$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa File: c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json) Hash identifier: emHNtIVgTh+DJehnvw58ZdfXmKQIJ0CMzTQBhj0HeCQ= Subject key identifier: 7B:EE:ED:E2:30:42:7C:1C:C9:B4:05:0A:72:E5:A7:29:BB:B5:D7:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 304325E4A04A6FE59443AA0483B4F6703F7AB106 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa Signing time: Sat 08 Aug 2026 00:50:07 +0000 ROA not before: Sat 08 Aug 2026 00:50:07 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:25:e4:a0:4a:6f:e5:94:43:aa:04:83:b4:f6:70:3f:7a:b1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:07 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=e08fe554119a4a545845f47b56ce3670004fc2afa8a5395da9e051e9cbf7cc1e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:37:3e:e3:e5:6a:4c:ba:f2:6f:5d:57:5a: 98:2e:94:d8:47:46:65:85:00:b7:94:90:42:60:3c: d3:61:ad:7f:50:8d:8d:a1:09:51:bf:b1:4b:17:c4: e0:22:eb:38:bf:21:02:6c:f8:cd:ef:2a:7f:f7:8c: 28:f7:0a:2f:11:8b:aa:29:2c:1c:22:81:4f:da:4f: c9:b8:ad:1c:67:6d:52:49:b2:07:8a:7a:7c:03:dd: 49:f5:01:ea:8d:5c:63:9c:7c:c9:02:13:43:36:64: ee:14:55:ca:99:1f:6a:5b:84:49:56:80:c8:73:56: f8:3d:8b:b2:c8:ff:66:e4:50:06:66:a5:df:cf:80: b4:6b:c0:9b:80:de:47:31:c2:5d:d0:78:b9:9a:be: 9e:b9:90:c5:29:59:11:ac:b3:87:a2:6e:23:00:4d: 1c:8f:86:30:eb:e7:72:3b:96:ad:6b:0a:8d:f9:00: f0:fd:87:f5:5a:53:f7:26:f4:88:79:34:8a:45:88: f7:1a:78:0b:e5:8b:d9:3a:0a:b4:e0:68:37:5f:89: c1:5f:99:d8:f1:fa:de:2e:5b:4e:b3:fe:a7:c7:4e: 34:47:7c:9c:5e:ac:0d:5d:cc:2e:c6:59:14:89:f1: 28:2d:58:d7:1a:5c:32:54:65:80:c7:8e:b1:19:ee: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EE:ED:E2:30:42:7C:1C:C9:B4:05:0A:72:E5:A7:29:BB:B5:D7:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8801::/48 Signature Algorithm: sha256WithRSAEncryption 72:9f:8d:c8:15:3e:8c:c0:39:e1:09:c6:89:49:89:99:1f:8a: 64:a3:ae:4c:95:6c:52:17:03:26:5c:9d:b6:42:a7:bb:d5:5a: d5:21:8c:d1:fb:a4:81:ea:48:89:cf:25:75:76:57:af:2f:0d: 69:d3:b8:49:ee:ba:97:c1:29:ca:26:93:65:2b:2c:60:83:f8: e5:cd:34:69:8d:b2:07:08:8f:9c:bb:5a:ba:01:e1:14:dd:e7: 2d:34:ca:73:77:aa:3a:9a:7e:5b:21:11:7e:00:cd:98:41:49: 23:b8:5b:81:5e:67:96:b7:74:23:08:df:16:88:aa:0f:13:96: ed:10:a2:8a:98:12:fe:e0:3f:0e:f5:39:96:86:c3:e6:db:64: 35:3f:83:d5:73:21:a6:6c:e1:1a:8f:4d:33:69:b9:0d:31:25: bd:5d:fc:b8:8d:c9:79:02:0d:e8:09:c8:23:8f:b0:f4:18:70: ea:a5:d2:9d:fa:36:fa:d1:54:01:e7:73:23:00:ce:d3:e5:3c: d9:84:91:c8:37:4f:46:21:0d:86:8e:b1:a4:9b:a0:38:bb:79: 8d:9d:22:f1:53:37:21:e6:8a:53:86:ea:05:de:80:94:94:c8: 9c:1f:b2:0c:16:36:85:d4:3e:90:1e:c5:a8:9d:77:4b:5d:d4: 29:26:f0:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMEMl5KBKb+WUQ6oEg7T2cD96sQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDA3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDhmZTU1NDExOWE0YTU0NTg0NWY0N2I1NmNlMzY3MDAw NGZjMmFmYThhNTM5NWRhOWUwNTFlOWNiZjdjYzFlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQComTc+4+VqTLryb11XWpgulNhHRmWFALeUkEJgPNNhrX9Q jY2hCVG/sUsXxOAi6zi/IQJs+M3vKn/3jCj3Ci8Ri6opLBwigU/aT8m4rRxnbVJJ sgeKenwD3Un1AeqNXGOcfMkCE0M2ZO4UVcqZH2pbhElWgMhzVvg9i7LI/2bkUAZm pd/PgLRrwJuA3kcxwl3QeLmavp65kMUpWRGss4eibiMATRyPhjDr53I7lq1rCo35 APD9h/VaU/cm9Ih5NIpFiPcaeAvli9k6CrTgaDdficFfmdjx+t4uW06z/qfHTjRH fJxerA1dzC7GWRSJ8SgtWNcaXDJUZYDHjrEZ7tOzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe+7t4jBCfBzJtAUKcuWnKbu11zgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0OTc0OWM1LTQyNjMtNDQzZi1hNWQxLWYwZmMxYTI3ZWRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBAHKfjcgVPozAOeEJxolJiZkf imSjrkyVbFIXAyZcnbZCp7vVWtUhjNH7pIHqSInPJXV2V68vDWnTuEnuupfBKcom k2UrLGCD+OXNNGmNsgcIj5y7WroB4RTd5y00ynN3qjqaflshEX4AzZhBSSO4W4Fe Z5a3dCMI3xaIqg8Tlu0QooqYEv7gPw71OZaGw+bbZDU/g9VzIaZs4RqPTTNpuQ0x Jb1d/LiNyXkCDegJyCOPsPQYcOql0p36NvrRVAHncyMAztPlPNmEkcg3T0YhDYaO saSboDi7eY2dIvFTNyHmilOG6gXegJSUyJwfsgwWNoXUPpAexaidd0td1Ckm8Hw= -----END CERTIFICATE-----Generated at Fri Sep 11 07:38:10 2026 by rpki-client