$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa File: 8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa (raw, json) Hash identifier: tNL/V6j+Vgt8r8ljq+98HMCqnMMrtkkm5bwoZtsuBRM= Subject key identifier: 5A:D8:7A:BD:E6:E8:2F:3D:9A:1A:32:C0:5D:E8:06:53:84:AB:81:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4F6896BA2A43ECDB3DAC729E71D72667B375E8DD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa Signing time: Mon 10 Aug 2026 00:20:05 +0000 ROA not before: Mon 10 Aug 2026 00:20:05 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:602::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:68:96:ba:2a:43:ec:db:3d:ac:72:9e:71:d7:26:67:b3:75:e8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 10 00:20:05 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=e6971e84cd8925967230f282de098d54449ec3986624dc961aa443ca21f5ff8d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:7c:ef:ec:7c:5c:57:f6:7a:37:ea:bb:1b: 30:1b:52:1a:32:76:0e:11:de:1c:5b:56:c2:a7:f9: ef:18:ca:e3:69:ee:1a:b2:01:86:bf:2e:1f:75:ef: b0:d7:2f:0e:5a:03:6f:ad:ed:88:e3:53:99:ca:f1: 72:fd:ea:fd:9f:b1:bc:73:1f:ac:a0:ef:49:9a:d0: 36:01:fe:ca:00:34:62:c7:d4:f8:44:b0:df:7b:b8: d0:9d:f7:23:e0:b7:56:bd:9d:7e:33:06:b0:ae:63: c0:02:da:d5:c0:61:92:b7:0e:27:d8:c1:52:ed:2d: 59:fa:08:94:c1:8f:8d:25:55:2f:b0:3f:da:0c:36: 60:3e:82:9e:b5:63:60:3d:cf:23:de:67:4f:7c:53: aa:63:f0:45:09:ae:c8:90:11:c1:15:53:38:0a:ca: 37:5e:ca:f9:da:f0:c3:60:40:41:be:15:5c:90:56: 6e:a3:e2:05:84:66:56:0f:ea:97:25:a6:ff:73:e5: 09:53:10:7e:e8:10:b2:92:26:6c:96:2c:4b:46:81: 05:3e:ce:22:96:da:be:b2:f8:31:ab:cc:66:fc:d1: 98:30:f0:30:a1:02:ad:c5:71:1f:4c:62:05:4c:7f: 69:1f:dc:a3:3f:86:f4:62:59:9e:01:72:87:ae:b3: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:7A:BD:E6:E8:2F:3D:9A:1A:32:C0:5D:E8:06:53:84:AB:81:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8715c4ed-85fb-45e8-a2cc-09f013b729e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:602::/48 Signature Algorithm: sha256WithRSAEncryption 78:4a:58:17:4e:17:45:44:0f:71:57:10:d7:aa:ff:27:2d:25: 8e:61:1f:4b:e4:b4:bf:f4:2f:07:42:9d:e8:40:d7:fa:56:02: a3:84:2a:c6:f5:93:56:5e:23:50:cf:45:d2:b7:fe:77:ed:10: de:71:8a:ab:88:e1:74:dc:16:6c:6c:06:d3:59:9e:16:1f:8f: 01:9b:0d:48:6f:8a:ac:c2:e0:37:a6:4c:b5:b3:d1:3e:cf:bb: 36:89:b0:75:e3:9e:f6:44:b6:62:b1:ff:43:7f:c2:a1:9a:b4: b3:8a:52:34:0e:47:cf:93:15:09:35:a1:3d:d2:d0:2f:4b:c6: 58:3f:9b:f4:42:cf:1a:59:42:c8:36:a8:f8:c2:74:33:de:34: 7b:61:17:dc:62:e8:f4:99:6b:06:e7:cf:06:16:76:b7:89:f7: f6:b8:cb:ed:02:f7:e6:a7:ec:14:45:cd:0e:fb:e8:52:a3:5e: 6e:a3:4d:50:29:4c:4e:75:af:df:70:bd:e7:af:f6:33:76:c9: 3b:d5:e1:a3:05:db:32:df:16:96:8a:3d:0e:d9:eb:ec:c2:e9: ab:a6:61:a6:2e:b6:8d:49:46:99:e5:79:27:3f:10:09:28:f4: 1a:de:a3:94:ad:86:fb:b2:31:2d:ec:41:82:df:39:86:e4:cd: 1d:d0:db:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT2iWuipD7Ns9rHKecdcmZ7N16N0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODEwMDAyMDA1WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjk3MWU4NGNkODkyNTk2NzIzMGYyODJkZTA5OGQ1NDQ0 OWVjMzk4NjYyNGRjOTYxYWE0NDNjYTIxZjVmZjhkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnWHzv7HxcV/Z6N+q7GzAbUhoydg4R3hxbVsKn+e8YyuNp 7hqyAYa/Lh9177DXLw5aA2+t7YjjU5nK8XL96v2fsbxzH6yg70ma0DYB/soANGLH 1PhEsN97uNCd9yPgt1a9nX4zBrCuY8AC2tXAYZK3DifYwVLtLVn6CJTBj40lVS+w P9oMNmA+gp61Y2A9zyPeZ098U6pj8EUJrsiQEcEVUzgKyjdeyvna8MNgQEG+FVyQ Vm6j4gWEZlYP6pclpv9z5QlTEH7oELKSJmyWLEtGgQU+ziKW2r6y+DGrzGb80Zgw 8DChAq3FcR9MYgVMf2kf3KM/hvRiWZ4Bcoeusy7dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWth6veboLz2aGjLAXegGU4Srgc0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3MTVjNGVkLTg1ZmItNDVlOC1hMmNjLTA5ZjAxM2I3MjllOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgIwDQYJKoZIhvcNAQELBQADggEBAHhKWBdOF0VED3FXENeq/yct JY5hH0vktL/0LwdCnehA1/pWAqOEKsb1k1ZeI1DPRdK3/nftEN5xiquI4XTcFmxs BtNZnhYfjwGbDUhviqzC4DemTLWz0T7PuzaJsHXjnvZEtmKx/0N/wqGatLOKUjQO R8+TFQk1oT3S0C9Lxlg/m/RCzxpZQsg2qPjCdDPeNHthF9xi6PSZawbnzwYWdreJ 9/a4y+0C9+an7BRFzQ776FKjXm6jTVApTE51r99wveev9jN2yTvV4aMF2zLfFpaK PQ7Z6+zC6aumYaYuto1JRpnleSc/EAko9Breo5SthvuyMS3sQYLfOYbkzR3Q250= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:22 2026 by rpki-client