$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa File: f6334ad8-04a1-4b1e-af68-368584971f2f.roa (raw, json) Hash identifier: nLR0cwmP1vCwqmQAnEe+2rhZTcdiyEswxj9e91F6s9A= Subject key identifier: F6:5B:37:23:4E:5D:0D:F1:EE:65:57:66:B3:11:E4:3B:05:56:13:40 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 04E450EC959664C998E7426AC0A56579CC0EB209 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa Signing time: Fri 07 Aug 2026 04:10:39 +0000 ROA not before: Fri 07 Aug 2026 04:10:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e4:50:ec:95:96:64:c9:98:e7:42:6a:c0:a5:65:79:cc:0e:b2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:10:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=ce9c296ab58f8dae84d6a3fe5a27e5e8af0bea1f6f3b2af6585c356e77fad483, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:a2:ff:f1:a2:54:bb:96:f5:e7:c6:a5:83: 34:19:5a:87:b0:e4:2a:99:35:88:31:62:5c:30:4f: 0e:9d:8b:e3:1b:af:52:7b:55:cc:f3:6d:66:26:e9: dc:14:01:85:f7:8f:a3:33:9a:3c:09:ff:83:e8:bb: de:b4:32:25:c5:38:36:7b:c0:a4:d6:29:de:25:aa: 26:de:75:74:ca:bb:e1:15:da:39:86:5a:a4:a8:8b: d4:0b:39:b8:2c:8c:a5:d3:0b:55:bf:72:fb:94:ad: 33:92:8e:00:d2:64:61:61:d9:48:99:b1:d1:42:11: a2:2f:6f:9b:7d:3f:4e:1f:0c:1e:3c:9e:c4:74:69: 80:ca:30:bf:34:bc:cb:37:dd:51:b5:a8:4a:46:7d: 73:6e:8d:e7:52:ee:7f:3a:6a:6e:ca:4f:d2:1b:fc: 5a:f9:91:83:c0:d9:dd:f8:57:c5:4c:cc:e6:5c:fc: b4:1f:e9:7e:58:20:a0:85:b6:72:9d:04:94:4b:e8: 23:3c:80:e1:d5:3a:6a:41:87:9b:d3:5d:8a:52:78: 88:b4:73:89:b6:06:8e:86:d2:c9:8c:26:f4:59:f8: bc:2b:fb:09:b6:08:2c:a9:8e:79:75:a3:18:db:f7: 13:e1:5a:3d:48:35:28:20:d5:a9:6c:90:a3:76:0e: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:37:23:4E:5D:0D:F1:EE:65:57:66:B3:11:E4:3B:05:56:13:40 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e300::/40 Signature Algorithm: sha256WithRSAEncryption 3a:22:b1:be:4c:42:f3:d4:37:99:12:97:9d:8a:05:68:b6:22: 7c:a7:af:fc:63:b3:b6:ff:89:df:1a:41:0e:89:cf:8e:83:78: 06:7a:d9:e1:e3:df:78:c7:6c:96:eb:24:8d:d0:fe:d9:c4:1c: 07:a2:82:f0:57:78:86:c8:72:1b:d7:4b:7a:fe:c2:73:5b:8f: f6:c0:d8:ad:ae:03:87:6c:55:68:1d:9f:4b:95:3a:22:39:0e: 22:28:87:97:1b:ac:5f:c4:ed:0e:06:b9:5e:15:93:8b:aa:c2: 7c:f7:b6:ee:c3:3d:f9:6c:61:9a:6e:90:e4:fa:0f:53:9e:1c: 22:5e:c7:96:3e:8a:ee:3f:d2:4a:c2:b5:0f:5c:8d:15:a7:9c: 1b:01:e8:26:f1:10:d3:88:12:5d:3b:b4:6f:0d:c4:74:3e:7f: f8:21:29:f8:92:7f:c9:ef:a5:1b:8d:78:6d:98:b5:d5:52:f4: 79:0a:08:08:11:2e:be:66:17:e7:e4:2e:70:c8:c9:66:9b:e1: d3:f0:a3:1a:dc:78:c9:c6:6b:b5:b6:eb:ed:31:f4:90:b9:31: a5:47:34:29:b8:35:86:d6:91:9f:28:d8:c6:77:a9:64:3e:04: e8:1d:8d:9a:81:dc:e3:1b:cf:ca:55:30:36:20:32:b1:02:05: 02:71:99:e5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBORQ7JWWZMmY50JqwKVlecwOsgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDM5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTljMjk2YWI1OGY4ZGFlODRkNmEzZmU1YTI3ZTVlOGFm MGJlYTFmNmYzYjJhZjY1ODVjMzU2ZTc3ZmFkNDgzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJvaL/8aJUu5b158algzQZWoew5CqZNYgxYlwwTw6di+Mb r1J7VczzbWYm6dwUAYX3j6MzmjwJ/4Pou960MiXFODZ7wKTWKd4lqibedXTKu+EV 2jmGWqSoi9QLObgsjKXTC1W/cvuUrTOSjgDSZGFh2UiZsdFCEaIvb5t9P04fDB48 nsR0aYDKML80vMs33VG1qEpGfXNujedS7n86am7KT9Ib/Fr5kYPA2d34V8VMzOZc /LQf6X5YIKCFtnKdBJRL6CM8gOHVOmpBh5vTXYpSeIi0c4m2Bo6G0smMJvRZ+Lwr +wm2CCypjnl1oxjb9xPhWj1INSgg1alskKN2Ds/vAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9ls3I05dDfHuZVdmsxHkOwVWE0AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2MzM0YWQ4LTA0YTEtNGIxZS1hZjY4LTM2ODU4NDk3MWYyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74zANBgkqhkiG9w0BAQsFAAOCAQEAOiKxvkxC89Q3mRKXnYoFaLYi fKev/GOztv+J3xpBDonPjoN4BnrZ4ePfeMdsluskjdD+2cQcB6KC8Fd4hshyG9dL ev7Cc1uP9sDYra4Dh2xVaB2fS5U6IjkOIiiHlxusX8TtDga5XhWTi6rCfPe27sM9 +Wxhmm6Q5PoPU54cIl7Hlj6K7j/SSsK1D1yNFaecGwHoJvEQ04gSXTu0bw3EdD5/ +CEp+JJ/ye+lG414bZi11VL0eQoICBEuvmYX5+QucMjJZpvh0/CjGtx4ycZrtbbr 7TH0kLkxpUc0Kbg1htaRnyjYxnepZD4E6B2NmoHc4xvPylUwNiAysQIFAnGZ5Q== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:38 2026 by rpki-client