$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa File: 0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa (raw, json) Hash identifier: Tn0LstNaeQyYIxJ2626RUom6E1Tgy/xULCWZDXzNv1o= Subject key identifier: 15:54:3E:09:23:47:0F:5B:78:B7:D5:BB:83:A9:7C:25:7D:66:9E:DF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05E8D0137A7C453108F5C29F864D3FD3FBE660BC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa Signing time: Thu 23 Jul 2026 15:00:05 +0000 ROA not before: Thu 23 Jul 2026 15:00:05 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e8:d0:13:7a:7c:45:31:08:f5:c2:9f:86:4d:3f:d3:fb:e6:60:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:05 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=b3ea4302e076cca6fd0e078a3fbe14d2b5a0ee371018feec82ee5533e51aa12e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:0f:a4:c9:99:e8:2e:bf:eb:49:01:05:c8: cb:4e:30:c3:93:85:83:04:63:bb:e7:15:63:6a:f8: 89:8e:ba:11:4b:82:f3:4a:87:9a:eb:b9:96:a1:54: b8:b7:17:39:df:ad:1a:d1:4d:ee:33:f5:52:8d:7f: 5e:6b:ce:56:58:ba:60:21:8c:ac:11:cd:cc:a6:3f: 27:69:0e:39:47:eb:ff:1a:49:f0:e5:90:54:09:8e: 87:35:b0:1e:fd:03:ff:be:9a:02:46:41:80:7f:b3: ca:39:11:9e:f3:2c:28:95:ca:eb:90:da:99:e0:00: 80:64:a2:d1:02:d3:f7:0b:d4:1d:14:95:d0:6f:3d: 9d:7f:17:63:2d:88:f8:6e:6c:94:5a:bb:8f:1c:ac: 76:7b:3f:22:23:4e:23:ba:52:3c:8a:79:88:ad:1c: 99:4d:75:db:c0:ab:db:66:a2:2b:2f:a3:d3:24:7d: 64:f9:78:e6:80:7e:08:10:83:4b:f5:3b:a4:f4:36: 8f:94:da:05:89:a6:4f:18:89:96:ca:01:d9:84:73: 08:2b:8e:e2:10:ea:4f:fd:f4:c2:50:2a:0c:b9:16: 45:38:6d:ef:5b:da:85:69:0f:a9:ac:36:22:78:f7: 06:2e:9c:ff:20:9e:3d:76:aa:ae:ee:04:fc:c5:f9: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:3E:09:23:47:0F:5B:78:B7:D5:BB:83:A9:7C:25:7D:66:9E:DF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610d::/48 Signature Algorithm: sha256WithRSAEncryption 10:5a:fe:f5:18:fb:2a:ca:2d:6b:91:8b:ac:7e:2c:e4:47:88: 89:9f:0a:9d:19:09:d7:29:6e:5d:bd:d4:23:4b:b3:a4:d0:31: 3a:98:73:4d:65:f7:d3:99:0c:cc:ec:fb:82:e8:f5:71:b0:bb: d5:a8:a2:8d:e4:dd:1c:ae:80:28:67:45:19:05:d1:1e:78:f0: 3c:6e:d0:e3:cb:a0:df:97:73:34:85:87:67:96:06:16:f0:2d: 67:33:bf:af:1c:2b:cc:21:5a:68:47:a9:24:d1:d3:05:17:40: ba:cd:c0:12:6e:0d:a9:17:fc:c1:88:d6:87:68:ba:d9:05:fa: f6:9a:15:65:7d:bf:2d:42:bd:53:27:97:61:88:47:c9:5c:58: 83:18:5b:cc:7b:7f:7c:2a:2b:a1:ba:16:1c:b6:a0:7d:d6:6c: 19:93:49:6c:4d:34:ee:d9:8c:42:c8:5a:bf:ea:80:8f:bd:a9: d1:fe:e1:37:54:98:42:31:f8:a1:17:28:d6:82:a4:8e:70:fd: ec:a9:5b:eb:05:d3:5a:07:3a:79:f2:3c:37:7e:60:c4:f2:c2: 7e:49:c2:55:2b:ab:1a:4c:9e:ff:f4:59:03:81:3b:78:ba:ef: a1:8f:8f:cc:e0:cd:d0:f6:cd:98:1d:c6:8d:cf:1d:46:e4:0d: e8:ca:8e:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBejQE3p8RTEI9cKfhk0/0/vmYLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA1WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2VhNDMwMmUwNzZjY2E2ZmQwZTA3OGEzZmJlMTRkMmI1 YTBlZTM3MTAxOGZlZWM4MmVlNTUzM2U1MWFhMTJlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/qQ+kyZnoLr/rSQEFyMtOMMOThYMEY7vnFWNq+ImOuhFL gvNKh5rruZahVLi3FznfrRrRTe4z9VKNf15rzlZYumAhjKwRzcymPydpDjlH6/8a SfDlkFQJjoc1sB79A/++mgJGQYB/s8o5EZ7zLCiVyuuQ2pngAIBkotEC0/cL1B0U ldBvPZ1/F2MtiPhubJRau48crHZ7PyIjTiO6UjyKeYitHJlNddvAq9tmoisvo9Mk fWT5eOaAfggQg0v1O6T0No+U2gWJpk8YiZbKAdmEcwgrjuIQ6k/99MJQKgy5FkU4 be9b2oVpD6msNiJ49wYunP8gnj12qq7uBPzF+SbtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFVQ+CSNHD1t4t9W7g6l8JX1mnt8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBkOWQwM2FmLTQyZDgtNGNkMi1iNzAyLWM1ZWNkNjk4OGU4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ0wDQYJKoZIhvcNAQELBQADggEBABBa/vUY+yrKLWuRi6x+LORH iImfCp0ZCdcpbl291CNLs6TQMTqYc01l99OZDMzs+4Lo9XGwu9Wooo3k3RyugChn RRkF0R548Dxu0OPLoN+XczSFh2eWBhbwLWczv68cK8whWmhHqSTR0wUXQLrNwBJu DakX/MGI1odoutkF+vaaFWV9vy1CvVMnl2GIR8lcWIMYW8x7f3wqK6G6Fhy2oH3W bBmTSWxNNO7ZjELIWr/qgI+9qdH+4TdUmEIx+KEXKNaCpI5w/eypW+sF01oHOnny PDd+YMTywn5JwlUrqxpMnv/0WQOBO3i676GPj8zgzdD2zZgdxo3PHUbkDejKjmE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:50:59 2026 by rpki-client