$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa File: 5aab2439-03d3-439a-885f-e2f641886f3d.roa (raw, json) Hash identifier: 8+mD9zlaL9w7dhhubvyNV5UtwG8e2xIb0iTGesg8/gU= Subject key identifier: 4E:30:AE:1F:EA:C8:0D:88:F1:40:AC:CC:77:E2:6D:C2:1B:F7:7F:97 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 67055A76128B5CF2174E89C48D9C67D5A84D923D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa Signing time: Thu 23 Jul 2026 15:10:53 +0000 ROA not before: Thu 23 Jul 2026 15:10:53 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:05:5a:76:12:8b:5c:f2:17:4e:89:c4:8d:9c:67:d5:a8:4d:92:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:53 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=a58f19418138678b416b699249f29f53454fa9b02bdca083539be825053f4fc4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:16:3b:79:2e:3b:8f:a0:1a:a8:ff:b7:5a: 78:67:26:4c:5d:36:b6:b3:43:90:ac:cf:21:0e:8c: 80:c2:a4:83:c2:a4:35:02:d9:4b:51:5b:d7:5c:9f: e5:9c:ee:1c:52:76:53:75:66:4d:0f:d9:b5:44:d0: d4:83:33:76:54:87:a1:9e:13:87:ce:87:46:5a:4b: 8c:ac:3d:2a:f3:73:16:95:cb:a8:e3:c3:37:41:f1: f3:ef:09:28:ce:32:ac:bd:79:e9:f9:c3:27:e7:95: b0:68:42:7e:e5:93:6d:6f:79:fd:d4:ae:30:1d:32: 1b:09:c2:cb:4e:08:5b:31:9e:7b:a7:13:a5:46:55: f1:de:3c:0e:89:c6:37:f2:c8:23:32:ed:7e:7f:bf: 12:86:bc:d0:72:e7:a8:76:5c:f6:1c:1b:d9:4f:4f: 6b:45:b4:67:32:2e:0b:1c:aa:26:e4:8d:35:91:56: 7c:86:88:9f:a5:29:d7:dc:21:20:8e:b8:9e:27:a3: af:56:1e:89:2c:34:0c:11:0b:c2:f7:a3:86:33:22: ed:02:6f:ac:f9:70:1c:44:cf:f5:7e:88:48:ee:9f: f2:1a:21:66:56:84:d9:d6:ba:55:d7:6c:02:b2:a1: e1:6a:d0:db:9c:9c:ad:0e:07:9e:5b:32:80:39:08: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:AE:1F:EA:C8:0D:88:F1:40:AC:CC:77:E2:6D:C2:1B:F7:7F:97 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f020::/44 Signature Algorithm: sha256WithRSAEncryption 6b:2a:15:0a:a7:46:97:a6:6c:b4:c2:7f:9c:9a:3e:dc:54:71: 1a:af:88:24:ea:c5:7e:bc:75:a2:75:b1:8b:82:ed:9e:df:1d: 8f:0f:be:0c:e3:6c:6e:50:39:7f:99:92:00:83:9e:a0:29:17: 87:91:05:f3:78:d8:b1:e5:c3:c7:ab:8d:e5:27:66:5f:91:5d: c1:2d:a7:e5:77:32:2a:cf:68:e6:97:5a:3e:55:f6:6d:99:5a: 84:25:ce:71:37:4a:93:b2:ad:21:eb:93:1b:5f:9e:d4:00:e0: b5:c0:32:3c:fc:7d:17:5a:17:de:98:c5:20:78:12:66:a5:de: f5:1c:a0:9a:3b:d0:fb:0c:c4:27:a6:7a:4f:56:8d:c5:b0:d1: 15:21:96:e4:36:81:e1:6e:3e:b6:00:66:f9:fb:ed:cb:38:0f: dd:50:1f:3a:eb:1b:5c:39:d2:74:e8:85:4f:d2:8f:12:ea:c6: 17:07:e2:77:5e:8f:23:80:ab:93:bd:56:a1:02:16:8c:8c:bc: 17:bc:94:da:ff:ee:e0:75:cb:dd:c6:4a:e2:d4:2b:95:8e:ac: 4b:2e:7a:95:e1:79:ca:52:c3:f6:2f:18:9b:ba:1a:2e:1b:35: d9:b0:ec:77:75:b0:7c:5e:ea:e1:c5:47:9c:a0:da:3b:ba:c7: 9d:b5:89:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZwVadhKLXPIXTonEjZxn1ahNkj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDUzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNThmMTk0MTgxMzg2NzhiNDE2YjY5OTI0OWYyOWY1MzQ1 NGZhOWIwMmJkY2EwODM1MzliZTgyNTA1M2Y0ZmM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnehY7eS47j6AaqP+3WnhnJkxdNrazQ5CszyEOjIDCpIPC pDUC2UtRW9dcn+Wc7hxSdlN1Zk0P2bVE0NSDM3ZUh6GeE4fOh0ZaS4ysPSrzcxaV y6jjwzdB8fPvCSjOMqy9een5wyfnlbBoQn7lk21vef3UrjAdMhsJwstOCFsxnnun E6VGVfHePA6JxjfyyCMy7X5/vxKGvNBy56h2XPYcG9lPT2tFtGcyLgscqibkjTWR VnyGiJ+lKdfcISCOuJ4no69WHoksNAwRC8L3o4YzIu0Cb6z5cBxEz/V+iEjun/Ia IWZWhNnWulXXbAKyoeFq0NucnK0OB55bMoA5CBk1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTjCuH+rIDYjxQKzMd+Jtwhv3f5cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhYWIyNDM5LTAzZDMtNDM5YS04ODVmLWUyZjY0MTg4NmYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78CAwDQYJKoZIhvcNAQELBQADggEBAGsqFQqnRpembLTCf5yaPtxU cRqviCTqxX68daJ1sYuC7Z7fHY8PvgzjbG5QOX+ZkgCDnqApF4eRBfN42LHlw8er jeUnZl+RXcEtp+V3MirPaOaXWj5V9m2ZWoQlznE3SpOyrSHrkxtfntQA4LXAMjz8 fRdaF96YxSB4Emal3vUcoJo70PsMxCemek9WjcWw0RUhluQ2geFuPrYAZvn77cs4 D91QHzrrG1w50nTohU/SjxLqxhcH4ndejyOAq5O9VqECFoyMvBe8lNr/7uB1y93G SuLUK5WOrEsuepXhecpSw/YvGJu6Gi4bNdmw7Hd1sHxe6uHFR5yg2ju6x521iQA= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:13 2026 by rpki-client