$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa File: 8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa (raw, json) Hash identifier: LWULADwkMI/1FhmpTYE76PrRhh8JSnMejE0n9wobibU= Subject key identifier: 95:9A:FD:EB:94:5F:91:2B:1C:5C:4C:89:21:01:17:39:63:3D:DC:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: FF3EDA1BAAF04F9C3038E14A33629E1F718D59 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa Signing time: Fri 07 Aug 2026 04:20:59 +0000 ROA not before: Fri 07 Aug 2026 04:20:59 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ff:3e:da:1b:aa:f0:4f:9c:30:38:e1:4a:33:62:9e:1f:71:8d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:59 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=4227f4768dd383d18cec91e9e7b484d2aa25a693581c130e1c3a4394307cc13c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:af:dc:1f:ef:d9:da:a4:1c:b7:38:56:1b:91: 88:81:20:6e:dc:c3:92:1d:2f:0c:53:b8:fa:93:0e: 54:a3:f4:23:b9:b2:82:1f:c1:f6:64:8e:25:61:41: 29:18:94:57:55:a6:68:92:2a:07:ce:73:3e:3a:63: ad:c7:54:5b:43:ea:0a:c9:09:7e:12:e3:60:84:8c: f2:a2:a5:3d:90:c5:0b:31:29:75:9c:b1:d4:6a:0b: 88:2e:d3:1b:af:79:3b:7c:f4:d2:68:33:6c:5d:70: 0d:a3:db:77:72:a7:c9:ae:e6:8a:51:a1:03:7b:c5: 40:90:8c:0d:0f:cf:6a:b2:7d:bb:67:b6:5a:5f:a9: 0b:90:fc:3f:87:19:d0:d9:47:56:c5:a0:92:fc:15: 0d:0d:9f:55:d2:f6:66:38:a8:1c:03:91:a5:8b:69: 08:29:87:03:32:3d:72:99:40:89:c9:bc:4e:29:db: 83:a6:41:fa:af:5f:e8:4c:0d:74:af:7a:48:b6:0b: 0a:b2:5e:5d:58:f9:0b:d5:1c:be:0c:b5:6a:22:3c: 7b:bd:b0:b9:13:41:04:48:12:b7:97:b9:bf:ad:75: 2d:7b:a8:1a:e6:2e:75:40:98:df:3e:d5:b3:f7:12: 1c:84:a5:3f:a7:4c:d7:9b:b6:9a:de:10:0a:f4:1b: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9A:FD:EB:94:5F:91:2B:1C:5C:4C:89:21:01:17:39:63:3D:DC:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6::/48 Signature Algorithm: sha256WithRSAEncryption 20:d1:6c:17:7a:7f:d1:51:aa:aa:55:46:ff:d0:46:b6:69:f4: 36:58:d1:6a:9d:9d:04:8f:51:12:70:52:3f:10:ed:9d:46:93: 5e:c7:54:85:33:92:63:7d:19:c2:62:cb:79:fd:10:ae:07:b9: af:e6:74:27:4a:f6:19:cc:fa:d2:23:e2:b7:da:0e:29:ba:fa: fa:bf:07:5f:15:2c:41:8c:c8:bb:fa:b0:5f:1a:46:e3:44:82: 07:28:11:bf:e7:a9:39:31:a0:04:7e:ef:cc:62:11:69:54:06: a2:d3:0a:bc:33:4a:b5:48:a2:de:a7:fa:b3:76:c6:09:f4:41: f4:47:bf:30:03:de:2b:94:02:19:6e:56:bb:3a:ce:64:03:6d: d7:f1:db:58:27:b9:70:d8:3a:ff:8a:8f:66:43:af:54:2b:dd: c1:dd:64:34:29:df:f3:b6:c2:3a:6f:84:99:b0:ad:be:70:89: a9:ae:d8:78:3f:a0:86:7c:d3:42:dd:e4:98:be:90:3f:5e:49: 1a:48:84:08:0b:ef:72:27:a8:f6:3e:5d:80:3a:47:cc:05:f4: 58:6b:34:62:ad:c5:23:9e:0b:86:bb:e2:53:a5:c7:a3:0f:b9: e4:e3:dd:0e:e2:54:67:4d:a1:2e:79:c4:ea:22:3c:77:10:19: 60:20:45:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAP8+2huq8E+cMDjhSjNinh9xjVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDU5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjI3ZjQ3NjhkZDM4M2QxOGNlYzkxZTllN2I0ODRkMmFh MjVhNjkzNTgxYzEzMGUxYzNhNDM5NDMwN2NjMTNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEr9wf79napBy3OFYbkYiBIG7cw5IdLwxTuPqTDlSj9CO5 soIfwfZkjiVhQSkYlFdVpmiSKgfOcz46Y63HVFtD6grJCX4S42CEjPKipT2QxQsx KXWcsdRqC4gu0xuveTt89NJoM2xdcA2j23dyp8mu5opRoQN7xUCQjA0Pz2qyfbtn tlpfqQuQ/D+HGdDZR1bFoJL8FQ0Nn1XS9mY4qBwDkaWLaQgphwMyPXKZQInJvE4p 24OmQfqvX+hMDXSveki2CwqyXl1Y+QvVHL4MtWoiPHu9sLkTQQRIEreXub+tdS17 qBrmLnVAmN8+1bP3EhyEpT+nTNebtpreEAr0G1EfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlZr965RfkSscXEyJIQEXOWM93GAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg0NzJlY2Y1LTVkM2QtNGU0Ni1iNjk5LWUyOTY0NGI0MmZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAYwDQYJKoZIhvcNAQELBQADggEBACDRbBd6f9FRqqpVRv/QRrZp 9DZY0WqdnQSPURJwUj8Q7Z1Gk17HVIUzkmN9GcJiy3n9EK4Hua/mdCdK9hnM+tIj 4rfaDim6+vq/B18VLEGMyLv6sF8aRuNEggcoEb/nqTkxoAR+78xiEWlUBqLTCrwz SrVIot6n+rN2xgn0QfRHvzAD3iuUAhluVrs6zmQDbdfx21gnuXDYOv+Kj2ZDr1Qr 3cHdZDQp3/O2wjpvhJmwrb5wiamu2Hg/oIZ800Ld5Ji+kD9eSRpIhAgL73InqPY+ XYA6R8wF9FhrNGKtxSOeC4a74lOlx6MPueTj3Q7iVGdNoS55xOoiPHcQGWAgRSw= -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:36 2026 by rpki-client