$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa File: 976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa (raw, json) Hash identifier: bAciMrawLI9iRIfdYlok2zQWuaJijS+iDpHlRbw79Cc= Subject key identifier: D4:A6:2C:7D:12:02:56:33:DD:FB:0B:1E:D7:F9:64:6E:9E:BB:24:5E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4DCC67DA1AB4865F395F90F28F9FF43387362184 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa Signing time: Fri 07 Aug 2026 04:20:25 +0000 ROA not before: Fri 07 Aug 2026 04:20:25 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cc:67:da:1a:b4:86:5f:39:5f:90:f2:8f:9f:f4:33:87:36:21:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:25 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=dac098e8d13c77a5975649d09675f940ca2ff05d98e8445ecd2cfe28f0559406, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:ce:78:c1:fd:c1:79:c6:05:7f:de:f8:f6: f3:d5:e3:d6:7b:cf:21:72:f7:40:e9:23:5a:22:39: d3:e9:5d:8f:76:ba:f4:32:94:74:e2:7a:b5:55:52: 56:f5:d8:15:dd:c6:f4:af:35:15:0a:ca:a0:37:81: 11:57:54:99:7a:fc:2c:bc:c7:c7:51:0f:2e:15:a7: 78:24:4e:05:7f:94:38:f7:b3:f0:ae:43:29:43:8a: 41:c3:b5:36:14:6e:57:99:f8:81:49:f2:ec:68:64: e4:32:f8:46:2d:e0:31:c9:aa:15:c0:36:31:77:63: 08:2e:d1:ed:d7:f7:56:5e:3e:b1:ec:fe:d0:03:05: 3f:74:7c:16:94:30:a8:bd:47:92:f3:bd:e8:c3:86: 0c:06:ca:a4:83:0b:a8:19:ad:7f:a0:c4:07:44:06: 3e:89:54:a0:4f:00:64:d7:2b:d1:d3:e9:bd:03:99: 73:f8:d6:ba:a5:3a:87:1d:22:33:33:d6:5d:2c:38: 4f:45:65:84:f0:08:3c:fa:7d:04:b5:6c:85:4c:e6: 47:26:3b:73:3c:59:3d:2e:6e:e0:b4:14:a1:fd:fe: 15:96:0d:d9:50:4c:b6:be:f7:1f:e1:91:aa:05:dc: e8:35:7e:f8:cc:59:81:1a:2a:52:4e:bb:88:5e:7e: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:2C:7D:12:02:56:33:DD:FB:0B:1E:D7:F9:64:6E:9E:BB:24:5E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/976623ad-0b5a-4a5f-b4a3-60681d2eac70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:f00::/48 Signature Algorithm: sha256WithRSAEncryption 55:0d:69:34:72:8e:17:85:3c:d5:24:cc:94:38:f5:f0:a6:ba: 47:5e:ba:35:ec:e9:5e:20:6d:a8:b0:7c:b6:61:d1:4d:7c:65: fc:b7:66:42:4b:da:8f:99:8a:65:b8:4e:65:cc:3d:12:ed:24: 58:3a:04:56:53:be:8d:e0:61:40:22:27:a8:fb:a0:d0:8e:83: 88:1f:97:2a:72:d9:5c:7c:54:92:80:40:41:e5:80:d9:77:5c: c3:67:c0:08:28:f5:67:f1:2c:a8:79:76:49:90:2d:e1:3d:af: b0:6f:38:e0:7a:6f:15:2b:ee:0c:a2:8b:5b:3b:db:92:42:fa: 26:03:15:1b:5c:c3:18:ce:3d:5d:00:3d:89:16:25:c3:e2:8c: f8:59:96:3e:91:c1:80:a0:cb:c1:19:6e:2f:07:83:a9:81:eb: 16:dc:9f:a4:8a:90:03:5b:c5:b1:a6:53:9b:c4:51:76:88:8b: 57:a8:39:d1:6e:45:7d:a6:fc:73:87:4b:4a:d0:7d:f6:58:33: 27:dd:d1:e7:2c:56:c4:6c:2f:f1:51:97:59:6d:ee:1c:6c:30: 8e:f6:ed:54:9b:6b:bc:6a:e2:e8:51:b4:2f:64:b7:a2:c6:f5: 36:21:44:4a:01:bb:a6:37:2f:49:87:4b:bc:7f:e1:b1:49:25: 6a:af:cf:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTcxn2hq0hl85X5Dyj5/0M4c2IYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDI1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWMwOThlOGQxM2M3N2E1OTc1NjQ5ZDA5Njc1Zjk0MGNh MmZmMDVkOThlODQ0NWVjZDJjZmUyOGYwNTU5NDA2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ8854wf3BecYFf9749vPV49Z7zyFy90DpI1oiOdPpXY92 uvQylHTierVVUlb12BXdxvSvNRUKyqA3gRFXVJl6/Cy8x8dRDy4Vp3gkTgV/lDj3 s/CuQylDikHDtTYUbleZ+IFJ8uxoZOQy+EYt4DHJqhXANjF3Ywgu0e3X91ZePrHs /tADBT90fBaUMKi9R5LzvejDhgwGyqSDC6gZrX+gxAdEBj6JVKBPAGTXK9HT6b0D mXP41rqlOocdIjMz1l0sOE9FZYTwCDz6fQS1bIVM5kcmO3M8WT0ubuC0FKH9/hWW DdlQTLa+9x/hkaoF3Og1fvjMWYEaKlJOu4hefg8DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1KYsfRICVjPd+wse1/lkbp67JF4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3NjYyM2FkLTBiNWEtNGE1Zi1iNGEzLTYwNjgxZDJlYWM3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwDwAwDQYJKoZIhvcNAQELBQADggEBAFUNaTRyjheFPNUkzJQ49fCm ukdeujXs6V4gbaiwfLZh0U18Zfy3ZkJL2o+ZimW4TmXMPRLtJFg6BFZTvo3gYUAi J6j7oNCOg4gflypy2Vx8VJKAQEHlgNl3XMNnwAgo9WfxLKh5dkmQLeE9r7BvOOB6 bxUr7gyii1s725JC+iYDFRtcwxjOPV0APYkWJcPijPhZlj6RwYCgy8EZbi8Hg6mB 6xbcn6SKkANbxbGmU5vEUXaIi1eoOdFuRX2m/HOHS0rQffZYMyfd0ecsVsRsL/FR l1lt7hxsMI727VSba7xq4uhRtC9kt6LG9TYhREoBu6Y3L0mHS7x/4bFJJWqvz1Y= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:39 2026 by rpki-client