$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d04895a-ba2b-491c-8058-b7bc4a169014.roa File: 7d04895a-ba2b-491c-8058-b7bc4a169014.roa (raw, json) Hash identifier: SR2MDbLUh7ZUuwuN9UO5qHeyfTolLh1ItNnwZw9CqIM= Subject key identifier: 2D:3B:AA:17:92:32:86:84:C3:42:A4:39:4F:42:C2:9A:88:13:29:6E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62EBD4CB0C6E7FE6AB2F83633ABB0D4AA64AF6E9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d04895a-ba2b-491c-8058-b7bc4a169014.roa Signing time: Mon 31 Aug 2026 23:22:57 +0000 ROA not before: Mon 31 Aug 2026 23:22:57 +0000 ROA not after: Sun 29 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:eb:d4:cb:0c:6e:7f:e6:ab:2f:83:63:3a:bb:0d:4a:a6:4a:f6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 31 23:22:57 2026 GMT Not After : Nov 29 23:59:59 2026 GMT Subject: serialNumber=9726682fff78081f6882a89824db37aad8371a6406090c98ea19b580bfa0117d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:da:54:1a:37:b8:ac:a9:be:e9:b0:5e:5b: 96:5d:f1:01:ff:75:6e:9c:57:97:4d:c4:12:23:7c: b7:58:3c:81:c5:de:cf:fc:eb:e1:34:80:63:16:9b: 24:5f:bf:eb:3e:53:5f:ea:06:54:47:ea:27:c0:fc: f7:3e:d8:df:cd:6f:8a:d3:97:ed:68:fe:33:28:5c: 84:40:75:92:96:a9:df:fd:b1:ff:bf:e2:be:bc:56: d0:d1:88:30:87:d3:7a:5e:cf:8b:7e:00:71:98:24: d7:41:de:d0:34:53:7d:dd:9b:97:29:35:31:ba:3e: 4d:6d:7d:4c:0b:d6:c4:19:e7:d3:3d:88:86:5d:8a: 6f:e6:f4:9d:83:c4:99:41:bb:92:10:eb:1e:f1:88: c9:65:05:e3:1c:3d:cd:52:e8:fc:8c:08:b1:62:dd: 15:ee:25:68:85:5e:bf:04:ca:cf:13:de:8a:e2:38: 4f:c1:dd:97:f8:52:a4:65:92:d6:39:d5:37:c4:22: 62:07:ed:9f:28:7b:72:c4:8f:70:57:cf:f6:0b:0f: b1:09:b6:a0:69:be:7d:d1:db:91:7a:c6:94:90:c7: db:ae:57:52:0e:41:25:0b:db:f5:b8:9a:6b:29:25: 79:8c:33:9a:04:e7:7e:29:2c:c2:dd:b4:0b:59:50: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3B:AA:17:92:32:86:84:C3:42:A4:39:4F:42:C2:9A:88:13:29:6E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d04895a-ba2b-491c-8058-b7bc4a169014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6127::/48 Signature Algorithm: sha256WithRSAEncryption 77:f6:51:d9:22:8d:1e:36:4d:2b:2b:25:a2:c4:45:47:52:ad: 10:dc:cf:c6:92:50:98:0c:79:e8:0f:7c:e6:a1:da:e1:80:7b: f4:d8:7d:5b:83:45:f2:ab:c2:c3:5a:0c:98:c9:35:a8:9c:e3: ab:0c:50:20:19:6f:19:4e:fa:5d:93:43:68:66:ac:ed:0d:4e: 8c:63:0a:0e:fe:51:b2:e8:1d:55:e8:f4:14:87:30:38:41:97: 57:d3:0d:93:c3:f3:96:ee:da:7b:5d:fd:ca:b4:91:69:49:24: ef:d2:49:85:70:2b:9b:ad:3e:04:cc:80:e7:2f:98:9a:c6:a7: b5:67:ed:fd:52:9e:02:52:aa:2c:3b:bd:57:75:f1:f3:d7:ba: 8a:15:84:31:66:75:24:20:1b:ef:05:5a:17:2e:78:83:09:ff: 00:28:74:e5:a1:44:34:0b:b2:c2:ed:c6:f9:53:ad:ed:d3:c5: 62:94:ee:06:a3:c6:69:21:36:8e:c2:84:0d:50:ff:7d:6f:08: 17:a4:d5:ab:7f:b5:06:4d:47:e7:3b:3f:11:6e:ae:ae:b6:9d: c2:4f:0e:60:a8:99:d6:cb:2d:ba:ea:52:52:a7:0c:53:4c:bf: 65:f8:f6:9a:05:67:66:fe:a2:47:1e:14:88:01:98:23:91:f8: 34:5b:54:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYuvUywxuf+arL4NjOrsNSqZK9ukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODMxMjMyMjU3WhcNMjYxMTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzI2NjgyZmZmNzgwODFmNjg4MmE4OTgyNGRiMzdhYWQ4 MzcxYTY0MDYwOTBjOThlYTE5YjU4MGJmYTAxMTdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVkdpUGje4rKm+6bBeW5Zd8QH/dW6cV5dNxBIjfLdYPIHF 3s/86+E0gGMWmyRfv+s+U1/qBlRH6ifA/Pc+2N/Nb4rTl+1o/jMoXIRAdZKWqd/9 sf+/4r68VtDRiDCH03pez4t+AHGYJNdB3tA0U33dm5cpNTG6Pk1tfUwL1sQZ59M9 iIZdim/m9J2DxJlBu5IQ6x7xiMllBeMcPc1S6PyMCLFi3RXuJWiFXr8Eys8T3ori OE/B3Zf4UqRlktY51TfEImIH7Z8oe3LEj3BXz/YLD7EJtqBpvn3R25F6xpSQx9uu V1IOQSUL2/W4mmspJXmMM5oE534pLMLdtAtZUDbHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULTuqF5IyhoTDQqQ5T0LCmogTKW4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkMDQ4OTVhLWJhMmItNDkxYy04MDU4LWI3YmM0YTE2OTAxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYScwDQYJKoZIhvcNAQELBQADggEBAHf2UdkijR42TSsrJaLERUdS rRDcz8aSUJgMeegPfOah2uGAe/TYfVuDRfKrwsNaDJjJNaic46sMUCAZbxlO+l2T Q2hmrO0NToxjCg7+UbLoHVXo9BSHMDhBl1fTDZPD85bu2ntd/cq0kWlJJO/SSYVw K5utPgTMgOcvmJrGp7Vn7f1SngJSqiw7vVd18fPXuooVhDFmdSQgG+8FWhcueIMJ /wAodOWhRDQLssLtxvlTre3TxWKU7gajxmkhNo7ChA1Q/31vCBek1at/tQZNR+c7 PxFurq62ncJPDmComdbLLbrqUlKnDFNMv2X49poFZ2b+okceFIgBmCOR+DRbVCc= -----END CERTIFICATE-----Generated at Wed Sep 2 05:14:28 2026 by rpki-client