$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa File: 828860c7-04d3-410e-a0e6-5d8782c6c573.roa (raw, json) Hash identifier: 9TSBSR/9oP2S0LRaK3WA/bQ9ubCjGYM/hDy6gmN3XnY= Subject key identifier: 5B:82:04:FB:B2:B3:89:99:D6:36:BA:2C:3C:A0:7F:F7:91:1C:3F:79 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 74085234544E4CF852B0CEDB24714BEDEF4C1162 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa Signing time: Thu 23 Jul 2026 15:00:33 +0000 ROA not before: Thu 23 Jul 2026 15:00:33 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:10a::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:08:52:34:54:4e:4c:f8:52:b0:ce:db:24:71:4b:ed:ef:4c:11:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:33 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=e571817002103e89e5b6ded9915b80eb3563bc41e122da11643ac0ba3d676fd9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:a6:85:36:a2:87:5e:a2:bd:47:06:b1:fb: 14:9c:e3:5c:08:aa:5c:f3:0b:4c:7b:f4:1a:f6:7f: c2:8c:35:02:f5:ac:d9:9b:09:a7:28:0f:84:b4:67: b0:93:da:82:f2:60:03:23:57:c0:6d:7d:88:a5:0d: ed:51:11:d5:21:e9:ef:c0:95:05:a0:8d:d9:fe:2a: a9:ec:77:b2:4b:b9:94:35:1d:a6:61:58:21:2e:8a: 32:7c:24:59:ed:6c:0a:a7:67:a8:38:d2:5f:97:31: 44:c2:36:a0:dd:fa:ed:03:9f:1c:e8:f5:8b:fa:ec: 85:72:0d:a0:e5:0c:97:a8:c6:36:fa:36:80:d1:e8: 97:23:0f:bc:7b:7d:61:ea:5d:d0:ab:64:d1:74:8e: 64:f4:aa:22:3e:18:67:16:c3:f4:4c:3d:21:18:97: 7f:7d:1a:9c:89:26:47:4a:5d:46:0d:dc:ce:20:35: 76:41:55:ba:18:33:ac:ff:1e:80:ab:fa:10:34:72: e6:ef:10:c3:80:99:76:50:2e:78:2f:c8:bc:82:da: 9b:c6:88:29:48:c5:c3:75:b4:fa:b5:f1:b2:c3:59: 4e:2b:47:9c:04:90:9d:72:34:75:09:1a:e6:42:13: bf:5a:02:5b:81:32:a6:c1:a6:69:f5:a9:f0:b2:a6: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:04:FB:B2:B3:89:99:D6:36:BA:2C:3C:A0:7F:F7:91:1C:3F:79 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:10a::/47 Signature Algorithm: sha256WithRSAEncryption 9a:d1:4a:ee:41:ac:50:25:56:81:8f:f2:af:8b:71:42:43:72: 99:df:ab:18:d3:aa:f0:63:63:d5:b2:b3:5d:c1:3c:56:de:59: a1:1a:21:15:25:db:10:72:1d:5d:e6:75:18:28:6c:4d:25:86: b6:f7:0b:72:15:15:5b:5a:53:4c:e9:db:05:70:5d:67:e1:d4: a6:79:86:53:06:f3:64:e1:60:52:75:dd:ac:41:d3:ec:78:e7: 02:6a:25:5f:a4:26:3a:75:31:8c:1b:2f:35:e2:8b:df:a7:58: da:d3:7f:90:d7:d1:49:06:34:68:a4:37:3b:c2:a5:32:30:4a: 8e:c5:f7:22:ca:1f:b5:0d:34:0f:c3:3c:15:ed:ef:fb:e0:d0: a4:ad:2c:3d:42:dd:02:03:93:89:ac:ca:e7:d9:60:4f:c6:84: 4b:0f:07:b4:d4:5d:2a:59:84:f1:2f:9f:ab:28:46:15:3b:6a: b7:bf:0d:2f:52:1b:17:55:c6:8c:61:f8:b1:48:f3:bb:fb:d9: fe:83:2c:38:f1:9d:7a:c8:40:bc:ba:02:35:46:de:be:55:a5: 70:7c:9d:39:8c:d8:90:a0:b0:b1:d3:00:b0:4d:a6:e6:84:a3: c0:25:22:3b:47:c6:be:c6:71:9c:56:c6:c5:36:07:df:bf:94: 7e:09:97:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdAhSNFROTPhSsM7bJHFL7e9MEWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTcxODE3MDAyMTAzZTg5ZTViNmRlZDk5MTViODBlYjM1 NjNiYzQxZTEyMmRhMTE2NDNhYzBiYTNkNjc2ZmQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAHaaFNqKHXqK9Rwax+xSc41wIqlzzC0x79Br2f8KMNQL1 rNmbCacoD4S0Z7CT2oLyYAMjV8BtfYilDe1REdUh6e/AlQWgjdn+Kqnsd7JLuZQ1 HaZhWCEuijJ8JFntbAqnZ6g40l+XMUTCNqDd+u0Dnxzo9Yv67IVyDaDlDJeoxjb6 NoDR6JcjD7x7fWHqXdCrZNF0jmT0qiI+GGcWw/RMPSEYl399GpyJJkdKXUYN3M4g NXZBVboYM6z/HoCr+hA0cubvEMOAmXZQLngvyLyC2pvGiClIxcN1tPq18bLDWU4r R5wEkJ1yNHUJGuZCE79aAluBMqbBpmn1qfCyppZ5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW4IE+7KziZnWNrosPKB/95EcP3kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgyODg2MGM3LTA0ZDMtNDEwZS1hMGU2LTVkODc4MmM2YzU3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQowDQYJKoZIhvcNAQELBQADggEBAJrRSu5BrFAlVoGP8q+LcUJD cpnfqxjTqvBjY9Wys13BPFbeWaEaIRUl2xByHV3mdRgobE0lhrb3C3IVFVtaU0zp 2wVwXWfh1KZ5hlMG82ThYFJ13axB0+x45wJqJV+kJjp1MYwbLzXii9+nWNrTf5DX 0UkGNGikNzvCpTIwSo7F9yLKH7UNNA/DPBXt7/vg0KStLD1C3QIDk4msyufZYE/G hEsPB7TUXSpZhPEvn6soRhU7are/DS9SGxdVxoxh+LFI87v72f6DLDjxnXrIQLy6 AjVG3r5VpXB8nTmM2JCgsLHTALBNpuaEo8AlIjtHxr7GcZxWxsU2B9+/lH4Jlzo= -----END CERTIFICATE-----Generated at Fri Jul 24 11:06:55 2026 by rpki-client