$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa File: 7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa (raw, json) Hash identifier: M+ursJS+JYQDcAsh9tsN+eZwA0olo8tDedlodKqeM5I= Subject key identifier: B9:C2:55:E0:44:39:10:97:F1:84:93:2A:05:A5:58:FE:0A:36:53:46 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3D8E99F0D9CD943442AA5F1B00480C096CB385AC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa Signing time: Tue 30 Jun 2026 00:00:07 +0000 ROA not before: Tue 30 Jun 2026 00:00:07 +0000 ROA not after: Mon 28 Sep 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:99:f0:d9:cd:94:34:42:aa:5f:1b:00:48:0c:09:6c:b3:85:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 30 00:00:07 2026 GMT Not After : Sep 28 23:59:59 2026 GMT Subject: serialNumber=7098a8fd6101d3822e57512680326099d3861cdfa9a4213dd5cd86ec46846a5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:18:21:f3:53:42:6b:2c:85:fe:4a:48:91: ef:e1:c9:0b:08:b3:79:9b:de:c6:5c:79:82:0a:3a: 11:37:41:57:00:a2:08:a2:09:ad:6a:61:13:08:e3: 8b:9d:1f:0d:55:a6:6a:38:fe:c7:ec:15:a5:f9:c4: 8e:24:f4:1e:64:7b:3a:8d:4a:24:51:04:57:57:3b: 82:8b:bb:36:93:28:44:76:01:93:41:15:de:38:02: 59:6c:90:36:00:f5:da:f4:c9:13:57:92:df:e5:91: ca:0a:9f:6a:6b:9c:a6:de:99:81:80:92:07:8e:ca: fa:da:49:14:88:4c:b7:fe:e1:e7:bd:1e:7d:33:af: 92:d9:6d:12:41:6b:ea:b6:0b:a1:bb:d8:5b:58:dc: 2a:a8:79:8b:a0:d8:2e:39:36:dd:e2:a7:3b:98:0f: 34:89:36:05:f4:71:7d:1f:56:54:d8:bb:77:a2:d5: f4:d0:54:31:06:ee:0e:70:f0:68:ca:69:99:24:9f: e9:82:cf:a5:c3:8e:0a:0a:d8:d9:1e:f5:be:b6:89: a4:57:e8:83:8c:0f:8c:91:6f:00:ce:cd:78:ad:8b: b7:41:d0:77:e8:81:66:c3:3a:c9:69:7b:ea:f2:d4: 52:72:5a:8f:ea:7c:42:4c:91:cb:ad:55:b8:b7:95: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:55:E0:44:39:10:97:F1:84:93:2A:05:A5:58:FE:0A:36:53:46 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7028::/48 Signature Algorithm: sha256WithRSAEncryption 27:01:bc:89:b0:c9:07:46:b0:dc:e4:e5:be:86:bc:55:b7:39: 70:23:e8:fc:c8:a1:7b:bb:14:89:11:e2:4c:df:f6:e1:c6:b3: 8c:02:9a:85:60:5c:1b:23:06:8f:73:3a:b9:b3:87:f7:60:3d: 4c:f5:dc:07:52:2b:43:90:a0:37:c6:d7:82:0f:c3:0d:d3:82: b3:e8:4b:2a:ad:71:c9:e8:2f:ad:f4:18:71:30:40:ae:8a:55: 66:c9:18:a7:3e:14:e1:a0:ae:6a:4d:a1:5f:0c:b0:fe:af:fc: ec:06:73:92:3a:5e:f0:17:c0:73:41:4b:50:c6:ae:d0:b3:b4: b8:03:00:bc:54:b0:c7:b4:79:71:39:14:eb:a6:ed:58:9a:8b: 1b:28:64:16:2a:37:2b:12:55:16:29:b1:05:6c:9b:46:17:b7: fe:3e:b6:36:5c:93:e5:b3:e2:c2:d3:86:ff:1e:8a:02:5c:96: 4f:c6:71:7c:70:18:fa:ff:28:f3:28:96:4e:ed:f4:c0:8b:93: bc:26:43:9f:33:43:4b:78:de:20:d1:ea:3e:a6:6e:da:d3:97: af:f8:bf:80:f1:89:dd:05:d9:48:a9:b0:73:9a:d9:1a:4a:06: b2:d9:d8:2a:6d:26:76:25:41:76:20:ce:2d:c8:44:9c:7d:41: 08:0c:73:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPY6Z8NnNlDRCql8bAEgMCWyzhawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjMwMDAwMDA3WhcNMjYwOTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDk4YThmZDYxMDFkMzgyMmU1NzUxMjY4MDMyNjA5OWQz ODYxY2RmYTlhNDIxM2RkNWNkODZlYzQ2ODQ2YTViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuBxgh81NCayyF/kpIke/hyQsIs3mb3sZceYIKOhE3QVcA ogiiCa1qYRMI44udHw1Vpmo4/sfsFaX5xI4k9B5kezqNSiRRBFdXO4KLuzaTKER2 AZNBFd44AllskDYA9dr0yRNXkt/lkcoKn2prnKbemYGAkgeOyvraSRSITLf+4ee9 Hn0zr5LZbRJBa+q2C6G72FtY3CqoeYug2C45Nt3ipzuYDzSJNgX0cX0fVlTYu3ei 1fTQVDEG7g5w8GjKaZkkn+mCz6XDjgoK2Nke9b62iaRX6IOMD4yRbwDOzXiti7dB 0HfogWbDOslpe+ry1FJyWo/qfEJMkcutVbi3lVatAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUucJV4EQ5EJfxhJMqBaVY/go2U0YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdhZDlhMWQ5LTlkZTgtNDQxOC04YTk3LWZkN2NmN2E1ZmU3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycCgwDQYJKoZIhvcNAQELBQADggEBACcBvImwyQdGsNzk5b6GvFW3 OXAj6PzIoXu7FIkR4kzf9uHGs4wCmoVgXBsjBo9zOrmzh/dgPUz13AdSK0OQoDfG 14IPww3TgrPoSyqtccnoL630GHEwQK6KVWbJGKc+FOGgrmpNoV8MsP6v/OwGc5I6 XvAXwHNBS1DGrtCztLgDALxUsMe0eXE5FOum7ViaixsoZBYqNysSVRYpsQVsm0YX t/4+tjZck+Wz4sLThv8eigJclk/GcXxwGPr/KPMolk7t9MCLk7wmQ58zQ0t43iDR 6j6mbtrTl6/4v4Dxid0F2UipsHOa2RpKBrLZ2CptJnYlQXYgzi3IRJx9QQgMc4Q= -----END CERTIFICATE-----Generated at Fri Jul 24 03:45:31 2026 by rpki-client