$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa File: b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa (raw, json) Hash identifier: d3Tjzmws+ZxxNVPjVHaB7e8SEnlc9Zp/UvKn8XWVmq8= Subject key identifier: 31:3F:CF:69:36:42:24:FF:1C:9D:3A:A8:79:48:DD:34:8D:F2:B8:BE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0705D42DD82C58CC232080B895E235B210DD3BD4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa Signing time: Sun 02 Aug 2026 00:10:09 +0000 ROA not before: Sun 02 Aug 2026 00:10:09 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:05:d4:2d:d8:2c:58:cc:23:20:80:b8:95:e2:35:b2:10:dd:3b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 2 00:10:09 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=cb956f4cda55f4f03413fc33f618bb9af6d8fe3985567bf1ebea5e3f6174cd5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:40:73:ac:e9:bc:38:e7:f2:34:04:06:51: 79:b9:29:db:59:28:af:d0:ec:97:e7:3b:32:b6:48: c8:a2:8f:01:49:16:4b:a6:39:69:12:41:f3:f7:41: 19:48:eb:72:4a:02:3d:10:92:d0:2f:bf:fb:1d:44: 96:95:df:be:09:c3:79:28:aa:85:53:3a:22:1e:2e: af:be:6e:46:4c:a8:78:44:1e:a9:79:93:f3:c8:bd: 46:57:3d:1b:85:aa:fd:a8:75:14:85:9a:31:47:99: b2:19:1f:92:90:03:51:46:5c:1b:6d:5b:fd:06:00: b7:b1:d8:c5:9e:32:45:90:6f:96:1d:5a:3a:76:38: c8:98:01:cd:f3:8b:b4:a3:ae:eb:49:9d:2c:66:fc: e8:20:f5:9d:78:b1:e6:d0:d6:51:25:ae:25:15:54: 4d:ec:46:52:45:05:2c:94:c6:a6:6f:72:d5:31:51: 82:f0:e1:a0:74:24:3f:a8:9f:57:fa:fc:d7:f0:46: da:89:13:db:4d:97:a3:7e:d6:1b:45:73:84:39:62: 66:32:c3:8f:2f:de:19:c8:18:7f:f6:30:5c:89:fb: 81:c0:74:ca:bd:60:47:a0:a7:66:25:fd:2e:f6:ad: 50:f5:a5:d6:d3:e6:3b:63:91:1c:8a:96:10:96:04: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:CF:69:36:42:24:FF:1C:9D:3A:A8:79:48:DD:34:8D:F2:B8:BE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0::/28 Signature Algorithm: sha256WithRSAEncryption 78:d8:13:e7:eb:fe:96:24:98:30:9b:7c:e5:fa:50:7a:f7:f9: 89:81:3f:15:6f:b3:39:e8:a8:33:3f:b2:1c:83:83:9a:7d:eb: 6a:74:b0:a9:06:7b:fa:12:92:be:84:26:35:50:5e:de:b9:5f: e2:c3:c8:aa:9a:51:b1:19:10:d9:5d:a5:66:e5:bc:4e:27:76: 0f:a0:f8:18:14:24:29:9e:04:ef:42:c7:7c:f7:70:44:53:da: fd:1f:56:e2:78:0c:85:79:23:e1:44:dd:68:52:8a:f6:1d:40: 8c:5f:d3:b3:31:89:c6:c3:ec:c2:85:9a:e7:70:b7:cf:6c:68: da:18:f2:25:0a:04:f0:cd:56:83:1e:ac:40:e8:3f:bb:f0:13: 8d:b7:fa:31:b2:a8:7a:96:0e:93:3f:ae:93:92:80:1e:63:1a: a6:56:0f:48:6c:1a:80:91:5d:ea:13:bd:56:24:32:be:59:f0: ff:5d:9c:a1:8a:a5:75:90:ff:af:5f:4f:21:23:22:70:72:87: f0:0f:13:e9:e4:44:ec:4e:67:e9:8b:07:eb:a5:9f:51:ae:a7: e9:fe:7b:c0:51:b8:9d:47:81:65:68:5a:f9:47:72:e6:e8:51: 86:70:e0:94:56:60:c3:3f:24:9a:42:bd:93:84:27:8b:7e:81: c7:80:1a:7f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBwXULdgsWMwjIIC4leI1shDdO9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAyMDAxMDA5WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjk1NmY0Y2RhNTVmNGYwMzQxM2ZjMzNmNjE4YmI5YWY2 ZDhmZTM5ODU1NjdiZjFlYmVhNWUzZjYxNzRjZDViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClJUBzrOm8OOfyNAQGUXm5KdtZKK/Q7JfnOzK2SMiijwFJ FkumOWkSQfP3QRlI63JKAj0QktAvv/sdRJaV374Jw3koqoVTOiIeLq++bkZMqHhE Hql5k/PIvUZXPRuFqv2odRSFmjFHmbIZH5KQA1FGXBttW/0GALex2MWeMkWQb5Yd Wjp2OMiYAc3zi7SjrutJnSxm/Ogg9Z14sebQ1lElriUVVE3sRlJFBSyUxqZvctUx UYLw4aB0JD+on1f6/NfwRtqJE9tNl6N+1htFc4Q5YmYyw48v3hnIGH/2MFyJ+4HA dMq9YEegp2Yl/S72rVD1pdbT5jtjkRyKlhCWBEefAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUMT/PaTZCJP8cnTqoeUjdNI3yuL4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YmJhZmJmLWU2ZDQtNDQ4Ny05ZWJiLWNiZDcyYjNkNmM3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPDwMA0GCSqGSIb3DQEBCwUAA4IBAQB42BPn6/6WJJgwm3zl+lB69/mJ gT8Vb7M56KgzP7Icg4OafetqdLCpBnv6EpK+hCY1UF7euV/iw8iqmlGxGRDZXaVm 5bxOJ3YPoPgYFCQpngTvQsd893BEU9r9H1bieAyFeSPhRN1oUor2HUCMX9OzMYnG w+zChZrncLfPbGjaGPIlCgTwzVaDHqxA6D+78BONt/oxsqh6lg6TP66TkoAeYxqm Vg9IbBqAkV3qE71WJDK+WfD/XZyhiqV1kP+vX08hIyJwcofwDxPp5ETsTmfpiwfr pZ9Rrqfp/nvAUbidR4FlaFr5R3Lm6FGGcOCUVmDDPySaQr2ThCeLfoHHgBp/ -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:36 2026 by rpki-client