$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa File: 6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa (raw, json) Hash identifier: LBTzZRC98j/j89lTH13MvXsn57QQlbtTpT6/R/dFYjo= Subject key identifier: 72:13:47:61:C1:05:5D:1D:4F:24:54:86:28:43:5C:BF:E2:EF:EB:50 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 61D2695CE7884316CF478C3A5660415AD1D337A0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa Signing time: Fri 17 Jul 2026 00:10:07 +0000 ROA not before: Fri 17 Jul 2026 00:10:07 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d2:69:5c:e7:88:43:16:cf:47:8c:3a:56:60:41:5a:d1:d3:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 17 00:10:07 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=560a70e15c378ed40a5980360081f00c5591b0e65e783e9b56cc65fe26dab32d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:3f:6f:b2:ce:71:02:34:1d:e6:ca:32:0e: 7b:fe:f7:d3:60:b3:13:f3:c0:47:a3:ec:8a:43:77: 72:2d:c1:ae:a0:e8:be:f9:5e:7d:45:5d:6d:00:74: 27:23:cc:9b:97:02:79:5a:7b:aa:e2:7e:e1:b9:72: 96:c0:76:04:9b:e2:6c:9a:d8:ab:ca:fa:b1:e3:3c: 0d:2c:da:28:d8:cb:6a:a9:1c:98:a3:d9:9b:ba:8f: 02:d3:bb:50:4f:d5:62:b5:92:91:34:8e:b0:d5:08: a2:66:c9:b2:45:04:48:5f:0e:f5:9d:34:92:c0:26: eb:64:13:cf:70:fd:b6:36:18:52:83:a7:57:f2:77: 3a:54:1b:96:45:b5:08:03:89:30:c8:b6:75:fb:8d: 19:e1:ce:df:2e:7e:9f:62:6e:b4:94:6e:a3:0e:f6: 5d:33:a2:68:11:f9:a2:15:3b:b6:2c:36:0b:2e:6a: a6:46:73:45:ec:24:a1:9d:ef:eb:7b:30:c0:5f:25: 9a:78:87:3e:d4:7a:f3:56:4d:31:b4:6e:aa:f9:36: 6d:93:e5:ea:23:30:63:4c:7f:83:b0:a7:ae:de:9c: e1:75:18:4a:a0:2a:07:58:19:39:7d:bd:48:7a:75: 27:69:5f:f1:54:13:2e:29:51:13:7c:23:69:45:83: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:13:47:61:C1:05:5D:1D:4F:24:54:86:28:43:5C:BF:E2:EF:EB:50 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b01::/48 Signature Algorithm: sha256WithRSAEncryption 12:23:c3:b2:e8:f2:20:c5:83:6d:2c:70:5f:67:45:3c:62:d5: b6:f6:40:de:85:b2:f8:a6:0b:77:5e:59:20:bd:05:fe:ac:d4: ec:d6:06:86:65:f4:2c:3a:e0:ab:43:c1:07:52:29:46:81:53: 25:b0:ec:94:2c:60:10:00:ff:16:10:29:2a:16:31:18:31:ee: 5f:13:57:a2:51:33:dc:01:00:b2:12:96:20:db:f1:58:5c:e9: 5b:08:a1:c0:27:82:5a:a6:7e:f7:13:7d:95:92:93:bd:d9:9d: 0b:e7:c4:e6:7c:c1:3b:72:e2:0b:f7:92:65:0d:9e:6a:2c:e6: bc:3b:8c:65:ff:6c:cb:98:e8:2d:db:57:e2:b0:ad:c4:0a:5b: d2:a8:14:2d:da:be:33:92:80:e2:2f:50:41:97:66:bb:ba:4f: 26:f0:3a:63:5d:1b:41:c1:c1:25:c8:ac:6c:87:39:cf:ed:6e: fa:2a:19:17:b1:06:f2:29:c4:19:08:b8:f9:b9:81:f5:19:e7: 8c:44:6f:4f:80:3d:58:52:09:d9:49:c3:b3:a5:5d:58:d1:ba: 1f:c9:94:dc:64:84:d4:ae:bd:17:77:f2:11:de:65:51:f2:94: f5:11:99:f7:dc:12:29:09:00:49:3f:fd:3c:8b:eb:a0:a5:db: d4:fc:f9:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYdJpXOeIQxbPR4w6VmBBWtHTN6AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzE3MDAxMDA3WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjBhNzBlMTVjMzc4ZWQ0MGE1OTgwMzYwMDgxZjAwYzU1 OTFiMGU2NWU3ODNlOWI1NmNjNjVmZTI2ZGFiMzJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6UD9vss5xAjQd5soyDnv+99NgsxPzwEej7IpDd3Itwa6g 6L75Xn1FXW0AdCcjzJuXAnlae6rifuG5cpbAdgSb4mya2KvK+rHjPA0s2ijYy2qp HJij2Zu6jwLTu1BP1WK1kpE0jrDVCKJmybJFBEhfDvWdNJLAJutkE89w/bY2GFKD p1fydzpUG5ZFtQgDiTDItnX7jRnhzt8ufp9ibrSUbqMO9l0zomgR+aIVO7YsNgsu aqZGc0XsJKGd7+t7MMBfJZp4hz7UevNWTTG0bqr5Nm2T5eojMGNMf4Owp67enOF1 GEqgKgdYGTl9vUh6dSdpX/FUEy4pURN8I2lFg5o7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUchNHYcEFXR1PJFSGKENcv+Lv61AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhYzQwNGViLTZhMzItNGFjMS1iOWQ1LTM5MTk4NmE2Mzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwEwDQYJKoZIhvcNAQELBQADggEBABIjw7Lo8iDFg20scF9nRTxi 1bb2QN6FsvimC3deWSC9Bf6s1OzWBoZl9Cw64KtDwQdSKUaBUyWw7JQsYBAA/xYQ KSoWMRgx7l8TV6JRM9wBALISliDb8Vhc6VsIocAnglqmfvcTfZWSk73ZnQvnxOZ8 wTty4gv3kmUNnmos5rw7jGX/bMuY6C3bV+KwrcQKW9KoFC3avjOSgOIvUEGXZru6 TybwOmNdG0HBwSXIrGyHOc/tbvoqGRexBvIpxBkIuPm5gfUZ54xEb0+APVhSCdlJ w7OlXVjRuh/JlNxkhNSuvRd38hHeZVHylPURmffcEikJAEk//TyL66Cl29T8+Qs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:07 2026 by rpki-client