$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa File: f30a276d-715e-46ee-8158-fd4576a10978.roa (raw, json) Hash identifier: z0odVO2xmH+h/PdnsY5RklpPuBd8UKf7aki3r0gO1uE= Subject key identifier: D9:79:29:36:2A:FF:1B:08:7D:EC:26:0C:5A:78:A2:7C:FC:9A:3D:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7357E971680DCB16FD5FDE159FFCE6AB5AD7DAE5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa Signing time: Fri 07 Aug 2026 04:10:26 +0000 ROA not before: Fri 07 Aug 2026 04:10:26 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:57:e9:71:68:0d:cb:16:fd:5f:de:15:9f:fc:e6:ab:5a:d7:da:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:26 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=5fb0b8c5b1bcdba065dc26127e6ce19e163756e635ce7a2a79225e549aa833fe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:ed:76:c3:ca:9e:63:06:4d:96:c2:f9:c9: 73:88:a7:f7:6c:f1:a7:56:25:17:95:79:b6:44:9a: 9d:59:fc:bd:8e:c9:8f:24:c7:e6:7c:0c:43:be:4e: 3a:78:32:18:2e:ed:39:38:67:62:45:cf:e9:1c:89: e3:c7:63:80:7f:8b:f5:15:dc:e5:d2:d7:e5:e8:a9: 9f:0a:b9:f9:6b:11:52:b6:79:e6:f0:ab:28:03:8b: 11:cd:ee:ba:d6:fe:a6:56:74:fc:23:d0:71:ba:b1: 08:7e:e6:41:3f:11:99:dd:d2:33:3e:9c:34:ba:5c: 32:37:71:34:b7:88:a6:a8:b8:44:58:50:50:d0:09: fc:6c:55:70:6d:93:54:2b:b8:f1:e0:26:82:03:c1: f5:5a:67:63:e0:65:6d:33:cd:12:69:e1:b1:57:4a: 2c:9f:78:94:d5:a4:4c:c6:57:22:a5:10:7e:d5:f9: b2:01:cc:94:bd:19:c4:cb:f3:0a:95:51:fe:ac:ed: 60:df:c6:8a:60:4a:86:cd:6c:72:7a:8f:7d:71:c8: 1a:80:4c:22:a3:9f:00:c7:a3:84:6c:be:c0:c8:0f: 3c:a9:7d:2d:86:de:4d:76:d0:3b:8a:7b:9c:bf:8d: 1c:18:63:93:78:a5:05:58:ff:8b:a3:37:34:0c:f2: 27:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:29:36:2A:FF:1B:08:7D:EC:26:0C:5A:78:A2:7C:FC:9A:3D:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f30a276d-715e-46ee-8158-fd4576a10978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 72:e1:20:d2:fe:30:fe:f1:c1:29:e9:49:79:2a:da:90:03:33: 7d:a2:b2:52:96:f6:27:74:b7:b1:2c:f7:3b:e2:b2:20:33:c8: 20:ed:1c:f0:57:fa:cd:e4:46:9f:38:03:78:bc:11:53:b7:f7: f7:dc:1a:77:00:f5:85:fc:74:33:59:2d:02:21:23:e8:8d:dd: d5:c4:bf:18:2f:64:c5:19:92:fb:5f:84:8b:c5:8e:00:17:60: 2a:dd:19:95:ac:ef:84:5e:37:15:1e:c1:7f:2e:53:c3:90:e2: fb:de:fd:7d:21:63:cd:bf:23:c5:34:e6:36:5f:bc:43:0a:3d: fd:25:23:73:d1:c1:98:86:e8:e5:8d:dd:6e:a1:5c:f1:50:46: 3b:2d:19:46:5e:fa:25:db:05:cf:31:bb:b6:3b:e6:1f:c8:38: ac:c8:10:9b:5f:6e:b7:c3:78:16:6a:93:be:f0:6b:2d:54:0a: 1a:8a:75:28:bb:60:dc:fe:25:21:69:0d:2e:a1:08:12:77:c6: b2:02:9a:96:d3:83:de:2a:99:6b:70:62:7c:76:43:51:90:0f: c2:63:5a:55:cd:9f:7e:b5:db:27:f2:0c:77:1d:38:7f:a7:d1: d4:83:10:4f:b3:ad:1b:4b:bf:44:66:89:fa:87:1e:64:65:84: 47:bc:27:d0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUc1fpcWgNyxb9X94Vn/zmq1rX2uUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDI2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmIwYjhjNWIxYmNkYmEwNjVkYzI2MTI3ZTZjZTE5ZTE2 Mzc1NmU2MzVjZTdhMmE3OTIyNWU1NDlhYTgzM2ZlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3iu12w8qeYwZNlsL5yXOIp/ds8adWJReVebZEmp1Z/L2O yY8kx+Z8DEO+Tjp4Mhgu7Tk4Z2JFz+kciePHY4B/i/UV3OXS1+XoqZ8KuflrEVK2 eebwqygDixHN7rrW/qZWdPwj0HG6sQh+5kE/EZnd0jM+nDS6XDI3cTS3iKaouERY UFDQCfxsVXBtk1QruPHgJoIDwfVaZ2PgZW0zzRJp4bFXSiyfeJTVpEzGVyKlEH7V +bIBzJS9GcTL8wqVUf6s7WDfxopgSobNbHJ6j31xyBqATCKjnwDHo4RsvsDIDzyp fS2G3k120DuKe5y/jRwYY5N4pQVY/4ujNzQM8ieTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2XkpNir/Gwh97CYMWniifPyaPY4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzMGEyNzZkLTcxNWUtNDZlZS04MTU4LWZkNDU3NmExMDk3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAcuEg0v4w/vHBKelJeSrakAMz faKyUpb2J3S3sSz3O+KyIDPIIO0c8Ff6zeRGnzgDeLwRU7f399wadwD1hfx0M1kt AiEj6I3d1cS/GC9kxRmS+1+Ei8WOABdgKt0ZlazvhF43FR7Bfy5Tw5Di+979fSFj zb8jxTTmNl+8Qwo9/SUjc9HBmIbo5Y3dbqFc8VBGOy0ZRl76JdsFzzG7tjvmH8g4 rMgQm19ut8N4FmqTvvBrLVQKGop1KLtg3P4lIWkNLqEIEnfGsgKaltOD3iqZa3Bi fHZDUZAPwmNaVc2ffrXbJ/IMdx04f6fR1IMQT7OtG0u/RGaJ+oceZGWER7wn0A== -----END CERTIFICATE-----Generated at Thu Aug 27 04:09:42 2026 by rpki-client