$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17964269-4037-4ed5-aaa5-d2527a564b59.roa File: 17964269-4037-4ed5-aaa5-d2527a564b59.roa (raw, json) Hash identifier: 80rkSST5ZfKVtDj+LPEgDOHqE6zFy5ocSLV4qgAOfVA= Subject key identifier: FD:99:48:97:AE:CE:9F:00:CC:D0:13:3F:54:7E:BE:DA:A5:8F:AB:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3FD5D33CF8EE8E671CC9F1AB2E4968D30A15DF23 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17964269-4037-4ed5-aaa5-d2527a564b59.roa Signing time: Thu 23 Jul 2026 15:00:30 +0000 ROA not before: Thu 23 Jul 2026 15:00:30 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d5:d3:3c:f8:ee:8e:67:1c:c9:f1:ab:2e:49:68:d3:0a:15:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:30 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=af8673f9198b40e663c76a1aee81a025b0832493d26352803c53995338e50303, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:54:33:93:d0:29:98:00:3c:96:3c:7b:50: 11:0a:83:eb:bc:e5:cd:27:6c:d6:36:eb:fa:1c:59: 53:4f:b3:33:12:3e:02:a8:70:62:3c:05:c0:ef:cc: 02:12:e8:66:6f:fa:cc:ef:ee:c2:63:2d:75:f3:3a: 93:c1:e5:51:74:c6:ae:3f:78:ba:ff:e5:c8:86:7d: 72:0b:42:8e:93:4e:6b:f0:42:0d:be:27:8b:67:a8: 90:e9:69:0f:0e:91:94:27:b2:20:d6:0f:6d:fc:94: d6:af:69:a5:da:dd:1c:aa:40:8f:cb:a6:6c:a6:f2: 0b:22:eb:57:57:e5:1d:b1:ce:49:e8:b6:bc:8a:9c: 88:05:44:f1:83:dd:1b:be:8e:30:d6:15:e1:ff:ca: 6b:62:ba:45:fd:f9:26:43:af:f4:47:6e:dd:e6:40: d9:7d:46:7b:99:64:d0:df:73:9d:c1:89:44:a2:c5: 76:b8:ef:19:17:80:d5:cd:a5:c0:50:aa:0d:70:e6: 1c:ff:d3:11:6f:c0:4c:f0:24:da:53:a5:d1:04:80: e7:03:6c:d4:09:48:ef:fe:24:83:92:3c:2d:03:56: 49:ee:70:90:7a:e7:8a:c0:f4:6f:bc:cc:ed:ab:3b: 0e:e7:41:4a:6d:f8:66:4b:9e:ae:12:93:1d:f8:7c: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:48:97:AE:CE:9F:00:CC:D0:13:3F:54:7E:BE:DA:A5:8F:AB:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17964269-4037-4ed5-aaa5-d2527a564b59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6114::/48 Signature Algorithm: sha256WithRSAEncryption 99:91:96:cf:14:90:9d:14:b6:c4:34:61:e8:a4:2e:b0:88:cd: f4:c0:d8:d9:71:b2:23:06:3b:85:7b:67:7e:9d:1c:49:cc:16: b2:a9:41:2f:fd:32:11:0e:7e:ef:23:58:92:cc:41:3d:d7:b5: d4:92:e2:29:de:18:a2:f3:ec:f9:16:57:e8:43:ce:0a:c4:e5: 38:ac:ec:45:bd:2c:00:ec:7e:29:d0:55:8d:d9:1c:f9:df:f1: 4c:80:21:6b:04:b5:78:f7:af:4d:d3:8d:71:34:3f:aa:17:01: 99:e4:4e:c1:6d:67:14:cc:71:48:70:08:08:f0:af:64:54:2d: 99:c5:90:d7:b9:f5:8e:89:c6:64:9c:99:af:20:a7:9b:71:41: f5:0b:38:34:e7:7a:1c:8c:98:a4:78:96:b1:b6:50:4f:df:4c: 05:cd:1a:17:85:6a:08:cb:ed:81:a1:b8:b6:be:a3:f8:5c:eb: fc:c7:21:8f:7b:df:29:ff:3f:19:3e:2c:50:1b:d4:a4:08:74: f7:bb:af:7c:35:70:68:b1:15:18:43:99:c1:97:f3:ca:4f:d2: ff:61:a6:a9:4b:d5:73:08:60:1a:26:25:2b:cd:b5:63:16:ee: cc:50:f7:3e:18:c9:6b:a8:21:8f:98:9b:f9:f6:70:24:a8:18: 12:25:a7:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP9XTPPjujmccyfGrLklo0woV3yMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjg2NzNmOTE5OGI0MGU2NjNjNzZhMWFlZTgxYTAyNWIw ODMyNDkzZDI2MzUyODAzYzUzOTk1MzM4ZTUwMzAzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDll1Qzk9ApmAA8ljx7UBEKg+u85c0nbNY26/ocWVNPszMS PgKocGI8BcDvzAIS6GZv+szv7sJjLXXzOpPB5VF0xq4/eLr/5ciGfXILQo6TTmvw Qg2+J4tnqJDpaQ8OkZQnsiDWD238lNavaaXa3RyqQI/Lpmym8gsi61dX5R2xzkno tryKnIgFRPGD3Ru+jjDWFeH/ymtiukX9+SZDr/RHbt3mQNl9RnuZZNDfc53BiUSi xXa47xkXgNXNpcBQqg1w5hz/0xFvwEzwJNpTpdEEgOcDbNQJSO/+JIOSPC0DVknu cJB654rA9G+8zO2rOw7nQUpt+GZLnq4Skx34fJcLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/ZlIl67OnwDM0BM/VH6+2qWPq5swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3OTY0MjY5LTQwMzctNGVkNS1hYWE1LWQyNTI3YTU2NGI1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRQwDQYJKoZIhvcNAQELBQADggEBAJmRls8UkJ0UtsQ0YeikLrCI zfTA2NlxsiMGO4V7Z36dHEnMFrKpQS/9MhEOfu8jWJLMQT3XtdSS4ineGKLz7PkW V+hDzgrE5Tis7EW9LADsfinQVY3ZHPnf8UyAIWsEtXj3r03TjXE0P6oXAZnkTsFt ZxTMcUhwCAjwr2RULZnFkNe59Y6JxmScma8gp5txQfULODTnehyMmKR4lrG2UE/f TAXNGheFagjL7YGhuLa+o/hc6/zHIY973yn/Pxk+LFAb1KQIdPe7r3w1cGixFRhD mcGX88pP0v9hpqlL1XMIYBomJSvNtWMW7sxQ9z4YyWuoIY+Ym/n2cCSoGBIlpy0= -----END CERTIFICATE-----Generated at Thu Jul 23 22:33:18 2026 by rpki-client