$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72241dc6-56ae-4337-bb4b-b84fbdae51d0.roa File: 72241dc6-56ae-4337-bb4b-b84fbdae51d0.roa (raw, json) Hash identifier: cxtbsrJy0wnzPbyZXtGLsI5LX/taqa4yycIJxL4v8DM= Subject key identifier: 4A:C5:FE:F9:9F:C7:C3:E4:43:D0:32:38:14:CA:05:98:80:60:08:93 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6639086019F884ABA7C348CC71D762D068E5791A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72241dc6-56ae-4337-bb4b-b84fbdae51d0.roa Signing time: Fri 07 Aug 2026 04:10:39 +0000 ROA not before: Fri 07 Aug 2026 04:10:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ee00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:39:08:60:19:f8:84:ab:a7:c3:48:cc:71:d7:62:d0:68:e5:79:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=54787fab0118ed93df974f8277e855d283bcf198e4819ae1f79c9496901db265, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:61:99:dd:57:5a:be:da:94:d0:6c:ce:74: 1b:a0:df:77:85:4a:72:bb:9d:31:09:99:8b:38:46: 69:de:49:c7:9b:aa:05:56:f9:7e:c2:54:86:86:b1: 94:d5:ce:2d:a8:7d:08:41:52:1e:e8:10:bc:e1:b8: 56:bc:41:bd:a7:21:3d:b3:b5:35:91:ea:69:c0:a6: fe:ed:5a:86:77:c5:b3:1d:3e:4a:82:a5:0f:aa:f5: 49:0d:cc:5b:8b:33:13:57:fb:b9:de:c2:8f:36:10: 5c:87:bc:52:f8:03:7c:d5:f1:f6:78:f2:d3:55:22: 60:5e:b6:7f:2c:4d:77:47:fc:f7:e7:7c:8f:0e:a9: 60:b6:37:1e:7e:e1:d4:13:7b:f7:41:bc:b0:80:68: 80:06:7a:08:1b:67:96:1e:81:10:65:26:8e:0d:0d: 9b:db:2b:f6:40:81:f1:f9:83:bb:77:b3:db:cf:52: f4:62:7c:e0:b2:5f:43:84:7b:f5:39:c1:1a:ae:4d: 2a:76:a6:8e:a2:43:fd:01:ed:e9:18:2b:54:fe:0c: 58:b4:7e:85:b3:3a:97:f4:03:68:b6:b1:f4:ec:25: 3a:85:cd:b4:26:43:21:a0:d3:1e:a8:96:8d:88:a4: 10:96:64:90:16:d6:c7:24:05:e6:0b:06:c0:0f:ff: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:FE:F9:9F:C7:C3:E4:43:D0:32:38:14:CA:05:98:80:60:08:93 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72241dc6-56ae-4337-bb4b-b84fbdae51d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ee00::/42 Signature Algorithm: sha256WithRSAEncryption 53:53:87:28:c5:34:9b:dd:c0:3e:92:b8:39:8f:aa:9a:55:ee: 50:87:cd:ed:bf:e8:0d:5e:5f:a3:19:50:18:7f:c9:49:a7:a0: 21:df:78:c3:a1:a8:eb:c1:54:eb:4e:cc:06:0d:31:50:25:31: 5e:c9:46:24:8b:2f:31:97:fb:db:47:50:d4:83:ce:df:42:94: 06:ae:16:d5:a8:36:e5:ce:82:7f:98:c6:8c:29:38:27:0f:a9: 60:ae:f0:68:89:e0:86:a0:cd:e0:54:0d:ca:7c:c3:1b:a8:3e: c9:45:25:a3:ca:46:4d:ea:a8:f5:5d:69:ab:80:68:98:ac:1e: 50:d7:db:17:9b:a7:f2:9c:a3:b5:8a:d5:e3:6c:e4:a8:22:26: 56:01:f6:2f:99:e1:70:2c:27:24:01:fd:9e:47:82:be:68:61: a2:be:ba:70:e6:8b:05:e7:49:59:75:36:cf:42:50:78:b6:8b: 32:91:a3:05:32:6c:b1:e2:93:dc:4a:78:78:8d:81:db:2c:2f: 22:cb:6b:28:51:9b:ef:07:1f:a9:78:2f:77:c7:ba:f7:7e:2c: ef:8c:26:35:e7:3a:d3:0c:ba:6d:66:da:b3:d2:e4:35:ec:6a: 41:0a:e2:6b:3f:87:bf:ad:40:a8:89:ef:c8:bf:74:77:f2:5d: b1:05:aa:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZjkIYBn4hKunw0jMcddi0GjleRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDM5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDc4N2ZhYjAxMThlZDkzZGY5NzRmODI3N2U4NTVkMjgz YmNmMTk4ZTQ4MTlhZTFmNzljOTQ5NjkwMWRiMjY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1jmGZ3VdavtqU0GzOdBug33eFSnK7nTEJmYs4RmneSceb qgVW+X7CVIaGsZTVzi2ofQhBUh7oELzhuFa8Qb2nIT2ztTWR6mnApv7tWoZ3xbMd PkqCpQ+q9UkNzFuLMxNX+7newo82EFyHvFL4A3zV8fZ48tNVImBetn8sTXdH/Pfn fI8OqWC2Nx5+4dQTe/dBvLCAaIAGeggbZ5YegRBlJo4NDZvbK/ZAgfH5g7t3s9vP UvRifOCyX0OEe/U5wRquTSp2po6iQ/0B7ekYK1T+DFi0foWzOpf0A2i2sfTsJTqF zbQmQyGg0x6olo2IpBCWZJAW1sckBeYLBsAP/wo5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSsX++Z/Hw+RD0DI4FMoFmIBgCJMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMjQxZGM2LTU2YWUtNDMzNy1iYjRiLWI4NGZiZGFlNTFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77gAwDQYJKoZIhvcNAQELBQADggEBAFNThyjFNJvdwD6SuDmPqppV 7lCHze2/6A1eX6MZUBh/yUmnoCHfeMOhqOvBVOtOzAYNMVAlMV7JRiSLLzGX+9tH UNSDzt9ClAauFtWoNuXOgn+YxowpOCcPqWCu8GiJ4IagzeBUDcp8wxuoPslFJaPK Rk3qqPVdaauAaJisHlDX2xebp/Kco7WK1eNs5KgiJlYB9i+Z4XAsJyQB/Z5Hgr5o YaK+unDmiwXnSVl1Ns9CUHi2izKRowUybLHik9xKeHiNgdssLyLLayhRm+8HH6l4 L3fHuvd+LO+MJjXnOtMMum1m2rPS5DXsakEK4ms/h7+tQKiJ78i/dHfyXbEFqlU= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:03 2026 by rpki-client