$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa File: 7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa (raw, json) Hash identifier: Qf4qQfSMPlE7uoBiTQPbJYfhoclAOjEOKGl/R95Zh9A= Subject key identifier: 7A:E7:52:80:69:E7:A0:91:2C:7F:40:E1:90:CC:73:4D:D2:0B:BA:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4DA5E667622B85807383A3B6DFB6D13C64EE7EE0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa Signing time: Fri 07 Aug 2026 04:20:30 +0000 ROA not before: Fri 07 Aug 2026 04:20:30 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a5:e6:67:62:2b:85:80:73:83:a3:b6:df:b6:d1:3c:64:ee:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:30 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=be6b5ae16fa07b907d590ec99cbb8931af5872c0809fd65106b3b436fd24ce7d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:ba:3d:9d:a3:8e:b2:6f:c6:06:a8:40:23: 5f:3f:89:f1:1a:85:56:7f:28:6c:9a:1b:73:29:e7: ba:ef:88:94:ec:12:47:24:4f:00:2e:e4:52:8a:c9: a0:eb:20:8c:37:dc:cd:71:b9:57:d0:98:29:92:46: 4c:04:a8:d6:e7:d3:62:44:bc:83:00:cf:f0:0c:83: bf:29:d9:9c:5a:6b:2e:3b:39:27:96:ed:fa:6c:19: 2e:72:65:ed:85:bf:5b:c9:80:65:49:34:b7:d5:11: 16:02:c3:95:42:98:b2:10:81:dc:e5:ce:c1:46:62: 96:44:80:be:40:5a:97:2c:39:a8:87:18:96:a4:4f: df:b0:06:81:67:08:f3:f1:1f:7e:c8:63:6a:ba:21: 31:01:35:1a:10:ea:30:6f:6f:e7:c1:2c:5d:cf:89: ac:a5:6e:42:0a:c7:8f:a3:a7:4e:2d:a6:a5:75:b5: 4f:e5:76:eb:d9:88:3c:51:b5:7e:df:85:0e:ba:4a: c0:09:0c:74:98:c3:81:a5:de:e9:fb:5a:7a:56:ab: 45:20:ae:65:f5:40:0e:79:f5:ef:bd:1c:fc:03:7a: f5:43:93:e0:18:ed:5b:8f:39:97:6f:59:42:e1:b8: e6:43:01:5a:68:c8:36:0a:48:43:66:da:e0:26:e1: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E7:52:80:69:E7:A0:91:2C:7F:40:E1:90:CC:73:4D:D2:0B:BA:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 3e:01:51:17:0c:c3:ce:0f:a8:d0:09:bb:0c:db:00:11:f0:fc: 40:d0:4f:99:65:73:b9:51:6c:64:29:a6:8c:d9:c1:b9:ef:6b: d7:cd:53:94:f5:29:50:6c:87:0d:07:64:28:d2:de:f2:56:22: 7d:78:86:03:df:ef:65:86:46:f8:e0:c2:1a:b5:86:80:d8:e5: 3f:e8:f7:9f:9f:6d:ae:10:43:21:02:5c:cb:55:5e:17:4f:8b: 8a:57:3f:56:43:30:c8:27:8f:cb:17:70:85:98:d8:d2:00:11: 2f:e5:30:9f:1a:6f:79:e2:1e:b2:39:45:bc:d8:c7:ac:7b:4a: ab:18:5e:2c:97:f0:da:09:cc:54:6d:29:fb:c6:5b:37:e6:25: 7e:e7:28:86:40:6d:ae:2a:f4:10:81:b6:4f:d9:13:dc:70:65: 6d:8f:af:ec:b9:d5:96:54:0b:c2:b0:08:c0:cd:3f:22:e0:9c: cb:81:5b:83:e0:0f:71:66:c4:69:19:ff:06:d5:d2:cd:01:83: 6b:75:0b:55:0b:8f:25:a1:15:f0:d8:a7:98:ee:a8:41:71:a3: 80:4c:0a:2e:c0:d7:2f:17:61:3f:3f:d4:fb:31:18:f3:34:62: 01:6d:cb:a3:d7:35:a3:38:aa:5e:5c:51:46:84:2d:f3:ff:97: 4d:24:1f:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTaXmZ2IrhYBzg6O237bRPGTufuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDMwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTZiNWFlMTZmYTA3YjkwN2Q1OTBlYzk5Y2JiODkzMWFm NTg3MmMwODA5ZmQ2NTEwNmIzYjQzNmZkMjRjZTdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTQbo9naOOsm/GBqhAI18/ifEahVZ/KGyaG3Mp57rviJTs EkckTwAu5FKKyaDrIIw33M1xuVfQmCmSRkwEqNbn02JEvIMAz/AMg78p2Zxaay47 OSeW7fpsGS5yZe2Fv1vJgGVJNLfVERYCw5VCmLIQgdzlzsFGYpZEgL5AWpcsOaiH GJakT9+wBoFnCPPxH37IY2q6ITEBNRoQ6jBvb+fBLF3PiaylbkIKx4+jp04tpqV1 tU/lduvZiDxRtX7fhQ66SsAJDHSYw4Gl3un7WnpWq0UgrmX1QA559e+9HPwDevVD k+AY7VuPOZdvWULhuOZDAVpoyDYKSENm2uAm4af3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeudSgGnnoJEsf0DhkMxzTdILuo4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdhZDI2YmI5LTJmNjktNDBlZS1iOTFhLTBjY2U2N2ZhNGE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAPgFRFwzDzg+o0Am7DNsAEfD8 QNBPmWVzuVFsZCmmjNnBue9r181TlPUpUGyHDQdkKNLe8lYifXiGA9/vZYZG+ODC GrWGgNjlP+j3n59trhBDIQJcy1VeF0+Lilc/VkMwyCePyxdwhZjY0gARL+Uwnxpv eeIesjlFvNjHrHtKqxheLJfw2gnMVG0p+8ZbN+YlfucohkBtrir0EIG2T9kT3HBl bY+v7LnVllQLwrAIwM0/IuCcy4Fbg+APcWbEaRn/BtXSzQGDa3ULVQuPJaEV8Nin mO6oQXGjgEwKLsDXLxdhPz/U+zEY8zRiAW3Lo9c1oziqXlxRRoQt8/+XTSQf8w== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:02 2026 by rpki-client