$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa File: cd541762-84a0-4063-89f9-de14817d2419.roa (raw, json) Hash identifier: WNHtsjZmpevRIgXBq9I1SdslR88dj3BUrvx9oT2h0aI= Subject key identifier: DF:B9:38:DD:5C:1C:DC:BC:1F:51:10:35:D9:05:36:3E:BD:CF:C3:50 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 12837F0A02B6ABDE7073FDC14BA9C1F2C127B9C7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa Signing time: Fri 07 Aug 2026 04:10:11 +0000 ROA not before: Fri 07 Aug 2026 04:10:11 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:83:7f:0a:02:b6:ab:de:70:73:fd:c1:4b:a9:c1:f2:c1:27:b9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:11 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=e03c5bb66e8cd064e5f103b55066618f563c679a7c3e6b4a1dc9265d5bfd758c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:1e:fa:c1:25:ae:0f:44:11:7b:3c:ef:2e: a8:89:47:57:bf:71:d9:1a:72:d1:ca:65:a4:39:5c: 1d:b6:44:9a:69:08:ae:ba:84:d7:98:4e:49:d7:1d: 58:8e:9f:6b:d3:f9:9e:6a:57:b9:3c:e9:c5:ce:b6: 2f:7b:b2:2e:5b:a1:53:d6:72:83:d6:f7:8d:57:ca: c6:92:03:8c:a5:59:69:b1:90:a3:4d:08:2d:bf:57: f2:8d:57:87:35:09:a8:2f:d8:de:fc:45:2f:82:87: 71:0a:cc:ec:4a:59:26:43:71:2d:b7:3b:4f:2a:73: 2f:76:30:09:59:7c:4b:a3:c2:f0:63:5d:9d:b2:3f: b7:86:87:76:45:c9:b3:c1:ec:c3:dd:4e:1e:c9:df: 32:34:a7:7c:c3:06:e7:61:01:b5:f9:c9:31:1d:9a: b6:93:7f:9c:ec:f2:ea:f5:11:a5:98:6a:74:db:2f: e4:ba:5f:27:6f:d4:06:f2:49:54:66:7c:9d:4f:5c: e2:dc:6b:6e:38:21:c6:42:89:55:da:0e:4b:c9:9f: 9b:a9:4c:89:17:4f:c1:04:f6:eb:75:95:b6:f1:b8: 75:67:60:31:f3:e5:f5:61:89:74:bb:bf:6a:08:a5: 2a:d3:7b:63:20:2e:5a:59:52:12:b1:bd:95:4e:95: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:38:DD:5C:1C:DC:BC:1F:51:10:35:D9:05:36:3E:BD:CF:C3:50 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/44 Signature Algorithm: sha256WithRSAEncryption 7c:48:4e:41:68:6b:aa:25:e5:de:ff:d1:14:4f:5e:1e:cb:6f: 32:d6:07:0d:79:2d:c9:eb:cb:10:f3:f6:4b:1b:fa:86:b3:d4: 43:cf:c0:cf:a1:12:fd:e6:bf:94:55:f5:6b:0a:13:d3:88:18: 45:d9:6c:36:53:71:dd:e2:47:8f:66:56:af:ef:30:09:94:b1: 74:da:02:e1:d6:aa:d8:69:5b:a6:0b:12:6b:1f:79:9f:f0:34: ca:54:63:b3:50:f8:21:98:29:d6:21:3e:0b:6e:6d:52:46:33: 41:79:be:29:5d:5f:39:6f:0b:08:4d:0b:93:fd:4a:6a:ec:3f: b9:31:d8:0a:43:f4:36:06:de:66:49:83:77:6e:78:e2:0d:45: ae:db:02:06:d0:e5:ee:fd:93:52:f8:fe:06:cf:c3:76:e5:c9: 4e:e3:b7:4b:5d:b4:6d:4b:b3:dc:56:77:20:ae:e6:93:1f:90: bf:58:fc:ba:e3:99:c0:eb:4a:f7:aa:1f:a4:1b:b6:ca:61:72: 74:10:df:fc:43:a4:bc:d9:6e:30:4d:d0:d5:c5:65:ea:32:a7: e4:2a:65:57:fd:dd:64:48:8e:f3:bd:77:7a:f4:92:c8:b4:ec: d4:db:66:5d:5d:fb:72:1a:90:8e:7d:34:e9:14:72:b5:10:72: 32:0d:bf:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEoN/CgK2q95wc/3BS6nB8sEnuccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDExWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDNjNWJiNjZlOGNkMDY0ZTVmMTAzYjU1MDY2NjE4ZjU2 M2M2NzlhN2MzZTZiNGExZGM5MjY1ZDViZmQ3NThjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbNx76wSWuD0QRezzvLqiJR1e/cdkactHKZaQ5XB22RJpp CK66hNeYTknXHViOn2vT+Z5qV7k86cXOti97si5boVPWcoPW941XysaSA4ylWWmx kKNNCC2/V/KNV4c1Cagv2N78RS+Ch3EKzOxKWSZDcS23O08qcy92MAlZfEujwvBj XZ2yP7eGh3ZFybPB7MPdTh7J3zI0p3zDBudhAbX5yTEdmraTf5zs8ur1EaWYanTb L+S6Xydv1AbySVRmfJ1PXOLca244IcZCiVXaDkvJn5upTIkXT8EE9ut1lbbxuHVn YDHz5fVhiXS7v2oIpSrTe2MgLlpZUhKxvZVOlQhVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU37k43Vwc3LwfURA12QU2Pr3Pw1AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NkNTQxNzYyLTg0YTAtNDA2My04OWY5LWRlMTQ4MTdkMjQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAHxITkFoa6ol5d7/0RRPXh7L bzLWBw15LcnryxDz9ksb+oaz1EPPwM+hEv3mv5RV9WsKE9OIGEXZbDZTcd3iR49m Vq/vMAmUsXTaAuHWqthpW6YLEmsfeZ/wNMpUY7NQ+CGYKdYhPgtubVJGM0F5vild XzlvCwhNC5P9SmrsP7kx2ApD9DYG3mZJg3dueOINRa7bAgbQ5e79k1L4/gbPw3bl yU7jt0tdtG1Ls9xWdyCu5pMfkL9Y/LrjmcDrSveqH6QbtsphcnQQ3/xDpLzZbjBN 0NXFZeoyp+QqZVf93WRIjvO9d3r0ksi07NTbZl1d+3IakI59NOkUcrUQcjINv2U= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:52 2026 by rpki-client