$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa File: 3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa (raw, json) Hash identifier: yKUluibaNdRVPmwpZmsDRYGi+6G4Zs7PWi7gNtd8+fQ= Subject key identifier: 5A:C4:8B:EC:B0:E7:E2:A4:86:D8:20:F1:10:57:5A:AB:D6:C7:EA:1C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C5AB77C431D67746E8A04777C04F6CCFE9AE0FD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa Signing time: Thu 23 Jul 2026 15:00:07 +0000 ROA not before: Thu 23 Jul 2026 15:00:07 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5a:b7:7c:43:1d:67:74:6e:8a:04:77:7c:04:f6:cc:fe:9a:e0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:07 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=9de0d276ed64559d4484584e52c1d7d25e0c19d271ace26251ea160416a80fd6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:86:d2:ad:87:4c:bd:e3:cf:09:14:40:fe: 4c:ee:95:ce:81:a8:bc:6c:86:e5:85:73:1d:5d:af: f3:4b:33:62:cc:8e:e3:d2:c2:2f:fe:06:b2:e1:8a: 66:b1:11:40:d0:2a:3c:e5:00:90:3f:f1:aa:da:94: c2:63:77:29:ab:8b:81:66:74:92:ee:de:e0:e2:61: 1b:13:8c:af:9c:20:c0:b7:03:0f:a7:5e:d2:55:e7: eb:8c:59:01:a7:ee:b6:6e:f4:b5:7f:c0:61:5e:0c: 48:ea:56:c8:35:b0:5a:96:af:c7:9e:af:98:b6:7d: a7:f3:67:62:80:2d:0a:28:40:2e:33:33:42:14:a9: f4:1b:b1:8d:80:b7:6a:2e:92:30:ea:ce:30:50:f1: 3c:1f:45:9c:4d:98:e6:e9:85:88:7e:f3:3c:c8:19: 0b:95:15:7b:17:55:80:58:e9:45:48:2c:93:46:48: 97:2c:8f:5c:02:05:38:04:69:af:a7:44:43:47:d2: 50:68:cc:ab:ce:5f:d8:2e:ca:1e:fd:ca:9d:be:46: 9c:f5:0a:9b:eb:b6:a5:45:02:47:f0:4d:85:e4:42: 25:3c:63:5a:87:54:69:28:40:c9:c2:e6:89:7f:28: 66:13:92:e1:c2:bd:74:5a:59:c9:ba:ba:7c:75:1f: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C4:8B:EC:B0:E7:E2:A4:86:D8:20:F1:10:57:5A:AB:D6:C7:EA:1C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 41:0e:5e:3d:a2:39:d4:47:28:28:1f:32:dc:cb:6d:8a:c2:05: d5:cf:ff:86:da:bf:f1:9e:da:b6:fb:ef:ce:24:98:97:d3:e5: ad:f1:f9:70:f0:17:34:6f:6f:b1:ef:ff:53:da:8b:3e:7e:88: a0:43:61:6a:7f:ee:2f:4a:56:e2:e8:b1:e7:45:fa:73:7d:e4: 3a:7e:6c:f0:73:19:e0:79:b8:e8:0d:2a:c8:f6:98:fa:a4:ee: 5b:e1:82:54:f4:5a:47:05:4e:3c:cc:17:1d:43:8b:c8:fb:de: 74:ce:1b:98:1d:55:45:be:1a:19:11:74:1b:8a:3c:64:a9:8d: 4e:f4:2f:13:8f:35:14:c6:9b:1b:e5:c9:ff:37:fe:a5:ef:bd: 09:f8:80:73:f8:a4:8c:2c:ce:b4:e8:23:76:1c:b5:fb:4c:64: cb:e4:0b:60:99:2e:3f:88:78:0b:50:c0:3d:89:7c:67:c1:12: 01:d8:f7:55:ce:43:d6:ca:0b:5b:8a:4d:52:bc:89:22:5f:60: 99:f5:f8:0b:e0:54:2d:46:37:17:49:ea:da:36:74:79:13:0c: 63:3e:33:ba:06:5e:13:a9:66:77:4a:75:1a:8b:b0:37:8c:0e: df:29:35:10:49:53:06:b4:d5:b2:40:fe:1b:b0:04:bf:02:50: d7:83:0c:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfFq3fEMdZ3RuigR3fAT2zP6a4P0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGUwZDI3NmVkNjQ1NTlkNDQ4NDU4NGU1MmMxZDdkMjVl MGMxOWQyNzFhY2UyNjI1MWVhMTYwNDE2YTgwZmQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyAYbSrYdMvePPCRRA/kzulc6BqLxshuWFcx1dr/NLM2LM juPSwi/+BrLhimaxEUDQKjzlAJA/8aralMJjdymri4FmdJLu3uDiYRsTjK+cIMC3 Aw+nXtJV5+uMWQGn7rZu9LV/wGFeDEjqVsg1sFqWr8eer5i2fafzZ2KALQooQC4z M0IUqfQbsY2At2oukjDqzjBQ8TwfRZxNmObphYh+8zzIGQuVFXsXVYBY6UVILJNG SJcsj1wCBTgEaa+nRENH0lBozKvOX9guyh79yp2+Rpz1CpvrtqVFAkfwTYXkQiU8 Y1qHVGkoQMnC5ol/KGYTkuHCvXRaWcm6unx1H/qpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWsSL7LDn4qSG2CDxEFdaq9bH6hwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNkNDYwMmMwLTk1OTktNDMyNS1iYThkLWRjOGIxOWM2YzI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAEEOXj2iOdRHKCgfMtzLbYrC BdXP/4bav/Ge2rb7784kmJfT5a3x+XDwFzRvb7Hv/1Paiz5+iKBDYWp/7i9KVuLo sedF+nN95Dp+bPBzGeB5uOgNKsj2mPqk7lvhglT0WkcFTjzMFx1Di8j73nTOG5gd VUW+GhkRdBuKPGSpjU70LxOPNRTGmxvlyf83/qXvvQn4gHP4pIwszrToI3YctftM ZMvkC2CZLj+IeAtQwD2JfGfBEgHY91XOQ9bKC1uKTVK8iSJfYJn1+AvgVC1GNxdJ 6to2dHkTDGM+M7oGXhOpZndKdRqLsDeMDt8pNRBJUwa01bJA/huwBL8CUNeDDPY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:54:26 2026 by rpki-client