$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa File: 57817121-2ded-4a32-92fa-48c260a4d9f6.roa (raw, json) Hash identifier: 0Xr1DFlqXZvtpm9ROebmdxIB9koD/+7TM15byE9h1p0= Subject key identifier: 8D:A2:D4:F7:09:E5:AD:1F:AD:B7:F6:E7:C2:6E:43:89:08:F7:D4:95 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6E5790AF579EB6586EDCF4C96D6421ABCBBFE176 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa Signing time: Thu 23 Jul 2026 15:10:50 +0000 ROA not before: Thu 23 Jul 2026 15:10:50 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:57:90:af:57:9e:b6:58:6e:dc:f4:c9:6d:64:21:ab:cb:bf:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:50 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=1453165d62f49610f463021cfb488b27b99b6d77cdee6032d9a5e51f83dfed15, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:b1:fc:5f:36:b1:92:dc:49:ee:56:bb:1e: b9:52:ed:5d:1d:47:31:33:f2:fd:41:17:af:bc:37: 7c:d1:a8:8a:5a:1a:b9:66:96:34:7c:73:fb:90:69: bd:9d:1e:df:e1:ce:66:c7:25:cb:68:97:60:26:dc: d0:1a:9a:15:55:89:e1:b1:dc:a7:ee:86:6b:47:d2: dc:2d:c0:68:5f:a5:07:91:46:d4:c7:6f:5f:d7:25: 82:5b:7d:63:38:01:d0:a6:2f:9d:9c:ca:b9:b5:9d: 12:59:c7:c3:bb:8c:8f:c2:b6:78:5e:54:95:00:5c: 14:38:36:f1:b1:9e:0a:ba:ae:1a:fb:7c:e5:cf:2b: c9:23:1c:d3:da:e3:63:23:f5:83:d1:0b:9f:2b:a0: 75:ac:ff:1a:fb:d5:e9:fc:1b:70:8b:2d:c2:99:83: 25:12:2f:f4:42:40:14:97:f1:4b:01:18:10:1a:c1: ed:03:0d:88:ed:f9:00:a8:a4:5f:af:bc:08:ed:50: 66:0c:4b:8f:93:71:88:23:30:5c:db:04:d4:fd:44: db:25:19:54:19:be:8b:a2:0c:3f:4e:ed:e0:68:e3: 15:59:99:00:f3:b5:50:ee:cb:c4:55:fd:4e:f9:5f: d6:99:47:50:94:88:2c:5b:67:01:c6:6e:bd:1e:94: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:D4:F7:09:E5:AD:1F:AD:B7:F6:E7:C2:6E:43:89:08:F7:D4:95 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611c::/48 Signature Algorithm: sha256WithRSAEncryption 00:ad:e2:dc:d0:f4:9d:27:c3:d7:29:e9:23:ff:d1:be:39:a5: 9b:b4:6d:99:2d:e5:9b:50:8a:ca:77:fc:b3:3d:43:ce:a6:b7: 3e:87:c8:05:d9:ec:5c:3f:fa:5d:e0:4d:b9:d3:52:9f:67:83: 35:8c:b8:aa:10:94:03:8f:01:62:a4:41:49:09:9b:5d:a9:43: 59:a5:29:8e:7e:43:86:84:06:40:fe:c6:94:bf:e7:79:7a:22: e5:32:7e:94:01:8c:15:88:fe:a1:2a:ad:64:82:94:49:19:0d: 01:8c:21:e4:4b:a8:69:7f:ee:41:3a:c4:47:94:b7:b8:cb:c6: 5c:40:fa:06:2f:e1:f8:4b:6b:ab:7d:07:94:d9:b0:b6:10:1f: b5:c4:00:93:af:0d:36:66:67:b5:c7:d0:84:b8:c5:84:35:f0: f4:55:eb:8e:a9:bf:a4:25:71:b1:3f:8e:b6:b4:6b:47:38:0a: b6:ba:b6:1e:c8:56:4d:b0:8e:f4:2e:79:1a:f7:58:7f:11:c1: bd:b3:31:74:03:88:9b:32:30:b2:35:47:85:34:6c:8d:c3:38: 45:60:00:84:ad:f1:45:bf:53:87:57:6a:86:e8:c6:2a:1d:3a: 8e:92:f1:e0:da:de:7f:01:68:38:7e:c1:15:5d:d8:6d:d6:69: 9d:71:95:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbleQr1eetlhu3PTJbWQhq8u/4XYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDUwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDUzMTY1ZDYyZjQ5NjEwZjQ2MzAyMWNmYjQ4OGIyN2I5 OWI2ZDc3Y2RlZTYwMzJkOWE1ZTUxZjgzZGZlZDE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjqLH8XzaxktxJ7la7HrlS7V0dRzEz8v1BF6+8N3zRqIpa GrlmljR8c/uQab2dHt/hzmbHJctol2Am3NAamhVVieGx3KfuhmtH0twtwGhfpQeR RtTHb1/XJYJbfWM4AdCmL52cyrm1nRJZx8O7jI/CtnheVJUAXBQ4NvGxngq6rhr7 fOXPK8kjHNPa42Mj9YPRC58roHWs/xr71en8G3CLLcKZgyUSL/RCQBSX8UsBGBAa we0DDYjt+QCopF+vvAjtUGYMS4+TcYgjMFzbBNT9RNslGVQZvouiDD9O7eBo4xVZ mQDztVDuy8RV/U75X9aZR1CUiCxbZwHGbr0elKHRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjaLU9wnlrR+tt/bnwm5DiQj31JUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3ODE3MTIxLTJkZWQtNGEzMi05MmZhLTQ4YzI2MGE0ZDlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRwwDQYJKoZIhvcNAQELBQADggEBAACt4tzQ9J0nw9cp6SP/0b45 pZu0bZkt5ZtQisp3/LM9Q86mtz6HyAXZ7Fw/+l3gTbnTUp9ngzWMuKoQlAOPAWKk QUkJm12pQ1mlKY5+Q4aEBkD+xpS/53l6IuUyfpQBjBWI/qEqrWSClEkZDQGMIeRL qGl/7kE6xEeUt7jLxlxA+gYv4fhLa6t9B5TZsLYQH7XEAJOvDTZmZ7XH0IS4xYQ1 8PRV646pv6QlcbE/jra0a0c4Cra6th7IVk2wjvQueRr3WH8Rwb2zMXQDiJsyMLI1 R4U0bI3DOEVgAISt8UW/U4dXaoboxiodOo6S8eDa3n8BaDh+wRVd2G3WaZ1xlbA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:54:35 2026 by rpki-client