$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa File: 2c005aeb-f132-4bb2-a865-90077d8d5e49.roa (raw, json) Hash identifier: mNRo0KGHOHmzUL0+pN8IV4A2erznbIMb4ueFzy4AqwY= Subject key identifier: 5D:23:3A:32:14:40:EC:97:25:E7:23:3B:83:08:31:80:D7:F1:79:FD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6BFBC6A605A3162CF8E9A99760152B75EEAD66EC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa Signing time: Thu 23 Jul 2026 15:00:34 +0000 ROA not before: Thu 23 Jul 2026 15:00:34 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:10a::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fb:c6:a6:05:a3:16:2c:f8:e9:a9:97:60:15:2b:75:ee:ad:66:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:34 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=dd90d26e220bbf30d4240dabf57cd423d52711161c2f5ef696bdef984a3ca37b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:5f:04:5a:30:e9:20:b5:d9:cd:80:0d:24: 2a:71:a4:c7:aa:58:d9:04:45:e0:88:6b:99:cf:ab: 1a:d2:66:b2:cf:f8:3c:a5:7e:25:e1:e7:df:74:40: b4:38:c7:78:07:92:d8:50:04:bb:7b:6a:d6:ca:c8: 13:25:3f:af:3f:7b:9d:0c:e9:c4:06:36:47:f5:1b: ea:78:34:f4:1b:98:ce:b2:0d:5e:7c:2a:65:05:16: 6e:5a:58:83:69:82:b8:24:06:aa:a1:c2:43:f5:dd: 45:68:f7:66:86:cc:2a:10:7f:2f:14:95:a4:3c:27: de:f3:0e:52:80:b7:1c:c4:46:21:34:65:9d:e4:bb: 84:82:bd:39:72:7a:62:16:a5:ad:39:eb:b7:3e:16: a1:77:82:4f:e5:e1:8e:00:16:82:32:6a:c4:6f:a8: 81:cc:38:2f:dc:7a:b0:d0:a7:59:d4:47:0c:c2:1c: 79:d5:2e:ae:a8:ee:7e:e4:bd:29:21:b7:c0:12:56: fe:3b:b0:60:28:a5:a3:74:f4:fb:da:da:4f:ed:4d: a5:5f:f3:63:a7:8a:77:1e:00:3d:a3:ea:3e:d9:92: 28:b5:68:a7:a2:1e:4d:40:cd:d3:30:2d:1f:a7:36: a3:50:91:5c:55:9e:43:7e:bf:9f:4f:18:93:17:c7: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:23:3A:32:14:40:EC:97:25:E7:23:3B:83:08:31:80:D7:F1:79:FD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:10a::/47 Signature Algorithm: sha256WithRSAEncryption 70:d9:c3:dc:ac:02:54:05:2c:08:37:51:34:7d:de:22:3e:e6: 22:86:d6:0a:44:8f:e2:f4:02:14:a7:1f:01:ed:dc:37:49:33: de:15:55:ad:f9:bb:8b:ff:8b:64:43:dc:eb:1d:d7:a3:cf:6e: df:99:06:61:ec:1d:7e:8e:61:fa:d8:0a:8f:5e:55:62:79:b9: 4a:75:62:5b:5e:0f:9d:46:b0:93:60:9e:d2:48:f5:d4:b8:28: d5:dc:a1:9e:d7:1e:07:db:9a:3f:5e:61:51:d2:3b:a9:48:9a: d0:db:57:2c:8b:89:3a:4b:b7:c3:34:34:e0:1d:6d:28:28:ae: 3c:a6:a9:5b:3b:64:c4:87:c1:72:91:38:03:d1:5a:02:35:3b: 22:ce:7f:c8:ff:c9:ee:a5:96:80:bc:e9:10:d9:a3:d1:3e:73: a6:e9:47:0b:b5:e8:27:1e:99:45:76:05:db:3c:e9:ff:e3:a2: d4:e7:a9:92:ab:70:e4:20:56:f2:22:0e:77:d0:16:5f:ca:a9: 37:3d:45:82:d4:4a:2f:cd:d3:8d:b8:fd:e2:de:0b:44:24:d5: fb:61:4d:76:47:9d:98:36:d7:c3:ae:db:6a:11:52:3d:d9:3a: af:7a:8d:42:88:bb:f8:46:98:4c:96:2c:00:0a:39:ea:ae:e6: 8d:c3:a5:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa/vGpgWjFiz46amXYBUrde6tZuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDM0WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDkwZDI2ZTIyMGJiZjMwZDQyNDBkYWJmNTdjZDQyM2Q1 MjcxMTE2MWMyZjVlZjY5NmJkZWY5ODRhM2NhMzdiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU2l8EWjDpILXZzYANJCpxpMeqWNkEReCIa5nPqxrSZrLP +DylfiXh5990QLQ4x3gHkthQBLt7atbKyBMlP68/e50M6cQGNkf1G+p4NPQbmM6y DV58KmUFFm5aWINpgrgkBqqhwkP13UVo92aGzCoQfy8UlaQ8J97zDlKAtxzERiE0 ZZ3ku4SCvTlyemIWpa0567c+FqF3gk/l4Y4AFoIyasRvqIHMOC/cerDQp1nURwzC HHnVLq6o7n7kvSkht8ASVv47sGAopaN09Pva2k/tTaVf82OninceAD2j6j7Zkii1 aKeiHk1AzdMwLR+nNqNQkVxVnkN+v59PGJMXx9PrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXSM6MhRA7Jcl5yM7gwgxgNfxef0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJjMDA1YWViLWYxMzItNGJiMi1hODY1LTkwMDc3ZDhkNWU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQowDQYJKoZIhvcNAQELBQADggEBAHDZw9ysAlQFLAg3UTR93iI+ 5iKG1gpEj+L0AhSnHwHt3DdJM94VVa35u4v/i2RD3Osd16PPbt+ZBmHsHX6OYfrY Co9eVWJ5uUp1YlteD51GsJNgntJI9dS4KNXcoZ7XHgfbmj9eYVHSO6lImtDbVyyL iTpLt8M0NOAdbSgorjymqVs7ZMSHwXKROAPRWgI1OyLOf8j/ye6lloC86RDZo9E+ c6bpRwu16CcemUV2Bds86f/jotTnqZKrcOQgVvIiDnfQFl/KqTc9RYLUSi/N0424 /eLeC0Qk1fthTXZHnZg218Ou22oRUj3ZOq96jUKIu/hGmEyWLAAKOequ5o3DpbI= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:24 2026 by rpki-client