$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa File: 613deecc-4241-45f6-938d-6f225ca83bd7.roa (raw, json) Hash identifier: akYoTM6r02J39GhcQPPBJk2l2MAgd6HCEeCHeN0SeoA= Subject key identifier: 9A:B4:FE:EF:AB:EF:F2:BE:E0:FE:90:A7:69:24:DE:BD:CA:B7:0D:77 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 396D50E84381721B46D01B11933B434636645621 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa Signing time: Thu 23 Jul 2026 15:10:08 +0000 ROA not before: Thu 23 Jul 2026 15:10:08 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6d:50:e8:43:81:72:1b:46:d0:1b:11:93:3b:43:46:36:64:56:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:08 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=1f40c46144aed2835f34259f045d979bb896c242f504a0db23d8c9117ff874de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:59:8c:2a:f8:63:36:88:76:17:76:30:f9: 65:d1:d2:b8:1c:ee:48:a3:fc:a2:21:b3:de:64:ac: 83:46:9e:b2:8b:48:7a:67:b6:49:66:88:f9:32:e7: 15:30:eb:0a:79:ca:b8:31:20:36:d2:b9:9c:d3:5e: 06:1a:31:1f:e0:e8:01:9e:e1:a3:49:7c:cb:5b:62: 92:f4:15:2c:af:ed:42:4d:36:e3:61:be:9d:52:ad: ae:4d:f8:62:f9:00:9f:7e:23:38:43:56:39:d8:8a: 3a:d6:ad:7d:eb:90:ad:69:d7:ae:1a:67:dd:72:a7: 0a:49:93:10:30:ac:aa:a9:c2:0e:cf:19:d4:07:cc: 0e:a2:1d:81:36:31:58:be:a6:6b:ad:b7:42:08:ed: 4c:61:14:99:64:7b:5d:ec:ff:0c:62:34:87:ea:08: 88:3a:57:a1:21:bf:1f:ed:5e:fb:6c:10:5f:20:a4: 92:a4:70:98:e3:fc:a2:ae:74:0e:e6:fc:a2:84:97: c4:d2:b5:79:0a:8f:a3:99:f9:f0:31:b1:3b:cb:fc: fc:82:6d:46:06:8f:e7:6b:06:1f:cd:3c:0c:21:c0: 80:c2:3c:19:b7:b1:8b:9f:bb:ad:d0:f2:a6:71:bd: 60:e3:61:ff:1f:64:2d:fe:69:1b:cb:86:5d:0b:69: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:FE:EF:AB:EF:F2:BE:E0:FE:90:A7:69:24:DE:BD:CA:B7:0D:77 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610a::/48 Signature Algorithm: sha256WithRSAEncryption 12:6c:7f:3c:b8:a1:3c:0c:b2:3f:4c:6a:f7:21:d8:2e:68:55: 4b:fd:cb:5a:72:42:f7:c1:bc:f7:4f:4b:93:4f:69:e8:dc:08: 65:5e:7b:9d:fc:38:cf:cd:02:74:84:5a:5b:c5:bc:9a:f5:68: 0c:b6:65:1e:0c:32:34:34:9a:3a:38:70:a3:f4:7e:cc:80:2b: 8c:2f:d5:49:04:57:9d:15:5d:bb:58:cf:f7:8e:f4:f1:41:3a: 04:0e:db:58:2a:38:7d:1e:82:ed:e8:5a:8c:cf:95:b3:1a:e6: bc:f3:ac:8c:a7:9b:6f:ab:00:08:f3:63:5f:f9:c0:b8:a8:b8: 6b:d1:72:1b:4a:8c:a9:26:6a:62:6a:a6:44:27:e9:72:d2:a7: 41:6a:da:39:8f:ed:26:da:6f:5f:63:27:1f:ad:56:3e:2d:95: 09:46:a2:52:2c:86:26:cb:c8:b2:c0:66:0d:4b:6f:e0:84:b9: 72:0a:8a:5b:5a:ef:f7:53:bc:da:44:8b:64:a1:76:4c:6b:26: 39:f1:8b:a8:dd:ba:be:0e:a9:03:8e:0d:b4:a0:1f:70:79:98: 6d:29:62:23:f5:44:ba:eb:cd:21:ef:a2:c1:16:04:10:aa:5f: 47:85:e2:34:f9:c3:99:2d:8f:3d:04:ba:b6:07:4b:ee:93:d7: a9:a3:c8:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOW1Q6EOBchtG0BsRkztDRjZkViEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDA4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjQwYzQ2MTQ0YWVkMjgzNWYzNDI1OWYwNDVkOTc5YmI4 OTZjMjQyZjUwNGEwZGIyM2Q4YzkxMTdmZjg3NGRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVNFmMKvhjNoh2F3Yw+WXR0rgc7kij/KIhs95krINGnrKL SHpntklmiPky5xUw6wp5yrgxIDbSuZzTXgYaMR/g6AGe4aNJfMtbYpL0FSyv7UJN NuNhvp1Sra5N+GL5AJ9+IzhDVjnYijrWrX3rkK1p164aZ91ypwpJkxAwrKqpwg7P GdQHzA6iHYE2MVi+pmutt0II7UxhFJlke13s/wxiNIfqCIg6V6Ehvx/tXvtsEF8g pJKkcJjj/KKudA7m/KKEl8TStXkKj6OZ+fAxsTvL/PyCbUYGj+drBh/NPAwhwIDC PBm3sYufu63Q8qZxvWDjYf8fZC3+aRvLhl0LaYvXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmrT+76vv8r7g/pCnaSTevcq3DXcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYxM2RlZWNjLTQyNDEtNDVmNi05MzhkLTZmMjI1Y2E4M2JkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQowDQYJKoZIhvcNAQELBQADggEBABJsfzy4oTwMsj9Mavch2C5o VUv9y1pyQvfBvPdPS5NPaejcCGVee538OM/NAnSEWlvFvJr1aAy2ZR4MMjQ0mjo4 cKP0fsyAK4wv1UkEV50VXbtYz/eO9PFBOgQO21gqOH0egu3oWozPlbMa5rzzrIyn m2+rAAjzY1/5wLiouGvRchtKjKkmamJqpkQn6XLSp0Fq2jmP7Sbab19jJx+tVj4t lQlGolIshibLyLLAZg1Lb+CEuXIKilta7/dTvNpEi2ShdkxrJjnxi6jdur4OqQOO DbSgH3B5mG0pYiP1RLrrzSHvosEWBBCqX0eF4jT5w5ktjz0EurYHS+6T16mjyP8= -----END CERTIFICATE-----Generated at Fri Jul 24 12:05:10 2026 by rpki-client