$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa File: 701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa (raw, json) Hash identifier: H3wnpDDieNzqQtRjN+RuyJzHeFBx3jQuE5IaCWfGQbU= Subject key identifier: 7F:5F:AF:37:2C:10:C2:C2:4E:3B:47:09:EF:FF:16:53:EC:9B:A5:1C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3B39037C6579D03B84B4A92F8ED4D636C6C571A2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa Signing time: Thu 30 Jul 2026 01:20:05 +0000 ROA not before: Thu 30 Jul 2026 01:20:05 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:39:03:7c:65:79:d0:3b:84:b4:a9:2f:8e:d4:d6:36:c6:c5:71:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 30 01:20:05 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=4007965ba9f86a3b081c9ecbbad361863c85f0d3b0ca64c3f5bea65f8085ddc3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:f5:aa:83:62:53:bd:72:36:79:92:1d:fe: 21:84:55:73:4e:6e:e3:95:a8:fc:fc:32:76:d6:bd: d6:df:8e:a7:f5:47:a8:d5:e1:19:af:0d:3f:18:6f: 5b:6c:5f:9d:bc:e8:f7:b1:3c:46:34:0d:62:2c:69: 6b:69:27:3a:0f:d7:29:67:4f:c9:59:39:15:41:cd: c6:da:22:07:20:ff:8d:4a:fa:02:99:cc:b5:49:32: 14:3a:78:68:6f:9e:78:4f:a4:54:a8:a7:a6:1f:7c: 40:8d:98:e5:79:5d:fc:8a:4f:8a:1b:38:dd:ee:3a: 78:a7:d8:8d:0a:53:6a:25:dd:8f:6d:70:25:d7:42: b7:c3:55:46:36:b1:eb:90:b9:e3:b7:80:38:da:10: 19:19:c2:46:8b:b3:1d:4b:a9:bd:15:7d:09:a2:53: 32:1a:96:38:10:a8:93:ca:cc:25:da:d6:d0:7e:91: ad:2b:47:0f:b1:6c:70:e1:b3:12:92:ba:9d:0c:69: 56:ee:ec:22:c0:1d:fe:10:b3:ea:49:78:3f:8b:97: 3d:a9:f4:2e:8c:ae:ae:f0:23:33:b8:92:0a:26:63: 0e:0d:1d:4e:cc:58:9c:32:3e:20:ae:4b:03:52:ac: 21:77:73:3e:2b:de:f5:d1:b7:13:e9:b0:bd:3d:6c: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5F:AF:37:2C:10:C2:C2:4E:3B:47:09:EF:FF:16:53:EC:9B:A5:1C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/48 Signature Algorithm: sha256WithRSAEncryption 39:08:56:12:16:a1:33:23:e8:aa:75:42:84:d2:0e:34:9f:19: e5:49:fc:19:b1:28:87:dc:23:5e:46:61:8c:26:db:a5:20:a7: 05:23:46:f6:79:96:39:f5:24:92:41:c7:31:89:27:65:10:e8: 22:76:e4:91:24:b8:aa:6d:5a:96:f8:26:19:7d:59:5b:69:18: 56:1b:d6:39:34:f8:11:26:fd:94:68:5d:15:8d:04:d2:a0:a5: 55:a1:8d:e8:39:79:06:a0:e9:0a:f5:00:48:2b:84:77:53:fa: 77:d7:45:c4:1c:1c:07:74:4b:26:4f:a5:da:a4:d0:09:a9:e4: 76:0c:6b:8f:36:01:53:f6:7f:46:00:5d:46:d0:43:e0:a6:06: 85:43:d5:89:05:f7:7b:43:a7:40:a9:2d:51:d8:10:bf:1b:6f: 98:f2:ee:c4:e3:b1:7d:99:ab:96:9a:55:da:fa:68:67:82:d7: 38:13:48:c6:1a:ad:11:dc:66:5e:87:fa:24:5c:c9:03:99:12: 27:86:12:b6:13:ee:b6:7c:5b:cc:78:ea:5d:42:74:ed:5c:31: 20:54:93:7e:fc:85:69:61:35:91:92:36:12:24:35:a3:0c:be: 49:a1:6d:45:77:66:2a:20:2e:d5:1a:ec:ba:aa:d8:2b:e8:70: 27:33:c2:6e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOzkDfGV50DuEtKkvjtTWNsbFcaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzMwMDEyMDA1WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDA3OTY1YmE5Zjg2YTNiMDgxYzllY2JiYWQzNjE4NjNj ODVmMGQzYjBjYTY0YzNmNWJlYTY1ZjgwODVkZGMzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx//Wqg2JTvXI2eZId/iGEVXNObuOVqPz8MnbWvdbfjqf1 R6jV4RmvDT8Yb1tsX5286PexPEY0DWIsaWtpJzoP1ylnT8lZORVBzcbaIgcg/41K +gKZzLVJMhQ6eGhvnnhPpFSop6YffECNmOV5XfyKT4obON3uOnin2I0KU2ol3Y9t cCXXQrfDVUY2seuQueO3gDjaEBkZwkaLsx1Lqb0VfQmiUzIaljgQqJPKzCXa1tB+ ka0rRw+xbHDhsxKSup0MaVbu7CLAHf4Qs+pJeD+Llz2p9C6Mrq7wIzO4kgomYw4N HU7MWJwyPiCuSwNSrCF3cz4r3vXRtxPpsL09bG25AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf1+vNywQwsJOO0cJ7/8WU+ybpRwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcwMWY3MmE1LWZiMjctNDljYS1iM2FkLTNhNjBjN2MzMDM3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBAwDQYJKoZIhvcNAQELBQADggEBADkIVhIWoTMj6Kp1QoTSDjSf GeVJ/BmxKIfcI15GYYwm26UgpwUjRvZ5ljn1JJJBxzGJJ2UQ6CJ25JEkuKptWpb4 Jhl9WVtpGFYb1jk0+BEm/ZRoXRWNBNKgpVWhjeg5eQag6Qr1AEgrhHdT+nfXRcQc HAd0SyZPpdqk0Amp5HYMa482AVP2f0YAXUbQQ+CmBoVD1YkF93tDp0CpLVHYEL8b b5jy7sTjsX2Zq5aaVdr6aGeC1zgTSMYarRHcZl6H+iRcyQOZEieGErYT7rZ8W8x4 6l1CdO1cMSBUk378hWlhNZGSNhIkNaMMvkmhbUV3ZiogLtUa7Lqq2CvocCczwm4= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:10 2026 by rpki-client