$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da202649-b5ac-45d7-ab2c-22fec234c600.roa File: da202649-b5ac-45d7-ab2c-22fec234c600.roa (raw, json) Hash identifier: j9JooqcSxARvx5wTIry70WHGFutqqJMcvoP2m6rsrwk= Subject key identifier: 47:22:F2:99:9B:F5:63:60:98:C7:48:F4:31:A7:B9:5D:BB:A7:D7:09 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4AD56F40412BCF32BD9DE474CA330CF66A0C69C1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da202649-b5ac-45d7-ab2c-22fec234c600.roa Signing time: Sat 08 Aug 2026 00:50:43 +0000 ROA not before: Sat 08 Aug 2026 00:50:43 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d5:6f:40:41:2b:cf:32:bd:9d:e4:74:ca:33:0c:f6:6a:0c:69:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:50:43 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=0ef22d799b3a56d5e68c9c2c688c65cf41d3b74e16942406cee44fa257f2c70f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:be:5c:e7:6c:f0:87:c3:14:26:b8:29:a0:76: 32:6e:b7:21:e1:e7:c5:b8:6d:f9:e7:7e:63:ef:c9: ef:51:d2:e3:8d:4b:25:b1:c9:90:bb:63:63:c0:31: 1b:83:b8:a1:4e:c4:99:e1:c2:2d:45:5c:32:04:14: ba:5b:88:4a:26:66:30:d6:1a:7a:b6:d8:3b:a8:30: a2:bc:25:1b:59:71:bc:5b:d2:c7:a5:dd:7a:e3:8b: ea:f2:00:e0:aa:38:ed:09:d2:e3:9c:ea:13:f3:ce: 97:5e:62:6e:b7:91:e7:65:85:fe:79:4e:ec:6f:c4: 19:bf:b3:93:46:9a:96:11:06:2f:95:a5:05:d9:d1: db:df:6e:41:9b:13:b6:7e:09:66:ae:ce:b4:7c:a2: de:c2:b7:1e:7e:ba:d1:04:44:a1:c2:c7:25:01:72: 7b:c9:c4:ee:33:40:63:e8:ab:b0:40:9e:5e:52:e0: e5:c2:cc:2a:17:78:4a:8c:65:30:9b:73:fe:fa:f2: 39:7a:59:54:90:99:dd:e0:83:63:50:1f:f5:00:0a: f4:07:3c:28:1d:b9:99:19:62:69:b9:f5:3f:b9:62: 73:9e:55:e6:d1:6f:39:3a:92:df:2c:1b:61:df:df: 7b:2e:60:58:11:6c:45:53:fe:8a:9c:9c:c7:dc:92: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:F2:99:9B:F5:63:60:98:C7:48:F4:31:A7:B9:5D:BB:A7:D7:09 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da202649-b5ac-45d7-ab2c-22fec234c600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f106::/48 Signature Algorithm: sha256WithRSAEncryption 5a:a5:1f:bf:a1:90:82:0e:03:9c:24:4f:60:15:e5:7a:38:9f: e8:05:42:54:2f:0e:b6:9a:0e:b5:cd:2f:b5:56:7f:fb:67:78: 85:3c:d0:cb:f8:d4:da:53:64:c3:3c:68:5b:c1:74:cd:98:18: 58:f9:27:18:e9:c7:9e:94:8c:c0:97:99:1f:0e:c6:c1:da:05: 58:9f:ec:97:fb:16:3a:eb:28:cc:29:51:b8:5e:0a:8f:4f:3a: 6a:da:20:ab:76:8d:a8:31:20:29:ee:27:9a:a2:ca:e9:1c:2e: 64:b1:66:83:81:0f:cc:45:46:d3:fd:58:ed:94:1e:d0:5d:ac: 7e:7e:54:45:42:09:3c:64:b8:8f:03:fb:09:d6:9b:f6:77:ab: 70:9a:92:50:86:6e:7e:1d:3a:e6:05:0d:44:dd:f0:7a:44:a5: d8:ef:1b:1f:6c:d4:45:59:ac:9e:b4:b7:49:b7:52:80:41:d6: 29:f7:82:79:3f:b4:09:77:87:27:65:69:b4:1a:18:92:6b:7e: f4:9b:d2:8d:c7:4b:82:6a:ba:64:01:26:9f:c0:e7:e7:d4:a2: 89:8a:c8:9c:55:41:8c:ba:39:46:fc:df:23:0c:e5:b5:41:e5: 44:46:38:82:60:67:59:f6:3e:f2:af:ed:3f:6e:15:be:65:40: 25:b8:db:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUStVvQEErzzK9neR0yjMM9moMacEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDQzWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWYyMmQ3OTliM2E1NmQ1ZTY4YzljMmM2ODhjNjVjZjQx ZDNiNzRlMTY5NDI0MDZjZWU0NGZhMjU3ZjJjNzBmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxvlznbPCHwxQmuCmgdjJutyHh58W4bfnnfmPvye9R0uON SyWxyZC7Y2PAMRuDuKFOxJnhwi1FXDIEFLpbiEomZjDWGnq22DuoMKK8JRtZcbxb 0sel3Xrji+ryAOCqOO0J0uOc6hPzzpdeYm63kedlhf55TuxvxBm/s5NGmpYRBi+V pQXZ0dvfbkGbE7Z+CWauzrR8ot7Ctx5+utEERKHCxyUBcnvJxO4zQGPoq7BAnl5S 4OXCzCoXeEqMZTCbc/768jl6WVSQmd3gg2NQH/UACvQHPCgduZkZYmm59T+5YnOe VebRbzk6kt8sG2Hf33suYFgRbEVT/oqcnMfcktJRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURyLymZv1Y2CYx0j0Mae5Xbun1wkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhMjAyNjQ5LWI1YWMtNDVkNy1hYjJjLTIyZmVjMjM0YzYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QYwDQYJKoZIhvcNAQELBQADggEBAFqlH7+hkIIOA5wkT2AV5Xo4 n+gFQlQvDraaDrXNL7VWf/tneIU80Mv41NpTZMM8aFvBdM2YGFj5Jxjpx56UjMCX mR8OxsHaBVif7Jf7FjrrKMwpUbheCo9POmraIKt2jagxICnuJ5qiyukcLmSxZoOB D8xFRtP9WO2UHtBdrH5+VEVCCTxkuI8D+wnWm/Z3q3CaklCGbn4dOuYFDUTd8HpE pdjvGx9s1EVZrJ60t0m3UoBB1in3gnk/tAl3hydlabQaGJJrfvSb0o3HS4JqumQB Jp/A5+fUoomKyJxVQYy6OUb83yMM5bVB5URGOIJgZ1n2PvKv7T9uFb5lQCW429A= -----END CERTIFICATE-----Generated at Tue Aug 18 02:17:12 2026 by rpki-client