$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa File: 038bfc14-70d0-4845-80d9-ef20d84714c7.roa (raw, json) Hash identifier: fH3o4i90KlT9qU+5A/0acNW/mnwhcEYmD0lQW3uioVY= Subject key identifier: D2:78:15:E9:C9:83:B3:C3:F0:09:2A:DA:94:67:05:5E:61:EB:E6:4D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2795BE8A87D00BF4431B8B549BEE840621100F02 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa Signing time: Sat 08 Aug 2026 00:50:05 +0000 ROA not before: Sat 08 Aug 2026 00:50:05 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:95:be:8a:87:d0:0b:f4:43:1b:8b:54:9b:ee:84:06:21:10:0f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:05 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=f4ae889cf6eba5d8585f1a03bb191d298d2612fc3d5ec8ecd739184e2b0874cc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:ec:3f:c4:7e:53:c4:95:26:fd:fb:b5:71: b1:20:4e:45:05:9e:03:47:55:33:55:cc:a8:e6:f6: 44:36:66:fe:c3:b1:88:5d:43:b8:29:95:aa:d2:e7: 3a:83:6f:71:65:00:49:70:69:05:38:50:10:d2:d2: a0:21:3b:2d:f8:0f:50:97:11:28:cd:47:a7:14:0b: 76:bc:bf:c3:d9:ba:11:8a:6c:a0:f9:84:a8:19:a3: b6:a8:e7:7e:d6:e9:9c:3f:91:e5:72:e2:5a:51:e3: 3c:26:9b:a6:05:16:5b:5a:03:2d:0c:a6:10:fd:77: 6c:0c:60:81:36:d7:6b:38:5c:38:c8:f6:11:97:eb: 8b:1a:ca:d6:d3:b7:ea:00:7a:20:03:89:54:4f:e9: cb:1f:1e:a2:2c:54:5e:0f:8e:c3:7d:e2:b6:c4:39: 14:8b:04:c5:a7:1e:81:b6:a1:ad:5c:37:ab:d6:4e: 52:0e:91:47:18:76:d4:e3:e3:28:c1:2e:e4:32:88: e0:a9:6e:1b:d6:a2:06:d6:52:c4:34:b2:ac:29:e6: 28:3c:55:3b:d9:36:d5:55:01:f2:42:95:8c:9c:e4: 62:43:96:6f:00:cb:ac:3e:73:f4:98:0a:27:5c:f2: 78:5a:c0:2c:e8:13:bf:6e:5a:ec:e8:4a:41:cd:94: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:78:15:E9:C9:83:B3:C3:F0:09:2A:DA:94:67:05:5E:61:EB:E6:4D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/038bfc14-70d0-4845-80d9-ef20d84714c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10f::/48 Signature Algorithm: sha256WithRSAEncryption 08:58:40:dd:61:a0:a7:de:b0:c7:ec:68:11:4e:c5:17:ca:10: b7:3a:98:28:09:30:d3:dd:f5:07:ff:20:85:6e:c0:5f:4e:86: 1c:3e:b4:a4:62:10:a3:c1:26:ac:ea:41:e3:4b:30:c3:fa:1c: f2:32:e7:88:1e:0c:f4:ea:84:9f:f1:e3:e5:2a:a2:53:1f:a0: 79:75:08:09:08:b9:e9:ce:09:20:e3:84:66:c5:c8:8d:9e:f2: 0a:35:01:95:ed:07:3b:cc:a5:85:a6:50:08:1e:20:13:9e:dc: 4a:b7:17:74:84:0b:80:38:0a:93:25:45:42:86:bb:3e:71:3d: 8a:fe:af:31:92:25:ff:59:e0:cc:f0:eb:99:a1:44:ab:ab:de: 25:bf:69:30:c2:d0:69:0b:42:79:c8:c1:eb:bf:17:2c:c9:1f: 11:9b:f6:8a:73:b1:ef:89:b9:bf:84:e4:87:40:39:fa:cb:3b: 9d:5d:d9:cd:c5:ec:e8:30:5e:ae:4c:3e:61:54:77:8e:f1:bc: 6c:d9:da:52:cc:a3:98:41:7b:0a:48:d2:2b:dd:d4:49:41:b0: f8:77:4f:ad:ca:4b:ce:4e:73:f3:cf:9c:41:ec:3f:60:9a:a3: fd:b5:ff:6f:ec:9d:c0:af:3d:8f:aa:78:44:c6:32:a9:f0:45: b9:7e:3e:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ5W+iofQC/RDG4tUm+6EBiEQDwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDA1WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGFlODg5Y2Y2ZWJhNWQ4NTg1ZjFhMDNiYjE5MWQyOThk MjYxMmZjM2Q1ZWM4ZWNkNzM5MTg0ZTJiMDg3NGNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAV+w/xH5TxJUm/fu1cbEgTkUFngNHVTNVzKjm9kQ2Zv7D sYhdQ7gplarS5zqDb3FlAElwaQU4UBDS0qAhOy34D1CXESjNR6cUC3a8v8PZuhGK bKD5hKgZo7ao537W6Zw/keVy4lpR4zwmm6YFFltaAy0MphD9d2wMYIE212s4XDjI 9hGX64saytbTt+oAeiADiVRP6csfHqIsVF4PjsN94rbEORSLBMWnHoG2oa1cN6vW TlIOkUcYdtTj4yjBLuQyiOCpbhvWogbWUsQ0sqwp5ig8VTvZNtVVAfJClYyc5GJD lm8Ay6w+c/SYCidc8nhawCzoE79uWuzoSkHNlILRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0ngV6cmDs8PwCSralGcFXmHr5k0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzAzOGJmYzE0LTcwZDAtNDg0NS04MGQ5LWVmMjBkODQ3MTRjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q8wDQYJKoZIhvcNAQELBQADggEBAAhYQN1hoKfesMfsaBFOxRfK ELc6mCgJMNPd9Qf/IIVuwF9Ohhw+tKRiEKPBJqzqQeNLMMP6HPIy54geDPTqhJ/x 4+UqolMfoHl1CAkIuenOCSDjhGbFyI2e8go1AZXtBzvMpYWmUAgeIBOe3Eq3F3SE C4A4CpMlRUKGuz5xPYr+rzGSJf9Z4Mzw65mhRKur3iW/aTDC0GkLQnnIweu/FyzJ HxGb9opzse+Jub+E5IdAOfrLO51d2c3F7OgwXq5MPmFUd47xvGzZ2lLMo5hBewpI 0ivd1ElBsPh3T63KS85Oc/PPnEHsP2Cao/21/2/sncCvPY+qeETGMqnwRbl+Pn0= -----END CERTIFICATE-----Generated at Tue Aug 18 02:17:12 2026 by rpki-client