$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa File: 21659f7e-dfb0-401c-964b-6f52493a3df0.roa (raw, json) Hash identifier: ehnlfWQ/fFl5rgnHvAzEXN16EzPbkXTgz+ZzgzQ7Odk= Subject key identifier: 06:4C:A2:70:58:6D:60:E0:F4:B5:A5:57:4E:28:CF:FF:A5:3E:B4:DE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 79BFFB5ADEBB987A49E124EF106BE311E8434156 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa Signing time: Thu 23 Jul 2026 15:00:05 +0000 ROA not before: Thu 23 Jul 2026 15:00:05 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bf:fb:5a:de:bb:98:7a:49:e1:24:ef:10:6b:e3:11:e8:43:41:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:05 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=b7119d5770d850208487878241ebf102be8e7d8565767ceda230616085e00415, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e7:a1:8b:0d:e5:6c:b5:eb:e3:11:47:f4:40: f9:3b:c4:5c:ba:d8:1a:e0:a7:51:6d:e6:e3:1c:4d: af:50:18:3c:da:a5:a5:33:7f:da:2c:3a:f0:24:91: fa:b9:e7:ab:fc:e6:97:94:9e:41:01:1b:57:52:86: 3a:b7:a3:d4:55:fd:7e:43:94:ee:f7:26:06:d9:03: 50:a1:be:f7:9d:a5:b0:1d:fb:a0:73:9e:b2:d0:d9: aa:18:dd:28:00:31:a2:e5:d9:8e:63:be:3c:1c:b9: c8:f2:4e:55:b6:09:d3:aa:cd:58:5d:86:c1:a5:41: 43:38:5d:ac:aa:3f:cf:a4:0c:96:a5:73:e9:14:03: d6:65:58:33:e5:50:a4:ac:6d:48:38:c0:5f:fb:6b: 35:46:28:1a:41:8d:69:a0:35:d8:99:73:a5:84:f5: a8:74:52:15:21:c1:b4:f4:8c:d4:9f:84:31:36:3c: 29:dc:26:39:8e:a5:ee:8b:70:6f:f4:40:c9:28:53: c8:89:06:12:45:8c:d1:80:6c:6d:96:99:e7:cb:18: 34:f3:8d:a7:a1:a6:d0:5f:72:e3:7f:61:10:aa:e8: e8:b8:04:74:e6:8d:84:b9:64:81:d9:1d:d0:0d:7f: bd:bc:41:e7:49:81:13:e2:e6:35:19:59:84:2f:a1: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4C:A2:70:58:6D:60:E0:F4:B5:A5:57:4E:28:CF:FF:A5:3E:B4:DE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 15:bc:00:9a:0f:fd:a3:eb:f9:b2:8c:6a:b2:e4:d8:7d:61:6f: 90:90:92:50:a3:3c:d1:6a:e0:fa:6d:2f:7a:fb:15:27:5c:d5: 72:cb:6c:dc:fb:18:b7:a2:8f:47:fa:cb:55:46:35:99:97:7a: 58:84:77:26:9b:c3:13:89:07:d8:cf:b6:af:d7:48:c2:2d:f0: b2:57:18:31:3a:e9:ef:b8:bc:2c:2f:68:82:06:7c:5b:5a:b5: b3:24:74:35:d5:3e:4f:60:b4:46:d2:07:b7:8e:d2:9f:06:fd: 96:1d:02:6a:9b:14:f5:33:e3:81:23:e5:d5:b8:a5:6c:17:91: d4:2e:02:7c:e1:87:2a:2f:b8:c3:72:62:63:36:80:12:6a:59: 60:1a:ba:b7:d7:96:12:de:3b:f5:b8:8f:3c:75:60:fe:8e:12: 61:1d:12:55:5c:ff:90:1b:76:bc:68:a6:a2:b2:38:9f:65:f0: c0:ef:ef:c9:08:5c:59:01:c5:eb:d6:32:07:d4:34:2c:56:68: 07:4c:ea:a5:42:8e:de:ed:3a:53:dc:41:cf:79:62:fd:ba:df: f7:03:19:5b:fa:f7:99:ac:a5:b4:1e:cc:1a:29:31:d0:75:9d: af:e7:59:0c:ac:ec:29:8e:4e:b4:3c:64:4e:70:67:15:b3:e3: ef:7d:69:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeb/7Wt67mHpJ4STvEGvjEehDQVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA1WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzExOWQ1NzcwZDg1MDIwODQ4Nzg3ODI0MWViZjEwMmJl OGU3ZDg1NjU3NjdjZWRhMjMwNjE2MDg1ZTAwNDE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDx56GLDeVstevjEUf0QPk7xFy62Brgp1Ft5uMcTa9QGDza paUzf9osOvAkkfq556v85peUnkEBG1dShjq3o9RV/X5DlO73JgbZA1ChvvedpbAd +6BznrLQ2aoY3SgAMaLl2Y5jvjwcucjyTlW2CdOqzVhdhsGlQUM4XayqP8+kDJal c+kUA9ZlWDPlUKSsbUg4wF/7azVGKBpBjWmgNdiZc6WE9ah0UhUhwbT0jNSfhDE2 PCncJjmOpe6LcG/0QMkoU8iJBhJFjNGAbG2WmefLGDTzjaehptBfcuN/YRCq6Oi4 BHTmjYS5ZIHZHdANf728QedJgRPi5jUZWYQvoWk3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBkyicFhtYOD0taVXTijP/6U+tN4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIxNjU5ZjdlLWRmYjAtNDAxYy05NjRiLTZmNTI0OTNhM2RmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBABW8AJoP/aPr+bKMarLk2H1h b5CQklCjPNFq4PptL3r7FSdc1XLLbNz7GLeij0f6y1VGNZmXeliEdyabwxOJB9jP tq/XSMIt8LJXGDE66e+4vCwvaIIGfFtatbMkdDXVPk9gtEbSB7eO0p8G/ZYdAmqb FPUz44Ej5dW4pWwXkdQuAnzhhyovuMNyYmM2gBJqWWAaurfXlhLeO/W4jzx1YP6O EmEdElVc/5AbdrxopqKyOJ9l8MDv78kIXFkBxevWMgfUNCxWaAdM6qVCjt7tOlPc Qc95Yv263/cDGVv695mspbQezBopMdB1na/nWQys7CmOTrQ8ZE5wZxWz4+99aRw= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:26 2026 by rpki-client