$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa File: 628f9d70-75b3-4180-86d3-306061750e9f.roa (raw, json) Hash identifier: kSnfms2OGWtAGqj2oPfqT7eKqzEgQef/VrqGK2R9UCU= Subject key identifier: 2A:99:C1:93:3E:17:F2:2D:78:F0:CB:96:FF:A6:7A:AD:58:24:4B:FA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 28517AE89F58C465DC3BC912A8F4B948AAC4EFBE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa Signing time: Fri 10 Jul 2026 00:00:41 +0000 ROA not before: Fri 10 Jul 2026 00:00:41 +0000 ROA not after: Thu 08 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:51:7a:e8:9f:58:c4:65:dc:3b:c9:12:a8:f4:b9:48:aa:c4:ef:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 10 00:00:41 2026 GMT Not After : Oct 8 23:59:59 2026 GMT Subject: serialNumber=410dbe3061487923e72792da95f128351f747e6ce8b673ba28b2d485fa5abdab, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:47:7c:6a:ab:96:e0:b1:02:2f:12:7a:a0: db:7a:48:56:34:98:b0:9f:ac:c6:56:75:4a:9c:8a: 05:d9:ee:a8:d6:de:f4:77:a2:32:ba:69:99:69:00: 5c:40:fc:4b:a5:13:5b:5a:f3:51:5d:7f:b2:04:a4: 98:d5:f8:e2:05:fa:a3:30:2e:01:93:b4:e9:52:72: 9e:9a:e4:77:25:79:f2:a2:60:be:49:c7:34:5d:50: 66:f1:a7:c8:a9:86:4b:c4:18:9f:b6:a3:9f:0c:85: 7a:fb:52:72:c7:69:f0:8b:b3:bc:8c:02:e3:4f:dc: 1a:47:b3:31:4b:4a:38:16:a3:e9:b1:4a:e3:94:ff: f6:18:1b:3a:b1:7e:19:03:be:9b:23:07:72:00:ca: 92:19:2d:da:ef:9d:fd:a2:40:9a:0d:96:ee:a6:11: 04:7d:bd:06:3b:41:72:12:97:1b:4f:2e:6d:e7:dc: f5:e7:4b:19:1c:2c:51:a1:64:51:78:82:29:72:1a: f5:c4:9e:f1:69:5c:a3:7b:38:27:71:4b:5c:6e:c0: 7b:1b:dd:5a:5d:eb:67:d6:09:06:78:8e:1b:67:66: 05:26:16:65:e0:2a:2a:85:a1:59:2f:fc:bd:ca:ca: 52:40:7a:30:0c:3a:cb:d4:19:8a:cd:02:0a:f0:af: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:C1:93:3E:17:F2:2D:78:F0:CB:96:FF:A6:7A:AD:58:24:4B:FA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/628f9d70-75b3-4180-86d3-306061750e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:90::/44 Signature Algorithm: sha256WithRSAEncryption 53:82:63:5e:2b:1f:b8:26:97:0a:1f:f7:4d:78:7f:a3:d1:08: 3c:8f:48:86:5f:6d:00:1e:ec:86:7c:65:70:9c:45:5c:c5:dc: 21:a6:35:6b:93:e1:3a:b0:cd:a3:47:e8:00:92:cf:fd:d3:af: cb:35:fa:44:ef:b0:00:f5:80:40:08:7f:34:02:6e:77:48:13: f4:51:0e:5d:92:87:1c:5b:2e:e1:38:b9:56:2b:68:35:b0:fa: 73:c8:82:cc:63:53:7f:a0:17:fa:1e:56:49:df:d4:be:e0:ea: 78:fc:3a:9e:ee:19:1d:4a:ea:f7:d8:78:b0:94:0b:4a:f6:df: fa:8a:85:7c:73:ea:1b:9e:53:4d:4e:66:5b:2a:0b:83:16:52: ec:ae:5a:03:55:92:90:2f:27:8a:12:b1:5b:f8:19:19:d2:da: 4b:22:1d:28:d6:ec:57:24:d0:c0:3c:f4:d4:2c:80:a4:37:56: 11:59:8e:c8:3b:3d:c0:09:0d:7a:45:15:c2:4c:a1:a5:0e:98: 6b:19:19:ea:af:aa:a2:c5:90:de:4f:98:56:bb:d7:38:c2:d6: cd:6b:cd:b9:3a:37:fa:3c:60:b6:6a:f6:9c:2c:4e:fa:4a:f8: 15:ff:e6:10:ca:57:48:1a:11:5f:5d:21:5f:d8:90:9a:e9:16: ec:7d:5a:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKFF66J9YxGXcO8kSqPS5SKrE774wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzEwMDAwMDQxWhcNMjYxMDA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTBkYmUzMDYxNDg3OTIzZTcyNzkyZGE5NWYxMjgzNTFm NzQ3ZTZjZThiNjczYmEyOGIyZDQ4NWZhNWFiZGFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTQkd8aquW4LECLxJ6oNt6SFY0mLCfrMZWdUqcigXZ7qjW 3vR3ojK6aZlpAFxA/EulE1ta81Fdf7IEpJjV+OIF+qMwLgGTtOlScp6a5HclefKi YL5JxzRdUGbxp8iphkvEGJ+2o58MhXr7UnLHafCLs7yMAuNP3BpHszFLSjgWo+mx SuOU//YYGzqxfhkDvpsjB3IAypIZLdrvnf2iQJoNlu6mEQR9vQY7QXISlxtPLm3n 3PXnSxkcLFGhZFF4gilyGvXEnvFpXKN7OCdxS1xuwHsb3Vpd62fWCQZ4jhtnZgUm FmXgKiqFoVkv/L3KylJAejAMOsvUGYrNAgrwr34fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKpnBkz4X8i148MuW/6Z6rVgkS/owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYyOGY5ZDcwLTc1YjMtNDE4MC04NmQzLTMwNjA2MTc1MGU5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAJAwDQYJKoZIhvcNAQELBQADggEBAFOCY14rH7gmlwof9014f6PR CDyPSIZfbQAe7IZ8ZXCcRVzF3CGmNWuT4TqwzaNH6ACSz/3Tr8s1+kTvsAD1gEAI fzQCbndIE/RRDl2ShxxbLuE4uVYraDWw+nPIgsxjU3+gF/oeVknf1L7g6nj8Op7u GR1K6vfYeLCUC0r23/qKhXxz6hueU01OZlsqC4MWUuyuWgNVkpAvJ4oSsVv4GRnS 2ksiHSjW7Fck0MA89NQsgKQ3VhFZjsg7PcAJDXpFFcJMoaUOmGsZGeqvqqLFkN5P mFa71zjC1s1rzbk6N/o8YLZq9pwsTvpK+BX/5hDKV0gaEV9dIV/YkJrpFux9WnM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:18:40 2026 by rpki-client