$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa File: 0a8e3ca0-1721-4f46-a119-be0938dc5867.roa (raw, json) Hash identifier: L4U61CPHMyf6LDYKIpCPj3Z+29yqAOpgVkbJGlET86s= Subject key identifier: 9B:53:28:F3:48:B0:CB:E4:7D:AC:E5:2D:CC:8E:00:10:93:87:24:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 197B2A74C959E4BF17756EC94B8730AB0388151B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa Signing time: Thu 27 Aug 2026 00:00:03 +0000 ROA not before: Thu 27 Aug 2026 00:00:03 +0000 ROA not after: Wed 25 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7b:2a:74:c9:59:e4:bf:17:75:6e:c9:4b:87:30:ab:03:88:15:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 27 00:00:03 2026 GMT Not After : Nov 25 23:59:59 2026 GMT Subject: serialNumber=37a3d4ec4e190b3b11535cf676cc1dedad2991ca160085f8af8adfa141508aba, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:d6:f9:e9:75:2e:de:5b:40:09:32:b3:4e: 8b:c5:c0:45:82:e9:f9:45:d2:34:40:7d:f4:70:ca: d3:6f:53:13:d6:35:e6:cd:f4:a8:a0:4a:a5:b6:9a: 50:1f:f2:1d:86:bf:7b:32:21:b8:09:f8:99:e3:1c: 1e:69:ec:c2:d9:89:97:a1:f7:5f:4d:79:a1:9f:fc: 90:89:b3:b1:fb:3a:9a:33:05:ba:59:ff:c5:71:b6: 69:ea:fe:4f:f0:db:e1:37:98:7a:ef:b3:38:95:3f: 9b:70:ff:d5:0f:d2:1b:9e:42:fb:a5:39:76:d3:27: c2:c3:57:18:b8:86:46:a3:20:58:c7:7a:fe:9a:94: f7:ea:b6:f1:02:78:18:20:27:9c:e1:6b:43:cf:5c: 32:46:ea:3b:00:93:16:6e:80:f9:e8:e2:47:4d:80: bb:42:0a:19:fc:db:f9:a9:36:a1:98:91:1e:0b:28: b6:01:0b:1f:63:e4:7f:0d:fb:89:ff:05:9d:c6:32: a5:8a:ef:89:ec:66:ad:fd:66:76:a8:82:1d:92:20: 3c:c1:53:51:0b:d2:7f:07:a2:ca:e3:0b:ab:35:d0: 24:cf:0e:53:9a:7b:bf:1b:0b:39:ee:be:fc:6b:f0: 8d:72:84:68:21:72:cd:b7:59:cd:cd:73:cd:bd:3a: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:53:28:F3:48:B0:CB:E4:7D:AC:E5:2D:CC:8E:00:10:93:87:24:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:12::/48 Signature Algorithm: sha256WithRSAEncryption 34:5a:4b:00:1d:81:50:ba:9a:ea:c3:b3:6d:74:dc:89:05:ec: 4f:63:a9:5f:1b:66:3e:eb:ac:da:5d:0d:51:fa:17:78:ad:97: 8d:91:5c:5a:35:d7:34:e3:50:f7:8f:aa:f2:f4:46:4e:b8:1f: 09:ad:6e:f8:67:c4:54:a7:8c:42:72:87:e5:6f:12:bf:b5:52: 88:d5:08:29:7f:4c:73:b9:2f:23:a6:76:0b:c7:d0:8c:93:0b: 9c:fa:5f:5e:cd:b2:c2:90:e0:0c:4d:cc:f6:b8:4b:77:e2:41: fd:cd:69:91:50:8a:f6:8e:cc:3d:a2:0a:71:6d:5f:47:bf:51: 25:c9:f8:bd:1e:5e:14:c2:a2:c9:60:0e:a8:a9:6d:2d:a5:da: 75:9d:bc:ac:0b:08:c8:78:95:fc:29:fd:e1:d3:f7:72:77:5f: 29:8f:0c:bb:52:b1:f3:93:68:5c:d1:44:c5:38:f6:7d:a2:4a: 5d:70:d0:dd:fc:04:53:83:55:2f:3a:77:db:44:86:b9:b2:e4: 35:e1:b3:86:fc:32:f7:0e:b8:5a:61:77:da:8d:c5:cb:33:be: b0:ab:48:c8:67:17:c9:05:fd:2d:07:b6:68:40:e9:a6:d0:53: 40:a6:ce:67:a5:02:3b:c8:4e:f8:f8:02:e9:ce:b7:11:41:ff: af:9c:41:76 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGXsqdMlZ5L8XdW7JS4cwqwOIFRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODI3MDAwMDAzWhcNMjYxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2EzZDRlYzRlMTkwYjNiMTE1MzVjZjY3NmNjMWRlZGFk Mjk5MWNhMTYwMDg1ZjhhZjhhZGZhMTQxNTA4YWJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+wtb56XUu3ltACTKzTovFwEWC6flF0jRAffRwytNvUxPW NebN9KigSqW2mlAf8h2Gv3syIbgJ+JnjHB5p7MLZiZeh919NeaGf/JCJs7H7Opoz BbpZ/8Vxtmnq/k/w2+E3mHrvsziVP5tw/9UP0hueQvulOXbTJ8LDVxi4hkajIFjH ev6alPfqtvECeBggJ5zha0PPXDJG6jsAkxZugPno4kdNgLtCChn82/mpNqGYkR4L KLYBCx9j5H8N+4n/BZ3GMqWK74nsZq39Znaogh2SIDzBU1EL0n8HosrjC6s10CTP DlOae78bCznuvvxr8I1yhGghcs23Wc3Nc829OhLjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm1Mo80iwy+R9rOUtzI4AEJOHJCYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBhOGUzY2EwLTE3MjEtNGY0Ni1hMTE5LWJlMDkzOGRjNTg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxABIwDQYJKoZIhvcNAQELBQADggEBADRaSwAdgVC6murDs2103IkF 7E9jqV8bZj7rrNpdDVH6F3itl42RXFo11zTjUPePqvL0Rk64HwmtbvhnxFSnjEJy h+VvEr+1UojVCCl/THO5LyOmdgvH0IyTC5z6X17NssKQ4AxNzPa4S3fiQf3NaZFQ ivaOzD2iCnFtX0e/USXJ+L0eXhTCoslgDqipbS2l2nWdvKwLCMh4lfwp/eHT93J3 XymPDLtSsfOTaFzRRMU49n2iSl1w0N38BFODVS86d9tEhrmy5DXhs4b8MvcOuFph d9qNxcszvrCrSMhnF8kF/S0HtmhA6abQU0CmzmelAjvITvj4AunOtxFB/6+cQXY= -----END CERTIFICATE-----Generated at Sun Sep 20 16:45:03 2026 by rpki-client