$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa File: cdcc47d5-338b-4adc-9bc7-703261ddd214.roa (raw, json) Hash identifier: oAD9UTPM3mUFP+HWu/UTyWXIKkypZxUDESrw4cDr51Y= Subject key identifier: CF:35:4D:63:CD:A4:AD:BB:C0:C5:99:92:56:38:1A:45:FE:43:EC:97 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 30D87A452044A380EF756AA814F0B282C4824F97 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa Signing time: Fri 07 Aug 2026 04:20:06 +0000 ROA not before: Fri 07 Aug 2026 04:20:06 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d8:7a:45:20:44:a3:80:ef:75:6a:a8:14:f0:b2:82:c4:82:4f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:06 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=674da92087db1253c0a390e310fe91c25438c867183cb3fff3d8a726642afa62, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:31:bb:3b:17:1f:ec:ff:00:2f:85:01:c5: f4:6e:6b:8d:6f:c6:c6:07:a8:1c:dc:f4:e8:b2:e8: 4f:04:55:fc:da:5c:c6:be:b3:de:38:12:c3:44:f8: f0:0e:9f:22:78:27:8c:d5:e2:90:1a:d0:61:cf:c3: 22:6b:82:5d:24:8b:3a:c1:1b:7a:ec:8e:fb:3b:07: 43:bf:81:17:16:9d:23:d7:6d:dd:f3:b6:09:e3:fd: 6f:e6:52:bc:0a:32:42:2e:e2:ce:1a:c7:b0:29:05: 3a:26:54:a8:ea:20:a9:07:c2:45:4e:3c:7c:26:78: dc:25:72:ad:62:34:9a:6b:4f:e9:41:74:d5:16:9f: bf:5b:ed:12:13:0e:64:eb:80:43:d7:60:36:3d:2c: dc:7e:e0:3a:64:ba:ec:01:91:4b:cf:1b:f4:24:1b: ef:08:b2:12:5f:c7:bc:15:a7:c4:e4:ea:8a:57:90: e5:56:b7:68:cf:01:b3:82:52:8a:2b:e1:e4:05:6d: 23:36:81:19:c0:77:ad:29:1c:4b:e3:6a:34:56:dd: 41:d4:52:81:f6:03:3f:50:6b:04:1c:99:53:88:d6: b3:c2:7a:aa:e4:6c:6a:95:f1:c0:fc:66:cc:25:e7: f9:2f:a4:45:a1:9e:77:1d:66:6c:11:f8:64:3f:c8: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:35:4D:63:CD:A4:AD:BB:C0:C5:99:92:56:38:1A:45:FE:43:EC:97 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6000::/44 Signature Algorithm: sha256WithRSAEncryption a5:c6:2a:93:f1:bc:9e:ef:09:2a:cb:9d:3a:8c:17:2d:e0:95: 4a:d7:5c:61:53:45:8e:ef:f8:a0:a9:a6:ed:48:58:95:60:ad: a6:aa:e4:a0:e7:cf:f5:e6:cc:1d:4f:ef:19:fc:f0:ac:4c:3b: cc:40:b2:31:07:dc:b4:f0:10:4e:5d:74:be:1e:ed:13:55:02: f0:9c:58:e4:83:a6:ff:69:04:75:81:35:04:23:4a:2f:7c:ef: 65:a6:09:11:fe:d8:a8:f1:24:9e:96:9e:3c:c3:4c:04:aa:f0: c8:49:8d:92:4b:69:23:e1:9d:61:8d:49:6b:e8:08:66:d6:72: 6b:01:3e:86:26:45:39:9f:96:b9:63:1f:6f:b4:1d:ab:f5:19: 04:9c:e6:79:a9:71:37:54:ed:01:50:b7:9d:5c:ea:fc:15:a9: 03:65:c4:5d:3e:7b:47:fe:08:54:23:dc:72:44:81:76:39:fa: ff:15:b8:ad:21:67:f2:29:4b:19:19:d9:fa:70:e2:11:dd:b9: 3e:42:0f:d5:6e:52:d4:20:8f:a3:86:6c:70:41:17:46:9f:ac: 71:04:f6:86:17:78:c7:52:38:a6:b5:d0:a8:71:bb:ff:1c:2d: 77:af:76:c5:d7:d7:01:65:f0:ee:3b:9a:92:a0:68:09:9b:40: f0:b7:ef:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMNh6RSBEo4DvdWqoFPCygsSCT5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDA2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzRkYTkyMDg3ZGIxMjUzYzBhMzkwZTMxMGZlOTFjMjU0 MzhjODY3MTgzY2IzZmZmM2Q4YTcyNjY0MmFmYTYyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCstjG7Oxcf7P8AL4UBxfRua41vxsYHqBzc9Oiy6E8EVfza XMa+s944EsNE+PAOnyJ4J4zV4pAa0GHPwyJrgl0kizrBG3rsjvs7B0O/gRcWnSPX bd3ztgnj/W/mUrwKMkIu4s4ax7ApBTomVKjqIKkHwkVOPHwmeNwlcq1iNJprT+lB dNUWn79b7RITDmTrgEPXYDY9LNx+4DpkuuwBkUvPG/QkG+8IshJfx7wVp8Tk6opX kOVWt2jPAbOCUoor4eQFbSM2gRnAd60pHEvjajRW3UHUUoH2Az9QawQcmVOI1rPC eqrkbGqV8cD8Zswl5/kvpEWhnncdZmwR+GQ/yF69AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzzVNY82krbvAxZmSVjgaRf5D7JcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NkY2M0N2Q1LTMzOGItNGFkYy05YmM3LTcwMzI2MWRkZDIxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYAAwDQYJKoZIhvcNAQELBQADggEBAKXGKpPxvJ7vCSrLnTqMFy3g lUrXXGFTRY7v+KCppu1IWJVgraaq5KDnz/XmzB1P7xn88KxMO8xAsjEH3LTwEE5d dL4e7RNVAvCcWOSDpv9pBHWBNQQjSi9872WmCRH+2KjxJJ6WnjzDTASq8MhJjZJL aSPhnWGNSWvoCGbWcmsBPoYmRTmflrljH2+0Hav1GQSc5nmpcTdU7QFQt51c6vwV qQNlxF0+e0f+CFQj3HJEgXY5+v8VuK0hZ/IpSxkZ2fpw4hHduT5CD9VuUtQgj6OG bHBBF0afrHEE9oYXeMdSOKa10Khxu/8cLXevdsXX1wFl8O47mpKgaAmbQPC374E= -----END CERTIFICATE-----Generated at Fri Sep 11 07:36:59 2026 by rpki-client