$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa File: 91b85db6-7428-422a-85f4-a3d6732ec01e.roa (raw, json) Hash identifier: p+8v4psVUAxWsFFnvIxwQhXiv1zrNB/Jd/CTJVZk9VU= Subject key identifier: 5D:D7:B7:BF:7F:C9:42:75:B6:4D:2B:4C:3A:E4:AD:49:11:EE:B0:88 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 08DF15CE166951D0A18E9A9D74E96D999F13F15F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa Signing time: Sat 08 Aug 2026 00:50:42 +0000 ROA not before: Sat 08 Aug 2026 00:50:42 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:df:15:ce:16:69:51:d0:a1:8e:9a:9d:74:e9:6d:99:9f:13:f1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:42 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=9b52c5528bc08d96b1c8ca8712999a40b9a6c68a73950cae2e510b129c117c0e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:f3:94:9a:bb:48:12:b9:ea:66:ed:88:7d: da:8e:fa:8e:02:09:4f:1f:43:21:94:be:c8:50:d8: f0:ec:33:d8:c8:62:a7:90:ab:56:39:c4:5c:ad:23: 45:01:6a:d9:b4:81:4e:af:1d:21:81:63:f5:9d:76: 2d:d3:0c:4a:79:a4:a0:30:a7:69:38:7f:91:df:c7: 1f:d0:b3:56:a0:82:37:56:52:dd:94:f1:99:99:fd: d7:bb:f0:cd:b1:fa:23:95:79:80:26:3f:cc:3a:93: b5:87:4f:ae:c9:2a:4c:0a:ff:f1:52:b4:df:46:a4: 7f:36:9f:24:ac:d2:f0:25:90:8a:d6:98:94:d9:2b: 1d:b1:c0:19:51:a8:ba:bc:7e:d4:9b:52:83:c4:cd: 1e:78:0a:5d:09:fb:eb:88:d5:86:5e:00:e0:fe:29: a2:73:ae:b4:68:c3:ae:d1:5f:08:73:c4:30:52:1b: df:de:f9:70:34:78:09:fd:c7:16:2a:34:2b:76:7e: b8:b8:8c:6c:e7:e0:8a:49:10:46:ae:53:1e:94:26: a6:ca:58:4f:e9:7e:9a:cc:e4:c3:6a:3d:9f:8c:a6: 01:33:3a:0a:12:4e:4d:21:c4:2a:a3:95:7d:96:47: b8:4c:c9:09:ec:a9:dc:06:f1:d0:96:89:ec:ce:13: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:B7:BF:7F:C9:42:75:B6:4D:2B:4C:3A:E4:AD:49:11:EE:B0:88 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 1a:38:32:43:ad:2f:28:6a:cb:99:86:e1:bd:77:9c:74:78:9b: 98:f9:fb:9f:07:fe:02:0b:04:d4:02:6f:05:96:dc:c7:ec:ee: cd:84:9b:7d:9d:3c:4e:de:1b:59:41:da:2a:40:69:a5:58:75: bf:94:96:78:f9:c5:50:dc:d1:4f:7b:8f:eb:27:82:ad:8c:3f: 23:89:20:5c:3e:df:45:70:86:0f:a2:2d:8b:45:8c:16:24:6f: 38:b8:44:35:48:3d:65:eb:cb:92:a0:46:ee:e7:2d:0b:dd:c6: 04:b9:41:2c:57:cf:be:53:e5:bc:cf:f4:44:92:d3:b8:ff:45: 5c:3f:c0:5b:64:60:bb:a2:e0:12:23:da:4e:41:4e:c3:7e:67: cb:ed:3d:51:19:cb:41:94:aa:73:2a:b7:09:ea:23:e1:0d:1e: f1:ed:d8:2f:e4:24:99:44:31:4c:35:7b:a2:c0:3f:6e:d6:a6: 6b:63:4e:f2:a5:0d:44:94:53:81:c1:ea:3e:02:a1:15:46:d8: 84:fc:23:b8:d1:be:87:79:78:4d:78:d5:31:77:80:e7:5b:43: 10:ca:07:a9:9d:8b:11:39:5f:b1:35:ba:17:34:94:67:f8:dc: 61:4b:be:07:b2:8d:cf:8c:6d:80:ba:9a:ef:98:72:dd:35:32: 91:3e:e7:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCN8VzhZpUdChjpqddOltmZ8T8V8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDQyWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjUyYzU1MjhiYzA4ZDk2YjFjOGNhODcxMjk5OWE0MGI5 YTZjNjhhNzM5NTBjYWUyZTUxMGIxMjljMTE3YzBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxj/OUmrtIErnqZu2IfdqO+o4CCU8fQyGUvshQ2PDsM9jI YqeQq1Y5xFytI0UBatm0gU6vHSGBY/Wddi3TDEp5pKAwp2k4f5Hfxx/Qs1aggjdW Ut2U8ZmZ/de78M2x+iOVeYAmP8w6k7WHT67JKkwK//FStN9GpH82nySs0vAlkIrW mJTZKx2xwBlRqLq8ftSbUoPEzR54Cl0J++uI1YZeAOD+KaJzrrRow67RXwhzxDBS G9/e+XA0eAn9xxYqNCt2fri4jGzn4IpJEEauUx6UJqbKWE/pfprM5MNqPZ+MpgEz OgoSTk0hxCqjlX2WR7hMyQnsqdwG8dCWiezOEwK1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXde3v3/JQnW2TStMOuStSRHusIgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkxYjg1ZGI2LTc0MjgtNDIyYS04NWY0LWEzZDY3MzJlYzAxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBABo4MkOtLyhqy5mG4b13nHR4 m5j5+58H/gILBNQCbwWW3Mfs7s2Em32dPE7eG1lB2ipAaaVYdb+Ulnj5xVDc0U97 j+sngq2MPyOJIFw+30Vwhg+iLYtFjBYkbzi4RDVIPWXry5KgRu7nLQvdxgS5QSxX z75T5bzP9ESS07j/RVw/wFtkYLui4BIj2k5BTsN+Z8vtPVEZy0GUqnMqtwnqI+EN HvHt2C/kJJlEMUw1e6LAP27WpmtjTvKlDUSUU4HB6j4CoRVG2IT8I7jRvod5eE14 1TF3gOdbQxDKB6mdixE5X7E1uhc0lGf43GFLvgeyjc+MbYC6mu+Yct01MpE+5+c= -----END CERTIFICATE-----Generated at Tue Aug 18 02:16:23 2026 by rpki-client