$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: XXaoyUMdXs1pWk6xuKgltthqrVtLxL8SlsjlcOWkHkA= Subject key identifier: 36:2D:71:BE:B9:D9:EB:98:D8:F6:D2:5B:7E:2B:C8:97:36:3B:52:B8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0C36F9E86E7AE383EFDA5B071F77A37D8C1671B2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Sat 08 Aug 2026 00:50:04 +0000 ROA not before: Sat 08 Aug 2026 00:50:04 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:36:f9:e8:6e:7a:e3:83:ef:da:5b:07:1f:77:a3:7d:8c:16:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:04 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=36c61a455b019364b89084b848aa44cd152fee3488efb70fa10d3dd23be86971, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:51:67:06:29:f5:9a:96:df:39:5b:26:70: 11:24:c2:b8:96:8b:8a:db:dc:56:e0:c7:39:86:73: 93:71:a0:7a:b1:f7:ae:2b:e8:42:c3:cb:2e:a3:da: 46:20:9e:29:c5:ed:a1:f5:56:a0:5c:44:31:4a:b5: 6c:8c:8c:0b:f8:29:2c:5d:cc:6e:82:2c:01:6b:e3: 81:7e:cd:d8:4d:6d:1d:26:3d:29:5e:39:3f:b8:00: b3:88:f0:83:b8:bc:28:29:3f:13:5b:e6:13:e1:fa: 50:96:ca:97:04:43:7a:d0:32:f2:2d:45:0d:88:81: 04:d0:ad:bc:0f:5a:d6:10:8a:8b:b7:89:f5:03:9d: 1c:7b:fb:60:21:ac:3b:d9:14:5e:68:7d:98:06:9e: b7:d2:6e:b6:4b:15:a2:01:8f:08:14:a1:a7:0d:d5: 40:15:54:4f:25:08:7b:1a:ee:6c:70:ad:4d:1d:45: db:36:4b:ee:37:b2:23:b0:a3:0d:2e:cc:f6:19:d3: 9d:42:ba:fa:42:86:d8:2c:be:cd:d9:7e:04:22:b1: 1b:85:48:06:49:47:a9:3b:33:f9:27:dd:9b:09:9d: 70:de:8d:9e:13:4e:04:45:79:3e:92:61:75:61:9c: 47:49:0e:3d:94:24:70:ab:02:ad:ee:cb:bd:f5:7a: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:71:BE:B9:D9:EB:98:D8:F6:D2:5B:7E:2B:C8:97:36:3B:52:B8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 55:72:57:8a:a8:b9:86:e5:da:b2:d2:a4:56:3f:55:e1:9e:07: 97:3b:0a:5b:90:aa:5c:41:c7:8e:bd:46:b5:da:7a:d8:33:8a: 60:ac:75:ba:d5:b6:60:70:6e:ab:08:3b:2c:77:b0:db:e1:2c: 05:19:0f:9e:b8:c0:09:dd:3d:d1:5f:4a:ca:fd:bf:e9:df:94: b4:6f:29:c7:40:b9:54:25:d3:b4:eb:a0:05:ca:6e:f2:a3:dc: 0e:ff:50:02:21:31:05:be:84:93:3c:10:2f:90:99:57:77:dc: 73:34:63:50:98:77:db:f7:a1:26:52:8c:ed:b8:18:85:c6:d0: 78:83:a0:a1:3c:dc:0d:07:0e:0b:30:02:65:3b:fb:ab:8f:5f: bd:d1:21:76:15:f2:7a:5b:66:77:4f:9c:9a:0f:16:bf:33:12: e1:c0:7c:06:75:b5:72:03:34:22:dc:8d:06:6e:8d:b1:7d:f7: 60:aa:72:ff:e3:18:7d:bb:cc:82:f7:06:4a:f9:d4:97:5d:30: 25:a2:87:76:1a:74:61:ad:49:ff:6e:cd:22:55:3e:cf:2e:3d: 68:dc:4c:72:ff:da:bf:6e:83:be:36:bc:fe:29:d7:71:a3:2d: 4f:3c:ad:4d:ee:7f:f0:10:88:a6:15:9a:59:33:0d:f8:2b:df: 35:a1:51:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDDb56G5644Pv2lsHH3ejfYwWcbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDA0WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmM2MWE0NTViMDE5MzY0Yjg5MDg0Yjg0OGFhNDRjZDE1 MmZlZTM0ODhlZmI3MGZhMTBkM2RkMjNiZTg2OTcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0WlFnBin1mpbfOVsmcBEkwriWi4rb3FbgxzmGc5NxoHqx 964r6ELDyy6j2kYgninF7aH1VqBcRDFKtWyMjAv4KSxdzG6CLAFr44F+zdhNbR0m PSleOT+4ALOI8IO4vCgpPxNb5hPh+lCWypcEQ3rQMvItRQ2IgQTQrbwPWtYQiou3 ifUDnRx7+2AhrDvZFF5ofZgGnrfSbrZLFaIBjwgUoacN1UAVVE8lCHsa7mxwrU0d Rds2S+43siOwow0uzPYZ051CuvpChtgsvs3ZfgQisRuFSAZJR6k7M/kn3ZsJnXDe jZ4TTgRFeT6SYXVhnEdJDj2UJHCrAq3uy731eoYBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNi1xvrnZ65jY9tJbfivIlzY7UrgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAFVyV4qouYbl2rLSpFY/VeGe B5c7CluQqlxBx469RrXaetgzimCsdbrVtmBwbqsIOyx3sNvhLAUZD564wAndPdFf Ssr9v+nflLRvKcdAuVQl07TroAXKbvKj3A7/UAIhMQW+hJM8EC+QmVd33HM0Y1CY d9v3oSZSjO24GIXG0HiDoKE83A0HDgswAmU7+6uPX73RIXYV8npbZndPnJoPFr8z EuHAfAZ1tXIDNCLcjQZujbF992Cqcv/jGH27zIL3Bkr51JddMCWih3YadGGtSf9u zSJVPs8uPWjcTHL/2r9ug742vP4p13GjLU88rU3uf/AQiKYVmlkzDfgr3zWhUUU= -----END CERTIFICATE-----Generated at Tue Aug 18 02:15:55 2026 by rpki-client