$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: Nv+0Vp3XldkL60jtkvExsm08uTPtQ1Tewi38SKvJ8aA= Subject key identifier: AF:21:EA:74:AB:37:D4:0F:ED:5E:51:48:9B:E9:CE:C7:93:F3:9B:AC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7BF75789D00AC528951DE6E51B2FC50C14D8D355 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Fri 07 Aug 2026 04:20:13 +0000 ROA not before: Fri 07 Aug 2026 04:20:13 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f7:57:89:d0:0a:c5:28:95:1d:e6:e5:1b:2f:c5:0c:14:d8:d3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:13 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=a0f2bf89f745afe644e3689dab42cdfaa15e578fa58367c2958bd36f822a1075, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:0d:9e:d7:17:8f:30:61:24:81:54:2b:2d: 87:6b:31:9d:c8:92:fa:65:e2:3f:96:ac:78:18:24: 48:ed:35:80:95:63:42:7d:0b:6a:bb:87:89:7a:94: 82:21:7a:eb:3f:7a:77:c2:82:ac:d2:ea:c2:dc:2c: cb:d0:dc:74:a4:41:ff:22:fb:61:a6:81:42:4d:c5: 8e:67:fc:09:a6:e5:cd:1d:f2:07:00:64:ee:e4:94: b5:2d:a7:57:f4:c6:55:89:c4:c7:fe:6b:46:eb:56: d5:ae:03:f7:d6:da:44:42:2c:a5:1e:02:82:69:63: b3:55:7f:fa:f2:e7:92:10:a3:f8:d9:a6:ef:6b:9e: f6:60:05:98:96:a6:40:ab:52:f8:c1:01:86:13:52: 67:02:ba:4b:1c:c3:f0:6f:e8:5e:64:50:a7:b1:c7: 24:16:09:3c:4a:26:ee:7d:34:23:ab:86:66:44:a3: 44:17:47:e6:18:1a:60:27:0b:ca:0a:ea:e7:d6:fe: 31:17:ac:6c:24:50:1a:b5:59:3d:b0:e9:ee:be:7d: ce:50:81:d6:db:48:0e:4a:c2:51:f2:17:85:58:ef: b3:50:cb:ae:2e:3e:09:ea:03:a1:6e:b3:b1:6d:a3: 6f:4b:bd:fe:02:34:ee:15:2b:d6:bc:41:d4:c8:e1: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:EA:74:AB:37:D4:0F:ED:5E:51:48:9B:E9:CE:C7:93:F3:9B:AC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 4c:5a:9d:da:46:5f:53:e0:00:11:54:07:65:20:b6:b1:73:ea: fd:ee:79:49:1c:03:bd:a6:29:1f:e9:84:e5:26:ed:e0:0c:fe: 3b:f1:3e:2e:20:d2:40:77:29:39:78:15:73:8c:75:ce:87:7d: 7d:54:64:15:f2:45:51:b7:79:c7:3d:cd:f8:95:87:6e:9f:29: 28:ed:32:26:f4:81:cd:c1:9a:f9:10:29:d4:45:52:6a:f6:ad: 3c:42:63:cc:07:bf:a6:68:47:f5:2a:21:16:26:9f:44:1d:43: 36:69:4f:b7:22:26:6b:86:32:9f:58:f6:ea:f4:5c:f6:c4:c3: 13:d5:bf:7b:d1:03:fa:1a:70:6d:68:9e:7e:5c:c2:20:81:8d: 6d:15:c2:91:e2:87:e2:18:57:a4:e1:2c:cd:f7:e4:c0:19:d6: 08:82:21:3c:0e:cc:a2:3d:c3:b8:b2:88:2f:46:70:9e:98:e1: 62:e2:3e:b3:64:a0:2d:2b:74:d0:c8:11:88:ac:d1:35:6f:ce: 6e:68:62:b7:b1:23:06:11:11:d8:12:f6:34:17:88:ee:81:36: 3a:80:80:ec:0c:a1:c9:b5:77:3e:d9:75:60:4d:47:e3:d4:c0: 73:06:65:e4:1a:bc:cc:b8:16:17:71:db:df:ad:0e:de:e1:a0: e3:f0:a0:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe/dXidAKxSiVHeblGy/FDBTY01UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDEzWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGYyYmY4OWY3NDVhZmU2NDRlMzY4OWRhYjQyY2RmYWEx NWU1NzhmYTU4MzY3YzI5NThiZDM2ZjgyMmExMDc1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvAQ2e1xePMGEkgVQrLYdrMZ3Ikvpl4j+WrHgYJEjtNYCV Y0J9C2q7h4l6lIIheus/enfCgqzS6sLcLMvQ3HSkQf8i+2GmgUJNxY5n/Amm5c0d 8gcAZO7klLUtp1f0xlWJxMf+a0brVtWuA/fW2kRCLKUeAoJpY7NVf/ry55IQo/jZ pu9rnvZgBZiWpkCrUvjBAYYTUmcCukscw/Bv6F5kUKexxyQWCTxKJu59NCOrhmZE o0QXR+YYGmAnC8oK6ufW/jEXrGwkUBq1WT2w6e6+fc5QgdbbSA5KwlHyF4VY77NQ y64uPgnqA6Fus7Fto29Lvf4CNO4VK9a8QdTI4eLPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUryHqdKs31A/tXlFIm+nOx5Pzm6wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBAExandpGX1PgABFUB2UgtrFz 6v3ueUkcA72mKR/phOUm7eAM/jvxPi4g0kB3KTl4FXOMdc6HfX1UZBXyRVG3ecc9 zfiVh26fKSjtMib0gc3BmvkQKdRFUmr2rTxCY8wHv6ZoR/UqIRYmn0QdQzZpT7ci JmuGMp9Y9ur0XPbEwxPVv3vRA/oacG1onn5cwiCBjW0VwpHih+IYV6ThLM335MAZ 1giCITwOzKI9w7iyiC9GcJ6Y4WLiPrNkoC0rdNDIEYis0TVvzm5oYrexIwYREdgS 9jQXiO6BNjqAgOwMocm1dz7ZdWBNR+PUwHMGZeQavMy4Fhdx29+tDt7hoOPwoNM= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:29 2026 by rpki-client