$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa File: 720f42c5-101d-41af-abc8-bd64d6f08fe0.roa (raw, json) Hash identifier: WYPjnXk0MKluiPNg24XFAdqmtxKcPNiq/q3IvtWrXcQ= Subject key identifier: FC:14:0B:0A:31:07:B8:E3:33:78:93:35:86:F0:70:11:83:8C:1E:24 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5DFA571980DC9520BE85674A7D86531B9C46D7B9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa Signing time: Thu 30 Jul 2026 01:20:07 +0000 ROA not before: Thu 30 Jul 2026 01:20:07 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:57:19:80:dc:95:20:be:85:67:4a:7d:86:53:1b:9c:46:d7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 30 01:20:07 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=de8b5be5589b26be4f34b582dab2cb20fdda75a568952ec07a1ae088f780f95f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:66:f0:e6:9d:00:7e:60:d8:85:74:dd:8b: d6:22:01:b0:7b:68:3c:d2:41:69:52:36:d5:67:f4: 95:7d:88:1a:ba:03:de:77:31:1c:28:1b:9c:a1:7f: 12:3a:39:97:8f:bf:7e:c8:ba:9e:20:40:6b:98:e4: 13:ee:09:21:e0:53:4f:b2:3d:8e:b2:b6:e2:30:d8: ab:f3:a3:86:f1:be:40:93:8d:0b:db:8d:06:4a:3f: 30:7f:3c:2f:cf:61:92:17:9a:30:b8:0c:7a:54:7a: d0:e8:e3:36:c4:24:cb:1b:65:fc:b1:22:e6:f9:b3: 09:9d:25:22:90:0b:19:c9:c2:a3:cb:1f:ff:56:b8: 08:4d:9c:18:d6:cc:7f:35:12:7c:e3:4a:58:d8:9f: 37:2b:53:c7:e1:18:30:12:ce:45:28:42:dc:96:89: ec:38:4e:b7:a5:f4:ba:63:60:6f:00:b6:89:a1:85: a0:42:9f:1f:fe:57:7d:bb:7f:32:b3:a0:2c:5c:89: d5:78:4b:66:c6:63:cc:8c:8f:36:a1:b1:c6:0e:55: 9e:23:09:59:16:c3:42:32:f1:e8:be:ca:03:73:6d: 17:86:12:a2:c2:1f:37:bc:26:90:53:e3:e6:20:69: 76:5e:e1:b0:c2:d9:e5:4a:ea:41:aa:7a:97:f0:62: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:14:0B:0A:31:07:B8:E3:33:78:93:35:86:F0:70:11:83:8C:1E:24 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 67:a5:f1:61:66:0d:ba:f7:91:1a:68:9e:58:e8:31:14:82:8c: 28:aa:38:50:21:94:78:f0:a8:e4:f8:3e:a7:fd:c7:aa:cb:6e: ff:34:c7:11:ae:8b:f1:6b:7d:4d:52:96:17:a6:34:d7:62:e2: bc:fa:14:4e:5e:18:08:2b:df:6b:74:b9:b3:59:73:47:63:88: 9d:6d:13:22:af:20:89:6f:c2:94:9b:22:e9:41:2a:1c:59:01: c8:ef:e1:d9:bb:0c:09:ff:7a:49:fd:f0:2b:27:9b:77:b5:9c: d8:51:58:49:73:90:68:88:7f:c3:a4:be:12:30:8b:6a:ad:33: d9:17:ff:7f:50:dc:de:86:4d:3c:80:84:4b:4a:a4:c9:24:60: 1e:f2:4a:c4:09:e5:62:dc:97:93:4c:c1:a2:98:b4:3f:4e:43: 4c:aa:d3:cd:d9:59:2b:a1:51:b9:43:16:55:1e:56:59:8c:5d: 8b:05:d5:a3:75:a1:54:f4:df:df:4f:03:f5:85:c8:d3:fa:50: d6:a4:07:63:7c:dc:5c:b3:1a:79:4b:9e:a6:69:b6:99:18:61: b3:20:9b:fa:17:3a:c5:6c:17:d2:84:fc:99:2f:6c:64:b1:2b: bf:93:38:e2:68:e7:bd:0b:f2:49:5a:d0:0b:93:e7:4b:c6:73: e1:70:9a:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXfpXGYDclSC+hWdKfYZTG5xG17kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzMwMDEyMDA3WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZThiNWJlNTU4OWIyNmJlNGYzNGI1ODJkYWIyY2IyMGZk ZGE3NWE1Njg5NTJlYzA3YTFhZTA4OGY3ODBmOTVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR82bw5p0AfmDYhXTdi9YiAbB7aDzSQWlSNtVn9JV9iBq6 A953MRwoG5yhfxI6OZePv37Iup4gQGuY5BPuCSHgU0+yPY6ytuIw2Kvzo4bxvkCT jQvbjQZKPzB/PC/PYZIXmjC4DHpUetDo4zbEJMsbZfyxIub5swmdJSKQCxnJwqPL H/9WuAhNnBjWzH81EnzjSljYnzcrU8fhGDASzkUoQtyWiew4Trel9LpjYG8Atomh haBCnx/+V327fzKzoCxcidV4S2bGY8yMjzahscYOVZ4jCVkWw0Iy8ei+ygNzbReG EqLCHze8JpBT4+YgaXZe4bDC2eVK6kGqepfwYuZLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/BQLCjEHuOMzeJM1hvBwEYOMHiQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMGY0MmM1LTEwMWQtNDFhZi1hYmM4LWJkNjRkNmYwOGZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBAGel8WFmDbr3kRponljoMRSC jCiqOFAhlHjwqOT4Pqf9x6rLbv80xxGui/FrfU1SlhemNNdi4rz6FE5eGAgr32t0 ubNZc0djiJ1tEyKvIIlvwpSbIulBKhxZAcjv4dm7DAn/ekn98Csnm3e1nNhRWElz kGiIf8OkvhIwi2qtM9kX/39Q3N6GTTyAhEtKpMkkYB7ySsQJ5WLcl5NMwaKYtD9O Q0yq083ZWSuhUblDFlUeVlmMXYsF1aN1oVT0399PA/WFyNP6UNakB2N83FyzGnlL nqZptpkYYbMgm/oXOsVsF9KE/JkvbGSxK7+TOOJo570L8kla0AuT50vGc+Fwmm8= -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:46 2026 by rpki-client