$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa File: bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa (raw, json) Hash identifier: vPHeCbcFfG0e13JWiF53MOvktrhUxX5ChASv49/NeA8= Subject key identifier: BA:37:E5:C7:BA:A1:CB:68:EE:DB:EC:8D:F6:5B:F9:8D:9A:7D:B5:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 70F10D76D1A9F6DDFB81AF3B1E09AC33D0A6C5CB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa Signing time: Sat 08 Aug 2026 00:50:11 +0000 ROA not before: Sat 08 Aug 2026 00:50:11 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f1:0d:76:d1:a9:f6:dd:fb:81:af:3b:1e:09:ac:33:d0:a6:c5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:11 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=a8aea08176a9ade284b3cdfe47e5c6d7e5aed8d0d74c6c44f363cfc5993abf89, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:59:0c:20:fa:7d:d8:3c:0c:26:67:fc:a1: c6:78:28:58:b4:c1:b5:f3:51:7d:3e:31:f0:f9:a3: f2:55:27:93:67:e2:14:ed:ab:c8:fe:ac:6b:29:35: 6c:cb:96:f8:48:bb:6a:57:7d:65:2f:22:64:6f:16: 45:cc:91:ac:df:da:c1:1c:a8:e5:d2:14:60:60:8d: f4:af:e0:dc:b6:21:f7:6e:01:02:4d:d9:1a:f8:d3: a8:ae:85:20:73:01:e0:18:f6:53:6e:aa:a0:60:8c: 6f:90:d9:eb:3f:a1:7c:92:07:ae:12:36:f4:d6:f4: 2d:c7:53:ea:20:45:c4:f9:83:47:c0:24:d7:c3:e1: b5:b9:18:25:7e:ea:56:c0:77:b7:ec:1d:eb:b1:eb: 44:86:7a:c3:27:a1:1b:de:db:58:02:78:c0:de:7b: be:e8:83:81:b0:7b:78:22:4d:ec:a9:a3:c8:94:12: 09:e1:3e:6b:44:58:67:a8:7e:52:ee:82:b0:33:e1: e3:b4:f5:9b:d1:22:97:7f:77:d9:c2:57:0a:b7:cd: 99:0e:f0:6d:b7:a8:53:c4:cb:19:8f:b9:a4:f2:d8: fa:18:da:20:33:32:e1:d3:93:75:a0:d6:54:21:34: 41:23:06:ca:2e:bc:27:db:c3:70:9c:9b:ed:59:55: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:E5:C7:BA:A1:CB:68:EE:DB:EC:8D:F6:5B:F9:8D:9A:7D:B5:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb39a4d5-a721-4096-bac6-18d29fa4b7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10c::/48 Signature Algorithm: sha256WithRSAEncryption 5d:69:13:14:a1:85:b8:d1:cb:e0:14:5f:f2:0e:58:71:e7:7a: 67:51:94:46:50:86:42:97:e7:5b:41:9b:a6:e5:96:38:da:95: f5:f8:9e:b1:67:f1:3f:65:e8:24:77:4c:de:36:d4:5f:1d:fb: 8a:94:da:f5:10:6f:9b:e2:d1:4b:a4:64:83:a0:bd:a4:1f:55: 02:a6:70:bd:15:eb:c3:5b:97:25:74:d4:90:3e:c0:26:3d:58: df:39:83:47:d5:1e:f3:8b:c2:fd:77:cc:25:22:19:b4:f2:63: 0e:be:d1:87:5c:49:75:f5:7a:59:9d:19:b7:18:f7:63:f7:64: 11:2d:40:57:82:7a:a9:96:25:52:41:2f:96:9f:06:82:ab:e5: ed:dc:4e:d4:47:24:f4:08:15:94:c3:55:86:ad:b0:ca:d2:08: 8b:5a:28:06:d6:3f:3e:57:15:f2:de:43:e0:07:b3:c8:65:c2: c1:da:88:ee:fd:25:30:b9:de:41:cc:6e:2e:64:df:ee:66:ad: 1a:e7:54:45:70:5e:31:c5:7a:5f:61:3f:54:49:0a:cc:01:b4: 76:e2:a0:32:71:43:0b:7f:67:7d:2c:9e:6c:b7:36:24:5b:0a: f4:30:19:39:50:09:87:61:f0:b3:b4:b2:5e:56:f1:4d:90:e3: 90:e1:41:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcPENdtGp9t37ga87HgmsM9CmxcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDExWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGFlYTA4MTc2YTlhZGUyODRiM2NkZmU0N2U1YzZkN2U1 YWVkOGQwZDc0YzZjNDRmMzYzY2ZjNTk5M2FiZjg5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqolkMIPp92DwMJmf8ocZ4KFi0wbXzUX0+MfD5o/JVJ5Nn 4hTtq8j+rGspNWzLlvhIu2pXfWUvImRvFkXMkazf2sEcqOXSFGBgjfSv4Ny2Ifdu AQJN2Rr406iuhSBzAeAY9lNuqqBgjG+Q2es/oXySB64SNvTW9C3HU+ogRcT5g0fA JNfD4bW5GCV+6lbAd7fsHeux60SGesMnoRve21gCeMDee77og4Gwe3giTeypo8iU EgnhPmtEWGeoflLugrAz4eO09ZvRIpd/d9nCVwq3zZkO8G23qFPEyxmPuaTy2PoY 2iAzMuHTk3Wg1lQhNEEjBsouvCfbw3Ccm+1ZVbA9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUujflx7qhy2ju2+yN9lv5jZp9tfcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiMzlhNGQ1LWE3MjEtNDA5Ni1iYWM2LTE4ZDI5ZmE0YjdmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAF1pExShhbjRy+AUX/IOWHHn emdRlEZQhkKX51tBm6blljjalfX4nrFn8T9l6CR3TN421F8d+4qU2vUQb5vi0Uuk ZIOgvaQfVQKmcL0V68NblyV01JA+wCY9WN85g0fVHvOLwv13zCUiGbTyYw6+0Ydc SXX1elmdGbcY92P3ZBEtQFeCeqmWJVJBL5afBoKr5e3cTtRHJPQIFZTDVYatsMrS CItaKAbWPz5XFfLeQ+AHs8hlwsHaiO79JTC53kHMbi5k3+5mrRrnVEVwXjHFel9h P1RJCswBtHbioDJxQwt/Z30snmy3NiRbCvQwGTlQCYdh8LO0sl5W8U2Q45DhQSg= -----END CERTIFICATE-----Generated at Tue Aug 18 02:15:10 2026 by rpki-client