$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa File: 75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa (raw, json) Hash identifier: JWti/fLUyr7TqgI0iONnp9NFJFzf8w5ZlMJDc+nUUdU= Subject key identifier: 01:BD:00:38:84:DA:27:7F:0B:45:8A:68:8C:2A:85:C1:3A:6D:5C:D8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7B76321B0A7BCCE7052708523FC1A37BD697E6C1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa Signing time: Thu 23 Jul 2026 15:10:47 +0000 ROA not before: Thu 23 Jul 2026 15:10:47 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:76:32:1b:0a:7b:cc:e7:05:27:08:52:3f:c1:a3:7b:d6:97:e6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:47 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=ac6e781d40761244190b8bc510fb1f8d653866f193000f3e6119e50dcce9f94a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2f:43:05:e6:54:e5:ee:95:57:99:04:1e:0a: 87:87:b7:e5:2a:e6:3d:f6:d0:b8:f4:85:c8:99:a5: 80:a6:57:2c:96:03:7f:ee:77:b3:d1:11:d5:f4:c7: 4e:56:05:1f:c8:69:c7:b3:8c:f2:40:07:6d:c0:aa: 13:d5:75:52:36:76:4a:b9:bd:bb:fb:8d:ed:19:85: d4:f2:02:69:56:dc:5c:64:1d:41:9c:55:1c:80:34: 76:7e:54:e6:c4:20:a9:02:80:d1:2d:28:4e:32:32: ef:31:53:eb:60:ee:fd:a4:ef:1a:a8:72:57:26:7d: 91:72:35:fe:6e:02:1e:d1:e6:55:e6:e4:45:6a:9a: e1:d9:47:3f:d6:6e:f7:f5:d6:3e:3c:56:0a:fa:a4: 69:de:d4:f6:bb:0c:ca:29:48:1c:c0:95:23:82:87: 07:b5:e8:0b:03:d7:b9:96:72:79:3c:ad:4b:d1:14: ca:9f:57:7b:33:01:11:28:8b:1c:ec:65:31:da:2b: 8b:c1:e2:56:94:6a:00:39:e3:5c:d6:74:32:b4:6e: 83:c7:ea:3f:32:e2:5b:aa:6e:86:d4:86:0e:1f:b5: 33:d6:33:0b:5e:32:0e:9f:9e:f7:ee:78:69:c1:51: bf:0c:de:89:13:21:72:43:6d:7e:61:5c:10:86:ad: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:00:38:84:DA:27:7F:0B:45:8A:68:8C:2A:85:C1:3A:6D:5C:D8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption 41:07:7d:4e:0f:1f:67:86:29:24:b3:4f:f7:66:2d:3d:fe:ef: 99:97:bf:79:1c:a2:02:1e:78:c0:3d:2b:9e:49:4c:ff:84:c5: 37:dd:59:73:5b:66:47:6c:b9:6c:8d:b2:96:43:dc:bb:2f:37: aa:66:cc:b0:f3:f6:aa:d8:18:67:52:0c:eb:37:3c:96:a6:34: 44:63:f9:45:00:5f:c5:b7:2f:27:84:5b:d2:0b:66:18:24:7c: 63:d9:5b:9e:47:7a:b9:d7:cc:54:e7:47:b8:ed:7a:52:bf:17: e1:07:ca:fc:a4:26:38:bb:c8:de:e7:ba:c1:b9:53:13:82:6f: 8f:19:39:54:d6:ff:e4:dc:2f:c4:d6:c1:4a:89:c5:31:ea:18: 62:60:f2:80:0c:e9:be:55:df:de:f6:0f:1b:40:6b:c9:63:a0: 21:a8:df:f7:ce:cc:88:77:34:a3:ef:07:6f:75:e9:24:79:7c: 28:34:f8:46:f1:d4:aa:ce:5e:cc:d3:78:bf:f8:73:78:ca:48: 4c:e1:4f:86:b1:60:62:44:35:0b:dd:cc:f7:67:92:42:44:3c: 02:d3:4d:ed:a7:ac:ca:d8:e8:de:84:99:e4:37:2c:8d:d2:a0: 0f:91:01:99:c5:eb:d0:3b:3f:a5:f7:1a:d9:ba:ea:e8:04:22: a7:af:3a:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe3YyGwp7zOcFJwhSP8Gje9aX5sEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDQ3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzZlNzgxZDQwNzYxMjQ0MTkwYjhiYzUxMGZiMWY4ZDY1 Mzg2NmYxOTMwMDBmM2U2MTE5ZTUwZGNjZTlmOTRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2L0MF5lTl7pVXmQQeCoeHt+Uq5j320Lj0hciZpYCmVyyW A3/ud7PREdX0x05WBR/IacezjPJAB23AqhPVdVI2dkq5vbv7je0ZhdTyAmlW3Fxk HUGcVRyANHZ+VObEIKkCgNEtKE4yMu8xU+tg7v2k7xqoclcmfZFyNf5uAh7R5lXm 5EVqmuHZRz/Wbvf11j48Vgr6pGne1Pa7DMopSBzAlSOChwe16AsD17mWcnk8rUvR FMqfV3szAREoixzsZTHaK4vB4laUagA541zWdDK0boPH6j8y4luqbobUhg4ftTPW MwteMg6fnvfueGnBUb8M3okTIXJDbX5hXBCGrQhZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAb0AOITaJ38LRYpojCqFwTptXNgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc1ZTVlNmNlLWExMWEtNDA0NS1iY2M1LTM4YzUwODU5MjFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAEEHfU4PH2eGKSSzT/dmLT3+ 75mXv3kcogIeeMA9K55JTP+ExTfdWXNbZkdsuWyNspZD3LsvN6pmzLDz9qrYGGdS DOs3PJamNERj+UUAX8W3LyeEW9ILZhgkfGPZW55HernXzFTnR7jtelK/F+EHyvyk Jji7yN7nusG5UxOCb48ZOVTW/+TcL8TWwUqJxTHqGGJg8oAM6b5V3972DxtAa8lj oCGo3/fOzIh3NKPvB2916SR5fCg0+Ebx1KrOXszTeL/4c3jKSEzhT4axYGJENQvd zPdnkkJEPALTTe2nrMrY6N6EmeQ3LI3SoA+RAZnF69A7P6X3Gtm66ugEIqevOjc= -----END CERTIFICATE-----Generated at Fri Jul 24 11:07:24 2026 by rpki-client