$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cbf43d99-4d01-4d24-ada9-6e34368d1d71.roa File: cbf43d99-4d01-4d24-ada9-6e34368d1d71.roa (raw, json) Hash identifier: znibBDov4MugFIGyWSgSMU/e3Q4UzMyxn9vLZZFFUHE= Subject key identifier: F9:B2:85:32:31:C4:01:70:AE:73:6C:9D:CF:ED:A6:7C:C7:17:D9:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 45A6288DEC55325E98E09AD236A661E16731B5CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cbf43d99-4d01-4d24-ada9-6e34368d1d71.roa Signing time: Fri 07 Aug 2026 04:20:07 +0000 ROA not before: Fri 07 Aug 2026 04:20:07 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5518::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a6:28:8d:ec:55:32:5e:98:e0:9a:d2:36:a6:61:e1:67:31:b5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:07 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=6142af18951686e1d7176edfb41ae6edf9c038e75b5d36e27549945d7b7ec371, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:1d:9d:e8:74:8e:46:84:72:5c:a9:98:d8: bf:93:9a:11:43:98:f8:cc:7e:51:99:3a:79:0d:c1: 2e:2c:4d:0b:6a:f8:cd:bd:65:b4:00:fa:dd:af:25: 6a:6e:e5:10:32:c6:5b:f5:a4:42:a7:cc:a5:c3:10: fa:73:ee:53:32:6f:65:e1:ba:6d:1e:db:b8:9a:4e: 80:86:ee:0b:f3:69:9e:59:be:d2:d7:bd:ff:db:7b: 2a:e1:e9:de:a4:ff:ad:84:9e:d5:7d:26:b4:76:9f: 9a:db:ec:e5:78:5e:c2:de:53:40:c6:f1:12:2d:16: 35:9f:72:86:a6:f5:0a:5f:07:d6:7b:39:e7:e8:e5: 73:e6:ff:ad:c8:48:61:42:3f:ec:ea:a4:b5:41:2c: 89:ee:e1:07:83:6e:08:87:c2:da:85:a3:e2:19:af: c8:df:0e:c3:15:20:ec:17:16:39:cf:e8:fd:65:55: 10:79:a0:24:18:29:01:ab:56:ee:1c:db:d1:a9:7c: 51:d4:0a:c6:96:cd:fc:04:5c:83:86:d9:24:97:cc: ab:4f:b2:53:11:ea:86:61:00:24:c3:3c:2d:e1:92: ae:22:02:dd:24:66:23:20:f2:0f:d5:aa:b6:ae:60: 3e:12:fd:43:24:2d:6f:89:1b:f0:46:04:89:ed:65: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B2:85:32:31:C4:01:70:AE:73:6C:9D:CF:ED:A6:7C:C7:17:D9:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cbf43d99-4d01-4d24-ada9-6e34368d1d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5518::/48 Signature Algorithm: sha256WithRSAEncryption 14:39:46:6c:b2:01:d8:f7:bc:23:b0:d0:c0:14:8f:ae:cf:7c: b1:e1:5e:a0:48:b7:a3:37:c7:b7:d6:1c:db:ec:34:53:d5:74: 82:e6:2d:37:4d:bc:be:0b:9a:da:3f:1e:27:48:6f:5b:4b:bf: e4:83:d9:a5:72:3a:e1:b7:ee:43:5b:2a:50:0b:03:e2:52:38: 35:9f:f7:f5:89:da:07:70:70:e0:fb:c8:7f:19:79:1c:cf:77: 32:f1:14:94:63:bf:0a:b6:44:02:79:92:32:16:75:c3:28:84: 3b:bc:07:ff:75:fa:d9:21:77:9b:99:a6:84:4f:00:e6:7c:f4: 57:c3:7d:ac:5d:9f:7f:61:c5:ff:d7:65:63:10:c6:4a:9b:0c: 50:73:fa:7a:26:73:ae:cc:c4:d2:45:d8:9c:29:52:41:db:61: 49:fc:7c:d9:1c:c6:8b:c1:63:72:59:d8:1d:42:87:03:b7:7c: 7b:e2:29:47:8e:1f:31:bf:2f:d8:e7:11:89:ca:27:12:d5:93: 24:30:41:3e:0b:80:e0:37:71:db:23:02:66:80:6c:34:a6:ab: 61:0a:57:6e:27:01:7e:a7:fe:e0:f6:80:26:fc:52:b8:80:ac: 1f:95:e2:ed:43:b8:0e:4a:68:59:43:04:fb:ac:12:0b:19:91: 7c:6b:cb:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURaYojexVMl6Y4JrSNqZh4Wcxtc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDA3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTQyYWYxODk1MTY4NmUxZDcxNzZlZGZiNDFhZTZlZGY5 YzAzOGU3NWI1ZDM2ZTI3NTQ5OTQ1ZDdiN2VjMzcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdIR2d6HSORoRyXKmY2L+TmhFDmPjMflGZOnkNwS4sTQtq +M29ZbQA+t2vJWpu5RAyxlv1pEKnzKXDEPpz7lMyb2Xhum0e27iaToCG7gvzaZ5Z vtLXvf/beyrh6d6k/62EntV9JrR2n5rb7OV4XsLeU0DG8RItFjWfcoam9QpfB9Z7 Oefo5XPm/63ISGFCP+zqpLVBLInu4QeDbgiHwtqFo+IZr8jfDsMVIOwXFjnP6P1l VRB5oCQYKQGrVu4c29GpfFHUCsaWzfwEXIOG2SSXzKtPslMR6oZhACTDPC3hkq4i At0kZiMg8g/VqrauYD4S/UMkLW+JG/BGBIntZYS3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+bKFMjHEAXCuc2ydz+2mfMcX2b0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NiZjQzZDk5LTRkMDEtNGQyNC1hZGE5LTZlMzQzNjhkMWQ3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRgwDQYJKoZIhvcNAQELBQADggEBABQ5RmyyAdj3vCOw0MAUj67P fLHhXqBIt6M3x7fWHNvsNFPVdILmLTdNvL4Lmto/HidIb1tLv+SD2aVyOuG37kNb KlALA+JSODWf9/WJ2gdwcOD7yH8ZeRzPdzLxFJRjvwq2RAJ5kjIWdcMohDu8B/91 +tkhd5uZpoRPAOZ89FfDfaxdn39hxf/XZWMQxkqbDFBz+nomc67MxNJF2JwpUkHb YUn8fNkcxovBY3JZ2B1ChwO3fHviKUeOHzG/L9jnEYnKJxLVkyQwQT4LgOA3cdsj AmaAbDSmq2EKV24nAX6n/uD2gCb8UriArB+V4u1DuA5KaFlDBPusEgsZkXxry5o= -----END CERTIFICATE-----Generated at Wed Aug 26 17:39:27 2026 by rpki-client