$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa File: f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa (raw, json) Hash identifier: mmcuQdHUBlAEZ3K937uOR0V7cWFV0/aJ5ch6/MwavAs= Subject key identifier: A9:BF:FE:04:94:48:00:1D:E0:3D:4E:FC:FE:67:E2:DB:A0:A5:14:07 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6AAC3031E040BA8E035A616915FB2B4A05E16606 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa Signing time: Fri 07 Aug 2026 04:10:35 +0000 ROA not before: Fri 07 Aug 2026 04:10:35 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ac:30:31:e0:40:ba:8e:03:5a:61:69:15:fb:2b:4a:05:e1:66:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:35 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=106a5b80c7418b27a446b432444f754c1c4dd3af52f5d36ca5b9ec780be20e39, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:b3:dc:75:01:05:5a:b1:17:d5:4b:f2:24: 76:d2:b2:43:b0:2c:dc:62:1c:f4:16:bc:af:ca:90: 0b:37:0f:b7:51:3d:14:26:6d:79:2d:f8:2e:56:6d: 3c:92:30:70:4d:67:7b:29:89:82:a0:8b:0b:e9:2f: f0:f4:31:c8:f9:2c:f2:38:4c:d9:c8:15:b7:f2:45: 51:41:27:69:82:13:71:e2:fa:80:8a:50:08:45:2d: f6:7c:e5:15:e8:7d:94:d7:b6:1a:39:94:78:fa:e3: 2c:1e:46:40:d1:0a:50:16:b4:b5:6d:d8:1b:26:e8: be:7d:e3:e7:b0:c3:dc:7e:3a:64:1c:db:74:1b:d2: 4f:5f:b0:5c:d4:58:4d:b6:4c:2a:c5:95:59:c4:30: 07:92:9a:c4:1e:d5:50:7b:62:e9:cc:0a:f3:d2:fe: bb:75:2e:67:d7:65:28:f9:ec:b6:77:29:83:b6:3d: 0d:48:64:7c:5e:8e:c1:38:01:bb:9a:f6:85:a0:46: c5:fb:d4:62:e9:50:6f:2b:bf:2c:b7:14:99:c6:e6: 5b:1d:29:e1:2b:aa:fd:ad:cb:fc:c7:39:48:9d:b5: 2d:b5:7d:ae:27:53:dc:1e:40:b4:f4:e5:6c:19:61: 45:c3:b5:f4:84:48:46:a9:b7:af:23:6c:a3:09:e3: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BF:FE:04:94:48:00:1D:E0:3D:4E:FC:FE:67:E2:DB:A0:A5:14:07 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/42 Signature Algorithm: sha256WithRSAEncryption 56:06:cb:73:96:46:62:1a:5e:52:4a:40:31:af:3c:5f:1b:24: ec:bd:8e:69:ba:11:30:1e:af:48:f7:30:e7:4a:c6:8b:f1:76: 0a:a1:98:ed:da:f5:a2:ea:58:42:bc:88:a4:81:f6:0c:71:7e: ee:ab:d1:33:5c:c8:0f:fb:a0:a7:f6:3a:cc:9d:3a:5b:80:31: 0f:41:f3:4d:58:bb:02:db:20:7d:91:c4:ee:5d:b0:35:fd:c9: a7:af:7c:b5:1f:89:be:91:3a:67:d9:ef:bc:93:01:93:14:59: a7:8f:58:34:c6:67:a9:64:a9:0d:2f:bc:97:d9:5e:ad:8e:15: 30:1f:ad:38:61:92:27:f4:9a:9a:11:3a:92:c0:29:84:8e:9a: 74:18:76:81:ea:b3:89:7a:ef:50:3c:5f:bf:a3:5c:c7:0b:91: e0:c4:08:2e:a1:4f:73:a8:9f:f1:45:3c:22:7a:9a:d9:83:7e: e4:1e:f9:d9:c6:c8:99:a5:11:c1:77:d3:72:2c:c2:15:e0:77: 5a:5c:f8:c5:aa:f7:a4:e6:3a:ef:68:08:c0:42:ee:d2:a3:6e: 01:23:16:32:aa:f2:e2:41:15:f8:ff:da:1a:80:a5:a3:33:db: 93:7d:4f:62:d0:33:d6:ba:cb:09:37:d7:31:9e:a3:f5:c9:63: 3d:72:d0:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaqwwMeBAuo4DWmFpFfsrSgXhZgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDM1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDZhNWI4MGM3NDE4YjI3YTQ0NmI0MzI0NDRmNzU0YzFj NGRkM2FmNTJmNWQzNmNhNWI5ZWM3ODBiZTIwZTM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCUbPcdQEFWrEX1UvyJHbSskOwLNxiHPQWvK/KkAs3D7dR PRQmbXkt+C5WbTySMHBNZ3spiYKgiwvpL/D0Mcj5LPI4TNnIFbfyRVFBJ2mCE3Hi +oCKUAhFLfZ85RXofZTXtho5lHj64yweRkDRClAWtLVt2Bsm6L594+eww9x+OmQc 23Qb0k9fsFzUWE22TCrFlVnEMAeSmsQe1VB7YunMCvPS/rt1LmfXZSj57LZ3KYO2 PQ1IZHxejsE4Abua9oWgRsX71GLpUG8rvyy3FJnG5lsdKeErqv2ty/zHOUidtS21 fa4nU9weQLT05WwZYUXDtfSESEapt68jbKMJ423HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqb/+BJRIAB3gPU78/mfi26ClFAcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzN2M4NjMzLWFhZjMtNGE0OS1iZmE2LTc3NWFiNzcyNGQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD7gAAwDQYJKoZIhvcNAQELBQADggEBAFYGy3OWRmIaXlJKQDGvPF8b JOy9jmm6ETAer0j3MOdKxovxdgqhmO3a9aLqWEK8iKSB9gxxfu6r0TNcyA/7oKf2 OsydOluAMQ9B801YuwLbIH2RxO5dsDX9yaevfLUfib6ROmfZ77yTAZMUWaePWDTG Z6lkqQ0vvJfZXq2OFTAfrThhkif0mpoROpLAKYSOmnQYdoHqs4l671A8X7+jXMcL keDECC6hT3Oon/FFPCJ6mtmDfuQe+dnGyJmlEcF303IswhXgd1pc+MWq96TmOu9o CMBC7tKjbgEjFjKq8uJBFfj/2hqApaMz25N9T2LQM9a6ywk31zGeo/XJYz1y0CA= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:01 2026 by rpki-client