$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/514fa870-df33-4dfe-a228-5ea96e0f3560.roa File: 514fa870-df33-4dfe-a228-5ea96e0f3560.roa (raw, json) Hash identifier: cqqHx8+l5x2HArLmIi3ALCmvSGwEzd2nSYuXx3+CjfQ= Subject key identifier: 33:7B:3B:6F:32:93:0E:AE:BF:64:48:D1:2F:68:AA:42:CA:2D:60:2F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1BFFFF7049E420206D4E7A74734CF2BE2A208604 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/514fa870-df33-4dfe-a228-5ea96e0f3560.roa Signing time: Fri 17 Jul 2026 00:10:05 +0000 ROA not before: Fri 17 Jul 2026 00:10:05 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ff:ff:70:49:e4:20:20:6d:4e:7a:74:73:4c:f2:be:2a:20:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 17 00:10:05 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=db9076b63457af29e3d72f686a8ac26f873984b08647776ff41045f52c129a41, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:14:48:58:9c:d2:d9:cf:88:fa:18:6a:77: b6:f1:57:54:8c:60:78:c2:d1:b5:88:4e:ea:a2:ce: ec:ed:3e:58:43:ab:30:c6:8b:a9:61:79:2f:1a:85: b3:04:c5:da:12:fc:b3:84:0f:46:75:77:76:f4:db: 4c:d1:85:a4:cb:c8:bd:75:e8:7d:c5:d0:9c:dc:2d: 0b:96:cb:ac:94:f1:6b:a9:fb:00:af:1b:8f:b7:90: 5e:29:2c:ed:20:20:96:c9:a6:58:0b:49:cf:40:bd: 7c:9e:e3:d0:d2:2a:bb:35:5f:10:be:10:00:af:4e: 12:96:36:dc:28:69:ac:19:84:1f:48:2d:af:a3:7d: 6a:78:7f:89:5a:51:a5:2d:f4:ef:29:4a:60:fc:31: e3:2c:43:e3:0b:e0:3b:2d:80:f9:80:d7:98:86:ea: ed:6e:c1:1f:a8:f2:a1:bd:d3:cc:46:81:41:8e:0c: b7:f6:d8:2d:80:22:21:29:03:d1:c9:e0:40:55:1f: 40:b9:9e:c6:24:81:36:16:aa:90:ae:a6:26:fa:38: 3b:7f:f1:d8:5c:b1:25:d5:d9:21:36:fe:c5:64:b1: 15:70:d4:e9:cd:7b:f4:9f:f4:70:0a:0c:6c:c8:62: 04:81:fb:1b:41:7c:61:32:fe:c1:11:81:95:99:25: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7B:3B:6F:32:93:0E:AE:BF:64:48:D1:2F:68:AA:42:CA:2D:60:2F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/514fa870-df33-4dfe-a228-5ea96e0f3560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:90::/44 Signature Algorithm: sha256WithRSAEncryption 6e:18:e6:d8:e4:02:1c:b2:b8:e3:20:0f:06:5d:6d:d1:4f:b6: 65:54:17:43:36:6e:fb:ff:7c:34:00:4e:ae:a1:ab:df:f1:8b: 46:82:fc:95:83:8a:c4:8d:ef:f3:c5:67:4c:c0:16:7f:bc:ba: 2b:8a:a3:50:c0:b4:0c:c1:aa:48:d4:e1:5c:a1:b6:23:9e:bd: 5c:fd:58:fe:b1:79:61:ab:4f:b1:6c:30:69:f0:18:43:83:e3: d5:c7:d5:07:25:78:b9:30:a4:aa:b0:b0:71:cf:a9:04:2b:0c: 65:22:68:a1:1f:d7:ff:96:05:35:d8:28:6c:9c:e0:e1:0b:a5: 0a:17:e4:a0:8c:54:09:e7:1b:a6:82:45:e4:4f:c2:33:f7:c1: 39:68:c8:b5:60:1a:85:c3:e8:87:32:fc:a7:83:ca:79:6c:12: 05:48:72:e2:0e:d4:af:6a:bc:a9:d6:c8:0c:51:80:ec:e6:d4: c2:13:8c:0f:e0:1b:7b:7f:ef:0a:5b:fc:de:da:d7:f7:6f:81: 86:6f:62:d4:48:d0:70:72:07:04:f9:1b:32:6b:bd:30:b2:d1: 38:e3:e4:0c:57:bb:59:41:9a:7c:dc:47:41:56:5d:1e:78:9d: d8:63:e2:9c:db:f4:af:34:45:8b:66:b8:bb:eb:21:80:8d:39: e2:a0:2d:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG///cEnkICBtTnp0c0zyvioghgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzE3MDAxMDA1WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjkwNzZiNjM0NTdhZjI5ZTNkNzJmNjg2YThhYzI2Zjg3 Mzk4NGIwODY0Nzc3NmZmNDEwNDVmNTJjMTI5YTQxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfEhRIWJzS2c+I+hhqd7bxV1SMYHjC0bWITuqizuztPlhD qzDGi6lheS8ahbMExdoS/LOED0Z1d3b020zRhaTLyL116H3F0JzcLQuWy6yU8Wup +wCvG4+3kF4pLO0gIJbJplgLSc9AvXye49DSKrs1XxC+EACvThKWNtwoaawZhB9I La+jfWp4f4laUaUt9O8pSmD8MeMsQ+ML4DstgPmA15iG6u1uwR+o8qG908xGgUGO DLf22C2AIiEpA9HJ4EBVH0C5nsYkgTYWqpCupib6ODt/8dhcsSXV2SE2/sVksRVw 1OnNe/Sf9HAKDGzIYgSB+xtBfGEy/sERgZWZJbQZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM3s7bzKTDq6/ZEjRL2iqQsotYC8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUxNGZhODcwLWRmMzMtNGRmZS1hMjI4LTVlYTk2ZTBmMzU2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAJAwDQYJKoZIhvcNAQELBQADggEBAG4Y5tjkAhyyuOMgDwZdbdFP tmVUF0M2bvv/fDQATq6hq9/xi0aC/JWDisSN7/PFZ0zAFn+8uiuKo1DAtAzBqkjU 4VyhtiOevVz9WP6xeWGrT7FsMGnwGEOD49XH1QcleLkwpKqwsHHPqQQrDGUiaKEf 1/+WBTXYKGyc4OELpQoX5KCMVAnnG6aCReRPwjP3wTloyLVgGoXD6Icy/KeDynls EgVIcuIO1K9qvKnWyAxRgOzm1MITjA/gG3t/7wpb/N7a1/dvgYZvYtRI0HByBwT5 GzJrvTCy0Tjj5AxXu1lBmnzcR0FWXR54ndhj4pzb9K80RYtmuLvrIYCNOeKgLcs= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:03 2026 by rpki-client