$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f10b8903-d556-40fa-97d2-08df95c5ec84.roa File: f10b8903-d556-40fa-97d2-08df95c5ec84.roa (raw, json) Hash identifier: q4ogv20uCLJQW/sw+uEUD1F0j7FeGxVur3oHoiKP4dM= Subject key identifier: C1:E4:F8:33:77:9E:2E:22:E5:EB:D1:0A:53:39:10:A0:5A:DC:CD:23 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 73AFF866D06BD51E8BFADB02920085586F8916A2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f10b8903-d556-40fa-97d2-08df95c5ec84.roa Signing time: Tue 04 Aug 2026 00:20:06 +0000 ROA not before: Tue 04 Aug 2026 00:20:06 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:f8:66:d0:6b:d5:1e:8b:fa:db:02:92:00:85:58:6f:89:16:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 4 00:20:06 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=2e67b35d466a213b860d9cd6b948367b386178aaf60e1a940af9708b04887f9c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:e8:6e:ea:d6:9f:af:4f:68:a8:11:06:81: 6b:ff:1c:96:02:5b:8c:79:e4:04:88:dd:fa:52:64: ef:e7:75:7c:51:00:e1:3e:e1:2d:b0:01:57:8c:20: 95:2b:3c:e5:0f:6c:ce:ee:fc:0c:ec:90:c4:7d:cc: c4:79:e8:bc:0b:f5:a4:98:ed:69:f1:6a:24:96:3d: 4a:87:42:db:38:19:48:3c:eb:0f:c1:33:5b:5b:68: 6b:42:90:d4:7c:8f:f0:c1:06:9f:44:a3:b4:8f:18: 59:69:8f:03:2b:28:be:cb:5d:5f:45:3c:4b:4c:69: 10:48:ad:7e:3b:0c:ba:5a:85:4a:d1:4d:ee:1b:70: 32:85:0d:38:43:e9:21:34:e2:d2:be:ea:bb:f1:b2: 11:e0:0d:6a:54:53:32:27:e7:56:74:72:a3:f9:ac: c0:e6:3a:0f:41:d3:a8:58:b1:67:0b:4f:54:ae:40: e7:11:f3:3c:b9:50:1e:29:03:2c:23:dc:e0:11:a7: bc:d7:55:86:b6:40:2e:1f:f9:ac:e8:aa:9a:f5:8e: 11:79:90:a3:f4:26:f2:d7:e6:5c:65:16:dd:f9:ac: 08:67:e2:45:81:aa:c7:93:41:bb:d7:08:25:6f:86: 18:75:c1:87:38:60:ea:01:1a:98:21:bd:83:b8:cb: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:F8:33:77:9E:2E:22:E5:EB:D1:0A:53:39:10:A0:5A:DC:CD:23 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f10b8903-d556-40fa-97d2-08df95c5ec84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b02::/48 Signature Algorithm: sha256WithRSAEncryption 24:72:90:9f:52:73:5a:89:ee:ce:51:f9:6b:14:bb:9d:5a:3f: 4b:f4:9b:64:24:56:5c:0c:a1:eb:aa:0c:19:9a:0c:3e:ea:fc: ad:83:91:75:f5:23:54:f7:07:5a:01:84:85:98:b4:5c:49:75: 21:4a:d9:5b:7f:37:46:8f:ab:8c:b5:9b:bd:3d:b3:59:6e:cb: 25:71:40:6e:b9:9f:7e:90:8f:f2:96:e0:ea:35:38:e5:c6:20: 6c:cf:82:a1:32:25:2c:37:61:9e:37:78:07:d6:9d:57:86:22: 58:8a:7e:1f:26:e9:06:f1:e6:c7:09:c3:d8:3c:30:90:31:5a: 94:06:3d:8f:f9:9a:7d:20:23:5c:9c:2c:21:20:30:7c:6a:91: a9:8e:3c:3e:a3:8b:34:06:ab:b9:bb:ea:ca:e6:97:c6:d9:12: 0b:92:e0:86:67:9f:7f:e0:cc:45:51:01:81:84:37:d8:fe:76: 21:2b:1b:9b:fe:25:7a:6e:d6:22:93:9b:ad:fe:2b:b0:9a:3d: f7:5e:1a:a5:3d:1f:bb:30:7e:94:7d:d6:81:47:d8:ac:ab:06: c7:ee:ff:8b:03:63:b0:d4:bb:51:67:b0:31:fb:d5:e3:be:68: 78:38:04:77:f0:cf:c2:6b:6f:09:7e:fc:7e:8f:66:b2:a5:96: 91:c1:01:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc6/4ZtBr1R6L+tsCkgCFWG+JFqIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA0MDAyMDA2WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTY3YjM1ZDQ2NmEyMTNiODYwZDljZDZiOTQ4MzY3YjM4 NjE3OGFhZjYwZTFhOTQwYWY5NzA4YjA0ODg3ZjljMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXoOhu6tafr09oqBEGgWv/HJYCW4x55ASI3fpSZO/ndXxR AOE+4S2wAVeMIJUrPOUPbM7u/AzskMR9zMR56LwL9aSY7WnxaiSWPUqHQts4GUg8 6w/BM1tbaGtCkNR8j/DBBp9Eo7SPGFlpjwMrKL7LXV9FPEtMaRBIrX47DLpahUrR Te4bcDKFDThD6SE04tK+6rvxshHgDWpUUzIn51Z0cqP5rMDmOg9B06hYsWcLT1Su QOcR8zy5UB4pAywj3OARp7zXVYa2QC4f+azoqpr1jhF5kKP0JvLX5lxlFt35rAhn 4kWBqseTQbvXCCVvhhh1wYc4YOoBGpghvYO4yx5TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUweT4M3eeLiLl69EKUzkQoFrczSMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YxMGI4OTAzLWQ1NTYtNDBmYS05N2QyLTA4ZGY5NWM1ZWM4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwIwDQYJKoZIhvcNAQELBQADggEBACRykJ9Sc1qJ7s5R+WsUu51a P0v0m2QkVlwMoeuqDBmaDD7q/K2DkXX1I1T3B1oBhIWYtFxJdSFK2Vt/N0aPq4y1 m709s1luyyVxQG65n36Qj/KW4Oo1OOXGIGzPgqEyJSw3YZ43eAfWnVeGIliKfh8m 6Qbx5scJw9g8MJAxWpQGPY/5mn0gI1ycLCEgMHxqkamOPD6jizQGq7m76srml8bZ EguS4IZnn3/gzEVRAYGEN9j+diErG5v+JXpu1iKTm63+K7CaPfdeGqU9H7swfpR9 1oFH2KyrBsfu/4sDY7DUu1FnsDH71eO+aHg4BHfwz8Jrbwl+/H6PZrKllpHBAVY= -----END CERTIFICATE-----Generated at Tue Aug 18 02:15:38 2026 by rpki-client