$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5fbd3b27-26aa-45ad-8f59-d53a6a248a88.roa File: 5fbd3b27-26aa-45ad-8f59-d53a6a248a88.roa (raw, json) Hash identifier: gG+GG2/TAH9/KJNRreVdSoIc6zX0LbjVEeNdVxh4NNg= Subject key identifier: 12:62:C7:30:DD:94:F2:8D:2C:35:14:A3:68:5E:02:62:F0:A4:16:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0EC03E1000173903A199A68F66E5E2AE0568832D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5fbd3b27-26aa-45ad-8f59-d53a6a248a88.roa Signing time: Thu 23 Jul 2026 15:10:48 +0000 ROA not before: Thu 23 Jul 2026 15:10:48 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c0:3e:10:00:17:39:03:a1:99:a6:8f:66:e5:e2:ae:05:68:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:48 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=84f77b7431ff4c301d5b100e91b8d70ba2ed9c4ffde47420b6223ab85a845dca, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:52:1b:0a:ff:1a:5c:a2:0c:96:42:75:f3: fd:ff:2d:a5:09:73:90:2e:24:75:cd:56:23:05:77: 8c:e9:9f:e3:7d:78:fa:59:ab:53:c3:67:5f:21:8e: a3:38:2d:a9:c5:9f:30:e6:68:6e:ef:65:1e:0f:65: ca:9d:19:13:4b:18:e1:0b:ea:ae:0a:06:85:a8:a0: a3:e8:c8:39:ed:0d:24:03:ac:22:31:e1:50:b6:85: cd:6d:72:5a:95:f5:7d:5f:2d:28:1d:25:61:32:7d: f9:8f:9d:2a:e8:6d:ee:c0:14:7a:9a:02:0f:bd:d0: 0a:a2:a9:4f:9b:b3:2c:75:76:fb:ca:b8:36:37:3f: 85:ad:0f:2c:a5:bb:4f:9f:b6:f4:05:11:cf:0d:a8: 4e:fb:19:d9:00:f0:21:66:31:8c:38:42:26:54:27: d9:69:3a:1e:01:84:b2:d1:e7:86:1d:97:54:db:c5: 87:86:52:ba:31:33:8a:ad:a3:1f:ac:ce:89:fc:f7: 34:52:c8:1f:54:0e:a8:e1:a2:51:0f:51:3f:b5:f3: 8c:4f:ea:44:0a:11:95:0e:45:75:fe:9e:e1:30:8a: 6b:73:eb:48:f5:ed:47:4d:74:d4:45:d8:ff:2e:9a: 9f:38:18:01:81:f4:c2:8f:cf:a4:17:d5:d7:37:84: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:62:C7:30:DD:94:F2:8D:2C:35:14:A3:68:5E:02:62:F0:A4:16:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5fbd3b27-26aa-45ad-8f59-d53a6a248a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610c::/48 Signature Algorithm: sha256WithRSAEncryption a6:2d:af:a6:06:47:4c:c3:55:75:bf:5f:26:df:f4:98:62:9d: 7e:e1:f4:db:be:cf:a8:22:95:d5:bc:4c:b4:6e:7c:4e:56:cb: cc:53:35:d0:41:20:fc:a1:81:97:2a:7a:4b:09:91:bc:d1:ec: eb:8c:d6:a4:e1:ac:df:bd:ea:9a:4c:3d:fb:97:1b:cb:8f:10: 35:f4:2c:dc:9c:be:26:dc:c7:fb:b9:32:6a:e3:86:97:06:24: 70:05:a6:4b:eb:6c:cd:b0:a6:1e:db:35:31:f6:87:f7:fa:b5: 44:2f:f2:7d:7b:87:06:8e:77:65:2a:53:a4:6b:0d:2d:86:66: 13:88:4b:99:09:4b:48:35:86:8a:6b:c1:88:dc:de:11:ed:57: 8d:b3:39:b6:47:47:26:43:3c:6d:bc:f5:8d:ba:92:d3:bd:c3: 93:bf:a5:e2:94:ff:c0:4b:c7:21:42:57:67:41:eb:fb:88:03: 4b:5b:21:02:06:3b:f4:6d:bf:7f:17:bb:85:a8:6d:66:de:54: 2f:b5:67:6c:6f:33:40:52:97:6b:b5:b1:99:b2:cd:30:aa:bc: bb:e6:ad:93:c6:f5:d1:01:b3:d7:46:6b:0f:a8:29:7c:a1:df: 26:69:f6:50:cd:4d:de:c4:37:79:a2:8f:cc:dc:fd:99:15:36: aa:b1:cc:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDsA+EAAXOQOhmaaPZuXirgVogy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDQ4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGY3N2I3NDMxZmY0YzMwMWQ1YjEwMGU5MWI4ZDcwYmEy ZWQ5YzRmZmRlNDc0MjBiNjIyM2FiODVhODQ1ZGNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+o1IbCv8aXKIMlkJ18/3/LaUJc5AuJHXNViMFd4zpn+N9 ePpZq1PDZ18hjqM4LanFnzDmaG7vZR4PZcqdGRNLGOEL6q4KBoWooKPoyDntDSQD rCIx4VC2hc1tclqV9X1fLSgdJWEyffmPnSrobe7AFHqaAg+90AqiqU+bsyx1dvvK uDY3P4WtDyylu0+ftvQFEc8NqE77GdkA8CFmMYw4QiZUJ9lpOh4BhLLR54Ydl1Tb xYeGUroxM4qtox+szon89zRSyB9UDqjholEPUT+184xP6kQKEZUORXX+nuEwimtz 60j17UdNdNRF2P8ump84GAGB9MKPz6QX1dc3hPR9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEmLHMN2U8o0sNRSjaF4CYvCkFqAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVmYmQzYjI3LTI2YWEtNDVhZC04ZjU5LWQ1M2E2YTI0OGE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQwwDQYJKoZIhvcNAQELBQADggEBAKYtr6YGR0zDVXW/Xybf9Jhi nX7h9Nu+z6gildW8TLRufE5Wy8xTNdBBIPyhgZcqeksJkbzR7OuM1qThrN+96ppM PfuXG8uPEDX0LNycvibcx/u5MmrjhpcGJHAFpkvrbM2wph7bNTH2h/f6tUQv8n17 hwaOd2UqU6RrDS2GZhOIS5kJS0g1hoprwYjc3hHtV42zObZHRyZDPG289Y26ktO9 w5O/peKU/8BLxyFCV2dB6/uIA0tbIQIGO/Rtv38Xu4WobWbeVC+1Z2xvM0BSl2u1 sZmyzTCqvLvmrZPG9dEBs9dGaw+oKXyh3yZp9lDNTd7EN3mij8zc/ZkVNqqxzKM= -----END CERTIFICATE-----Generated at Thu Jul 23 22:35:36 2026 by rpki-client