$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cfd66c8a-380e-4926-a3e8-be724c0d6530.roa File: cfd66c8a-380e-4926-a3e8-be724c0d6530.roa (raw, json) Hash identifier: BXxQjuPjwUcf18SvxlqbywFYdwd36yEeAp3qomv4wi4= Subject key identifier: 39:35:6D:6A:6E:78:D3:1C:CD:61:88:95:7A:3D:82:D3:32:67:EF:9E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 320BF154BEF13E83EAEE67DA3D500C718C1FD11D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cfd66c8a-380e-4926-a3e8-be724c0d6530.roa Signing time: Fri 14 Aug 2026 18:02:10 +0000 ROA not before: Fri 14 Aug 2026 18:02:10 +0000 ROA not after: Thu 12 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:701::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0b:f1:54:be:f1:3e:83:ea:ee:67:da:3d:50:0c:71:8c:1f:d1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 14 18:02:10 2026 GMT Not After : Nov 12 23:59:59 2026 GMT Subject: serialNumber=c749590657f2204cac6165861f96695cf653135dfc0e2eeba68e322a34a8814b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:be:0d:6c:12:22:ce:5f:4c:1a:95:03:ea: 36:03:1a:57:76:bd:dc:8f:a6:68:c6:ee:b3:15:16: 77:b2:96:0c:ea:4e:8a:f7:1e:4b:ae:20:5e:12:30: ae:38:92:25:48:43:69:72:53:64:fd:8b:e8:28:ae: 34:72:89:1e:1c:c0:79:7a:de:b6:89:12:ec:b9:23: fd:ab:36:f7:48:93:0b:39:e8:8f:1c:5f:6b:59:8c: 11:06:53:8e:ff:b3:3c:a0:ca:f0:db:3e:e1:9d:10: 33:f1:c7:51:4b:8f:33:95:d5:e6:9e:ed:a4:59:10: 30:01:e2:0d:0c:32:2e:a4:2d:cb:86:54:65:49:09: 61:66:1e:c9:9a:33:bb:52:56:0a:d4:51:2f:da:0e: 59:3e:2d:c8:3b:e8:00:9e:ab:d6:8d:19:62:4c:47: 14:fa:d3:99:24:5f:f4:62:e2:52:9f:13:5c:ee:0b: e5:75:cd:53:30:7c:41:f3:cc:35:11:25:31:4b:b1: 8f:aa:ea:7f:fd:ef:fb:72:a7:c0:7f:46:81:6e:a7: 25:b0:cd:b1:bb:c3:e6:5f:96:cf:0f:1d:bc:33:1a: fe:ec:50:7a:3b:3d:30:8a:b7:4c:90:af:e5:e8:b5: dc:e3:43:41:49:43:fb:68:b4:ca:75:b1:4f:da:d8: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:6D:6A:6E:78:D3:1C:CD:61:88:95:7A:3D:82:D3:32:67:EF:9E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cfd66c8a-380e-4926-a3e8-be724c0d6530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:701::/48 Signature Algorithm: sha256WithRSAEncryption 21:40:21:80:1c:cc:db:09:d9:6a:f3:8a:99:bc:8e:a9:4f:b9: b5:0d:b3:93:34:16:c2:24:5e:71:e5:05:2e:0f:52:b1:d1:42: a8:46:e6:e6:b3:c0:d5:76:5d:7e:e5:47:3b:9f:e1:e1:86:05: 73:96:5d:a1:57:90:98:d5:fb:18:f2:63:48:55:4a:48:69:e0: fe:ac:e4:91:d8:a3:09:26:5a:aa:8f:69:c8:28:0e:df:2c:d3: 00:70:88:c1:df:c1:a0:b7:02:85:31:26:e1:bc:65:3b:8b:37: 3c:4b:f9:a3:a3:44:35:6e:2a:a6:91:fc:eb:bf:65:a0:96:ab: 10:10:08:30:a6:bd:f0:6d:3e:32:87:36:a5:8b:51:30:69:07: a6:40:03:23:e6:ad:d4:c9:47:f4:18:2b:5f:99:b3:cb:27:c4: 2e:57:57:9a:3d:86:da:91:de:c8:00:6a:42:78:0b:2e:03:8d: db:42:10:14:b3:7f:10:f5:d7:d8:fa:31:83:f0:a2:ab:68:c8: 9a:cb:b9:d9:b2:71:e8:b0:68:ed:52:18:ac:0c:8f:d9:37:e2: a0:93:bc:f8:f4:05:f5:f9:cc:d7:b4:df:62:eb:57:f9:3e:3a: 10:9e:01:72:28:51:fe:5c:aa:c3:71:97:11:82:36:ec:c9:40: 5b:3a:f3:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMgvxVL7xPoPq7mfaPVAMcYwf0R0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODE0MTgwMjEwWhcNMjYxMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzQ5NTkwNjU3ZjIyMDRjYWM2MTY1ODYxZjk2Njk1Y2Y2 NTMxMzVkZmMwZTJlZWJhNjhlMzIyYTM0YTg4MTRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd374NbBIizl9MGpUD6jYDGld2vdyPpmjG7rMVFneylgzq Tor3HkuuIF4SMK44kiVIQ2lyU2T9i+gorjRyiR4cwHl63raJEuy5I/2rNvdIkws5 6I8cX2tZjBEGU47/szygyvDbPuGdEDPxx1FLjzOV1eae7aRZEDAB4g0MMi6kLcuG VGVJCWFmHsmaM7tSVgrUUS/aDlk+Lcg76ACeq9aNGWJMRxT605kkX/Ri4lKfE1zu C+V1zVMwfEHzzDURJTFLsY+q6n/97/typ8B/RoFupyWwzbG7w+Zfls8PHbwzGv7s UHo7PTCKt0yQr+XotdzjQ0FJQ/totMp1sU/a2K/RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOTVtam540xzNYYiVej2C0zJn754wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NmZDY2YzhhLTM4MGUtNDkyNi1hM2U4LWJlNzI0YzBkNjUzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBwEwDQYJKoZIhvcNAQELBQADggEBACFAIYAczNsJ2Wrzipm8jqlP ubUNs5M0FsIkXnHlBS4PUrHRQqhG5uazwNV2XX7lRzuf4eGGBXOWXaFXkJjV+xjy Y0hVSkhp4P6s5JHYowkmWqqPacgoDt8s0wBwiMHfwaC3AoUxJuG8ZTuLNzxL+aOj RDVuKqaR/Ou/ZaCWqxAQCDCmvfBtPjKHNqWLUTBpB6ZAAyPmrdTJR/QYK1+Zs8sn xC5XV5o9htqR3sgAakJ4Cy4DjdtCEBSzfxD119j6MYPwoqtoyJrLudmyceiwaO1S GKwMj9k34qCTvPj0BfX5zNe032LrV/k+OhCeAXIoUf5cqsNxlxGCNuzJQFs688M= -----END CERTIFICATE-----Generated at Sat Aug 15 02:09:59 2026 by rpki-client