$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa File: bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa (raw, json) Hash identifier: tvzoqkhFFt6eV+p814P9JZEoUrKqfEd0rhj0jQrSvHI= Subject key identifier: 8D:8B:ED:E7:FD:21:CC:9C:6D:9A:8E:64:8B:1C:39:8B:06:38:DB:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4869E38D1CBE88F3546434FD8A9A41BC0CA0A9DC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa Signing time: Fri 07 Aug 2026 04:10:09 +0000 ROA not before: Fri 07 Aug 2026 04:10:09 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e400::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:69:e3:8d:1c:be:88:f3:54:64:34:fd:8a:9a:41:bc:0c:a0:a9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:09 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=04e777b645c266aae44e86de3e35ff55aa77f4edf4e99a228520effbec6cd556, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:37:bc:4b:2d:06:d0:6a:87:66:e0:37:17:c9: 99:d6:76:95:f5:23:ea:f4:31:e6:e7:7d:e7:e0:f3: 32:62:d4:3b:7d:8b:ef:d5:33:5a:8a:ab:53:9c:52: 41:01:4b:3e:9d:58:1a:14:c8:ba:d0:72:21:27:ea: 85:e1:13:01:f3:ab:ce:b5:30:56:3e:23:52:b9:bc: e9:5e:d8:d2:0e:27:14:ba:85:72:da:b8:28:ae:db: b8:fb:6e:0c:bd:7a:fd:32:f4:ed:a1:a4:65:70:cc: 7f:0e:84:0d:34:84:08:03:a2:20:2f:90:f3:35:93: 44:8e:2f:ac:5e:66:3c:3c:7c:3f:fb:50:5d:4b:80: 9c:ce:50:1a:8a:81:6e:5d:10:ce:88:7c:da:11:94: a4:94:57:0d:ba:47:f5:93:7f:d9:8d:62:92:89:2b: 4f:28:02:34:6f:57:e0:ae:90:07:24:71:71:50:33: bb:51:e1:91:9a:50:cb:f6:d8:3a:c0:58:72:3b:58: e0:72:20:00:44:79:49:39:b1:0f:8a:b1:49:9b:6b: 24:c5:13:4b:aa:31:79:4c:42:21:f6:99:cd:5c:c4: a4:fa:d3:9e:17:78:c4:aa:9b:d2:1c:5f:5a:7b:4f: 9f:cf:8a:93:c2:6f:20:5e:ef:14:53:cd:1d:58:b1: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8B:ED:E7:FD:21:CC:9C:6D:9A:8E:64:8B:1C:39:8B:06:38:DB:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e400::/42 Signature Algorithm: sha256WithRSAEncryption a0:cb:0b:fd:0a:10:8f:c8:f0:86:27:92:67:4e:52:6d:a8:2a: 12:35:0c:a6:68:eb:87:30:7e:67:96:9f:ad:3c:59:4b:71:a0: f1:c9:62:96:91:f2:7b:d4:20:94:cb:06:89:99:cb:2d:94:c9: 43:34:97:3f:96:2c:c4:99:6b:51:4b:8d:b2:cd:07:b5:91:c9: 34:1e:15:62:4d:f1:9e:19:e8:2f:5d:35:0b:81:2b:08:db:d7: 2d:da:de:d8:bb:a6:29:a8:de:e6:57:18:f4:3d:98:a1:be:3d: 74:01:ad:c9:e9:a7:73:6f:2c:59:36:be:1c:67:c3:6c:8c:2b: 90:be:7f:c0:66:d3:61:65:85:df:d7:d6:4f:a9:84:7e:4d:b0: b4:03:5b:5c:bf:c3:4d:4a:59:6c:43:87:79:02:8f:48:0f:3e: ef:38:fe:41:03:52:78:d4:78:51:fb:b4:fd:b6:7e:c4:91:bc: 1a:a4:af:7e:17:8c:44:2b:7a:6d:2e:e6:9b:c7:e8:8b:cc:a6: a7:c5:aa:b6:44:ff:68:29:3a:25:92:76:6c:92:83:0a:d2:7b: 30:6e:ce:8a:0c:3b:e4:c1:42:60:16:8d:0d:48:0a:56:a8:50: f5:55:1e:e6:cc:4f:dc:51:0f:15:3c:53:f8:94:59:62:5d:16: ab:55:a0:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSGnjjRy+iPNUZDT9ippBvAygqdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDA5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGU3NzdiNjQ1YzI2NmFhZTQ0ZTg2ZGUzZTM1ZmY1NWFh NzdmNGVkZjRlOTlhMjI4NTIwZWZmYmVjNmNkNTU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4N7xLLQbQaodm4DcXyZnWdpX1I+r0Mebnfefg8zJi1Dt9 i+/VM1qKq1OcUkEBSz6dWBoUyLrQciEn6oXhEwHzq861MFY+I1K5vOle2NIOJxS6 hXLauCiu27j7bgy9ev0y9O2hpGVwzH8OhA00hAgDoiAvkPM1k0SOL6xeZjw8fD/7 UF1LgJzOUBqKgW5dEM6IfNoRlKSUVw26R/WTf9mNYpKJK08oAjRvV+CukAckcXFQ M7tR4ZGaUMv22DrAWHI7WOByIABEeUk5sQ+KsUmbayTFE0uqMXlMQiH2mc1cxKT6 054XeMSqm9IcX1p7T5/PipPCbyBe7xRTzR1YsafxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjYvt5/0hzJxtmo5kixw5iwY42yowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmMjdmZGI3LTg0YmYtNDBkMi05MDZhLTdiNGMxZmY0MDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75AAwDQYJKoZIhvcNAQELBQADggEBAKDLC/0KEI/I8IYnkmdOUm2o KhI1DKZo64cwfmeWn608WUtxoPHJYpaR8nvUIJTLBomZyy2UyUM0lz+WLMSZa1FL jbLNB7WRyTQeFWJN8Z4Z6C9dNQuBKwjb1y3a3ti7pimo3uZXGPQ9mKG+PXQBrcnp p3NvLFk2vhxnw2yMK5C+f8Bm02Flhd/X1k+phH5NsLQDW1y/w01KWWxDh3kCj0gP Pu84/kEDUnjUeFH7tP22fsSRvBqkr34XjEQrem0u5pvH6IvMpqfFqrZE/2gpOiWS dmySgwrSezBuzooMO+TBQmAWjQ1IClaoUPVVHubMT9xRDxU8U/iUWWJdFqtVoBM= -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:47 2026 by rpki-client