$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa File: 3eb80061-d999-4560-9395-9a007e8e03f9.roa (raw, json) Hash identifier: QXUCyTj8eJCPiBemnK9qs2mzCYouQxlkEqRwx3feu4s= Subject key identifier: 80:B5:E4:19:AA:14:77:71:3B:59:66:5A:CD:6F:B6:A3:67:EE:3E:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5E4DB925CC84EAD5874A6DA213F7EE58D1531437 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa Signing time: Thu 23 Jul 2026 15:00:12 +0000 ROA not before: Thu 23 Jul 2026 15:00:12 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:b9:25:cc:84:ea:d5:87:4a:6d:a2:13:f7:ee:58:d1:53:14:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:12 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=f6c22fb435119f058d41ba7388786b6c801f072b54ce8df869de5e1b52e11a60, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:9e:60:29:35:29:db:44:62:8d:2b:7f:86: ae:d7:46:55:f1:dd:76:bb:93:88:1a:51:17:15:57: 45:63:9f:e7:72:24:87:6f:95:6e:5e:c7:4c:f2:a7: c8:10:42:40:fe:7a:d9:e4:de:4b:63:13:3b:5d:1c: ff:fd:9c:cf:81:1f:17:ec:4f:fa:16:a9:fc:63:b0: b8:05:4b:ca:32:f5:9a:d7:a5:e6:8e:d5:d8:06:02: f2:be:a4:4c:e0:a1:d5:ab:4b:2b:bb:68:1b:80:4a: 99:de:01:ad:9f:50:0f:2b:e5:0c:72:2f:0d:6b:1b: 11:41:87:50:f6:48:80:0f:88:bd:89:82:16:e3:20: cc:7e:8c:de:dd:72:71:a8:44:28:7d:ba:e8:ad:50: 95:d7:10:a0:cd:ed:24:52:ed:fe:c9:0a:ff:eb:e6: 9f:13:f5:0a:c3:9e:b3:39:e3:02:20:e3:bc:92:f5: 0e:b7:d6:fe:a6:70:0b:f0:5d:4c:71:71:78:3b:df: 8d:cf:8a:df:b8:9e:e4:04:0c:73:f2:45:6a:ee:a1: a2:ba:1f:c6:14:f6:35:5e:58:a4:9c:9e:c0:f5:26: d1:89:68:f5:9d:16:e8:a2:66:72:32:19:19:7a:4b: f6:e6:a3:00:88:1a:0c:fe:22:91:b8:36:67:f4:c2: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B5:E4:19:AA:14:77:71:3B:59:66:5A:CD:6F:B6:A3:67:EE:3E:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f030::/44 Signature Algorithm: sha256WithRSAEncryption a5:0b:e3:90:29:37:71:4d:03:a0:c4:1b:1d:b9:90:c9:e0:cd: cd:bc:76:33:40:dd:83:f7:38:10:b9:58:74:ce:a0:5a:6d:df: ba:fa:3f:c6:3f:08:c1:55:82:9f:3b:e0:74:33:c1:01:bc:f2: 01:11:f6:e1:09:5f:b0:d4:d1:81:5e:eb:5a:ea:6e:30:2e:f2: 0f:6a:0a:8c:64:7d:52:be:1a:db:b6:ec:37:d3:09:4f:38:0d: 15:f4:45:79:28:a1:07:c3:fb:c1:f7:39:2f:16:e4:44:24:d3: 6a:4f:ac:42:c9:dd:e4:25:28:d2:30:5b:48:db:44:4e:28:63: d5:e4:73:f8:d1:3e:6d:64:96:13:9e:c4:70:7a:c0:6a:d1:1e: 7c:e5:f9:0a:54:50:c0:04:99:2b:e3:50:e0:be:8b:72:dd:32: 37:0e:b0:07:05:c1:05:75:7a:08:aa:33:d8:2a:70:fa:85:7e: 32:eb:6f:e8:53:08:e1:31:e6:fd:38:bd:74:d7:13:49:e9:cc: f3:20:b1:55:31:22:94:96:2d:cd:22:40:95:f1:48:9e:ed:f3: 43:f1:9f:a4:b4:dc:50:78:58:16:b4:08:c4:6a:7f:4c:31:6c: 0d:7f:fe:ae:22:30:f8:54:ed:78:aa:e4:c4:93:d8:c6:37:0b: 47:6b:44:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXk25JcyE6tWHSm2iE/fuWNFTFDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDEyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmMyMmZiNDM1MTE5ZjA1OGQ0MWJhNzM4ODc4NmI2Yzgw MWYwNzJiNTRjZThkZjg2OWRlNWUxYjUyZTExYTYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdrJ5gKTUp20RijSt/hq7XRlXx3Xa7k4gaURcVV0Vjn+dy JIdvlW5ex0zyp8gQQkD+etnk3ktjEztdHP/9nM+BHxfsT/oWqfxjsLgFS8oy9ZrX peaO1dgGAvK+pEzgodWrSyu7aBuASpneAa2fUA8r5QxyLw1rGxFBh1D2SIAPiL2J ghbjIMx+jN7dcnGoRCh9uuitUJXXEKDN7SRS7f7JCv/r5p8T9QrDnrM54wIg47yS 9Q631v6mcAvwXUxxcXg7343Pit+4nuQEDHPyRWruoaK6H8YU9jVeWKScnsD1JtGJ aPWdFuiiZnIyGRl6S/bmowCIGgz+IpG4Nmf0wndHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgLXkGaoUd3E7WWZazW+2o2fuPmAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNlYjgwMDYxLWQ5OTktNDU2MC05Mzk1LTlhMDA3ZThlMDNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78DAwDQYJKoZIhvcNAQELBQADggEBAKUL45ApN3FNA6DEGx25kMng zc28djNA3YP3OBC5WHTOoFpt37r6P8Y/CMFVgp874HQzwQG88gER9uEJX7DU0YFe 61rqbjAu8g9qCoxkfVK+Gtu27DfTCU84DRX0RXkooQfD+8H3OS8W5EQk02pPrELJ 3eQlKNIwW0jbRE4oY9Xkc/jRPm1klhOexHB6wGrRHnzl+QpUUMAEmSvjUOC+i3Ld MjcOsAcFwQV1egiqM9gqcPqFfjLrb+hTCOEx5v04vXTXE0npzPMgsVUxIpSWLc0i QJXxSJ7t80Pxn6S03FB4WBa0CMRqf0wxbA1//q4iMPhU7Xiq5MST2MY3C0drRDg= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:48 2026 by rpki-client