$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa File: ae4da4aa-7827-46be-943a-4052021707f2.roa (raw, json) Hash identifier: +HTz1RFihTkH8rN3crim5Q0YDF617cAWfUG8FaIrTJs= Subject key identifier: 60:20:39:03:46:51:3B:D8:21:3D:24:E5:F9:32:39:33:1B:CF:8F:34 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 77F89125C26EBBE62A885B13A44D0068F0CA2E68 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa Signing time: Sat 12 Sep 2026 00:00:08 +0000 ROA not before: Sat 12 Sep 2026 00:00:08 +0000 ROA not after: Fri 11 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f8:91:25:c2:6e:bb:e6:2a:88:5b:13:a4:4d:00:68:f0:ca:2e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 12 00:00:08 2026 GMT Not After : Dec 11 23:59:59 2026 GMT Subject: serialNumber=94077ccdc4904aac9cd008c5c89a656761169565353161ccd2570a0edc7e78bb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:68:70:e8:e3:31:45:9f:ae:3d:55:72:a7: 6a:46:ec:37:22:72:a8:4b:59:51:26:36:17:ef:ae: 0c:d7:bf:5c:9b:1d:63:59:0e:d2:72:c6:01:65:b8: a3:8d:d7:8e:24:3a:e4:3c:b6:c5:bb:2d:6d:4c:33: 9d:04:00:1e:ed:fe:e6:90:b0:fd:2d:87:20:c6:61: 47:2b:32:96:ac:f3:57:50:57:8c:46:91:11:7f:4d: f3:26:35:6d:21:d3:27:84:6e:f5:54:f2:3f:e0:e7: 74:89:4f:fd:61:f0:2d:7f:bd:c3:3b:0d:26:26:8c: 0a:e4:c6:10:73:bf:64:e9:52:09:30:b8:25:8d:f4: 55:22:78:2c:7c:a0:78:42:25:f6:7b:61:71:7b:b5: f5:9f:4d:bd:a9:0c:9f:38:f9:25:d3:9b:0c:16:11: c0:a8:32:b4:b1:ca:44:ff:00:e0:d8:7e:7e:a3:3e: 78:17:65:e3:fc:cb:25:fe:b5:92:f8:5a:8f:bb:82: 24:41:bf:30:aa:a5:43:7d:a5:cf:10:25:d5:c2:91: a0:32:6f:cb:85:97:bb:3c:30:9f:5b:b5:cb:21:e7: 70:b0:0b:8a:05:db:8b:46:ca:91:a0:a1:1c:02:2d: cc:35:68:e2:75:86:89:78:84:97:e5:bf:04:34:18: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:39:03:46:51:3B:D8:21:3D:24:E5:F9:32:39:33:1B:CF:8F:34 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:7::/48 Signature Algorithm: sha256WithRSAEncryption a1:c9:2d:1e:92:9e:05:27:f8:a7:55:e6:f9:e7:b6:35:47:9b: ff:46:61:9b:bf:f9:3b:19:13:98:32:75:00:0b:6f:9f:8c:92: c6:94:52:86:6b:c4:74:38:f6:3b:41:d2:f7:46:d2:01:8c:10: 3c:74:cc:fb:34:07:0c:53:19:12:b2:81:29:e3:92:bc:14:24: 0d:97:7d:3b:dd:88:c0:0d:98:ae:1e:16:8d:b1:b7:44:f4:d9: b0:92:d4:85:a6:54:2b:82:93:57:2f:c3:e3:ee:81:e7:27:d9: c7:20:8a:5f:d7:c3:3c:84:73:eb:72:06:de:27:cd:7c:e0:1d: d5:ad:85:57:38:91:96:bf:6d:e0:98:68:3d:3c:4b:2e:7a:83: fd:6b:18:fe:cf:63:ff:2e:6a:8e:51:4d:e0:57:8d:79:ee:41: 75:2d:23:1d:f6:ba:2a:b7:5b:19:b5:c0:03:c1:77:91:5b:8c: 3e:bc:3d:40:af:f2:ea:be:e7:d9:c3:8b:b8:01:e6:96:75:23: db:e6:a0:77:a9:73:53:c6:68:e4:ea:31:f4:8f:9b:e4:8b:11: 80:d8:85:b9:fe:22:ff:a5:47:89:bf:20:4b:ba:09:88:81:0f: 3a:9b:d6:51:9f:9a:d6:e3:6d:7f:73:d6:31:78:08:f1:e3:78: e8:c3:08:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd/iRJcJuu+YqiFsTpE0AaPDKLmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwOTEyMDAwMDA4WhcNMjYxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDA3N2NjZGM0OTA0YWFjOWNkMDA4YzVjODlhNjU2NzYx MTY5NTY1MzUzMTYxY2NkMjU3MGEwZWRjN2U3OGJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyQWhw6OMxRZ+uPVVyp2pG7DcicqhLWVEmNhfvrgzXv1yb HWNZDtJyxgFluKON144kOuQ8tsW7LW1MM50EAB7t/uaQsP0thyDGYUcrMpas81dQ V4xGkRF/TfMmNW0h0yeEbvVU8j/g53SJT/1h8C1/vcM7DSYmjArkxhBzv2TpUgkw uCWN9FUieCx8oHhCJfZ7YXF7tfWfTb2pDJ84+SXTmwwWEcCoMrSxykT/AODYfn6j PngXZeP8yyX+tZL4Wo+7giRBvzCqpUN9pc8QJdXCkaAyb8uFl7s8MJ9btcsh53Cw C4oF24tGypGgoRwCLcw1aOJ1hol4hJflvwQ0GCjVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYCA5A0ZRO9ghPSTl+TI5MxvPjzQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FlNGRhNGFhLTc4MjctNDZiZS05NDNhLTQwNTIwMjE3MDdmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAcwDQYJKoZIhvcNAQELBQADggEBAKHJLR6SngUn+KdV5vnntjVH m/9GYZu/+TsZE5gydQALb5+MksaUUoZrxHQ49jtB0vdG0gGMEDx0zPs0BwxTGRKy gSnjkrwUJA2XfTvdiMANmK4eFo2xt0T02bCS1IWmVCuCk1cvw+Pugecn2ccgil/X wzyEc+tyBt4nzXzgHdWthVc4kZa/beCYaD08Sy56g/1rGP7PY/8uao5RTeBXjXnu QXUtIx32uiq3Wxm1wAPBd5FbjD68PUCv8uq+59nDi7gB5pZ1I9vmoHepc1PGaOTq MfSPm+SLEYDYhbn+Iv+lR4m/IEu6CYiBDzqb1lGfmtbjbX9z1jF4CPHjeOjDCA0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:04 2026 by rpki-client