$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa File: 8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json) Hash identifier: l9ccGEVAJAlrD+WP4AaZfiDID/OC7uQcnc/+kizbLPo= Subject key identifier: 47:1E:02:D4:10:CB:B0:55:6C:3F:85:19:8D:8C:27:08:53:D5:D7:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1574668CB802CC21DA54B2CED702B424BBC15366 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa Signing time: Tue 19 May 2026 04:20:39 +0000 ROA not before: Tue 19 May 2026 04:20:39 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ee00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:66:8c:b8:02:cc:21:da:54:b2:ce:d7:02:b4:24:bb:c1:53:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:20:39 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=d76eb565a4a2908c6abe021324cf4a322b4bde23c86a0d0f6a7fc576a58466ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:8a:08:e5:29:9b:57:70:c6:b8:16:db:f5: 91:c1:44:93:39:23:09:c0:e6:fb:e6:24:25:9a:df: 7c:11:8a:bb:73:79:16:5b:05:26:9e:24:05:d4:30: 8d:c0:83:47:5a:af:ba:48:96:5f:88:c3:1a:67:bc: b5:8e:d9:a0:15:5b:0a:cc:de:cf:7d:80:ec:88:b1: fd:af:ac:e0:1d:39:6f:16:b7:ae:fe:4e:c3:b0:30: 01:f0:cf:3d:4c:e2:c2:68:74:e4:bc:7a:b7:54:54: 1a:6a:f0:1e:df:a0:36:79:f0:ce:93:bb:f5:cd:53: af:c6:60:7f:ad:a4:c2:55:2a:bb:94:fc:29:55:9d: 99:64:74:29:ce:ab:fa:0b:9c:89:1f:88:23:98:30: fe:82:28:63:06:c8:45:9c:f9:55:46:b8:14:0d:8c: d2:d5:19:63:b9:71:98:19:5a:02:4e:41:44:9c:f0: c0:6d:40:9d:ce:e5:cb:73:1b:ab:40:d4:41:fe:58: 48:67:09:a1:94:7e:37:5d:f9:84:50:5e:c2:70:00: 5f:fa:1f:06:62:4b:35:cd:c8:6d:df:0e:f3:5a:40: 62:f2:18:a8:fc:c6:59:98:6f:2d:85:98:67:36:25: 16:18:12:b3:95:e8:0f:60:0f:c6:43:18:3d:e6:ba: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1E:02:D4:10:CB:B0:55:6C:3F:85:19:8D:8C:27:08:53:D5:D7:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ee00::/40 Signature Algorithm: sha256WithRSAEncryption a4:90:5a:dd:e3:b5:34:1d:4e:e1:79:c6:9b:3b:9f:62:98:5c: c9:cd:c9:07:cd:d8:71:31:b4:1a:1b:6d:57:91:ec:67:a1:48: 88:4e:d9:2c:df:c7:55:65:cd:cf:ba:c1:36:dc:70:58:16:7f: f7:a8:41:36:7c:ab:b3:81:1f:3d:50:ae:5e:2f:72:6f:e5:be: fc:42:f8:2b:59:31:06:3b:ad:95:d3:78:81:a0:e0:be:02:9f: 6e:ad:d2:ca:42:30:99:de:72:14:60:42:49:4f:55:12:a8:d5: 3e:f2:d3:57:6b:8c:96:38:85:96:e1:9f:75:d5:70:b9:af:55: e0:43:1d:4c:fd:09:7d:c8:99:d0:b4:f9:77:1d:9c:60:28:70: 4b:4c:3d:c6:a8:f4:73:04:d7:37:5b:ba:23:a8:12:01:b0:ea: be:65:9e:c3:2a:f3:f1:aa:60:4e:3c:64:e0:7b:a7:22:c4:dc: b6:19:91:f1:fe:ed:fa:c0:67:8e:12:cd:94:c1:9e:13:07:a2: 60:b4:17:fa:c8:9f:d6:6b:48:5a:11:03:9e:c8:ff:eb:45:14: 28:62:af:4c:b1:07:78:c2:27:be:13:e8:ac:89:3f:d6:e8:05: 16:ec:c3:35:b7:ec:3b:6c:92:95:f0:42:fb:e9:88:75:c9:e8: ce:41:36:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFXRmjLgCzCHaVLLO1wK0JLvBU2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQyMDM5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzZlYjU2NWE0YTI5MDhjNmFiZTAyMTMyNGNmNGEzMjJi NGJkZTIzYzg2YTBkMGY2YTdmYzU3NmE1ODQ2NmVlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaNIoI5SmbV3DGuBbb9ZHBRJM5IwnA5vvmJCWa33wRirtz eRZbBSaeJAXUMI3Ag0dar7pIll+IwxpnvLWO2aAVWwrM3s99gOyIsf2vrOAdOW8W t67+TsOwMAHwzz1M4sJodOS8erdUVBpq8B7foDZ58M6Tu/XNU6/GYH+tpMJVKruU /ClVnZlkdCnOq/oLnIkfiCOYMP6CKGMGyEWc+VVGuBQNjNLVGWO5cZgZWgJOQUSc 8MBtQJ3O5ctzG6tA1EH+WEhnCaGUfjdd+YRQXsJwAF/6HwZiSzXNyG3fDvNaQGLy GKj8xlmYby2FmGc2JRYYErOV6A9gD8ZDGD3mul6LAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURx4C1BDLsFVsP4UZjYwnCFPV144wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhhOGI4NjNiLTI5OGUtNDhhOS1iY2VkLTIwMmU4MGQ5OGYwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77jANBgkqhkiG9w0BAQsFAAOCAQEApJBa3eO1NB1O4XnGmzufYphc yc3JB83YcTG0GhttV5HsZ6FIiE7ZLN/HVWXNz7rBNtxwWBZ/96hBNnyrs4EfPVCu Xi9yb+W+/EL4K1kxBjutldN4gaDgvgKfbq3SykIwmd5yFGBCSU9VEqjVPvLTV2uM ljiFluGfddVwua9V4EMdTP0JfciZ0LT5dx2cYChwS0w9xqj0cwTXN1u6I6gSAbDq vmWewyrz8apgTjxk4HunIsTcthmR8f7t+sBnjhLNlMGeEweiYLQX+sif1mtIWhED nsj/60UUKGKvTLEHeMInvhPorIk/1ugFFuzDNbfsO2ySlfBC++mIdcnozkE2AA== -----END CERTIFICATE-----Generated at Fri Jun 12 05:50:17 2026 by rpki-client