$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json) Hash identifier: 9F1sjJX7J/yfBCO4Gec2qu6A22An9baCxkw+SR6akEk= Subject key identifier: 7C:1D:2A:94:60:99:41:A9:07:FE:C5:FC:FD:AC:C8:FA:9B:FE:71:C4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 09A819608621BE23D5ECAB7ED9906121AAD13D1D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa Signing time: Fri 07 Aug 2026 04:10:10 +0000 ROA not before: Fri 07 Aug 2026 04:10:10 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a8:19:60:86:21:be:23:d5:ec:ab:7e:d9:90:61:21:aa:d1:3d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:10 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=3a9d545ae1db842e22bd716bba4421e7f863fe89ca5c0755709ef510c57a1891, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:ea:2a:68:92:92:20:ba:9b:9d:ca:54:8b: dd:25:55:67:d1:2a:8e:1b:c4:1a:9c:8a:a0:44:4a: df:5a:38:92:e0:31:1a:92:6f:76:5f:9d:0b:64:30: da:4a:fc:f8:a6:b8:73:9a:2e:3a:66:99:46:d2:9d: 05:ce:c1:07:ce:88:de:03:a4:0a:6a:df:a4:8e:66: b2:c6:a2:0d:0c:05:16:bd:9e:9d:f3:8a:71:41:d6: 9a:6b:7f:50:73:49:e2:11:4a:ea:e3:7c:52:bc:54: 57:40:1f:b2:28:60:25:60:42:20:ee:6f:3c:7f:57: c5:fe:19:72:41:82:53:23:0b:e6:95:35:19:4e:f7: 87:43:bd:89:69:d7:6d:ad:b2:0e:cd:0a:93:3c:2f: c1:31:80:83:9f:e2:b3:7c:22:e9:11:46:b7:04:00: f8:ea:89:0c:64:70:de:cf:95:26:4c:4c:db:89:29: 19:b9:1d:88:cf:9c:d2:06:af:c8:01:dc:15:0b:f2: b9:74:a0:24:0d:7d:61:9d:d6:32:47:e4:05:9f:1c: 6e:c7:49:93:6b:c2:71:f9:f6:d3:81:d4:67:0b:9b: f4:22:60:ad:86:88:7d:75:f6:b1:b1:ed:6b:e8:48: bf:35:9c:77:e4:c5:34:ec:37:cb:1b:28:26:a2:b3: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1D:2A:94:60:99:41:A9:07:FE:C5:FC:FD:AC:C8:FA:9B:FE:71:C4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 34:3a:f4:da:6c:c0:a3:c3:28:18:65:77:9c:e0:59:7b:13:e5: 44:ec:3b:08:8c:24:f0:b3:e3:c7:27:08:4c:b6:18:64:15:f3: b0:d2:3c:88:a6:be:6f:4f:65:68:9a:33:12:28:8f:ea:7f:85: 8e:40:84:e2:f6:bf:69:b7:62:27:10:70:dd:e6:b4:b8:4e:e7: b6:d7:f0:5d:b1:c1:8b:80:e3:8c:75:90:4f:4d:b1:8a:cc:0f: a4:80:c3:59:98:cb:42:ca:12:50:9b:84:9b:b8:1e:6b:f5:2c: 50:1f:a6:d1:8b:48:e3:9b:a8:28:fa:ca:63:8a:34:21:be:a2: 5d:5d:6d:a0:40:cf:93:be:34:6e:24:e6:42:54:39:e4:ac:94: 2c:e6:77:dc:4d:45:14:9e:2d:f9:98:1b:75:0f:4f:2f:72:81: c2:b7:26:ec:7b:ea:17:0d:a6:1f:34:80:9e:3f:44:14:42:f3: 26:ad:ca:22:bb:4e:53:0b:45:26:92:60:05:a1:88:ee:e5:e2: 56:26:c5:72:27:b1:22:ac:d8:46:d1:18:02:e4:cd:fc:90:1b: a0:8f:b5:bf:b5:8a:bd:22:65:1b:ca:88:a4:9c:dd:35:df:84: 9f:83:5f:59:78:3d:1c:85:12:7a:de:1e:a7:e9:49:fb:49:0c: 36:66:ee:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCagZYIYhviPV7Kt+2ZBhIarRPR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDEwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTlkNTQ1YWUxZGI4NDJlMjJiZDcxNmJiYTQ0MjFlN2Y4 NjNmZTg5Y2E1YzA3NTU3MDllZjUxMGM1N2ExODkxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC84uoqaJKSILqbncpUi90lVWfRKo4bxBqciqBESt9aOJLg MRqSb3ZfnQtkMNpK/PimuHOaLjpmmUbSnQXOwQfOiN4DpApq36SOZrLGog0MBRa9 np3zinFB1pprf1BzSeIRSurjfFK8VFdAH7IoYCVgQiDubzx/V8X+GXJBglMjC+aV NRlO94dDvYlp122tsg7NCpM8L8ExgIOf4rN8IukRRrcEAPjqiQxkcN7PlSZMTNuJ KRm5HYjPnNIGr8gB3BUL8rl0oCQNfWGd1jJH5AWfHG7HSZNrwnH59tOB1GcLm/Qi YK2GiH119rGx7WvoSL81nHfkxTTsN8sbKCaiswQZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfB0qlGCZQakH/sX8/azI+pv+ccQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YjFkOGUwLTdmYmItNDUyOC04Yzk3LTEwNTFjYTQ5NTA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBADQ69NpswKPDKBhld5zgWXsT 5UTsOwiMJPCz48cnCEy2GGQV87DSPIimvm9PZWiaMxIoj+p/hY5AhOL2v2m3YicQ cN3mtLhO57bX8F2xwYuA44x1kE9NsYrMD6SAw1mYy0LKElCbhJu4Hmv1LFAfptGL SOObqCj6ymOKNCG+ol1dbaBAz5O+NG4k5kJUOeSslCzmd9xNRRSeLfmYG3UPTy9y gcK3Jux76hcNph80gJ4/RBRC8yatyiK7TlMLRSaSYAWhiO7l4lYmxXInsSKs2EbR GALkzfyQG6CPtb+1ir0iZRvKiKSc3TXfhJ+DX1l4PRyFEnreHqfpSftJDDZm7vM= -----END CERTIFICATE-----Generated at Thu Aug 27 04:09:59 2026 by rpki-client