$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa File: f37e75c0-e669-4410-b627-fae811cab6fc.roa (raw, json) Hash identifier: oxXAHfQtu5m2joj7BI+9w+It+yqYKNeGHPabb8kMxcQ= Subject key identifier: 99:02:06:62:52:34:EE:29:0D:05:7B:A6:84:23:40:50:00:F6:77:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6D80D4A1367F1E02484A1B5B90CDB74740B0922F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa Signing time: Wed 19 Aug 2026 00:20:06 +0000 ROA not before: Wed 19 Aug 2026 00:20:06 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8a10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:80:d4:a1:36:7f:1e:02:48:4a:1b:5b:90:cd:b7:47:40:b0:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 19 00:20:06 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=d180c564394640e5031a1ad117fc05f678300b997c08cc92dd65cd0b0ff6f797, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:67:8a:f9:cd:1b:07:7c:32:14:28:bc:ff: 34:68:e3:e1:f0:dc:24:98:10:aa:da:44:d0:19:dd: 52:36:83:d2:bc:0a:4e:66:c0:a2:ef:69:f0:c4:22: 47:ae:d1:0b:1a:35:f3:08:cd:c5:62:81:96:73:43: 1d:63:e3:1f:15:d9:ae:a5:e5:0e:52:19:14:17:b3: e4:04:9c:c8:46:a2:d4:81:60:6d:ab:eb:67:86:18: 04:b6:55:05:d2:67:79:f3:25:8a:41:1c:97:71:a9: 10:a6:ea:50:2a:b8:38:2a:5c:a7:b6:3a:c8:6b:95: 4b:2e:52:b0:7c:6d:c3:12:5f:32:94:21:98:1f:2b: 23:10:db:96:12:63:b2:6f:31:80:29:ca:0b:bb:9b: 1a:8c:68:e6:fb:94:ff:0d:7d:4b:df:ed:80:c8:1c: 9c:11:79:8e:bf:11:0a:b5:cd:26:cf:a3:23:2e:91: 61:7e:54:49:81:b7:d1:c7:8d:f5:fd:04:51:e6:f9: b8:32:e5:9e:db:90:b1:2b:61:13:f7:e5:c2:47:43: 4c:f7:7a:78:26:8e:ea:c2:5b:db:5e:1a:8b:91:01: 3e:05:4b:ca:bd:01:cf:16:13:24:16:b5:86:8c:77: 99:d5:bd:55:fb:b1:e1:2a:cc:0f:30:90:31:aa:75: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:06:62:52:34:EE:29:0D:05:7B:A6:84:23:40:50:00:F6:77:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37e75c0-e669-4410-b627-fae811cab6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a10::/44 Signature Algorithm: sha256WithRSAEncryption 9e:7e:24:c6:03:f1:a1:46:13:e4:39:fd:f9:30:de:31:db:6a: 31:45:0d:fd:5e:cf:2d:1e:6f:9c:d8:c5:2c:7c:7d:73:43:9f: 6d:64:27:f1:f4:a0:4b:c4:73:12:35:9b:bc:ef:1c:df:45:90: c0:30:d4:31:35:e2:df:13:7c:9f:fc:b9:62:21:f6:4b:59:6f: 2c:20:f2:6c:9c:7e:d8:c7:ab:7f:5f:02:ee:9b:96:e9:8e:14: 90:ca:07:64:58:e9:51:24:e1:01:67:b5:e7:ac:0b:76:bf:ac: 69:02:65:48:13:1e:f4:b8:d8:ad:a4:35:f7:cd:76:b7:1b:0a: f4:9b:6b:e8:50:3a:8a:e7:35:db:1b:23:fa:2c:87:15:ab:74: 47:53:e8:ed:0a:7d:f0:fe:36:60:f2:30:fa:b8:27:ce:2f:ce: 71:ad:76:21:5f:c6:3b:62:e4:98:30:f6:32:79:9b:5e:ea:17: 71:8e:82:10:91:29:73:06:1b:d8:1a:dd:c9:01:f9:a3:de:d3: f6:67:3d:a9:35:a8:fd:a0:b6:10:d1:1f:1b:9e:cb:56:ce:af: 2b:b7:21:66:67:95:d7:c1:5d:a7:87:9a:e0:3c:48:b5:a7:2f: ab:52:55:f7:f9:7a:51:e8:9d:44:31:26:b5:5a:b9:4c:a9:1a: 9e:16:d7:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbYDUoTZ/HgJIShtbkM23R0Cwki8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODE5MDAyMDA2WhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTgwYzU2NDM5NDY0MGU1MDMxYTFhZDExN2ZjMDVmNjc4 MzAwYjk5N2MwOGNjOTJkZDY1Y2QwYjBmZjZmNzk3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrGmeK+c0bB3wyFCi8/zRo4+Hw3CSYEKraRNAZ3VI2g9K8 Ck5mwKLvafDEIkeu0QsaNfMIzcVigZZzQx1j4x8V2a6l5Q5SGRQXs+QEnMhGotSB YG2r62eGGAS2VQXSZ3nzJYpBHJdxqRCm6lAquDgqXKe2OshrlUsuUrB8bcMSXzKU IZgfKyMQ25YSY7JvMYApygu7mxqMaOb7lP8NfUvf7YDIHJwReY6/EQq1zSbPoyMu kWF+VEmBt9HHjfX9BFHm+bgy5Z7bkLErYRP35cJHQ0z3engmjurCW9teGouRAT4F S8q9Ac8WEyQWtYaMd5nVvVX7seEqzA8wkDGqdcKNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmQIGYlI07ikNBXumhCNAUAD2d5AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzN2U3NWMwLWU2NjktNDQxMC1iNjI3LWZhZTgxMWNhYjZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxihAwDQYJKoZIhvcNAQELBQADggEBAJ5+JMYD8aFGE+Q5/fkw3jHb ajFFDf1ezy0eb5zYxSx8fXNDn21kJ/H0oEvEcxI1m7zvHN9FkMAw1DE14t8TfJ/8 uWIh9ktZbywg8mycftjHq39fAu6blumOFJDKB2RY6VEk4QFnteesC3a/rGkCZUgT HvS42K2kNffNdrcbCvSba+hQOornNdsbI/oshxWrdEdT6O0KffD+NmDyMPq4J84v znGtdiFfxjti5Jgw9jJ5m17qF3GOghCRKXMGG9ga3ckB+aPe0/ZnPak1qP2gthDR Hxuey1bOryu3IWZnldfBXaeHmuA8SLWnL6tSVff5elHonUQxJrVauUypGp4W14o= -----END CERTIFICATE-----Generated at Mon Sep 14 08:22:06 2026 by rpki-client