$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa File: d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa (raw, json) Hash identifier: 5nwEQBvR3zFOsY/IB5eZCl12XtAY7LQdUoJDm6jQmXA= Subject key identifier: F7:B1:37:A9:30:C3:AD:1A:50:A2:1C:06:07:33:8D:9B:0D:86:AC:0B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 220654807FFC067BB40C0383EBD64DE1436BB929 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa Signing time: Sat 08 Aug 2026 00:50:45 +0000 ROA not before: Sat 08 Aug 2026 00:50:45 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:6124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:06:54:80:7f:fc:06:7b:b4:0c:03:83:eb:d6:4d:e1:43:6b:b9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:45 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=4a6a60f5b88bf233a4a2919c9a4854429f7042978f0772ecf23154729feda23d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:5b:e0:cc:1e:ef:9d:a8:e2:4d:10:75:fd: 6f:26:79:54:d9:53:43:17:28:29:d3:02:4a:d3:66: e7:f2:78:14:b5:28:3b:a3:30:0b:b9:a4:c8:9b:c2: f8:f6:0a:fa:7e:24:bb:1c:32:90:72:07:d1:aa:76: 2b:04:b9:c7:e4:30:53:3b:8b:73:ea:86:83:e6:71: 5f:ea:08:2c:59:df:35:35:a7:00:9e:86:b2:19:8a: e9:39:2d:c4:0d:bb:67:70:00:d1:dc:7e:8a:93:a1: fe:0b:ac:b0:1b:88:cb:72:19:e5:18:07:29:d6:3c: e7:20:30:71:9a:99:39:ae:fc:0a:d0:df:62:0b:fc: 81:a7:22:7d:75:10:d4:c7:e2:61:41:cd:72:09:26: 98:9b:2c:40:93:e2:a6:c5:52:26:b8:9d:20:1a:08: 93:e1:f7:e3:ad:cf:8e:ed:9d:65:e3:67:b6:e4:93: eb:76:e5:c6:15:ac:be:c4:d2:21:01:c9:ce:2d:51: a0:07:e0:65:7f:02:f9:a0:3a:21:f7:b3:2a:e9:9e: 4a:2e:c0:c6:f8:8e:b9:e4:c1:7c:4b:62:4c:98:30: 35:4d:a1:01:ea:87:8f:f9:71:ff:f4:11:04:7a:ac: 34:de:ac:6c:82:fc:8c:20:ed:c0:ef:48:23:1d:e7: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:37:A9:30:C3:AD:1A:50:A2:1C:06:07:33:8D:9B:0D:86:AC:0B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6124::/48 Signature Algorithm: sha256WithRSAEncryption 88:75:b0:e8:3d:f1:45:b4:51:3e:41:c0:6d:a6:56:57:71:20: 6c:0c:39:21:04:b6:6b:01:44:8c:59:27:8d:08:6b:a6:ed:bb: 8c:26:d8:bb:60:45:a3:7f:c9:d9:67:cf:80:c1:af:82:c6:44: de:3d:eb:97:19:5f:d9:aa:13:8c:e9:33:69:e2:71:3f:6e:e9: 11:30:bf:16:14:6a:ed:4e:50:99:d1:c5:5f:5c:e0:ae:39:78: 43:e9:44:cd:68:01:7b:1c:2a:e1:fe:0c:5b:e1:36:c5:f3:75: 79:74:cb:00:13:4b:35:82:34:34:d4:50:92:48:39:94:48:40: c7:c2:2c:cb:83:80:48:b0:c9:3e:06:93:0b:70:2c:5d:1f:8c: 5f:2a:cb:5a:74:b2:62:9b:ff:05:15:2c:22:75:3b:6e:c7:63: 17:dc:95:d5:c0:0c:f3:f0:65:e3:13:3c:a2:b6:10:76:9d:a1: 0f:28:22:b7:d4:15:01:22:2e:2f:ac:76:ec:66:ee:7d:2b:2e: 71:e3:1b:98:5c:59:fd:d7:ab:03:25:a8:c4:2f:10:1c:bd:18: 42:d8:24:41:6d:e8:36:e8:7b:57:14:f2:84:ab:d4:4f:8c:15: 90:06:a7:bd:fb:8e:db:e9:e0:6d:b6:12:5f:37:0f:af:d4:69: 11:78:2c:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIgZUgH/8Bnu0DAOD69ZN4UNruSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDQ1WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTZhNjBmNWI4OGJmMjMzYTRhMjkxOWM5YTQ4NTQ0Mjlm NzA0Mjk3OGYwNzcyZWNmMjMxNTQ3MjlmZWRhMjNkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqPlvgzB7vnajiTRB1/W8meVTZU0MXKCnTAkrTZufyeBS1 KDujMAu5pMibwvj2Cvp+JLscMpByB9GqdisEucfkMFM7i3PqhoPmcV/qCCxZ3zU1 pwCehrIZiuk5LcQNu2dwANHcfoqTof4LrLAbiMtyGeUYBynWPOcgMHGamTmu/ArQ 32IL/IGnIn11ENTH4mFBzXIJJpibLECT4qbFUia4nSAaCJPh9+Otz47tnWXjZ7bk k+t25cYVrL7E0iEByc4tUaAH4GV/AvmgOiH3syrpnkouwMb4jrnkwXxLYkyYMDVN oQHqh4/5cf/0EQR6rDTerGyC/Iwg7cDvSCMd503VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU97E3qTDDrRpQohwGBzONmw2GrAswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q4ZjAxZDc4LTZhYzMtNGM2Ni1iYmVkLWZhMjM4NzFiNWQ4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSQwDQYJKoZIhvcNAQELBQADggEBAIh1sOg98UW0UT5BwG2mVldx IGwMOSEEtmsBRIxZJ40Ia6btu4wm2LtgRaN/ydlnz4DBr4LGRN4965cZX9mqE4zp M2nicT9u6REwvxYUau1OUJnRxV9c4K45eEPpRM1oAXscKuH+DFvhNsXzdXl0ywAT SzWCNDTUUJJIOZRIQMfCLMuDgEiwyT4GkwtwLF0fjF8qy1p0smKb/wUVLCJ1O27H YxfcldXADPPwZeMTPKK2EHadoQ8oIrfUFQEiLi+sduxm7n0rLnHjG5hcWf3XqwMl qMQvEBy9GELYJEFt6Dboe1cU8oSr1E+MFZAGp737jtvp4G22El83D6/UaRF4LFQ= -----END CERTIFICATE-----Generated at Tue Aug 18 02:15:55 2026 by rpki-client