$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: l3whEGzaUDeukZTPtH7xEX+SyjunkqcXl3nv70vgoPs= Subject key identifier: A0:AC:03:1C:D9:CF:B1:33:1F:03:97:AF:6F:C4:5F:82:35:1B:18:F6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0456E0884CE88EF943EA7912AC6687ED54C001E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Thu 23 Jul 2026 15:00:31 +0000 ROA not before: Thu 23 Jul 2026 15:00:31 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:56:e0:88:4c:e8:8e:f9:43:ea:79:12:ac:66:87:ed:54:c0:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:31 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=44cee1679cabc8816336c4c2073f317d3a0185c66e410a54c7b36f6df9484d2c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:24:c6:9e:be:46:fa:33:1e:9c:37:31:97: ef:a2:17:e8:5b:e1:4c:b9:56:e4:7b:bb:c5:d7:3c: 00:95:52:2f:9b:63:76:5e:4c:3b:ca:18:94:7b:52: a1:cc:42:76:e1:ab:36:26:1e:ad:25:cd:80:0a:25: c9:e3:47:0e:69:cf:55:61:a0:6c:75:8e:d1:3d:72: 87:d8:74:63:8c:25:1b:59:9a:be:6c:f5:a3:56:68: ed:04:e4:db:5b:70:1a:f3:04:69:29:72:c4:21:cf: 98:5d:9d:0d:71:bb:45:95:2a:87:ed:ea:42:96:08: 33:de:c3:53:f8:d8:90:63:9e:d2:c4:60:f9:ef:95: 33:3a:e6:85:44:8e:99:3c:3a:73:9a:0f:57:60:92: 64:29:5d:7e:42:a9:93:1e:6b:a2:1b:a0:c1:b0:89: 4f:0f:b3:9f:31:d6:12:2f:ec:13:34:e7:74:3a:65: af:dc:9e:1f:97:7a:72:82:42:2a:8a:76:f7:9a:ae: 50:b5:24:1f:51:73:b4:8c:c5:5b:d3:5e:7d:06:78: 9f:4b:76:cd:5b:e1:5c:1d:9a:59:b6:4f:7a:61:67: 66:b6:11:17:ff:a7:0e:3c:19:7b:2c:57:a1:0d:35: 34:14:8a:e2:fb:1f:d9:88:48:bd:16:a0:22:6c:54: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:03:1C:D9:CF:B1:33:1F:03:97:AF:6F:C4:5F:82:35:1B:18:F6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 98:5b:85:dc:c2:de:09:05:1c:dc:3f:8d:6f:2d:ca:e1:48:bd: 99:12:09:4e:cd:19:18:01:78:d8:45:59:25:c7:e0:35:59:a0: 5c:03:f3:61:2b:dc:1c:54:92:34:98:c1:52:82:58:dd:44:d7: 27:85:60:ff:29:b9:3e:bb:91:03:08:1e:d5:ef:7c:99:bf:b8: 54:00:83:59:49:a6:9e:0e:c0:a3:78:e3:cd:23:da:60:61:03: 4c:32:01:1f:df:22:b1:bc:4e:51:5c:56:c7:92:19:6e:4e:2d: c9:89:fd:ad:88:0f:4a:78:08:ce:0e:4c:38:15:94:2f:91:d0: 21:af:97:74:3f:31:14:1c:28:b2:fc:e4:fb:70:18:0a:a0:80: 1b:2a:3a:7c:18:4e:77:f0:2d:04:8b:83:d0:95:1d:c4:95:81: 06:3a:db:14:47:8f:a9:e8:02:d5:ec:dc:5d:f2:c7:c0:6e:b7: 53:19:c6:94:c6:d8:53:5c:58:4a:5e:16:3c:ad:62:3c:42:93: 48:92:d1:bb:7c:2b:28:11:e5:4c:a5:18:4e:46:c5:20:e5:76: 7c:3d:63:d0:b9:29:c4:95:d4:3b:90:3c:32:0a:da:b7:fe:43: 50:fb:03:28:f3:22:1c:f2:dd:0a:70:a8:9a:5c:06:07:7c:c3: 4b:5b:e7:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBFbgiEzojvlD6nkSrGaH7VTAAeQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGNlZTE2NzljYWJjODgxNjMzNmM0YzIwNzNmMzE3ZDNh MDE4NWM2NmU0MTBhNTRjN2IzNmY2ZGY5NDg0ZDJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKwSTGnr5G+jMenDcxl++iF+hb4Uy5VuR7u8XXPACVUi+b Y3ZeTDvKGJR7UqHMQnbhqzYmHq0lzYAKJcnjRw5pz1VhoGx1jtE9cofYdGOMJRtZ mr5s9aNWaO0E5NtbcBrzBGkpcsQhz5hdnQ1xu0WVKoft6kKWCDPew1P42JBjntLE YPnvlTM65oVEjpk8OnOaD1dgkmQpXX5CqZMea6IboMGwiU8Ps58x1hIv7BM053Q6 Za/cnh+XenKCQiqKdvearlC1JB9Rc7SMxVvTXn0GeJ9Lds1b4Vwdmlm2T3phZ2a2 ERf/pw48GXssV6ENNTQUiuL7H9mISL0WoCJsVB7zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoKwDHNnPsTMfA5evb8RfgjUbGPYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAJhbhdzC3gkFHNw/jW8tyuFI vZkSCU7NGRgBeNhFWSXH4DVZoFwD82Er3BxUkjSYwVKCWN1E1yeFYP8puT67kQMI HtXvfJm/uFQAg1lJpp4OwKN4480j2mBhA0wyAR/fIrG8TlFcVseSGW5OLcmJ/a2I D0p4CM4OTDgVlC+R0CGvl3Q/MRQcKLL85PtwGAqggBsqOnwYTnfwLQSLg9CVHcSV gQY62xRHj6noAtXs3F3yx8But1MZxpTG2FNcWEpeFjytYjxCk0iS0bt8KygR5Uyl GE5GxSDldnw9Y9C5KcSV1DuQPDIK2rf+Q1D7AyjzIhzy3QpwqJpcBgd8w0tb53E= -----END CERTIFICATE-----Generated at Fri Jul 24 14:34:29 2026 by rpki-client