$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1a5323d-810c-4209-a36d-e85d1d062c2e.roa File: a1a5323d-810c-4209-a36d-e85d1d062c2e.roa (raw, json) Hash identifier: j+c6C5M5J+8jdWrtg1Z/R7OhEMhQbc3lX0TBVj1H3Yc= Subject key identifier: 74:D8:6C:56:29:25:4E:E8:FB:CF:6D:26:40:47:70:31:93:16:C3:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 49C6443D4552A87DCEA21DAC650B14FD5D6746D9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1a5323d-810c-4209-a36d-e85d1d062c2e.roa Signing time: Sat 08 Aug 2026 00:50:27 +0000 ROA not before: Sat 08 Aug 2026 00:50:27 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c6:44:3d:45:52:a8:7d:ce:a2:1d:ac:65:0b:14:fd:5d:67:46:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:27 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=c1d6cc2128dd981f72f53548f195dbab8c30f5db72dc04cf48dddaee01fbab5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:31:b8:2b:bc:3a:9a:16:7a:a3:c8:56:09: 1b:ea:6e:46:5e:35:68:15:a9:ad:19:69:ec:1a:26: c5:95:79:ed:06:af:d3:26:a8:77:30:fb:07:fc:a9: d8:bd:db:e5:9c:d3:ce:67:75:eb:e0:fb:e2:1e:03: 5c:5a:db:b4:4b:ac:c3:46:a4:fc:02:1b:ff:b3:cb: 1d:78:6b:26:89:1e:af:33:1f:24:7d:67:4d:7b:f7: 0a:9a:e8:7f:f3:ae:b7:78:85:6b:5e:7e:f7:3f:f6: 3e:1b:d6:c6:94:11:dd:e5:63:ca:b2:0b:e5:82:c8: 3c:74:9f:08:12:68:63:ff:a7:d2:e3:4a:19:f0:a0: f8:98:3b:a4:aa:25:96:fd:b8:14:68:2d:44:57:01: a4:1e:24:dc:a2:79:22:31:08:cf:f1:fe:51:36:31: 3c:e3:9e:56:f9:97:52:9a:3d:97:77:04:71:1f:bc: 0d:52:17:9f:e7:bc:5f:18:4d:04:6c:33:f6:bd:92: 04:ff:76:0e:ee:45:53:a3:fa:45:46:ea:ce:f4:79: 9d:24:f4:53:10:43:1f:53:ec:2f:0f:78:78:60:81: b9:00:bd:9c:d7:98:b5:b6:6d:14:35:16:0a:24:23: 89:90:b4:7c:c8:2e:83:08:0e:fb:64:8b:0b:eb:a2: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D8:6C:56:29:25:4E:E8:FB:CF:6D:26:40:47:70:31:93:16:C3:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1a5323d-810c-4209-a36d-e85d1d062c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10a::/48 Signature Algorithm: sha256WithRSAEncryption 4c:55:71:70:94:fc:e1:2c:26:8b:6b:34:01:8e:ac:a8:04:22: f7:ee:26:be:24:7e:01:cf:fd:23:ae:44:a3:11:95:ab:fd:8a: 8c:ac:30:4b:1d:f1:55:66:e8:d5:c4:2d:ca:4b:6f:be:32:f2: 93:b6:58:78:71:1a:2e:a0:37:60:26:a1:e1:82:a3:6c:5a:cd: 3f:7e:a6:15:a5:db:5b:90:d3:03:2e:81:d6:bf:d6:61:43:56: b2:20:c7:2e:06:ad:7a:c3:cf:09:d0:9d:5f:2d:75:2b:97:70: a8:5d:6b:3d:51:49:99:a0:bd:ee:ff:26:0d:6f:15:88:50:0a: 5b:a2:7a:27:de:d3:89:d8:44:c3:c7:37:b7:69:7a:e1:1c:a9: b3:ce:58:cc:a5:19:a3:9f:ff:c2:ba:2a:cd:38:77:31:95:55: fd:be:a7:e3:b1:f1:2d:e0:c5:6c:34:fd:71:ce:89:e3:29:87: 93:3e:37:68:9a:e4:11:4c:d0:3f:d2:02:33:f2:11:03:57:a2: 4d:c0:6c:9a:db:9e:a2:21:af:27:dd:88:0f:25:81:f3:41:14: 90:55:d5:c2:d7:24:f2:c4:18:de:d9:55:7b:ab:43:e2:3d:80: 30:b3:0b:60:c6:6d:63:b6:6e:c6:cc:89:fd:41:4b:4f:a8:9c: 52:c0:bf:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUScZEPUVSqH3Ooh2sZQsU/V1nRtkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDI3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWQ2Y2MyMTI4ZGQ5ODFmNzJmNTM1NDhmMTk1ZGJhYjhj MzBmNWRiNzJkYzA0Y2Y0OGRkZGFlZTAxZmJhYjViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzaDG4K7w6mhZ6o8hWCRvqbkZeNWgVqa0ZaewaJsWVee0G r9MmqHcw+wf8qdi92+Wc085ndevg++IeA1xa27RLrMNGpPwCG/+zyx14ayaJHq8z HyR9Z0179wqa6H/zrrd4hWtefvc/9j4b1saUEd3lY8qyC+WCyDx0nwgSaGP/p9Lj ShnwoPiYO6SqJZb9uBRoLURXAaQeJNyieSIxCM/x/lE2MTzjnlb5l1KaPZd3BHEf vA1SF5/nvF8YTQRsM/a9kgT/dg7uRVOj+kVG6s70eZ0k9FMQQx9T7C8PeHhggbkA vZzXmLW2bRQ1FgokI4mQtHzILoMIDvtkiwvroi+LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdNhsViklTuj7z20mQEdwMZMWwzcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExYTUzMjNkLTgxMGMtNDIwOS1hMzZkLWU4NWQxZDA2MmMyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QowDQYJKoZIhvcNAQELBQADggEBAExVcXCU/OEsJotrNAGOrKgE IvfuJr4kfgHP/SOuRKMRlav9ioysMEsd8VVm6NXELcpLb74y8pO2WHhxGi6gN2Am oeGCo2xazT9+phWl21uQ0wMugda/1mFDVrIgxy4GrXrDzwnQnV8tdSuXcKhdaz1R SZmgve7/Jg1vFYhQCluieife04nYRMPHN7dpeuEcqbPOWMylGaOf/8K6Ks04dzGV Vf2+p+Ox8S3gxWw0/XHOieMph5M+N2ia5BFM0D/SAjPyEQNXok3AbJrbnqIhryfd iA8lgfNBFJBV1cLXJPLEGN7ZVXurQ+I9gDCzC2DGbWO2bsbMif1BS0+onFLAv/s= -----END CERTIFICATE-----Generated at Tue Aug 18 02:13:55 2026 by rpki-client