$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa File: 6ccba569-7caf-468c-b996-e7a0034a48e4.roa (raw, json) Hash identifier: FaUi9aW3tDpK09r/IUV/WfewQ6E34B/yWvN1jegY4Lw= Subject key identifier: A3:54:3E:29:B6:AD:FA:30:89:F5:42:4E:8A:31:88:78:09:59:48:4E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 729E1BDF18F7FA3A8455037C3C5024A3976719A3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa Signing time: Thu 23 Jul 2026 15:00:28 +0000 ROA not before: Thu 23 Jul 2026 15:00:28 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9e:1b:df:18:f7:fa:3a:84:55:03:7c:3c:50:24:a3:97:67:19:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:28 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=b9256e8bdadac5c96a78bff44b94d9e24a49788f9b09a959f8e9900d4de5babb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:31:7c:24:d3:8a:d6:51:e5:f2:1b:63:9d: 54:e1:04:f5:a3:97:0b:1a:0b:92:44:37:86:7a:c6: 0c:75:37:cd:f3:c6:d6:e3:d8:c9:cf:e7:c0:43:1c: da:ce:65:8b:a7:4d:70:c7:0b:b1:97:58:91:c9:3f: 0b:f2:92:58:42:02:d0:7c:55:fc:a9:e0:83:6a:be: 50:8c:56:06:0e:e9:e0:a8:b2:a7:58:b2:c8:c2:90: 1a:47:62:a4:7d:f5:d5:75:7d:09:23:45:bc:f1:2c: 40:09:5f:5e:4d:1f:28:33:b9:38:1d:d3:9d:0a:3f: 2d:32:f4:02:87:b2:2d:83:4e:97:ff:ab:fd:a8:cf: db:4d:41:7b:d5:bd:41:ba:9f:34:c9:27:47:5d:2b: a0:e0:62:0a:d9:3c:51:0d:3c:cd:c4:94:e4:c5:88: 08:c0:49:10:3e:96:05:cc:cf:b5:25:c9:36:ae:ab: 7e:70:29:be:86:ba:5e:53:92:5c:00:eb:00:8e:2f: 31:df:8a:d0:cb:7c:53:95:6c:b0:c1:83:42:f8:c7: 3d:32:ee:df:70:76:76:0b:ef:3d:a9:da:49:d6:1a: e1:92:d7:76:cc:d6:02:b1:2d:b7:df:e1:0d:5e:1a: c9:ac:6c:41:f1:8d:05:09:4e:f8:2e:e0:b1:04:a6: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:3E:29:B6:AD:FA:30:89:F5:42:4E:8A:31:88:78:09:59:48:4E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption 38:b4:de:1d:7a:36:80:60:ea:78:72:e5:89:3a:8e:60:db:10: 5a:50:80:fb:9f:f1:ad:02:c7:87:85:9e:d5:14:df:09:3e:43: 52:06:19:93:ee:0a:93:26:fb:9b:55:35:d8:3b:83:68:d5:97: e8:a0:09:10:17:ed:98:30:42:b9:5e:36:75:d7:89:cb:e1:4e: 04:0c:5d:ea:24:ad:e4:c1:70:86:6b:de:b7:81:3d:2a:a2:be: ee:49:b3:88:7e:3d:68:f9:4a:0d:06:71:74:b5:40:01:ac:0e: cd:39:3b:d5:c6:a1:d3:d8:74:9d:ce:55:27:0f:d8:c1:4b:0b: b4:da:c5:80:63:3e:d5:6e:fb:32:e4:99:fe:74:31:a0:2b:b4: 83:fd:49:65:a6:59:cc:b9:bc:96:e9:17:f8:dc:87:82:99:c9: 60:c3:1c:4f:df:ae:1d:1b:b7:91:d7:64:78:36:36:ab:dc:68: fe:20:1a:64:4e:f4:2b:63:4b:3b:3b:0f:ef:7c:f4:aa:dd:78: ac:20:ac:a2:d5:05:1d:9c:d9:2c:e9:84:24:25:47:47:f4:c3: 20:6b:c7:48:bf:e8:7d:29:12:18:d4:ac:7a:c7:46:49:d6:20: 6b:5f:c4:a8:5c:2c:69:d8:0c:09:f9:58:02:98:b6:4c:cf:e6: 7a:f0:15:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcp4b3xj3+jqEVQN8PFAko5dnGaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDI4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTI1NmU4YmRhZGFjNWM5NmE3OGJmZjQ0Yjk0ZDllMjRh NDk3ODhmOWIwOWE5NTlmOGU5OTAwZDRkZTViYWJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC47jF8JNOK1lHl8htjnVThBPWjlwsaC5JEN4Z6xgx1N83z xtbj2MnP58BDHNrOZYunTXDHC7GXWJHJPwvyklhCAtB8Vfyp4INqvlCMVgYO6eCo sqdYssjCkBpHYqR99dV1fQkjRbzxLEAJX15NHygzuTgd050KPy0y9AKHsi2DTpf/ q/2oz9tNQXvVvUG6nzTJJ0ddK6DgYgrZPFENPM3ElOTFiAjASRA+lgXMz7UlyTau q35wKb6Gul5TklwA6wCOLzHfitDLfFOVbLDBg0L4xz0y7t9wdnYL7z2p2knWGuGS 13bM1gKxLbff4Q1eGsmsbEHxjQUJTvgu4LEEpgvbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUo1Q+Kbat+jCJ9UJOijGIeAlZSE4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZjY2JhNTY5LTdjYWYtNDY4Yy1iOTk2LWU3YTAwMzRhNDhlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBADi03h16NoBg6nhy5Yk6jmDb EFpQgPuf8a0Cx4eFntUU3wk+Q1IGGZPuCpMm+5tVNdg7g2jVl+igCRAX7ZgwQrle NnXXicvhTgQMXeokreTBcIZr3reBPSqivu5Js4h+PWj5Sg0GcXS1QAGsDs05O9XG odPYdJ3OVScP2MFLC7TaxYBjPtVu+zLkmf50MaArtIP9SWWmWcy5vJbpF/jch4KZ yWDDHE/frh0bt5HXZHg2NqvcaP4gGmRO9CtjSzs7D+989KrdeKwgrKLVBR2c2Szp hCQlR0f0wyBrx0i/6H0pEhjUrHrHRknWIGtfxKhcLGnYDAn5WAKYtkzP5nrwFcY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:01 2026 by rpki-client