$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e2900d4f-cb25-44da-adfe-1ec10eadaaa8.roa File: e2900d4f-cb25-44da-adfe-1ec10eadaaa8.roa (raw, json) Hash identifier: unqbIomSmdSwVZExrjbbVhJooS0v4JvDBD+0//Qi/xE= Subject key identifier: CE:F5:83:8D:13:C4:34:84:3F:76:58:14:05:E9:9F:C2:AE:5C:59:20 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6D6823C2B2E423B4707BFCC5C3D1C8B015693C39 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e2900d4f-cb25-44da-adfe-1ec10eadaaa8.roa Signing time: Mon 10 Aug 2026 00:20:04 +0000 ROA not before: Mon 10 Aug 2026 00:20:04 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:603::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:68:23:c2:b2:e4:23:b4:70:7b:fc:c5:c3:d1:c8:b0:15:69:3c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 10 00:20:04 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=e11d142a63127066e9960afee2ae4ce3240de98e6e3a184660fa157a41c0749e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:f7:c9:4a:71:e4:7f:58:ca:02:36:03:18: 94:d1:29:38:30:f7:94:e2:5e:44:9b:63:f7:bc:0b: a2:25:28:41:a6:33:7f:00:fb:87:4b:87:fe:de:d0: 42:36:b9:40:b8:19:8f:f5:b3:7d:b4:44:71:2f:0f: 50:1d:51:94:bd:1a:75:97:19:69:6d:85:ba:6f:ea: 10:04:d6:2e:6d:ab:72:49:ab:d1:01:ed:d9:02:ed: dc:6f:3d:be:50:93:10:7c:ae:14:eb:5c:71:8f:bb: bc:d9:a9:54:a8:46:e4:af:16:0f:a4:74:57:92:2e: 20:33:d4:4e:f0:3a:3c:fe:73:67:f2:72:0f:3b:c1: 37:d4:cb:01:63:00:47:fc:98:48:dc:92:0a:11:76: aa:58:be:66:6d:94:bb:1e:56:36:c6:48:c1:14:9c: 90:c1:ac:b5:3c:37:61:6e:ab:34:ef:ac:58:24:a2: 4e:e2:41:1a:96:9b:b1:6e:8d:b0:e7:f4:30:dd:65: 15:ef:c5:05:9a:39:67:85:b7:92:99:90:cf:4f:75: 1f:14:dd:97:3a:74:de:12:af:d6:d0:68:04:b2:d8: e7:26:61:93:54:2a:93:b0:51:89:82:f6:02:e7:b6: a3:1d:3b:5a:98:3c:01:d7:15:14:e7:50:5e:44:02: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:83:8D:13:C4:34:84:3F:76:58:14:05:E9:9F:C2:AE:5C:59:20 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e2900d4f-cb25-44da-adfe-1ec10eadaaa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:603::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1c:f3:30:30:a0:c0:ba:de:1e:4e:b4:13:19:87:07:2d:a7: 72:ce:e2:79:99:d2:a8:2a:37:8e:23:c7:ae:57:9f:79:e1:b7: 3c:fb:6e:58:7d:1f:b8:f1:ff:58:47:b7:6e:ba:4d:7b:2f:00: da:21:92:3e:ff:bf:fa:24:39:ce:5f:b3:05:01:ad:92:53:f8: 1e:c8:0a:ae:5e:26:dc:15:b2:31:f1:95:e5:a9:4c:43:6f:c4: aa:c6:c2:56:0d:85:e0:ea:1d:d9:1c:d9:87:ba:b1:36:33:30: 6b:54:02:d0:43:e8:1a:f4:12:a4:ea:c5:03:08:84:44:98:f8: 19:d4:43:29:2c:f5:cd:f2:ce:1a:2b:bc:47:a2:99:89:f5:36: 10:48:bf:eb:e8:18:67:d7:49:69:9e:4c:ae:9f:15:2e:45:71: 19:ad:ce:9c:c7:75:df:1d:24:83:b2:89:27:ce:ff:54:a5:35: 42:95:7f:6f:5f:67:fb:76:17:2d:34:f9:11:94:6a:91:b7:ee: ef:29:d0:36:0b:da:e4:7c:bb:7b:c1:a3:d4:1f:b5:01:55:f9: 12:98:dd:42:a3:b2:95:43:64:66:10:96:bb:56:39:e7:b6:bd: c1:fc:f0:d2:81:97:32:41:dc:66:ee:95:db:10:1c:2d:6c:b8: bb:62:58:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbWgjwrLkI7Rwe/zFw9HIsBVpPDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODEwMDAyMDA0WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTFkMTQyYTYzMTI3MDY2ZTk5NjBhZmVlMmFlNGNlMzI0 MGRlOThlNmUzYTE4NDY2MGZhMTU3YTQxYzA3NDllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmT/fJSnHkf1jKAjYDGJTRKTgw95TiXkSbY/e8C6IlKEGm M38A+4dLh/7e0EI2uUC4GY/1s320RHEvD1AdUZS9GnWXGWlthbpv6hAE1i5tq3JJ q9EB7dkC7dxvPb5QkxB8rhTrXHGPu7zZqVSoRuSvFg+kdFeSLiAz1E7wOjz+c2fy cg87wTfUywFjAEf8mEjckgoRdqpYvmZtlLseVjbGSMEUnJDBrLU8N2FuqzTvrFgk ok7iQRqWm7FujbDn9DDdZRXvxQWaOWeFt5KZkM9PdR8U3Zc6dN4Sr9bQaASy2Ocm YZNUKpOwUYmC9gLntqMdO1qYPAHXFRTnUF5EAo39AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzvWDjRPENIQ/dlgUBemfwq5cWSAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UyOTAwZDRmLWNiMjUtNDRkYS1hZGZlLTFlYzEwZWFkYWFhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgMwDQYJKoZIhvcNAQELBQADggEBABsc8zAwoMC63h5OtBMZhwct p3LO4nmZ0qgqN44jx65Xn3nhtzz7blh9H7jx/1hHt266TXsvANohkj7/v/okOc5f swUBrZJT+B7ICq5eJtwVsjHxleWpTENvxKrGwlYNheDqHdkc2Ye6sTYzMGtUAtBD 6Br0EqTqxQMIhESY+BnUQyks9c3yzhorvEeimYn1NhBIv+voGGfXSWmeTK6fFS5F cRmtzpzHdd8dJIOyiSfO/1SlNUKVf29fZ/t2Fy00+RGUapG37u8p0DYL2uR8u3vB o9QftQFV+RKY3UKjspVDZGYQlrtWOee2vcH88NKBlzJB3GbuldsQHC1suLtiWJU= -----END CERTIFICATE-----Generated at Fri Sep 11 08:22:08 2026 by rpki-client