$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa File: 8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa (raw, json) Hash identifier: d22wSZ3JKPB7hVV0K9nJej20w0appvP+RWWKE/wLetI= Subject key identifier: 95:22:EC:B8:6D:B1:96:7F:4F:F5:EB:A1:AC:BB:34:32:BE:5E:35:DB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D13B812BFCF794453EB6DAA72F1F4E70E288D00 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa Signing time: Mon 27 Jul 2026 03:10:07 +0000 ROA not before: Mon 27 Jul 2026 03:10:07 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:13:b8:12:bf:cf:79:44:53:eb:6d:aa:72:f1:f4:e7:0e:28:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:07 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=9b27962288e30fe30dfc6486cd0b815e2c53a5f22ea52be094271cf99246ad75, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:5c:ac:a8:f3:c0:2f:26:8b:0e:18:98:53: cd:3b:a7:70:4f:63:14:a8:aa:83:d7:3a:e3:14:45: d0:07:81:f1:ea:1c:05:e9:58:0f:7d:b3:31:f7:68: d2:96:75:c4:27:ae:72:47:31:a1:de:67:df:34:35: 4f:80:7a:92:b2:04:54:25:a9:e5:27:0f:96:ac:cc: 49:1f:16:6a:3f:5b:1c:b9:ed:17:27:76:da:db:3c: 7d:f6:dc:c9:47:61:7f:20:20:3f:f4:50:23:41:f2: 44:3f:be:e0:c5:c7:3d:5f:fa:13:04:c2:a9:95:68: 6d:ff:d4:42:86:56:42:67:99:1c:fd:ee:98:46:35: 29:9a:fa:ce:77:13:9d:8a:5c:45:a8:df:23:ac:24: ed:4a:e2:12:4b:5c:e2:b3:16:49:47:67:07:b6:5f: 65:e6:c2:3c:5b:3a:ed:21:80:c5:4a:3a:8e:a1:35: 79:f6:08:e1:e1:6f:74:6e:49:84:a2:34:f1:60:6d: bd:0c:cc:a4:26:72:56:84:99:0e:e6:45:86:0a:49: 44:63:a8:1b:f7:0b:a8:10:54:59:1a:af:41:9d:0e: 9f:e7:d6:31:44:64:75:71:e4:38:b5:d7:20:7e:62: e4:70:57:92:73:5f:e7:71:b4:f4:ea:ff:7f:08:8f: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:22:EC:B8:6D:B1:96:7F:4F:F5:EB:A1:AC:BB:34:32:BE:5E:35:DB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 71:03:da:c1:30:a4:85:20:88:d1:80:12:be:e4:de:8a:d4:59: b7:19:24:5d:be:b7:ee:66:92:0b:cc:2d:18:ac:4f:a0:c3:7a: c5:d1:9e:bc:05:44:c4:49:e4:75:b1:53:b0:96:38:de:5e:e1: bd:40:d2:44:8d:6e:54:09:24:4c:56:e9:06:78:a0:40:bd:22: 6a:19:e3:29:42:80:5f:d8:b3:ac:42:25:6d:5f:f0:a7:4d:ff: 97:db:2e:f3:88:14:c3:cd:7f:cd:4a:fa:e3:3c:5c:39:56:a8: fb:53:b3:7f:d5:3d:cc:58:cb:5b:d2:c2:5f:91:a9:82:30:8c: f2:95:32:9a:d5:63:40:8f:61:f2:ba:4e:f6:f3:5a:4a:fc:02: d2:42:9f:c5:96:60:46:4e:86:b8:c4:a8:bc:53:40:4a:e7:f8: 7b:4b:94:ac:fb:25:26:60:0a:79:68:f8:8a:00:1b:48:b8:dd: 9b:f9:07:95:e4:c3:85:0c:5c:c6:a3:e7:d8:28:6e:58:39:6c: c0:84:28:c4:f6:0b:e7:61:3b:76:41:c6:c4:79:bc:14:ea:95: 28:82:59:cb:76:60:2e:30:50:03:6f:e4:2f:1f:b4:70:5b:d6: fd:bb:7b:2f:26:fd:5b:f7:27:c2:a4:e9:bf:44:79:38:d7:bf: 31:c7:38:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfRO4Er/PeURT622qcvH05w4ojQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDA3WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjI3OTYyMjg4ZTMwZmUzMGRmYzY0ODZjZDBiODE1ZTJj NTNhNWYyMmVhNTJiZTA5NDI3MWNmOTkyNDZhZDc1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLGlysqPPALyaLDhiYU807p3BPYxSoqoPXOuMURdAHgfHq HAXpWA99szH3aNKWdcQnrnJHMaHeZ980NU+AepKyBFQlqeUnD5aszEkfFmo/Wxy5 7RcndtrbPH323MlHYX8gID/0UCNB8kQ/vuDFxz1f+hMEwqmVaG3/1EKGVkJnmRz9 7phGNSma+s53E52KXEWo3yOsJO1K4hJLXOKzFklHZwe2X2XmwjxbOu0hgMVKOo6h NXn2COHhb3RuSYSiNPFgbb0MzKQmclaEmQ7mRYYKSURjqBv3C6gQVFkar0GdDp/n 1jFEZHVx5Di11yB+YuRwV5JzX+dxtPTq/38IjxTpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlSLsuG2xln9P9euhrLs0Mr5eNdswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkZmM0MDY2LWZiYjMtNGM4MC1iNmQzLTllYTFmNDcxOWM4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAHED2sEwpIUgiNGAEr7k3orU WbcZJF2+t+5mkgvMLRisT6DDesXRnrwFRMRJ5HWxU7CWON5e4b1A0kSNblQJJExW 6QZ4oEC9ImoZ4ylCgF/Ys6xCJW1f8KdN/5fbLvOIFMPNf81K+uM8XDlWqPtTs3/V PcxYy1vSwl+RqYIwjPKVMprVY0CPYfK6TvbzWkr8AtJCn8WWYEZOhrjEqLxTQErn +HtLlKz7JSZgCnlo+IoAG0i43Zv5B5Xkw4UMXMaj59goblg5bMCEKMT2C+dhO3ZB xsR5vBTqlSiCWct2YC4wUANv5C8ftHBb1v27ey8m/Vv3J8Kk6b9EeTjXvzHHONE= -----END CERTIFICATE-----Generated at Tue Aug 18 02:17:55 2026 by rpki-client