$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa File: 3002932a-a936-4cfa-b08c-a80730fbf002.roa (raw, json) Hash identifier: LlVcnd9cA8r27SmyUNDilX8aS6AxHXhWk5moPPYmp6Y= Subject key identifier: F0:6F:C8:1E:CE:2B:1E:F5:01:B6:43:1B:19:6F:F0:64:A3:D0:9F:B0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1ACE31A94733DDBC03FD6E085DD9E350FEDF77E2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa Signing time: Thu 27 Aug 2026 00:00:04 +0000 ROA not before: Thu 27 Aug 2026 00:00:04 +0000 ROA not after: Wed 25 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ce:31:a9:47:33:dd:bc:03:fd:6e:08:5d:d9:e3:50:fe:df:77:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 27 00:00:04 2026 GMT Not After : Nov 25 23:59:59 2026 GMT Subject: serialNumber=73bae8b9733430283c17013096536ddf1b225700732dc33988bd9124c5e16340, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:e2:5e:c5:ce:2d:7d:ca:f6:20:54:c1:47: 48:cb:bd:c5:39:3b:06:c0:26:9e:5f:b3:89:0c:a2: a4:3e:18:ad:4c:70:f9:27:91:b9:d5:60:30:bd:ca: 40:cf:2e:6f:8b:bf:bf:d5:4b:8e:7a:bb:9b:d7:ae: 70:57:ab:7c:ad:8d:15:50:53:48:06:d2:f3:ef:5b: 89:39:0e:84:eb:a4:ef:e3:01:76:a3:7c:13:80:4d: 78:88:ed:7b:6d:6e:5b:27:03:96:4b:ae:67:b5:8b: 34:f4:c9:c5:bd:68:2f:8e:fd:bf:3a:a9:42:d6:cb: 75:5e:01:00:d7:f2:57:0e:97:50:a7:b9:1f:6d:88: 4e:39:5c:28:3e:4f:f5:8f:21:00:e6:e1:14:f9:a4: f0:c0:2a:89:a6:de:e3:f2:b8:c0:a0:cc:8f:a5:f7: 05:a6:3c:bf:3d:0f:c2:98:cc:b8:3e:17:bb:f2:c7: 88:1c:63:9e:48:bb:32:5d:e6:75:f7:c0:cf:b2:d4: e3:9c:7e:94:99:1a:d0:03:b0:02:65:e4:1a:42:b2: c4:78:a2:a7:c8:98:31:a7:9c:58:63:78:0f:ce:2a: fa:0f:00:ef:cd:bf:87:92:77:cd:47:e7:4a:9a:d8: a8:56:4f:c1:0e:27:81:fa:f1:1f:c3:81:ba:73:06: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:C8:1E:CE:2B:1E:F5:01:B6:43:1B:19:6F:F0:64:A3:D0:9F:B0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:13::/48 Signature Algorithm: sha256WithRSAEncryption 42:70:9d:1c:39:29:4c:73:f1:36:98:0f:f7:bb:20:23:5c:68: 3c:a4:81:d8:32:fd:8e:9f:ea:d9:19:35:6e:ce:98:35:06:19: bd:1d:30:07:e9:5b:d3:4d:a9:56:59:46:2f:05:25:4f:b9:67: 35:64:d7:5d:d5:76:68:4e:8b:c4:65:9c:16:af:0f:c4:d4:b7: 85:9d:ad:7b:42:cb:fb:be:fc:11:18:d3:af:3b:8d:9a:95:09: 23:10:b7:8d:59:fa:eb:8c:9a:13:80:69:b3:b8:17:57:24:91: 8e:d3:aa:af:0c:1a:b6:84:9e:4b:62:a2:c1:a9:1b:e4:c8:57: 4c:d2:8e:f8:c0:20:22:36:9e:00:3f:8d:c5:70:be:78:c2:59: bd:00:a1:eb:88:ac:3f:13:38:fb:c5:3d:fb:40:6b:c0:56:b9: 47:66:08:21:96:4c:d6:e5:ea:3f:3f:4b:35:25:91:65:ec:6a: d3:d4:f9:e0:b5:4e:4a:61:f2:69:9c:98:90:ce:69:c7:5e:ea: 30:8a:43:3a:eb:0a:ee:83:0e:8b:85:f3:af:85:96:f4:95:f7: 19:73:e3:98:d6:8f:09:3d:c8:27:97:45:21:dd:d4:b1:fd:b1: b4:4f:b9:8b:60:b7:6f:be:18:e9:8b:cf:3b:34:6d:da:36:eb: 9b:7d:88:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGs4xqUcz3bwD/W4IXdnjUP7fd+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODI3MDAwMDA0WhcNMjYxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2JhZThiOTczMzQzMDI4M2MxNzAxMzA5NjUzNmRkZjFi MjI1NzAwNzMyZGMzMzk4OGJkOTEyNGM1ZTE2MzQwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqDOJexc4tfcr2IFTBR0jLvcU5OwbAJp5fs4kMoqQ+GK1M cPknkbnVYDC9ykDPLm+Lv7/VS456u5vXrnBXq3ytjRVQU0gG0vPvW4k5DoTrpO/j AXajfBOATXiI7XttblsnA5ZLrme1izT0ycW9aC+O/b86qULWy3VeAQDX8lcOl1Cn uR9tiE45XCg+T/WPIQDm4RT5pPDAKomm3uPyuMCgzI+l9wWmPL89D8KYzLg+F7vy x4gcY55IuzJd5nX3wM+y1OOcfpSZGtADsAJl5BpCssR4oqfImDGnnFhjeA/OKvoP AO/Nv4eSd81H50qa2KhWT8EOJ4H68R/DgbpzBjoJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8G/IHs4rHvUBtkMbGW/wZKPQn7AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMDI5MzJhLWE5MzYtNGNmYS1iMDhjLWE4MDczMGZiZjAwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxABMwDQYJKoZIhvcNAQELBQADggEBAEJwnRw5KUxz8TaYD/e7ICNc aDykgdgy/Y6f6tkZNW7OmDUGGb0dMAfpW9NNqVZZRi8FJU+5ZzVk113VdmhOi8Rl nBavD8TUt4WdrXtCy/u+/BEY0687jZqVCSMQt41Z+uuMmhOAabO4F1ckkY7Tqq8M GraEnktiosGpG+TIV0zSjvjAICI2ngA/jcVwvnjCWb0AoeuIrD8TOPvFPftAa8BW uUdmCCGWTNbl6j8/SzUlkWXsatPU+eC1Tkph8mmcmJDOacde6jCKQzrrCu6DDouF 86+FlvSV9xlz45jWjwk9yCeXRSHd1LH9sbRPuYtgt2++GOmLzzs0bdo265t9iEI= -----END CERTIFICATE-----Generated at Sun Sep 20 12:41:14 2026 by rpki-client