$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa File: bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa (raw, json) Hash identifier: Gb3PCu+FKDFqFP73015itOvqHFW0SDqSEpazlgj1Obk= Subject key identifier: 4D:1F:D1:50:3E:70:6D:55:07:E4:C3:DC:5E:B4:0F:1B:89:46:FA:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3D8F7C1979DE3F17A09CD5F8A45E69BC77C493F5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa Signing time: Fri 07 Aug 2026 04:20:57 +0000 ROA not before: Fri 07 Aug 2026 04:20:57 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8f:7c:19:79:de:3f:17:a0:9c:d5:f8:a4:5e:69:bc:77:c4:93:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:57 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=7108d109b1428a1af9d1d507f6533b94ffc6b4bf020b11692d9ffc2f2e4ac271, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:a1:1a:4a:ec:5e:b1:f7:9d:f6:81:a5:e6: 2e:a8:d6:b9:aa:49:e6:c8:00:df:ee:ef:1a:00:33: 66:c8:a6:e4:6e:c6:3a:b3:ac:22:bf:5b:7d:3e:7e: 8c:0a:55:99:13:67:c9:ca:ff:f5:36:16:3c:28:3f: db:2c:2e:98:e2:e4:8a:8b:45:42:b3:b5:f9:fe:f0: 95:ff:23:9b:29:64:e4:81:50:47:37:39:59:4f:2c: fb:8e:c0:e5:0a:14:8a:b1:7c:8a:4b:27:d3:99:66: f6:08:d0:85:e3:27:13:e7:53:6b:ae:fd:e8:29:c1: 6f:a2:02:30:79:12:ca:3e:93:f4:36:0e:c1:7a:5d: d4:51:9d:a4:be:66:82:50:1b:0a:b7:3d:5e:31:19: c8:a8:70:20:17:fb:8d:35:90:c4:fd:97:53:aa:83: ca:72:08:b5:ab:8b:5e:4d:01:88:63:94:a2:4d:9b: 12:6c:35:b5:1e:b7:38:04:80:57:ca:aa:f7:e4:97: cd:72:5c:cc:de:b7:68:23:89:bf:be:03:20:34:ae: 9a:bb:e2:35:d5:8b:87:15:90:98:99:e7:0a:01:24: b4:9a:3a:a8:63:9a:46:24:97:29:48:9f:c6:99:24: c3:4c:42:38:54:b4:9e:8f:e5:60:52:f9:02:60:67: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:D1:50:3E:70:6D:55:07:E4:C3:DC:5E:B4:0F:1B:89:46:FA:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 98:ae:e4:06:9f:f3:da:bc:1c:85:be:17:be:0e:28:fc:6c:50: 8d:23:de:c3:e1:d3:fa:3a:20:f1:c5:bc:15:ca:89:87:a3:05: 53:55:36:33:d6:29:e8:9f:b2:59:0c:45:eb:3f:46:31:0d:b1: 33:36:2e:f9:70:41:03:16:1a:5b:59:a7:89:8c:6e:37:03:10: 96:ff:c7:d4:13:38:a1:48:37:b9:f8:e2:91:f8:ad:e4:7f:dc: 9b:99:a9:7a:bc:68:10:89:82:c9:4c:9a:6b:d5:0c:80:05:df: af:1f:53:f5:1b:06:9c:25:56:67:40:f5:c0:69:12:ad:f4:e4: 6f:9b:e0:35:c3:4b:37:4f:30:86:bd:6c:73:c1:67:13:53:fc: 9c:1a:c0:b2:c5:8b:ca:71:c9:9c:70:11:0d:37:aa:c5:eb:3e: 53:bb:66:56:bf:9b:8f:af:22:11:d8:1b:48:17:8a:8f:0b:1e: 10:a0:69:bc:42:19:14:89:3d:03:8b:5e:a3:cb:2c:48:ad:b7: d2:2e:4f:ae:a5:9e:fe:93:60:31:33:52:71:24:a3:7a:0a:c5: 75:28:b7:59:7a:a5:c6:39:0f:a8:0d:11:2a:e9:35:43:85:b0: 14:6c:c8:d0:cd:5b:7c:df:24:e5:e8:df:43:af:45:46:98:43: 1b:c5:f0:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPY98GXnePxegnNX4pF5pvHfEk/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDU3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTA4ZDEwOWIxNDI4YTFhZjlkMWQ1MDdmNjUzM2I5NGZm YzZiNGJmMDIwYjExNjkyZDlmZmMyZjJlNGFjMjcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXjKEaSuxesfed9oGl5i6o1rmqSebIAN/u7xoAM2bIpuRu xjqzrCK/W30+fowKVZkTZ8nK//U2FjwoP9ssLpji5IqLRUKztfn+8JX/I5spZOSB UEc3OVlPLPuOwOUKFIqxfIpLJ9OZZvYI0IXjJxPnU2uu/egpwW+iAjB5Eso+k/Q2 DsF6XdRRnaS+ZoJQGwq3PV4xGciocCAX+401kMT9l1Oqg8pyCLWri15NAYhjlKJN mxJsNbUetzgEgFfKqvfkl81yXMzet2gjib++AyA0rpq74jXVi4cVkJiZ5woBJLSa OqhjmkYklylIn8aZJMNMQjhUtJ6P5WBS+QJgZ9L5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTR/RUD5wbVUH5MPcXrQPG4lG+lcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmOWE0NTMyLTMyNmUtNDVjOC1hMGQ3LWQ2MDA4YWEwZWQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQQAwDQYJKoZIhvcNAQELBQADggEBAJiu5Aaf89q8HIW+F74OKPxs UI0j3sPh0/o6IPHFvBXKiYejBVNVNjPWKeifslkMRes/RjENsTM2LvlwQQMWGltZ p4mMbjcDEJb/x9QTOKFIN7n44pH4reR/3JuZqXq8aBCJgslMmmvVDIAF368fU/Ub BpwlVmdA9cBpEq305G+b4DXDSzdPMIa9bHPBZxNT/JwawLLFi8pxyZxwEQ03qsXr PlO7Zla/m4+vIhHYG0gXio8LHhCgabxCGRSJPQOLXqPLLEitt9IuT66lnv6TYDEz UnEko3oKxXUot1l6pcY5D6gNESrpNUOFsBRsyNDNW3zfJOXo30OvRUaYQxvF8KM= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:05 2026 by rpki-client