$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa File: da785247-8a0c-4cca-ab5c-6c352637b4af.roa (raw, json) Hash identifier: +qiyMBcMp4ZAvpmg5SP6Vrvt3LhmBME00OGvjYAbzZE= Subject key identifier: 7F:D4:C1:FB:61:01:5A:5F:51:B4:BC:E8:AE:44:F3:83:C9:B4:D3:0C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 17684CB755FFCE61AE804B6F63448ECF52940D3A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa Signing time: Sun 02 Aug 2026 00:10:06 +0000 ROA not before: Sun 02 Aug 2026 00:10:06 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:68:4c:b7:55:ff:ce:61:ae:80:4b:6f:63:44:8e:cf:52:94:0d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 2 00:10:06 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=e59110ac03b0fe82d5cd38dfdfac0128de083ad4c5b7048e91181582a4e831c6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:13:16:ae:2a:70:dd:cb:bd:17:a0:60:91: 45:f1:0b:a7:fe:5c:2c:42:a1:1d:dd:20:fc:5b:d4: ef:96:59:da:c0:0f:d9:7e:2b:26:cf:4e:ba:73:19: dd:6e:74:a9:4b:7c:64:f8:44:6b:b7:20:0a:de:aa: 6d:83:9c:da:0a:2f:f9:58:9b:c7:55:83:95:ee:ce: 0d:49:bc:e0:4a:cf:ee:98:50:b4:b8:57:2f:95:f0: 4f:5e:d3:5c:9a:a5:9e:75:c3:74:01:83:f1:4e:56: 57:bc:81:e2:e8:d2:63:a0:b7:27:1c:71:b1:25:06: 3b:de:bb:8e:ab:3e:2a:35:7e:e0:dd:2d:8e:50:fb: d5:a7:85:cc:78:a5:cd:e7:20:3e:5e:b4:94:b7:27: 06:df:36:5c:c6:91:7f:c7:55:aa:f8:30:43:ac:36: 21:66:4a:05:b1:28:ab:d4:a5:6e:2a:81:66:37:2f: 07:67:d2:61:9e:da:dd:a8:05:08:d1:5d:b0:52:7f: 73:8a:8d:d7:65:be:d9:d2:b7:4b:a9:fa:13:e5:49: 37:f7:09:5d:32:ee:45:2a:54:03:7a:1b:54:d5:4a: b2:13:c8:6f:f9:6f:16:29:01:8b:d8:6e:78:a1:82: 4e:b7:85:20:d1:a6:98:ec:a5:f7:20:ce:21:13:3f: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:C1:FB:61:01:5A:5F:51:B4:BC:E8:AE:44:F3:83:C9:B4:D3:0C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5505::/48 Signature Algorithm: sha256WithRSAEncryption 88:45:3b:87:d3:9c:d9:9c:4c:f6:a9:33:9c:b0:bb:1b:93:2d: 1a:2c:32:f0:7e:95:8b:45:1e:1a:f8:b9:0a:22:69:72:21:2d: 94:e9:c7:21:66:37:91:3b:1e:cd:5e:56:da:d2:41:4f:36:dd: fa:28:1f:17:f9:32:90:b5:3d:03:92:a1:f4:15:4f:cb:2c:6e: 65:74:16:cf:42:1b:fb:71:df:24:78:93:cd:c7:6a:5f:ac:4d: be:32:7b:41:0c:c1:87:f6:d3:ed:b0:e9:2c:26:47:0a:b1:33: f5:cf:7e:09:d9:70:c5:b7:08:1d:88:d3:52:5d:1f:82:1c:20: 94:42:11:5c:48:91:66:60:4f:8d:8a:fd:3b:fa:b0:bf:54:0c: 50:f5:78:f7:95:76:ad:21:4a:56:39:58:c3:f5:a5:5d:f1:f0: ac:bb:3d:cb:a6:ad:61:c1:0b:2f:02:df:68:89:0b:d2:75:2a: 86:0f:35:95:a8:d9:70:c9:52:a9:a6:4a:f3:7f:77:1f:be:f6: 51:a1:69:a1:fe:ce:46:99:5b:da:12:e7:c9:32:92:de:de:54: 16:1f:ee:dc:02:92:80:50:82:e6:b5:7f:2b:ba:0d:1d:e2:c2: 4d:ff:44:3a:e6:af:e8:a0:56:21:38:a7:da:0f:bb:5a:81:09: 6c:d9:27:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF2hMt1X/zmGugEtvY0SOz1KUDTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAyMDAxMDA2WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTkxMTBhYzAzYjBmZTgyZDVjZDM4ZGZkZmFjMDEyOGRl MDgzYWQ0YzViNzA0OGU5MTE4MTU4MmE0ZTgzMWM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB6RMWripw3cu9F6BgkUXxC6f+XCxCoR3dIPxb1O+WWdrA D9l+KybPTrpzGd1udKlLfGT4RGu3IAreqm2DnNoKL/lYm8dVg5Xuzg1JvOBKz+6Y ULS4Vy+V8E9e01yapZ51w3QBg/FOVle8geLo0mOgtycccbElBjveu46rPio1fuDd LY5Q+9Wnhcx4pc3nID5etJS3JwbfNlzGkX/HVar4MEOsNiFmSgWxKKvUpW4qgWY3 Lwdn0mGe2t2oBQjRXbBSf3OKjddlvtnSt0up+hPlSTf3CV0y7kUqVAN6G1TVSrIT yG/5bxYpAYvYbnihgk63hSDRppjspfcgziETPyTTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf9TB+2EBWl9RtLzorkTzg8m00wwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhNzg1MjQ3LThhMGMtNGNjYS1hYjVjLTZjMzUyNjM3YjRhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQUwDQYJKoZIhvcNAQELBQADggEBAIhFO4fTnNmcTPapM5ywuxuT LRosMvB+lYtFHhr4uQoiaXIhLZTpxyFmN5E7Hs1eVtrSQU823fooHxf5MpC1PQOS ofQVT8ssbmV0Fs9CG/tx3yR4k83Hal+sTb4ye0EMwYf20+2w6SwmRwqxM/XPfgnZ cMW3CB2I01JdH4IcIJRCEVxIkWZgT42K/Tv6sL9UDFD1ePeVdq0hSlY5WMP1pV3x 8Ky7PcumrWHBCy8C32iJC9J1KoYPNZWo2XDJUqmmSvN/dx++9lGhaaH+zkaZW9oS 58kykt7eVBYf7twCkoBQgua1fyu6DR3iwk3/RDrmr+igViE4p9oPu1qBCWzZJyQ= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:28 2026 by rpki-client