$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa File: 644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa (raw, json) Hash identifier: H/HSvEt43uShtQ7SG0oIcbDPTdICFeQC0dd57Llr+Oc= Subject key identifier: 18:FE:89:6C:2D:FA:F4:97:B4:61:3E:AD:54:38:83:2E:5A:AF:D5:E1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 105C28B86C459C524595D0353795B95DAF76A155 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa Signing time: Sat 08 Aug 2026 00:50:10 +0000 ROA not before: Sat 08 Aug 2026 00:50:10 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5c:28:b8:6c:45:9c:52:45:95:d0:35:37:95:b9:5d:af:76:a1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:10 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=1b741dbcba944b16d6784c867b8c1ed374dbfd23d227e7f960779a02e1168992, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:2d:35:31:4f:b4:80:1e:fc:d2:0d:07:f7: 68:05:be:0a:6f:87:be:0c:05:22:83:c5:9f:57:9c: 8e:bc:3b:92:87:62:d5:7f:4c:d1:24:7c:43:be:b4: 12:ee:96:81:68:f2:1e:c7:09:17:67:5c:9d:2f:e3: a9:ed:e5:e6:d0:b8:eb:55:39:73:56:8b:ee:cc:b9: a9:b8:2b:ba:c7:9e:4d:ce:36:9e:bf:ef:13:ba:e4: e9:53:f5:71:79:0c:32:37:51:1a:79:20:3e:da:c0: 82:fd:0d:af:4b:90:ff:a8:5a:e1:7c:51:7f:e3:d1: 44:74:dd:df:99:a9:df:eb:f4:ed:82:46:d2:9a:1a: 4f:84:c0:ef:f3:9d:68:4d:b7:6c:fa:8a:75:2d:62: ac:42:7b:7c:e5:35:67:b3:75:33:0f:78:69:14:bc: 2c:1d:ce:58:86:4b:42:53:ed:6c:c7:f5:b7:b1:89: 2b:43:ea:90:dc:2c:6f:48:73:60:2f:ff:f5:b4:8e: ca:d8:1e:4a:d6:c1:30:d9:eb:84:f5:88:4d:88:b0: e4:34:4b:ec:ae:50:57:23:8b:a3:57:75:fe:d0:f2: 8d:fa:5f:01:37:50:fa:1b:8e:bf:35:5d:b4:36:bf: 30:bb:39:65:e9:f7:49:dd:f7:c5:0f:ef:dc:30:6b: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FE:89:6C:2D:FA:F4:97:B4:61:3E:AD:54:38:83:2E:5A:AF:D5:E1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption 8b:5c:26:fb:c0:94:ff:ca:8f:f7:02:39:9b:1b:3c:fe:a5:5d: 04:3b:28:5d:bf:17:24:60:64:61:21:82:e3:1e:3c:9b:98:28: ba:90:af:4b:b0:c4:3a:0d:79:6b:45:36:4c:86:a6:83:dc:e5: f7:3e:07:b7:76:6f:12:cf:ad:56:ae:c7:13:bb:17:30:d8:69: 3d:51:d1:18:ff:97:7e:40:f7:ee:76:d9:91:20:ed:28:2e:e2: 56:87:6d:22:c2:d1:56:de:ff:61:ea:b3:24:74:70:01:f0:fa: 9f:fb:59:a0:02:a7:1d:f3:73:28:64:b0:44:ab:69:24:6b:27: a4:08:81:51:97:a3:40:90:72:83:2c:d6:2b:d2:b0:43:18:b7: d0:ff:3a:2d:4b:3f:c2:8a:55:fd:b3:82:60:c0:9c:62:ac:96: 61:9d:29:c1:4f:5c:47:3c:89:4f:32:7c:04:f4:eb:67:72:78: 67:72:32:b9:4f:ed:45:7a:64:b2:64:17:8d:e4:34:1a:d8:9e: fe:06:18:15:a4:3c:6b:d7:ff:e1:03:19:9c:89:28:99:60:13: c0:b5:ca:3a:42:ab:28:ac:d8:d5:97:79:69:aa:df:b4:2f:81: 41:d2:f6:1d:60:e6:35:65:2c:d7:73:c4:c5:94:a2:e8:49:cd: 9e:23:bd:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEFwouGxFnFJFldA1N5W5Xa92oVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDEwWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjc0MWRiY2JhOTQ0YjE2ZDY3ODRjODY3YjhjMWVkMzc0 ZGJmZDIzZDIyN2U3Zjk2MDc3OWEwMmUxMTY4OTkyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0xC01MU+0gB780g0H92gFvgpvh74MBSKDxZ9XnI68O5KH YtV/TNEkfEO+tBLuloFo8h7HCRdnXJ0v46nt5ebQuOtVOXNWi+7Muam4K7rHnk3O Np6/7xO65OlT9XF5DDI3URp5ID7awIL9Da9LkP+oWuF8UX/j0UR03d+Zqd/r9O2C RtKaGk+EwO/znWhNt2z6inUtYqxCe3zlNWezdTMPeGkUvCwdzliGS0JT7WzH9bex iStD6pDcLG9Ic2Av//W0jsrYHkrWwTDZ64T1iE2IsOQ0S+yuUFcji6NXdf7Q8o36 XwE3UPobjr81XbQ2vzC7OWXp90nd98UP79wwa27XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGP6JbC369Je0YT6tVDiDLlqv1eEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGMxMjQ5LWU2NTEtNDBmMy1hZTZjLTVhN2I2ZDhhMzc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAItcJvvAlP/Kj/cCOZsbPP6l XQQ7KF2/FyRgZGEhguMePJuYKLqQr0uwxDoNeWtFNkyGpoPc5fc+B7d2bxLPrVau xxO7FzDYaT1R0Rj/l35A9+522ZEg7Sgu4laHbSLC0Vbe/2HqsyR0cAHw+p/7WaAC px3zcyhksESraSRrJ6QIgVGXo0CQcoMs1ivSsEMYt9D/Oi1LP8KKVf2zgmDAnGKs lmGdKcFPXEc8iU8yfAT062dyeGdyMrlP7UV6ZLJkF43kNBrYnv4GGBWkPGvX/+ED GZyJKJlgE8C1yjpCqyis2NWXeWmq37QvgUHS9h1g5jVlLNdzxMWUouhJzZ4jvcU= -----END CERTIFICATE-----Generated at Tue Aug 18 02:15:11 2026 by rpki-client