$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa File: d17966f5-59b2-4e40-9068-579a0f07eb22.roa (raw, json) Hash identifier: Z1Ojd7UqKz4QjHbkMVnFUvEyjMNjU2XPOE77nP/krl0= Subject key identifier: F0:10:92:22:A4:97:65:E0:7C:0F:16:E1:39:AE:6D:DE:66:9F:FC:43 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0A69BC35DA573DE3AD10644B5B2610A73C54F814 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa Signing time: Mon 03 Aug 2026 00:40:04 +0000 ROA not before: Mon 03 Aug 2026 00:40:04 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:69:bc:35:da:57:3d:e3:ad:10:64:4b:5b:26:10:a7:3c:54:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 3 00:40:04 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=4e893245f0403668bd4e050ddaab8173157016f0ff16a874a3bb711b21556751, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:1e:68:1b:6d:96:4d:e9:c4:8c:ee:79:23: fc:3a:f2:3d:24:4e:06:87:5c:dd:a7:d4:99:a7:c8: 78:ca:35:04:bb:a4:80:f0:ec:3c:71:dc:25:56:ed: 60:e8:fd:b3:61:b1:d5:24:22:b6:ec:bc:43:e7:6a: 05:96:fe:e7:37:8c:5c:ce:37:2f:40:e9:4e:0e:8a: 64:13:0f:eb:b2:f1:a7:ec:b6:dd:7c:52:81:e3:f7: 12:4b:45:e9:d0:97:21:85:16:08:d6:58:db:11:3f: ae:07:d1:d0:bb:ff:87:0e:24:65:b9:f3:49:4e:fc: b8:7b:3c:7e:f9:4d:66:df:86:00:49:13:3d:ed:fc: fb:bc:95:86:4a:38:51:d4:8f:5f:84:37:39:a7:ae: 45:65:74:88:f9:b7:6f:eb:5e:8d:bd:1e:06:1a:4f: db:30:83:31:55:f4:99:c7:de:d6:37:7f:50:34:7d: 03:61:16:a2:2a:7a:89:f1:72:f0:2d:a2:72:45:9d: c7:9e:02:b7:fc:39:e0:8b:73:53:2f:82:43:bf:8a: 8e:4a:5f:22:f8:f8:9d:40:89:db:cc:ce:bd:79:a1: f1:51:5a:d1:cf:c1:f8:c3:0e:ba:85:31:18:0d:5c: 6c:fb:ed:0f:5d:df:1a:03:a2:91:ed:2d:1e:89:5a: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:92:22:A4:97:65:E0:7C:0F:16:E1:39:AE:6D:DE:66:9F:FC:43 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d17966f5-59b2-4e40-9068-579a0f07eb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b00::/48 Signature Algorithm: sha256WithRSAEncryption 3c:9b:da:1c:06:68:36:a7:a0:03:13:b4:93:16:39:59:69:0b: 2a:5a:e9:a5:60:dc:d4:52:e9:65:df:82:80:10:65:fa:f3:8b: 20:8f:70:c4:48:5f:f8:92:8d:52:47:f0:52:b5:2c:ef:77:37: 9d:b5:97:8e:7a:ec:61:d0:5c:24:02:9e:73:43:8f:bc:5b:e2: 31:d1:c3:2f:64:d5:17:de:49:b7:32:31:19:c3:63:60:e5:61: 03:f0:47:a8:b3:5d:67:53:06:75:0c:99:18:1c:a9:10:7e:75: a2:c8:d7:42:c7:f7:56:81:fc:f7:9d:8f:c8:aa:5e:b3:b0:70: 1b:eb:fd:d5:8b:d7:ed:ba:ad:ef:b7:55:f0:2c:f0:56:84:ba: 18:e9:5f:cd:0a:6f:89:e5:5a:80:18:9a:74:50:07:25:c7:8f: d5:57:fb:bc:0b:4e:27:78:bb:d5:2d:43:87:ce:8f:03:35:e4: 07:04:a9:63:ff:ca:f7:a7:65:d5:ff:46:a0:d2:09:01:fd:fe: ec:a0:c6:85:9d:2c:e3:0d:f2:21:0a:29:27:cb:95:66:93:3c: da:52:90:fd:d1:53:ed:06:e9:04:c0:1f:ff:27:6e:c6:1b:1b: e0:1b:a5:70:d7:7f:52:13:9d:f5:dc:6a:5a:4a:52:25:ce:9f: 0b:52:76:cf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCmm8NdpXPeOtEGRLWyYQpzxU+BQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAzMDA0MDA0WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTg5MzI0NWYwNDAzNjY4YmQ0ZTA1MGRkYWFiODE3MzE1 NzAxNmYwZmYxNmE4NzRhM2JiNzExYjIxNTU2NzUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFix5oG22WTenEjO55I/w68j0kTgaHXN2n1JmnyHjKNQS7 pIDw7Dxx3CVW7WDo/bNhsdUkIrbsvEPnagWW/uc3jFzONy9A6U4OimQTD+uy8afs tt18UoHj9xJLRenQlyGFFgjWWNsRP64H0dC7/4cOJGW580lO/Lh7PH75TWbfhgBJ Ez3t/Pu8lYZKOFHUj1+ENzmnrkVldIj5t2/rXo29HgYaT9swgzFV9JnH3tY3f1A0 fQNhFqIqeonxcvAtonJFnceeArf8OeCLc1MvgkO/io5KXyL4+J1AidvMzr15ofFR WtHPwfjDDrqFMRgNXGz77Q9d3xoDopHtLR6JWvORAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8BCSIqSXZeB8DxbhOa5t3maf/EMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QxNzk2NmY1LTU5YjItNGU0MC05MDY4LTU3OWEwZjA3ZWIyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwAwDQYJKoZIhvcNAQELBQADggEBADyb2hwGaDanoAMTtJMWOVlp Cypa6aVg3NRS6WXfgoAQZfrziyCPcMRIX/iSjVJH8FK1LO93N521l4567GHQXCQC nnNDj7xb4jHRwy9k1RfeSbcyMRnDY2DlYQPwR6izXWdTBnUMmRgcqRB+daLI10LH 91aB/Pedj8iqXrOwcBvr/dWL1+26re+3VfAs8FaEuhjpX80Kb4nlWoAYmnRQByXH j9VX+7wLTid4u9UtQ4fOjwM15AcEqWP/yvenZdX/RqDSCQH9/uygxoWdLOMN8iEK KSfLlWaTPNpSkP3RU+0G6QTAH/8nbsYbG+AbpXDXf1ITnfXcalpKUiXOnwtSds8= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:13 2026 by rpki-client