$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d8d0179-9620-48f0-8db3-7307d39d202a.roa File: 8d8d0179-9620-48f0-8db3-7307d39d202a.roa (raw, json) Hash identifier: +auY/rEFl5Il7pO4drenDS4SLR0BjjpzCtxA/cI939Q= Subject key identifier: 07:43:B9:50:EA:44:B8:A5:DA:26:14:43:8A:FF:A1:B9:78:AB:92:B4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 713D5776634B2414C0FD1E643A5325165A8887CA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d8d0179-9620-48f0-8db3-7307d39d202a.roa Signing time: Mon 31 Aug 2026 00:00:04 +0000 ROA not before: Mon 31 Aug 2026 00:00:04 +0000 ROA not after: Sun 29 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3d:57:76:63:4b:24:14:c0:fd:1e:64:3a:53:25:16:5a:88:87:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 31 00:00:04 2026 GMT Not After : Nov 29 23:59:59 2026 GMT Subject: serialNumber=2fa8a1e1cbf827dc5a2f0787da400adc7425f61f5771dc1d2ebc7ff1f4a08960, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:b3:d9:e3:39:2b:e2:5b:c6:b2:eb:0c:66: 34:38:cb:b6:0e:51:be:32:97:5b:8e:b5:3d:b4:0b: e9:ad:b1:d3:77:32:4c:a8:aa:1c:93:3c:a2:b7:5c: c0:cf:c4:40:09:7d:12:a1:b6:fc:fd:d0:06:27:bd: 45:02:6c:a1:5b:a7:03:3a:bc:a9:ab:b1:c0:40:18: 6d:3f:86:a9:02:cd:97:53:d0:c3:5d:e6:24:e7:dd: b3:4b:86:0f:02:cd:c4:2e:59:3c:5a:ba:58:8f:f4: 01:8b:c0:1e:4a:2b:be:f3:50:ce:41:76:f5:64:a3: a7:b9:c9:b2:0a:0b:f3:45:e1:be:31:f9:22:41:81: 09:e5:81:2a:2f:93:23:c8:0e:a6:93:4d:e5:eb:df: 22:2a:9c:c1:c3:53:bd:4a:a5:3a:40:ae:df:d0:69: 17:4e:17:bc:ec:16:92:2f:e2:3e:13:45:bc:c2:54: 73:1e:a7:22:75:e1:d2:17:b5:b9:6b:42:fc:cb:f4: c0:b6:c8:e1:83:e5:2b:c2:fc:b3:ff:a2:c6:81:c2: 80:7e:85:61:20:e7:c2:36:19:de:49:56:aa:13:d8: a3:59:8b:be:28:29:98:2a:52:64:18:be:2e:ad:b8: 1c:6a:ad:2a:aa:26:4e:f3:65:1e:e8:23:70:77:75: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:B9:50:EA:44:B8:A5:DA:26:14:43:8A:FF:A1:B9:78:AB:92:B4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d8d0179-9620-48f0-8db3-7307d39d202a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c100::/40 Signature Algorithm: sha256WithRSAEncryption 7f:c3:a3:30:16:49:64:24:a2:70:5b:68:d2:68:2f:a6:4c:9f: e5:5a:93:70:0c:cd:44:fc:19:8d:0e:6e:35:52:35:2d:78:f3: 63:51:c8:f7:f6:a5:b4:1f:0e:02:6d:b9:5b:8e:2d:53:0b:14: 68:64:82:a1:46:ad:aa:d7:90:8d:2b:51:62:49:3e:dd:a3:51: 87:e4:f1:0d:01:46:8a:24:20:25:28:e3:3d:0f:10:5a:82:72: 30:e6:22:b0:e1:1c:40:2b:e3:ce:e0:b0:ac:91:fc:d6:26:e5: dd:2f:d4:d6:0d:07:e1:67:f4:2a:90:bc:7a:bb:6a:03:f2:5e: c1:22:db:0a:8c:4d:39:d7:f1:13:eb:ce:a0:c6:f6:37:ca:60: 50:79:23:d2:e4:5d:89:f9:62:ec:57:dd:de:96:85:66:81:5b: af:a2:14:54:75:69:de:3a:5f:73:ce:35:da:83:00:a7:30:de: bb:f5:e3:ab:66:ad:8c:a2:4c:71:57:0f:ea:92:7b:1e:66:f0: be:41:c8:55:e2:81:de:13:49:17:92:0c:e6:11:08:68:53:29: bd:12:97:ce:e2:90:b3:82:1f:ef:6a:f5:b4:03:0b:c4:b8:37: 2b:74:5f:63:a1:c7:f5:87:d4:85:55:22:6d:72:8d:35:9b:84: 05:c1:47:38 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcT1XdmNLJBTA/R5kOlMlFlqIh8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODMxMDAwMDA0WhcNMjYxMTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmE4YTFlMWNiZjgyN2RjNWEyZjA3ODdkYTQwMGFkYzc0 MjVmNjFmNTc3MWRjMWQyZWJjN2ZmMWY0YTA4OTYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyYbPZ4zkr4lvGsusMZjQ4y7YOUb4yl1uOtT20C+mtsdN3 MkyoqhyTPKK3XMDPxEAJfRKhtvz90AYnvUUCbKFbpwM6vKmrscBAGG0/hqkCzZdT 0MNd5iTn3bNLhg8CzcQuWTxauliP9AGLwB5KK77zUM5BdvVko6e5ybIKC/NF4b4x +SJBgQnlgSovkyPIDqaTTeXr3yIqnMHDU71KpTpArt/QaRdOF7zsFpIv4j4TRbzC VHMepyJ14dIXtblrQvzL9MC2yOGD5SvC/LP/osaBwoB+hWEg58I2Gd5JVqoT2KNZ i74oKZgqUmQYvi6tuBxqrSqqJk7zZR7oI3B3dY5pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB0O5UOpEuKXaJhRDiv+huXirkrQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkOGQwMTc5LTk2MjAtNDhmMC04ZGIzLTczMDdkMzlkMjAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwTANBgkqhkiG9w0BAQsFAAOCAQEAf8OjMBZJZCSicFto0mgvpkyf 5VqTcAzNRPwZjQ5uNVI1LXjzY1HI9/altB8OAm25W44tUwsUaGSCoUatqteQjStR Ykk+3aNRh+TxDQFGiiQgJSjjPQ8QWoJyMOYisOEcQCvjzuCwrJH81ibl3S/U1g0H 4Wf0KpC8ertqA/JewSLbCoxNOdfxE+vOoMb2N8pgUHkj0uRdifli7Ffd3paFZoFb r6IUVHVp3jpfc8412oMApzDeu/Xjq2atjKJMcVcP6pJ7HmbwvkHIVeKB3hNJF5IM 5hEIaFMpvRKXzuKQs4If72r1tAMLxLg3K3RfY6HH9YfUhVUibXKNNZuEBcFHOA== -----END CERTIFICATE-----Generated at Mon Sep 14 08:21:47 2026 by rpki-client