$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa File: b711b513-e0f0-4a59-a188-036dda4ade5a.roa (raw, json) Hash identifier: UtIvDBkd6NOmEbNshZ+CinMLqr3M2viuXtB0XraTmDA= Subject key identifier: 84:D8:CC:CF:AA:69:47:D0:81:10:47:F8:5E:D6:03:70:2A:9E:3C:A6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 04212AF11D71D029DA69D6486EC2A66F3D310981 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa Signing time: Fri 07 Aug 2026 04:20:41 +0000 ROA not before: Fri 07 Aug 2026 04:20:41 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ef00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:21:2a:f1:1d:71:d0:29:da:69:d6:48:6e:c2:a6:6f:3d:31:09:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:41 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=ff290eece195df996e1fb4f5893870819f5b14b3227a4d9152da5e97a9f54ce2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0a:d2:5b:76:20:6f:4c:bd:0d:94:c4:3c:80: 02:1d:62:97:d4:1b:46:2e:b5:85:a8:7d:e0:5d:7d: 7f:0a:0b:cb:41:ed:33:0c:d1:26:62:39:5d:bf:66: f9:4d:16:16:ec:9f:8f:0b:18:01:7a:f8:d5:a3:fc: 64:83:fc:95:1b:fc:de:48:17:e0:32:f5:b7:03:c4: f3:1e:10:dc:dc:76:7d:43:20:cd:87:a7:c3:a1:45: 6f:7c:80:20:91:1f:26:1f:9f:09:48:83:c3:f3:87: 17:a9:e4:f7:65:a9:98:25:3a:0a:ca:a9:da:89:b6: 03:a0:02:58:29:dd:e1:b3:1a:61:12:e2:93:d5:5e: b5:7e:5f:e8:62:ee:62:95:bc:d8:7e:84:c3:35:86: 3f:d3:06:b9:eb:c7:2e:5b:e8:67:0d:27:41:5d:32: ee:41:73:c1:6c:4a:31:0e:8d:50:6e:8e:04:b7:e6: c2:49:af:f6:f4:c9:e0:f0:de:53:ee:d5:17:03:6c: f3:f9:35:16:aa:f0:4e:dd:da:50:1b:75:3e:4b:ac: 51:4d:64:71:3d:4e:43:71:37:d9:7d:1f:3e:84:45: 9b:a2:9d:11:8a:d4:c6:ad:f3:95:ca:c8:5c:54:90: fb:ab:0a:cf:17:84:cf:cd:81:43:de:b2:17:76:42: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D8:CC:CF:AA:69:47:D0:81:10:47:F8:5E:D6:03:70:2A:9E:3C:A6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ef00::/40 Signature Algorithm: sha256WithRSAEncryption 47:b8:bc:63:f5:e8:50:2b:32:fa:4c:f2:a2:49:0d:f7:dd:1c: 23:ae:f2:b8:2f:70:94:1d:1e:80:a9:fe:55:45:b6:d0:cc:8c: f4:a2:e5:b5:8a:f9:59:7b:20:cd:a0:04:64:ad:03:11:af:6e: 75:93:15:ce:00:97:ed:f9:ed:ad:f2:2e:14:c5:7a:b8:47:4b: 9a:de:6e:24:94:3a:1b:ae:7d:fc:31:79:31:18:8f:14:70:bc: 14:97:93:68:c7:6c:92:b9:cb:de:36:b8:3a:a5:a5:3e:be:b5: 84:fd:60:57:4f:95:7d:17:a2:3b:7c:87:74:00:4c:80:d6:77: e2:1a:b0:0f:8e:49:44:59:60:e5:41:e7:c2:31:9b:1c:c1:4b: 4d:be:ba:6c:f5:e8:31:2f:08:3e:6f:00:01:54:d7:5c:38:79: 90:f2:21:56:f5:6f:57:ea:65:b4:0d:68:ec:a8:c3:27:77:95: 1b:86:ec:9a:50:41:cb:4c:2a:18:a2:cb:90:4f:88:aa:66:1b: f4:0a:5b:b6:52:23:4d:ad:a3:ac:2d:9c:82:6c:20:8f:09:1c: d8:a8:be:a0:6d:e7:d2:0e:a5:cd:55:27:fc:aa:84:4f:30:17: ff:0f:15:93:7f:b1:34:e0:7d:bc:be:e0:92:1c:73:76:91:0a: 9f:97:97:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBCEq8R1x0CnaadZIbsKmbz0xCYEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQxWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjI5MGVlY2UxOTVkZjk5NmUxZmI0ZjU4OTM4NzA4MTlm NWIxNGIzMjI3YTRkOTE1MmRhNWU5N2E5ZjU0Y2UyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtCtJbdiBvTL0NlMQ8gAIdYpfUG0YutYWofeBdfX8KC8tB 7TMM0SZiOV2/ZvlNFhbsn48LGAF6+NWj/GSD/JUb/N5IF+Ay9bcDxPMeENzcdn1D IM2Hp8OhRW98gCCRHyYfnwlIg8Pzhxep5PdlqZglOgrKqdqJtgOgAlgp3eGzGmES 4pPVXrV+X+hi7mKVvNh+hMM1hj/TBrnrxy5b6GcNJ0FdMu5Bc8FsSjEOjVBujgS3 5sJJr/b0yeDw3lPu1RcDbPP5NRaq8E7d2lAbdT5LrFFNZHE9TkNxN9l9Hz6ERZui nRGK1Mat85XKyFxUkPurCs8XhM/NgUPeshd2QlEHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhNjMz6ppR9CBEEf4XtYDcCqePKYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3MTFiNTEzLWUwZjAtNGE1OS1hMTg4LTAzNmRkYTRhZGU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77zANBgkqhkiG9w0BAQsFAAOCAQEAR7i8Y/XoUCsy+kzyokkN990c I67yuC9wlB0egKn+VUW20MyM9KLltYr5WXsgzaAEZK0DEa9udZMVzgCX7fntrfIu FMV6uEdLmt5uJJQ6G659/DF5MRiPFHC8FJeTaMdskrnL3ja4OqWlPr61hP1gV0+V fReiO3yHdABMgNZ34hqwD45JRFlg5UHnwjGbHMFLTb66bPXoMS8IPm8AAVTXXDh5 kPIhVvVvV+pltA1o7KjDJ3eVG4bsmlBBy0wqGKLLkE+IqmYb9ApbtlIjTa2jrC2c gmwgjwkc2Ki+oG3n0g6lzVUn/KqETzAX/w8Vk3+xNOB9vL7gkhxzdpEKn5eXGA== -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:37 2026 by rpki-client