$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa File: 8d914165-a3e7-48af-b624-8691c64e5360.roa (raw, json) Hash identifier: +GdXu16xkgTMpOmQIz5XRMvRzxa9bvV27fIIyZh89LI= Subject key identifier: 94:67:B2:9D:B3:C7:10:4D:1F:16:50:4D:13:48:3D:9E:6C:F8:7C:F9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2950C66AED153065CA484C8AFF35EC8ADA4154B6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa Signing time: Fri 07 Aug 2026 04:20:41 +0000 ROA not before: Fri 07 Aug 2026 04:20:41 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:50:c6:6a:ed:15:30:65:ca:48:4c:8a:ff:35:ec:8a:da:41:54:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 7 04:20:41 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=7cf66a9e8da833a74e8fb66339897895fd11e0ec76c305fa1c9b1479927ab64a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:b0:89:90:ce:8f:b3:ce:3d:f5:3b:86:bd: 85:8c:1c:b9:bc:1f:db:25:15:6a:46:5b:87:f2:b8: e6:1b:35:0b:b1:c5:11:70:0c:8d:1d:5d:15:bd:e9: 68:51:25:ed:b7:51:d4:10:b6:17:ea:bc:13:cb:67: 79:e4:5e:e6:25:15:b5:86:a0:28:e8:44:57:f8:6f: a8:e8:e6:1b:3e:94:f3:77:c1:99:86:d2:4c:64:f6: 9b:92:f8:0f:31:89:2a:56:5e:6d:1c:c0:b9:9a:92: c5:71:72:1b:67:57:ed:05:dd:15:57:fa:46:a1:ab: e5:d4:c6:5c:bf:71:7a:c6:48:80:eb:9f:eb:bd:b8: fe:62:9e:b2:7e:18:bc:1e:ff:55:81:49:ce:c5:0c: 0e:16:bd:78:98:6f:f5:cf:b1:d4:29:5c:57:5f:19: 92:71:43:16:19:af:ce:1c:a6:ce:7a:81:4a:4d:f8: 25:52:17:87:d2:b8:f9:b5:75:82:b8:62:3e:63:de: 54:25:f0:86:cd:1a:70:a5:e4:4f:f9:f8:ba:16:06: 6c:67:94:c8:64:de:55:a5:61:a9:be:dd:b0:5a:b9: 99:5b:18:24:8c:f7:15:0d:81:a3:f6:c9:0d:16:0d: 5f:c8:62:6a:80:39:38:6d:e1:3b:b4:08:79:1a:da: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:B2:9D:B3:C7:10:4D:1F:16:50:4D:13:48:3D:9E:6C:F8:7C:F9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption 05:b5:bb:0c:85:67:fb:04:83:b5:38:3e:e5:90:c3:23:02:c0: 6a:59:53:0b:02:20:b9:d7:18:ea:eb:b1:c3:b5:a5:6f:e6:7f: 80:61:1a:1e:bb:2c:76:e8:37:61:c5:4b:b2:8b:82:62:25:a4: c0:7d:bf:9d:95:23:22:6d:21:4c:00:70:f6:43:88:22:d1:c0: 13:ba:7e:2c:8b:ff:9e:e7:08:6a:59:ba:cb:ad:4b:b1:dd:cf: d7:4b:35:f7:d0:42:bb:16:a0:44:dd:12:cd:e4:9d:e5:ff:ae: b5:7c:80:79:a7:46:4d:b1:95:c6:e3:21:b0:48:f6:b8:f3:3c: 76:0f:31:46:ed:b8:55:c4:a9:c3:19:a3:84:74:88:aa:5a:19: f6:3a:a4:cf:23:76:17:f7:97:57:ba:15:36:0a:bd:b7:2b:6e: 3c:4e:79:70:3e:6c:cb:e4:0b:21:3b:62:0e:75:71:f8:fc:9f: 4f:00:34:b5:ce:05:65:8c:84:d7:a8:f3:75:1c:77:2c:1a:02: 31:aa:0a:ec:b5:f3:9f:bc:31:1f:8c:5d:90:a8:59:2e:4a:33: c4:1a:97:a1:cb:e8:40:64:b5:bc:3f:bd:86:b9:35:9f:65:19: 3f:39:bd:d1:ca:b4:ee:11:e5:c3:4a:c2:c5:7a:21:c5:26:36: 80:0c:75:d3 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUKVDGau0VMGXKSEyK/zXsitpBVLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQxWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2Y2NmE5ZThkYTgzM2E3NGU4ZmI2NjMzOTg5Nzg5NWZk MTFlMGVjNzZjMzA1ZmExYzliMTQ3OTkyN2FiNjRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvYbCJkM6Ps8499TuGvYWMHLm8H9slFWpGW4fyuOYbNQux xRFwDI0dXRW96WhRJe23UdQQthfqvBPLZ3nkXuYlFbWGoCjoRFf4b6jo5hs+lPN3 wZmG0kxk9puS+A8xiSpWXm0cwLmaksVxchtnV+0F3RVX+kahq+XUxly/cXrGSIDr n+u9uP5inrJ+GLwe/1WBSc7FDA4WvXiYb/XPsdQpXFdfGZJxQxYZr84cps56gUpN +CVSF4fSuPm1dYK4Yj5j3lQl8IbNGnCl5E/5+LoWBmxnlMhk3lWlYam+3bBauZlb GCSM9xUNgaP2yQ0WDV/IYmqAOTht4Tu0CHka2r23AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUlGeynbPHEE0fFlBNE0g9nmz4fPkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkOTE0MTY1LWEzZTctNDhhZi1iNjI0LTg2OTFjNjRlNTM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQAFtbsMhWf7BIO1OD7lkMMjAsBq WVMLAiC51xjq67HDtaVv5n+AYRoeuyx26DdhxUuyi4JiJaTAfb+dlSMibSFMAHD2 Q4gi0cATun4si/+e5whqWbrLrUux3c/XSzX30EK7FqBE3RLN5J3l/661fIB5p0ZN sZXG4yGwSPa48zx2DzFG7bhVxKnDGaOEdIiqWhn2OqTPI3YX95dXuhU2Cr23K248 TnlwPmzL5AshO2IOdXH4/J9PADS1zgVljITXqPN1HHcsGgIxqgrstfOfvDEfjF2Q qFkuSjPEGpehy+hAZLW8P72GuTWfZRk/Ob3RyrTuEeXDSsLFeiHFJjaADHXT -----END CERTIFICATE-----Generated at Sun Aug 9 01:45:12 2026 by rpki-client