$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa File: c8a22460-1c12-4314-8b13-6a586edac27c.roa (raw, json) Hash identifier: XFFft1OCxYfI/d7+B/98LA6/ecQO5PlkiNEfjubRdEQ= Subject key identifier: 8B:AB:08:DA:63:FC:74:D5:DE:75:5B:C9:2F:9B:64:D0:10:C5:DD:6C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 527C9D4DF16963F8EC2F9105475AA716085CFC71 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa Signing time: Fri 07 Aug 2026 04:10:26 +0000 ROA not before: Fri 07 Aug 2026 04:10:26 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7c:9d:4d:f1:69:63:f8:ec:2f:91:05:47:5a:a7:16:08:5c:fc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:26 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=1a19a55c8c1a441468715077227a6d168878bdcb366ad6f93cb895511d6cb735, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f3:fd:9c:c4:2a:a4:05:cd:3c:e7:e9:b4:8d: 5b:97:5e:27:d1:ae:c0:f6:c7:0e:2a:8e:fa:1c:47: ba:24:9f:fa:f2:60:63:d0:e3:f3:0b:53:51:69:81: c1:58:5d:03:d6:e5:59:e6:db:ff:ff:44:3e:91:f5: b0:88:63:35:91:7c:06:36:bc:62:1b:85:ef:17:14: 59:c1:cb:0f:05:57:11:dd:29:3d:a1:c1:bb:cf:78: fa:9b:6a:f8:9f:8c:8f:a5:0c:0d:87:4b:fb:01:71: a9:20:64:79:0f:db:4c:13:c6:8d:17:b7:4e:98:f8: f5:71:92:38:ae:7c:d1:c9:25:7f:1d:48:c1:53:ae: 54:1b:fa:95:cf:05:b8:69:70:9a:5e:67:f9:96:7e: 3a:43:ed:20:b5:eb:59:bc:f9:96:61:82:d8:f8:06: 75:4b:a1:1c:c2:e3:d3:cf:b1:41:f6:ed:ef:81:df: a5:82:f8:95:b9:62:f6:31:9b:79:59:d8:c8:64:a6: 7b:91:c0:67:36:df:65:55:56:97:fd:b5:bd:14:5d: 82:5f:0e:aa:8f:65:83:cf:e3:e6:a7:f2:65:e5:22: 55:66:6b:56:1c:3f:59:e9:04:b4:0e:8b:d1:01:59: 7b:2c:73:a5:2c:2f:c0:a1:04:fd:1c:05:8d:28:ed: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AB:08:DA:63:FC:74:D5:DE:75:5B:C9:2F:9B:64:D0:10:C5:DD:6C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 28:9b:ec:ad:01:4e:70:23:07:41:02:74:09:1e:84:38:24:1a: db:02:3d:1b:a2:9a:5a:5e:e5:e2:12:5e:41:bc:17:3d:03:ab: c1:be:85:64:ad:94:27:0a:29:26:b1:c6:bb:b9:ab:34:1e:49: 0d:62:c8:e4:c9:2b:0b:8a:77:9e:46:3a:77:70:e6:96:a8:e8: c6:e1:be:38:61:e1:51:2b:c1:6f:73:f1:d1:0e:9d:71:40:8f: 94:1e:2c:61:4a:06:12:20:9b:42:a1:f3:c8:50:2e:06:14:dd: c1:95:06:b6:17:e2:c9:29:a4:40:0d:fd:bf:40:e3:e4:fe:bd: 87:69:7d:4e:2b:8a:29:ce:65:4c:b0:45:52:b6:d1:ad:d6:23: 1a:2e:b5:1a:df:03:94:49:07:2f:ab:2e:f7:08:e0:a8:56:e6: e6:e6:86:0f:fa:87:8d:2b:af:e2:ac:a1:1a:34:db:09:da:55: 02:76:cf:2b:08:7d:f2:91:b4:e2:2c:dc:53:90:45:61:82:af: 8f:9a:da:cb:c2:ab:ee:c0:09:97:e8:73:d5:a5:2c:52:b8:02: 4d:b2:8e:b4:e6:e4:8a:da:69:a5:ae:eb:5a:9b:22:d2:55:80: 1a:fc:23:53:09:c0:4d:27:74:98:fd:95:bb:a6:5a:21:b8:15: 9c:60:3c:61 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUnydTfFpY/jsL5EFR1qnFghc/HEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDI2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTE5YTU1YzhjMWE0NDE0Njg3MTUwNzcyMjdhNmQxNjg4 NzhiZGNiMzY2YWQ2ZjkzY2I4OTU1MTFkNmNiNzM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV8/2cxCqkBc085+m0jVuXXifRrsD2xw4qjvocR7okn/ry YGPQ4/MLU1FpgcFYXQPW5Vnm2///RD6R9bCIYzWRfAY2vGIbhe8XFFnByw8FVxHd KT2hwbvPePqbavifjI+lDA2HS/sBcakgZHkP20wTxo0Xt06Y+PVxkjiufNHJJX8d SMFTrlQb+pXPBbhpcJpeZ/mWfjpD7SC161m8+ZZhgtj4BnVLoRzC49PPsUH27e+B 36WC+JW5YvYxm3lZ2MhkpnuRwGc232VVVpf9tb0UXYJfDqqPZYPP4+an8mXlIlVm a1YcP1npBLQOi9EBWXssc6UsL8ChBP0cBY0o7RqhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUi6sI2mP8dNXedVvJL5tk0BDF3WwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M4YTIyNDYwLTFjMTItNDMxNC04YjEzLTZhNTg2ZWRhYzI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAKJvsrQFOcCMHQQJ0CR6EOCQa 2wI9G6KaWl7l4hJeQbwXPQOrwb6FZK2UJwopJrHGu7mrNB5JDWLI5MkrC4p3nkY6 d3DmlqjoxuG+OGHhUSvBb3Px0Q6dcUCPlB4sYUoGEiCbQqHzyFAuBhTdwZUGthfi ySmkQA39v0Dj5P69h2l9TiuKKc5lTLBFUrbRrdYjGi61Gt8DlEkHL6su9wjgqFbm 5uaGD/qHjSuv4qyhGjTbCdpVAnbPKwh98pG04izcU5BFYYKvj5ray8Kr7sAJl+hz 1aUsUrgCTbKOtObkitpppa7rWpsi0lWAGvwjUwnATSd0mP2Vu6ZaIbgVnGA8YQ== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:40 2026 by rpki-client