$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa File: 4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa (raw, json) Hash identifier: vIPxbc8D3A1wbh7mir4zP3yv+RwvIh0LjYSlA352p/w= Subject key identifier: 9C:48:85:54:71:F9:03:2A:57:C1:49:CF:11:E3:0B:7F:57:80:4C:BF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 65EA2F1EF259B3445703DFF14F65876155F90B46 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa Signing time: Wed 29 Jul 2026 00:00:05 +0000 ROA not before: Wed 29 Jul 2026 00:00:05 +0000 ROA not after: Tue 27 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0fb:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ea:2f:1e:f2:59:b3:44:57:03:df:f1:4f:65:87:61:55:f9:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 29 00:00:05 2026 GMT Not After : Oct 27 23:59:59 2026 GMT Subject: serialNumber=aa385bad2bc87ff0b7eab9ae5b5000730ddf4f06c6a1b580d37b661fc7b055a8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:65:c3:4f:e8:26:d4:8c:6a:1a:98:a0:31: fd:29:f2:43:fa:02:00:d5:1b:12:9d:c2:69:8d:98: 96:39:e3:cf:29:3e:26:fe:ef:94:38:0f:7e:33:8d: b5:6a:ef:25:98:47:d0:83:4c:2c:c3:01:33:10:94: b2:11:29:e6:15:e0:72:0f:ad:51:e1:dc:33:9c:67: 7e:9b:47:f3:ee:1c:ce:4e:99:e2:d2:ae:fb:bd:90: 9e:1e:1b:7f:b3:86:f1:5c:37:06:4a:f2:a4:6c:0d: cf:96:9d:49:4e:bf:1b:86:f8:e1:e4:02:b0:4b:17: a3:8f:6e:7d:99:2f:16:4e:86:1d:c1:0c:16:d2:d9: e5:43:55:51:03:b7:80:d0:c3:57:7b:54:cb:8e:07: d9:73:ce:0b:68:d7:cb:fd:6c:11:e1:af:a0:c9:15: ab:86:0d:2b:3c:10:83:52:5e:fd:bd:3d:f3:f3:1a: bd:7f:98:f7:4c:37:da:18:6c:a8:be:1a:39:64:a3: b7:1e:7b:fb:38:25:29:7c:b8:a3:fd:56:f7:c7:1f: 1d:0c:e5:ba:b1:d0:1b:40:64:e3:c9:37:2d:b6:fd: b2:26:5f:9c:fe:f7:58:0b:70:da:bd:47:4c:31:4d: b7:77:cf:b0:a2:60:03:ad:6b:a7:3d:97:dc:72:3b: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:85:54:71:F9:03:2A:57:C1:49:CF:11:E3:0B:7F:57:80:4C:BF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ef3dcdf-2af4-4dfd-8667-18325556ef24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 3e:dd:72:de:f7:5a:c2:3c:b7:be:ab:d8:45:59:42:07:77:7d: 36:bb:32:e8:b4:6f:b9:c4:7d:e5:98:69:07:a5:95:8e:7c:8f: 49:39:70:ef:ac:c6:80:5f:9d:ca:ff:fd:01:0f:58:55:be:d7: 92:d4:47:46:7d:73:9f:0f:cc:7d:d6:f8:3e:a5:9f:8e:d8:88: 46:eb:8c:69:71:15:7b:9a:dd:3b:0d:a0:01:3e:b3:ce:67:c9: 18:62:7d:a5:cf:9b:bd:c8:01:a3:3c:ff:3f:e2:17:96:8a:cf: c4:a4:10:10:78:07:a9:00:ea:ec:29:5d:49:48:cd:07:73:6c: a4:4d:9f:d6:bc:64:5f:aa:09:cb:4b:ef:29:45:a5:e9:7e:2c: 3c:c8:ab:99:1e:0d:5b:3c:af:89:ed:3f:09:44:1b:b2:15:47: 2d:88:4b:d7:72:24:3b:99:e3:fe:cf:9f:95:52:e9:e9:0f:a6: 9f:f3:ec:d7:37:13:5b:ce:3e:87:69:b1:b8:24:47:50:36:6b: eb:96:f1:02:01:5a:5a:17:0d:5c:b7:1e:e6:e0:87:69:77:6d: 5a:9a:77:b9:b2:a5:00:c6:66:5b:3f:6b:fd:02:1d:99:5e:b2: 2e:50:3a:c6:72:56:bc:98:f7:c4:ea:7c:a5:e4:ea:b8:53:35: e4:82:34:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZeovHvJZs0RXA9/xT2WHYVX5C0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI5MDAwMDA1WhcNMjYxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTM4NWJhZDJiYzg3ZmYwYjdlYWI5YWU1YjUwMDA3MzBk ZGY0ZjA2YzZhMWI1ODBkMzdiNjYxZmM3YjA1NWE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgCGXDT+gm1IxqGpigMf0p8kP6AgDVGxKdwmmNmJY5488p Pib+75Q4D34zjbVq7yWYR9CDTCzDATMQlLIRKeYV4HIPrVHh3DOcZ36bR/PuHM5O meLSrvu9kJ4eG3+zhvFcNwZK8qRsDc+WnUlOvxuG+OHkArBLF6OPbn2ZLxZOhh3B DBbS2eVDVVEDt4DQw1d7VMuOB9lzzgto18v9bBHhr6DJFauGDSs8EINSXv29PfPz Gr1/mPdMN9oYbKi+Gjlko7cee/s4JSl8uKP9VvfHHx0M5bqx0BtAZOPJNy22/bIm X5z+91gLcNq9R0wxTbd3z7CiYAOta6c9l9xyO5GlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnEiFVHH5AypXwUnPEeMLf1eATL8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRlZjNkY2RmLTJhZjQtNGRmZC04NjY3LTE4MzI1NTU2ZWYyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAD7dct73WsI8t76r2EVZQgd3 fTa7Mui0b7nEfeWYaQellY58j0k5cO+sxoBfncr//QEPWFW+15LUR0Z9c58PzH3W +D6ln47YiEbrjGlxFXua3TsNoAE+s85nyRhifaXPm73IAaM8/z/iF5aKz8SkEBB4 B6kA6uwpXUlIzQdzbKRNn9a8ZF+qCctL7ylFpel+LDzIq5keDVs8r4ntPwlEG7IV Ry2IS9dyJDuZ4/7Pn5VS6ekPpp/z7Nc3E1vOPodpsbgkR1A2a+uW8QIBWloXDVy3 Hubgh2l3bVqad7mypQDGZls/a/0CHZlesi5QOsZyVryY98TqfKXk6rhTNeSCNJU= -----END CERTIFICATE-----Generated at Thu Aug 27 04:00:40 2026 by rpki-client