$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa File: 1935c49d-401e-4cd4-8328-421b86afc75d.roa (raw, json) Hash identifier: 7eVmUUs/eSqxLxM+8z6C5czfDCtfR9MAKPpe5062as4= Subject key identifier: B5:AE:4F:A7:3A:3C:53:27:D9:F0:1E:D9:AE:D4:22:98:64:3D:16:4B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5C1FEC09DB90FAA1E194913E81F242F1DCCC55B8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa Signing time: Sun 12 Jul 2026 00:00:06 +0000 ROA not before: Sun 12 Jul 2026 00:00:06 +0000 ROA not after: Sat 10 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1f:ec:09:db:90:fa:a1:e1:94:91:3e:81:f2:42:f1:dc:cc:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 12 00:00:06 2026 GMT Not After : Oct 10 23:59:59 2026 GMT Subject: serialNumber=cf9ee699eb6539e1f0b1e7278fcd5fca47e2a6503a2931f90ed130ab424ff093, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:9b:87:e9:fb:35:9a:15:eb:84:6d:f9:7c: 05:de:cb:22:27:34:95:c8:d4:a1:9b:65:1f:00:dc: bd:7c:04:25:a8:62:d6:4c:5d:cc:35:3d:8b:7a:ab: a7:4d:c8:48:73:09:f7:75:6a:69:57:81:32:af:82: e4:43:5f:49:c9:a2:bb:b4:34:96:e2:60:44:66:0e: 77:d6:75:bc:61:84:d2:b0:ba:43:6c:17:24:c5:01: 0c:50:79:08:97:39:ff:79:17:56:ce:02:8a:aa:3c: 42:c7:69:bc:37:7f:9f:25:de:58:d9:97:3a:0b:69: bc:db:9a:58:c0:c5:63:b9:83:4b:0e:42:40:cf:83: 9c:b6:38:1c:ef:7e:29:84:68:76:f9:78:59:c3:11: 79:60:65:d0:b2:4f:2e:d5:5b:2c:8e:48:99:19:59: a4:87:cd:e8:84:e2:37:59:31:b3:ec:9c:51:df:90: 08:46:9a:8a:97:fb:62:30:93:4b:97:9c:45:8c:a1: a1:8e:f9:5f:95:1f:cb:ce:fe:58:21:60:76:9f:13: 28:09:8f:be:d3:12:a9:5e:c5:c1:03:ca:fa:11:77: 4b:60:a6:42:ce:f8:55:55:ab:44:ca:e5:ba:3b:ab: 20:9f:23:5d:58:88:84:de:ef:1b:cc:0b:0b:49:94: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:4F:A7:3A:3C:53:27:D9:F0:1E:D9:AE:D4:22:98:64:3D:16:4B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1935c49d-401e-4cd4-8328-421b86afc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5504::/48 Signature Algorithm: sha256WithRSAEncryption 4f:06:d7:e3:85:6a:2f:78:35:ad:51:38:92:a9:f7:67:82:04: 66:a2:8b:bc:c9:83:42:f5:a0:39:b4:28:c5:eb:5b:0d:d4:18: 49:cb:5f:69:3e:ec:b5:75:0e:08:92:94:b6:64:a8:69:03:19: 10:47:64:22:7b:57:12:15:c4:c5:a5:e7:97:b8:09:a5:f5:e2: 1c:8b:c4:82:5e:51:4e:ae:e2:2d:97:05:84:b1:49:7c:55:ba: a7:9a:26:d2:88:e0:7b:be:9d:8b:fb:ba:e4:d1:e6:f9:11:e6: b2:c8:2d:a9:c6:a1:07:a2:ae:e9:8c:30:58:5b:28:16:66:99: 17:23:08:91:23:91:c8:28:79:b0:f0:4f:51:ef:b5:3f:07:27: 91:02:4f:b1:2e:53:b0:f0:24:12:21:51:c0:3b:ee:a4:24:90: c8:58:66:d4:26:db:a7:ab:04:9c:28:7b:8e:c9:f1:13:87:71: d7:c6:ff:36:05:49:c5:38:23:96:d5:fa:17:ed:b0:32:20:46: b5:58:f4:bc:f4:55:ff:68:a6:2f:c2:4a:de:28:fe:f2:21:43: f9:cd:d4:96:59:a1:82:15:0f:3a:1a:59:c3:c4:c6:6f:31:76: 1b:9c:2e:00:2e:40:49:b0:35:bb:72:cf:a9:2c:68:50:43:03: de:70:ae:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXB/sCduQ+qHhlJE+gfJC8dzMVbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzEyMDAwMDA2WhcNMjYxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjllZTY5OWViNjUzOWUxZjBiMWU3Mjc4ZmNkNWZjYTQ3 ZTJhNjUwM2EyOTMxZjkwZWQxMzBhYjQyNGZmMDkzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7KpuH6fs1mhXrhG35fAXeyyInNJXI1KGbZR8A3L18BCWo YtZMXcw1PYt6q6dNyEhzCfd1amlXgTKvguRDX0nJoru0NJbiYERmDnfWdbxhhNKw ukNsFyTFAQxQeQiXOf95F1bOAoqqPELHabw3f58l3ljZlzoLabzbmljAxWO5g0sO QkDPg5y2OBzvfimEaHb5eFnDEXlgZdCyTy7VWyyOSJkZWaSHzeiE4jdZMbPsnFHf kAhGmoqX+2Iwk0uXnEWMoaGO+V+VH8vO/lghYHafEygJj77TEqlexcEDyvoRd0tg pkLO+FVVq0TK5bo7qyCfI11YiITe7xvMCwtJlP1vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUta5Ppzo8UyfZ8B7ZrtQimGQ9FkswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE5MzVjNDlkLTQwMWUtNGNkNC04MzI4LTQyMWI4NmFmYzc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQQwDQYJKoZIhvcNAQELBQADggEBAE8G1+OFai94Na1ROJKp92eC BGaii7zJg0L1oDm0KMXrWw3UGEnLX2k+7LV1DgiSlLZkqGkDGRBHZCJ7VxIVxMWl 55e4CaX14hyLxIJeUU6u4i2XBYSxSXxVuqeaJtKI4Hu+nYv7uuTR5vkR5rLILanG oQeirumMMFhbKBZmmRcjCJEjkcgoebDwT1HvtT8HJ5ECT7EuU7DwJBIhUcA77qQk kMhYZtQm26erBJwoe47J8ROHcdfG/zYFScU4I5bV+hftsDIgRrVY9Lz0Vf9opi/C St4o/vIhQ/nN1JZZoYIVDzoaWcPExm8xdhucLgAuQEmwNbtyz6ksaFBDA95wrh4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:05:01 2026 by rpki-client