoaXiWDjGkKCpHIB0rlJLLEX0GtsCiPg1V72DiC9 7jGc6DhRI/GtIeq5sc3ZkWJPnfiNWa7ho3ZxtGSUIuW1JN42dW5hCFjuyliVVIJq zV4LhjKtcfmy1cEYPsWOcbQFR/3nHTyp1gGYjz4z6Kd8Psx1kQ32m8A2FJZI1lIs GvEh+x8CR0jKX1Oyk1JmSaz/14hj2nQvjUCeQhZvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOBaaqM8zK8UMz9789kM9wWogntowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjZGI0M2RkLTFiNDktNGYyMi05M2U4LWIyMTUzYzJjYWM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVSAwDQYJKoZIhvcNAQELBQADggEBAC3/0SrKo0DxpxEoSj1LIKXK /lu3iRCiSmnrGInFgiZkCNDuQbhEyxttJA9SJFVQtzFkG6XRGASFxewNT/wSXMiD nIVygVjOKlYM7K9J84ESBg+g81LWUuKG541a5BdAd/yeEUG6hKqNrULCZ+L6EA1j wVI6l82Q4VmEXmtkXVNv1z2UTvIk8rJqlVmLLoCfGz0x0ogGB2uUrHzNfCoBirUn Fk0LhPFwXOiyWZ4wuQDK3Qnzt7ZFcPG8eKO5RCr2drf03fsKK34xuU6v+2yYc0wg zP0w7lUHimHapJG68l64UbX3zOs2WfYyT9vPlixngPlj7/0mEFJaJOLpyjDklNk= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:06 2026 by rpki-client