$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: bmyvTOwScqNwBNAjN6fxlU+gEAsimNOIaojyZlqO+Rk= Subject key identifier: 91:FE:D4:BD:C8:62:E7:E0:D4:AE:79:DE:DB:06:E7:6D:20:C6:E6:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5421505AE30FDEFCCD4665A8C8DD9B1097BCDDB9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Fri 07 Aug 2026 04:20:56 +0000 ROA not before: Fri 07 Aug 2026 04:20:56 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:50:5a:e3:0f:de:fc:cd:46:65:a8:c8:dd:9b:10:97:bc:dd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:56 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=594126947b8b7b112e6c884539351b1df5e813256737a66fe4c2639631697057, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:9f:e6:23:8c:d0:d6:d2:d5:4a:77:19:72: 3d:24:5e:0a:08:ad:0c:9d:0e:9f:e4:5f:b0:3c:3c: 6a:b4:89:27:f9:87:2a:29:f0:8f:a6:c0:12:b5:4b: 03:a4:b7:87:aa:1f:ec:b8:18:73:c9:6c:9a:0f:7b: f0:5c:77:c6:9e:8f:f7:29:62:0d:96:27:db:ea:9c: a0:22:9c:79:e1:f1:c4:d1:ec:7f:76:af:e9:d6:5e: fd:a3:db:7c:8c:48:5c:55:c4:9b:9f:81:ba:85:bd: db:4f:aa:de:f0:a8:e9:00:b3:a6:08:65:bd:a0:23: 45:1c:36:dd:2b:d3:74:08:46:e5:ad:c4:16:fa:a3: bc:9e:c1:e7:a0:f0:e6:3a:0c:06:7d:d6:f3:ba:72: 9e:5e:7f:84:1a:62:fe:d5:c9:cf:8f:66:c9:48:26: 4c:01:ca:b1:ee:98:bd:c1:44:63:c5:d7:ee:32:94: 19:15:12:0d:a9:d7:e1:d7:52:d1:62:e4:af:0d:d2: e8:63:22:6a:40:0a:a6:c3:75:33:74:30:7e:a0:6f: e2:62:33:4d:0a:75:de:83:72:33:49:6d:c4:9f:ce: 64:e3:67:76:12:98:eb:6b:fd:de:41:e6:6f:72:c6: e4:54:90:e2:48:5d:d0:c0:d7:75:9f:6f:13:a2:fb: 83:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:D4:BD:C8:62:E7:E0:D4:AE:79:DE:DB:06:E7:6D:20:C6:E6:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 97:b4:30:8f:fc:97:be:76:42:2b:90:64:01:61:86:57:85:a2: 3d:fe:84:ad:6e:cb:95:e4:51:77:0b:8e:53:0a:14:61:f0:0e: cd:ca:fc:27:17:93:79:7f:11:9b:92:a6:e2:2d:83:6e:ae:20: e4:6c:f1:05:8d:d3:83:e9:5f:3f:36:76:8c:27:7e:e0:e0:39: c6:1c:8f:52:7e:fd:c1:bb:1f:95:5a:97:a7:5b:a4:b5:52:67: 83:46:78:2c:62:f0:dc:a8:9d:c5:54:38:80:10:4a:aa:7c:c8: 6a:1f:39:85:f3:78:7a:9c:dd:7f:9a:71:56:f8:ea:08:88:da: 3b:8a:30:21:57:18:83:1b:27:ba:94:3e:3f:5b:90:b6:bb:e6: b0:7d:45:43:20:38:5f:9b:31:a2:9a:6c:d3:ca:07:4d:ac:de: c2:34:a2:94:39:ea:46:1c:27:f0:dd:ba:41:35:c6:f6:92:b5: db:82:25:a7:2a:30:57:59:24:42:bd:b6:5f:62:d8:53:6a:92: eb:fa:7a:16:ef:f9:67:0b:a3:27:c4:d2:57:53:25:df:a6:5c: 15:1d:66:9f:a1:ac:1b:5f:8d:2c:c1:57:8a:ee:c8:28:11:e5: 3f:32:c6:78:be:46:d9:a2:8f:26:8c:7c:a1:9f:4e:54:66:9b: 77:64:2d:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVCFQWuMP3vzNRmWoyN2bEJe83bkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDU2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTQxMjY5NDdiOGI3YjExMmU2Yzg4NDUzOTM1MWIxZGY1 ZTgxMzI1NjczN2E2NmZlNGMyNjM5NjMxNjk3MDU3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZKZ/mI4zQ1tLVSncZcj0kXgoIrQydDp/kX7A8PGq0iSf5 hyop8I+mwBK1SwOkt4eqH+y4GHPJbJoPe/Bcd8aej/cpYg2WJ9vqnKAinHnh8cTR 7H92r+nWXv2j23yMSFxVxJufgbqFvdtPqt7wqOkAs6YIZb2gI0UcNt0r03QIRuWt xBb6o7yeweeg8OY6DAZ91vO6cp5ef4QaYv7Vyc+PZslIJkwByrHumL3BRGPF1+4y lBkVEg2p1+HXUtFi5K8N0uhjImpACqbDdTN0MH6gb+JiM00Kdd6DcjNJbcSfzmTj Z3YSmOtr/d5B5m9yxuRUkOJIXdDA13WfbxOi+4PFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkf7Uvchi5+DUrnne2wbnbSDG5vEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAJe0MI/8l752QiuQZAFhhleF oj3+hK1uy5XkUXcLjlMKFGHwDs3K/CcXk3l/EZuSpuItg26uIORs8QWN04PpXz82 downfuDgOcYcj1J+/cG7H5Val6dbpLVSZ4NGeCxi8NyoncVUOIAQSqp8yGofOYXz eHqc3X+acVb46giI2juKMCFXGIMbJ7qUPj9bkLa75rB9RUMgOF+bMaKabNPKB02s 3sI0opQ56kYcJ/DdukE1xvaStduCJacqMFdZJEK9tl9i2FNqkuv6ehbv+WcLoyfE 0ldTJd+mXBUdZp+hrBtfjSzBV4ruyCgR5T8yxni+RtmijyaMfKGfTlRmm3dkLaA= -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:08 2026 by rpki-client