$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b595b63-68d8-4cf8-b466-25c3e8d97776.roa File: 4b595b63-68d8-4cf8-b466-25c3e8d97776.roa (raw, json) Hash identifier: HkMgBDKWpExTOU97m/pGTsnLiomdu1KFbRfaBPuaL7I= Subject key identifier: ED:98:42:E0:0D:5F:2F:EF:F7:22:7B:79:2F:AD:02:3D:45:65:94:25 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4EB7D8CB8C863E5E1A528302CA4E94052BBB194E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b595b63-68d8-4cf8-b466-25c3e8d97776.roa Signing time: Sat 12 Sep 2026 00:00:06 +0000 ROA not before: Sat 12 Sep 2026 00:00:06 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:c11d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b7:d8:cb:8c:86:3e:5e:1a:52:83:02:ca:4e:94:05:2b:bb:19:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:06 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=20e443d9174c1e9ff0d4cd4eedb7412df221fa7b37ca9aa80d78b3ef55655091, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:b9:7c:a7:b1:ad:d0:73:ff:0e:f9:63:8c: 86:8d:92:72:48:97:7d:2b:7b:08:00:5b:b5:dc:a5: eb:5a:03:03:3e:86:d9:81:e5:d7:26:2a:22:2e:61: ab:89:50:23:6e:9f:00:19:7c:fa:29:95:07:d8:42: 76:f2:1d:8d:a4:c7:0a:76:14:ae:29:e7:0f:36:3b: 33:46:46:66:c7:79:46:e5:9a:bb:80:da:2a:50:0f: dd:66:4d:8a:b5:af:a4:94:3c:93:9f:72:f8:53:f8: 33:e8:55:9b:d5:0d:eb:3f:82:81:5f:86:46:b9:12: a2:45:e4:dc:4f:e2:b4:d9:c6:f3:74:51:6d:05:63: c8:af:6d:de:59:59:f4:02:2b:52:96:f9:7b:d2:71: 9d:04:4d:86:0c:d8:1a:b3:84:00:c8:a8:1d:32:f9: 8a:8b:39:17:c3:1c:71:9a:9c:b7:0a:6d:bd:91:dc: 6a:17:12:33:26:d4:e5:a6:47:4f:13:93:31:a9:35: 5d:8c:93:12:be:f9:02:e9:51:b6:60:34:d7:d5:d5: b3:9a:7f:f2:6b:8c:51:7e:e7:2f:e9:09:0a:bf:51: d3:52:75:40:48:40:e6:f7:03:9b:08:68:4d:82:86: 0c:54:07:57:f5:40:01:94:31:61:90:53:6b:d5:a1: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:98:42:E0:0D:5F:2F:EF:F7:22:7B:79:2F:AD:02:3D:45:65:94:25 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b595b63-68d8-4cf8-b466-25c3e8d97776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11d::/48 Signature Algorithm: sha256WithRSAEncryption 7a:3a:c5:bb:31:62:e2:7f:49:e3:4f:b9:63:22:bc:a2:27:c6: de:24:a3:4e:2b:0e:fb:e6:1b:a7:36:3c:a1:8f:81:21:d7:be: 22:17:6c:f6:07:74:f8:8e:c0:0d:11:fe:d2:89:3c:ad:3b:09: 16:8e:35:b9:f5:a5:d2:84:1f:22:13:b8:52:74:3b:f1:9e:ed: 3e:a6:d7:da:1c:8b:1c:6d:ca:dc:0d:59:13:81:1e:1b:05:83: 8f:02:0b:5b:40:98:bb:4a:92:18:26:6a:3e:18:51:3f:23:ca: 30:aa:a6:c9:e3:83:b4:f8:e5:10:d3:7d:ae:99:ea:db:3f:e8: ce:0b:ae:02:84:3c:48:0d:7f:0d:b5:d9:d4:2b:6e:e5:94:dd: cc:0d:9c:f2:b8:1d:0b:e9:98:1b:8c:c0:3b:f6:f4:66:89:58: 8b:5a:fa:8c:4c:79:73:14:4d:50:ff:56:dc:ed:ae:75:70:87: 94:9f:c5:44:d3:f0:7b:77:b7:87:a5:dc:23:7d:d8:99:2a:11: 51:8e:8c:60:8b:87:eb:69:1f:2c:0a:1a:a8:ea:b5:c9:f7:2f: e4:b5:14:33:b6:1c:c4:fd:d8:57:6c:3c:7f:11:15:7d:fe:79: 08:5f:0f:56:28:3c:85:ed:dd:80:2e:c0:49:b0:ea:d2:62:63: b9:c2:92:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTrfYy4yGPl4aUoMCyk6UBSu7GU4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA2WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGU0NDNkOTE3NGMxZTlmZjBkNGNkNGVlZGI3NDEyZGYy MjFmYTdiMzdjYTlhYTgwZDc4YjNlZjU1NjU1MDkxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq9Ll8p7Gt0HP/DvljjIaNknJIl30rewgAW7XcpetaAwM+ htmB5dcmKiIuYauJUCNunwAZfPoplQfYQnbyHY2kxwp2FK4p5w82OzNGRmbHeUbl mruA2ipQD91mTYq1r6SUPJOfcvhT+DPoVZvVDes/goFfhka5EqJF5NxP4rTZxvN0 UW0FY8ivbd5ZWfQCK1KW+XvScZ0ETYYM2BqzhADIqB0y+YqLORfDHHGanLcKbb2R 3GoXEjMm1OWmR08TkzGpNV2MkxK++QLpUbZgNNfV1bOaf/JrjFF+5y/pCQq/UdNS dUBIQOb3A5sIaE2ChgxUB1f1QAGUMWGQU2vVoWujAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7ZhC4A1fL+/3Int5L60CPUVllCUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRiNTk1YjYzLTY4ZDgtNGNmOC1iNDY2LTI1YzNlOGQ5Nzc3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR0wDQYJKoZIhvcNAQELBQADggEBAHo6xbsxYuJ/SeNPuWMivKIn xt4ko04rDvvmG6c2PKGPgSHXviIXbPYHdPiOwA0R/tKJPK07CRaONbn1pdKEHyIT uFJ0O/Ge7T6m19ocixxtytwNWROBHhsFg48CC1tAmLtKkhgmaj4YUT8jyjCqpsnj g7T45RDTfa6Z6ts/6M4LrgKEPEgNfw212dQrbuWU3cwNnPK4HQvpmBuMwDv29GaJ WIta+oxMeXMUTVD/VtztrnVwh5SfxUTT8Ht3t4el3CN92JkqEVGOjGCLh+tpHywK Gqjqtcn3L+S1FDO2HMT92FdsPH8RFX3+eQhfD1YoPIXt3YAuwEmw6tJiY7nCkuU= -----END CERTIFICATE-----Generated at Sun Sep 20 11:46:46 2026 by rpki-client