$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa File: 535a7848-0977-4f59-b656-b3f581248b27.roa (raw, json) Hash identifier: NGpkSL3Ik6dXquI7fNeh6Ljy5ZH4GQoNVz5cFkBzaD4= Subject key identifier: E4:CB:F4:D7:51:8B:3D:2A:8C:40:8B:33:E3:20:9A:D3:98:89:D8:78 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6C2E3DAF5094EF17DB01C231DFFC363FCF3D0889 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa Signing time: Sun 09 Aug 2026 00:00:03 +0000 ROA not before: Sun 09 Aug 2026 00:00:03 +0000 ROA not after: Sat 07 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2e:3d:af:50:94:ef:17:db:01:c2:31:df:fc:36:3f:cf:3d:08:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 9 00:00:03 2026 GMT Not After : Nov 7 23:59:59 2026 GMT Subject: serialNumber=b0fd01c80f6c31d7f0fe48e1cb1044961f484a20a29540c93f46f8aaa6c8556f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:64:2f:14:76:da:d6:21:42:c7:1a:39:fe: 9a:07:c1:69:c4:71:fd:f0:08:0f:ab:9c:63:5f:31: 9b:5f:36:e7:42:36:9a:5f:30:0f:f0:5d:68:f6:3b: f0:06:d2:af:21:a2:58:29:5c:f2:b4:af:1f:12:90: 15:55:f6:aa:3a:ba:c6:79:ac:85:12:93:c9:4d:b7: 5f:99:98:9c:87:6b:91:1b:5d:55:24:71:cf:2c:df: 7a:53:00:7e:42:da:6b:87:8d:7e:47:a9:3e:8f:6d: 8c:ba:0d:3b:83:f3:0a:f0:d5:9f:e7:ce:dd:4d:3b: 7d:6f:d0:7d:c0:7c:47:ed:5c:f9:c6:a2:f4:b1:b2: 55:ee:7a:45:6e:5f:3b:78:53:e7:6a:5a:e0:9f:24: 8d:56:3e:fe:8c:23:73:9c:6a:58:77:dd:a2:c4:89: 36:ff:7d:b7:54:cb:7d:7c:ac:9f:41:ec:c5:e0:79: 86:38:b0:29:a8:4f:21:99:9d:e4:bf:e9:fa:8e:f3: 15:1a:5d:1e:61:8a:85:27:12:9c:60:3d:0d:c2:f1: 03:ef:47:3f:da:84:c3:ce:fe:b7:82:a2:b2:a0:b6: bc:19:cb:13:b2:ce:c8:da:3f:68:21:43:75:73:2b: b7:21:20:64:04:4c:71:aa:4a:69:9b:a2:20:4c:c3: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:F4:D7:51:8B:3D:2A:8C:40:8B:33:E3:20:9A:D3:98:89:D8:78 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/535a7848-0977-4f59-b656-b3f581248b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8100::/40 Signature Algorithm: sha256WithRSAEncryption 11:43:d9:f3:f0:6e:c0:70:ae:3f:4b:0c:b8:25:55:2d:dc:cd: a5:08:27:58:45:65:ab:76:4b:0a:aa:e4:b9:fa:70:4f:2f:11: 98:a2:81:0a:a0:c1:7a:25:fa:b2:3a:ad:57:4a:dc:7d:62:9f: 55:04:b5:14:2d:20:22:0f:10:77:7a:81:9d:53:cf:ce:d5:3d: 03:e0:c5:18:60:7a:64:da:b4:0a:20:1e:af:b8:7d:84:e9:1c: 85:f7:2a:8c:0f:1b:3d:83:58:7d:fe:2c:9d:bc:ab:13:40:49: d2:e5:2f:01:af:55:94:5a:d7:7c:90:26:13:65:c7:d3:b6:82: 35:c1:a7:5d:93:58:3a:b3:8d:5e:1f:a6:95:23:5d:16:bd:9e: 18:b0:d9:9f:4e:0d:ab:7e:15:0c:f5:a7:11:8f:12:0d:bf:0c: 7c:e0:b3:7f:b6:a7:fc:48:df:1d:be:b6:98:bf:42:31:a1:02: f9:12:d2:ec:d0:7e:32:c9:d5:1c:1b:25:b4:ff:70:38:46:a1: 1e:3e:2e:ab:ca:be:74:95:7b:3d:8c:d5:58:82:ef:da:1d:3a: 4c:d6:65:35:bb:40:b6:d7:33:fc:5d:45:c1:1c:dc:ab:9e:04: 67:fe:3b:30:f5:b7:f0:f2:3c:22:f2:2f:88:13:a5:4a:65:5d: 5e:b6:4f:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbC49r1CU7xfbAcIx3/w2P889CIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA5MDAwMDAzWhcNMjYxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGZkMDFjODBmNmMzMWQ3ZjBmZTQ4ZTFjYjEwNDQ5NjFm NDg0YTIwYTI5NTQwYzkzZjQ2ZjhhYWE2Yzg1NTZmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1pmQvFHba1iFCxxo5/poHwWnEcf3wCA+rnGNfMZtfNudC NppfMA/wXWj2O/AG0q8holgpXPK0rx8SkBVV9qo6usZ5rIUSk8lNt1+ZmJyHa5Eb XVUkcc8s33pTAH5C2muHjX5HqT6PbYy6DTuD8wrw1Z/nzt1NO31v0H3AfEftXPnG ovSxslXuekVuXzt4U+dqWuCfJI1WPv6MI3Ocalh33aLEiTb/fbdUy318rJ9B7MXg eYY4sCmoTyGZneS/6fqO8xUaXR5hioUnEpxgPQ3C8QPvRz/ahMPO/reCorKgtrwZ yxOyzsjaP2ghQ3VzK7chIGQETHGqSmmboiBMw5arAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5Mv011GLPSqMQIsz4yCa05iJ2HgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUzNWE3ODQ4LTA5NzctNGY1OS1iNjU2LWIzZjU4MTI0OGIyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgTANBgkqhkiG9w0BAQsFAAOCAQEAEUPZ8/BuwHCuP0sMuCVVLdzN pQgnWEVlq3ZLCqrkufpwTy8RmKKBCqDBeiX6sjqtV0rcfWKfVQS1FC0gIg8Qd3qB nVPPztU9A+DFGGB6ZNq0CiAer7h9hOkchfcqjA8bPYNYff4snbyrE0BJ0uUvAa9V lFrXfJAmE2XH07aCNcGnXZNYOrONXh+mlSNdFr2eGLDZn04Nq34VDPWnEY8SDb8M fOCzf7an/EjfHb62mL9CMaEC+RLS7NB+MsnVHBsltP9wOEahHj4uq8q+dJV7PYzV WILv2h06TNZlNbtAttcz/F1FwRzcq54EZ/47MPW38PI8IvIviBOlSmVdXrZPTg== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:49 2026 by rpki-client