$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa File: 2b654b1b-1b20-4e58-b50d-f23964f25963.roa (raw, json) Hash identifier: P5qL1rpoGXPwA7QD5mLffHPEveIZ4a0vG5Uo69FPC1c= Subject key identifier: 10:32:71:37:0D:8D:46:B1:2D:50:4E:25:80:22:4D:D1:E8:19:38:A2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 331A5CFB6B638C52E00F6F1F06690843F9215AF8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa Signing time: Thu 23 Jul 2026 15:10:33 +0000 ROA not before: Thu 23 Jul 2026 15:10:33 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1a:5c:fb:6b:63:8c:52:e0:0f:6f:1f:06:69:08:43:f9:21:5a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:33 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=dfcbca8f3279b18dfdcd5ebd625a75287c89256840ce89e2e9aef9fc2c03501f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:07:9c:62:a4:9c:cd:86:74:b5:8a:6c:a5: 0f:ab:7a:87:87:29:25:b2:bf:08:fc:b1:e2:03:f6: 64:76:59:6c:85:b3:c1:a5:43:42:23:35:21:fb:06: f9:20:b1:cd:ce:03:f1:39:b7:42:e2:7f:94:f8:12: d0:ae:a3:d9:49:60:43:b0:6d:90:c2:4d:a4:a4:f4: a0:d8:54:54:c3:29:f1:9b:76:43:b7:88:c4:31:51: b9:52:24:55:c2:fa:bc:ee:09:00:3d:64:d4:28:69: 58:1a:b4:02:14:5f:d9:06:87:98:12:00:1a:c1:45: 70:33:d8:c7:e1:6b:fd:7b:4c:f4:4a:a6:80:00:79: 16:ce:3e:21:dd:e0:58:ad:60:82:c6:53:72:b8:27: e7:ad:8d:ed:75:6e:74:d3:ac:ab:35:97:a6:4c:5f: a1:ca:9a:fe:cb:21:f0:98:42:cf:fd:91:5f:96:38: a7:3a:22:97:76:1f:62:af:34:a7:fc:06:d7:a7:e2: e0:6b:a0:1b:73:29:1f:c9:65:a1:d1:7e:66:81:f6: fb:6f:9d:cc:49:7c:ae:0a:b9:af:7d:af:ea:72:86: 7b:00:41:20:b0:e5:88:f5:5d:cf:61:81:aa:71:b1: ef:48:86:aa:98:b3:ef:50:7c:53:67:6e:94:a1:84: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:71:37:0D:8D:46:B1:2D:50:4E:25:80:22:4D:D1:E8:19:38:A2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6115::/48 Signature Algorithm: sha256WithRSAEncryption 2e:69:16:90:08:41:39:89:b7:86:51:d5:b4:87:e4:33:38:48: aa:bb:de:24:6e:5a:00:ec:de:85:f5:8f:fe:cd:ed:87:3b:21: b4:ed:b8:cc:71:93:b3:9c:b5:ba:79:2a:87:e2:fb:a3:d4:5e: f7:c9:59:a2:56:61:b0:46:58:d1:9e:60:8e:cd:bf:19:24:87: 0c:da:4e:a6:c6:03:eb:06:e3:e1:b8:e3:5d:14:2f:5c:a9:99: 07:84:3c:35:bd:38:bf:f3:fa:df:a0:2c:54:15:4f:95:07:e9: f0:64:9e:24:e6:c7:8a:01:24:d9:4a:2d:78:ce:d4:0a:fc:98: 6b:38:fc:bf:ae:61:1d:47:f8:80:1c:33:23:d4:c4:19:48:94: 7c:98:ee:b7:d1:56:ac:6e:fe:4f:c0:14:21:e1:1d:f8:b4:0f: c4:4c:e3:13:ce:9f:9e:26:17:b4:01:34:6e:e3:ad:62:3f:22: bd:88:2e:4e:b7:c0:79:76:85:b7:91:9c:e8:e0:51:25:2f:0f: b7:d8:0e:2d:9f:ed:1b:0e:2e:10:2e:b7:d4:63:77:84:09:c5: fd:f3:08:38:bd:e6:eb:92:08:73:ef:39:d5:bb:20:67:82:f7: a5:b3:66:a7:e5:d2:46:2c:56:a2:2f:f4:8b:19:f9:14:24:44: 47:ca:7d:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMxpc+2tjjFLgD28fBmkIQ/khWvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDMzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmNiY2E4ZjMyNzliMThkZmRjZDVlYmQ2MjVhNzUyODdj ODkyNTY4NDBjZTg5ZTJlOWFlZjlmYzJjMDM1MDFmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjkQecYqSczYZ0tYpspQ+reoeHKSWyvwj8seID9mR2WWyF s8GlQ0IjNSH7Bvkgsc3OA/E5t0Lif5T4EtCuo9lJYEOwbZDCTaSk9KDYVFTDKfGb dkO3iMQxUblSJFXC+rzuCQA9ZNQoaVgatAIUX9kGh5gSABrBRXAz2Mfha/17TPRK poAAeRbOPiHd4FitYILGU3K4J+etje11bnTTrKs1l6ZMX6HKmv7LIfCYQs/9kV+W OKc6Ipd2H2KvNKf8Bten4uBroBtzKR/JZaHRfmaB9vtvncxJfK4Kua99r+pyhnsA QSCw5Yj1Xc9hgapxse9IhqqYs+9QfFNnbpShhFm/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEDJxNw2NRrEtUE4lgCJN0egZOKIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiNjU0YjFiLTFiMjAtNGU1OC1iNTBkLWYyMzk2NGYyNTk2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRUwDQYJKoZIhvcNAQELBQADggEBAC5pFpAIQTmJt4ZR1bSH5DM4 SKq73iRuWgDs3oX1j/7N7Yc7IbTtuMxxk7Octbp5Kofi+6PUXvfJWaJWYbBGWNGe YI7NvxkkhwzaTqbGA+sG4+G4410UL1ypmQeEPDW9OL/z+t+gLFQVT5UH6fBkniTm x4oBJNlKLXjO1Ar8mGs4/L+uYR1H+IAcMyPUxBlIlHyY7rfRVqxu/k/AFCHhHfi0 D8RM4xPOn54mF7QBNG7jrWI/Ir2ILk63wHl2hbeRnOjgUSUvD7fYDi2f7RsOLhAu t9Rjd4QJxf3zCDi95uuSCHPvOdW7IGeC96WzZqfl0kYsVqIv9IsZ+RQkREfKfXs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:22 2026 by rpki-client