$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05876e04-6a48-47f9-a53a-40496713d9ab.roa File: 05876e04-6a48-47f9-a53a-40496713d9ab.roa (raw, json) Hash identifier: qXjKvSwfFafbh+0AJG773wFjEhKVxV4TUdGSCmsxXqI= Subject key identifier: 14:A6:6B:89:02:7C:DD:1F:D2:54:92:F1:71:03:E5:89:C2:17:E8:29 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E1598F08E55D15B1D0080CE8ECE7386D6232D77 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05876e04-6a48-47f9-a53a-40496713d9ab.roa Signing time: Sat 08 Aug 2026 00:50:30 +0000 ROA not before: Sat 08 Aug 2026 00:50:30 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:15:98:f0:8e:55:d1:5b:1d:00:80:ce:8e:ce:73:86:d6:23:2d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:30 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=1f01ee82724534f9e6eb31526861108ac475a15cc00c55ac60adf9354eecac12, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:e3:18:68:d9:65:8e:1c:1e:27:27:4f:04: 39:bd:c0:15:55:6a:cc:9e:07:db:38:bf:90:9b:29: c0:31:43:06:32:56:db:2d:4f:17:51:4f:1c:b1:ce: 00:2b:6b:b9:e6:ea:37:12:83:f6:95:cc:3c:42:95: ad:e0:30:6c:6b:39:96:f3:5b:e8:62:65:60:05:b6: 56:bb:49:83:cc:59:72:c4:6d:d8:8c:c9:7a:dc:b0: 6d:21:df:ac:05:c5:de:f3:08:21:3c:5b:a8:59:cc: 35:4d:b8:88:07:7d:35:29:d5:ba:97:a0:76:c0:56: a1:de:9b:84:22:2d:61:2c:19:bf:44:a7:49:c6:25: 81:af:11:b0:48:aa:da:a6:2d:83:4e:db:d2:3e:70: c4:d9:89:aa:3f:87:2c:09:a0:0b:f8:ed:7f:2d:de: 89:7e:29:8f:86:57:1e:d2:34:c1:32:a6:d7:a8:13: da:25:c4:30:a5:6b:e7:17:22:d2:b4:c9:29:9f:ed: e7:d6:0f:9d:8b:8c:fa:ca:5f:c3:62:3d:ef:bf:1e: 3e:e5:6a:14:19:0e:f8:71:7e:fb:3c:75:20:3f:ec: 83:d5:95:e4:1c:bd:01:46:fd:67:4b:d4:b8:16:ca: 02:ef:cd:be:2c:c8:8e:16:76:a2:0f:14:e3:0a:14: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:6B:89:02:7C:DD:1F:D2:54:92:F1:71:03:E5:89:C2:17:E8:29 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05876e04-6a48-47f9-a53a-40496713d9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/40 Signature Algorithm: sha256WithRSAEncryption 35:ad:75:4f:23:06:4c:1c:c0:c6:a7:1a:56:5b:b1:76:59:ec: 7a:06:29:a3:22:f4:2b:a7:6f:cf:1c:5c:af:dc:b1:3f:9e:8d: 0c:ad:d4:a1:fd:ce:6f:ce:1c:89:6f:81:5f:b5:d6:38:db:f2: cd:8d:97:48:d8:ad:f8:46:e8:1a:3c:42:a4:50:f4:93:f4:83: 4e:0e:2d:51:34:df:05:82:19:7f:cf:fc:b2:3a:42:10:c7:b6: 5f:70:52:2b:08:59:ed:02:36:d6:bf:fc:29:07:bc:91:14:87: 1c:a4:e4:b9:ec:67:7c:0c:0a:27:3a:e7:5a:52:bd:e4:0d:21: 28:03:af:55:50:f1:93:29:c2:bb:c3:14:50:5e:94:83:c4:de: 26:bb:2f:98:6f:6a:29:eb:20:f3:58:97:3d:77:25:75:a3:79: a9:9f:20:38:1b:18:e5:8a:d2:fa:3a:f4:f8:66:f7:81:17:b0: 09:46:b6:1a:b4:e1:26:a9:2a:06:a2:19:bb:b4:0b:6e:72:77: 4e:b0:e7:25:82:dc:8b:87:8d:e2:d1:b5:f0:b5:e6:14:5b:e7: 02:54:91:6e:fb:b3:da:50:c7:bf:b0:5b:87:5c:5d:1b:f4:81: c1:82:2b:f3:aa:68:f4:2a:e6:9a:e2:d2:66:65:f2:a1:96:a0: d4:98:7a:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPhWY8I5V0VsdAIDOjs5zhtYjLXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDMwWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjAxZWU4MjcyNDUzNGY5ZTZlYjMxNTI2ODYxMTA4YWM0 NzVhMTVjYzAwYzU1YWM2MGFkZjkzNTRlZWNhYzEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvrOMYaNlljhweJydPBDm9wBVVasyeB9s4v5CbKcAxQwYy VtstTxdRTxyxzgAra7nm6jcSg/aVzDxCla3gMGxrOZbzW+hiZWAFtla7SYPMWXLE bdiMyXrcsG0h36wFxd7zCCE8W6hZzDVNuIgHfTUp1bqXoHbAVqHem4QiLWEsGb9E p0nGJYGvEbBIqtqmLYNO29I+cMTZiao/hywJoAv47X8t3ol+KY+GVx7SNMEypteo E9olxDCla+cXItK0ySmf7efWD52LjPrKX8NiPe+/Hj7lahQZDvhxfvs8dSA/7IPV leQcvQFG/WdL1LgWygLvzb4syI4WdqIPFOMKFHL3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFKZriQJ83R/SVJLxcQPlicIX6CkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA1ODc2ZTA0LTZhNDgtNDdmOS1hNTNhLTQwNDk2NzEzZDlhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD78TANBgkqhkiG9w0BAQsFAAOCAQEANa11TyMGTBzAxqcaVluxdlns egYpoyL0K6dvzxxcr9yxP56NDK3Uof3Ob84ciW+BX7XWONvyzY2XSNit+EboGjxC pFD0k/SDTg4tUTTfBYIZf8/8sjpCEMe2X3BSKwhZ7QI21r/8KQe8kRSHHKTkuexn fAwKJzrnWlK95A0hKAOvVVDxkynCu8MUUF6Ug8TeJrsvmG9qKesg81iXPXcldaN5 qZ8gOBsY5YrS+jr0+Gb3gRewCUa2GrThJqkqBqIZu7QLbnJ3TrDnJYLci4eN4tG1 8LXmFFvnAlSRbvuz2lDHv7Bbh1xdG/SBwYIr86po9CrmmuLSZmXyoZag1Jh6/A== -----END CERTIFICATE-----Generated at Tue Aug 18 02:17:55 2026 by rpki-client