$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa File: 8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json) Hash identifier: qGvmpcCRDmMCPXIts0z4/ZOEemaNu+ZXFk2GO1+wXFM= Subject key identifier: 7B:3F:73:88:64:B2:5F:27:BB:97:50:F8:33:10:58:53:73:D3:0E:E0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2CFF7CEC72301E9C640D8ACC98C6D51FB4F5F26A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa Signing time: Thu 23 Jul 2026 15:10:09 +0000 ROA not before: Thu 23 Jul 2026 15:10:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ff:7c:ec:72:30:1e:9c:64:0d:8a:cc:98:c6:d5:1f:b4:f5:f2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=5c6950f6c50fd1a71fec28a1dabb0cd9ae72e17c7709c3d27151f881bd2e2234, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:b3:ac:3c:ca:a6:67:84:48:73:3f:61:71: df:56:26:61:e2:2f:7c:6f:d6:0b:fd:a9:43:a0:10: 23:f5:76:60:52:35:63:74:3c:71:3a:9f:97:85:34: ce:f5:d8:af:1c:4d:f6:0b:e9:12:9a:94:d2:26:0f: b2:5a:11:0a:50:12:f4:41:8c:ea:a7:2b:8c:f8:bc: 9c:28:6f:37:29:31:f6:a9:36:70:97:44:8b:84:7c: 8f:4b:30:6b:85:bd:0b:93:ba:70:d7:10:a2:31:e2: 92:85:fb:b2:67:b0:fe:33:2f:10:5a:63:41:f9:f2: 83:3d:1d:00:70:32:7c:45:40:5d:67:a3:b6:7f:37: 92:b7:6d:cd:a8:7d:32:b7:d7:e7:da:f7:93:b0:91: 5b:dd:9d:9a:06:43:39:7e:ef:e0:48:31:fc:ac:88: 80:3c:05:4e:12:18:cf:ba:f9:45:e3:7d:7d:8a:eb: fa:79:b8:47:9a:ab:6f:96:b7:ee:55:49:62:57:af: 0e:9c:b7:21:12:bb:e5:2a:67:b2:c7:b5:e4:11:61: e4:72:da:39:08:9e:d2:ec:c8:6e:9e:29:f0:7e:c6: af:6c:96:b8:7e:43:fe:25:81:4d:3b:36:79:f8:a6: 55:8e:ce:6e:df:98:d6:4c:23:b6:66:62:94:ba:7e: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:73:88:64:B2:5F:27:BB:97:50:F8:33:10:58:53:73:D3:0E:E0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption 69:df:03:a2:61:87:1f:88:e0:c9:dd:f2:9a:aa:27:87:d9:62: 74:9f:20:2e:79:af:05:72:38:7b:bc:4e:38:31:98:71:16:94: f5:fc:d3:e4:1f:01:13:ab:58:c9:6a:51:1a:f1:f6:be:01:1d: 65:06:14:4c:9b:d2:42:9e:a6:13:80:81:d2:8e:52:cb:d0:3f: c3:e7:94:1c:32:32:84:99:f4:5c:81:ed:ff:a1:4c:97:53:77: 9e:a3:d2:ed:73:f7:eb:d2:e3:43:03:c2:d4:d8:31:e3:63:3e: a3:57:ec:25:26:6c:3d:1d:7f:aa:83:43:ec:4e:ff:ba:52:7b: 24:c2:a7:4b:ef:21:2b:4a:21:60:ca:0f:e8:24:e5:79:21:59: 44:d7:ef:e6:4a:e5:56:4b:f3:db:6e:0c:a0:e8:c3:a5:58:5f: 02:a2:58:f7:00:42:b0:bb:3c:eb:30:a8:84:d7:6d:95:66:86: df:8c:7f:b4:4f:47:bf:35:dd:1e:ba:34:40:b2:5b:f2:e8:4d: 93:bd:fc:94:5b:0a:ad:5a:2a:23:17:7e:42:a4:c7:74:1c:21: 99:d2:11:55:a5:2b:77:5d:db:34:5c:ad:c0:b9:3a:61:08:a8: 2b:cf:d3:09:d3:63:1f:ab:dc:b9:20:fe:3a:17:cd:97:6c:22: c7:23:a6:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULP987HIwHpxkDYrMmMbVH7T18mowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDA5WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzY5NTBmNmM1MGZkMWE3MWZlYzI4YTFkYWJiMGNkOWFl NzJlMTdjNzcwOWMzZDI3MTUxZjg4MWJkMmUyMjM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwArOsPMqmZ4RIcz9hcd9WJmHiL3xv1gv9qUOgECP1dmBS NWN0PHE6n5eFNM712K8cTfYL6RKalNImD7JaEQpQEvRBjOqnK4z4vJwobzcpMfap NnCXRIuEfI9LMGuFvQuTunDXEKIx4pKF+7JnsP4zLxBaY0H58oM9HQBwMnxFQF1n o7Z/N5K3bc2ofTK31+fa95OwkVvdnZoGQzl+7+BIMfysiIA8BU4SGM+6+UXjfX2K 6/p5uEeaq2+Wt+5VSWJXrw6ctyESu+UqZ7LHteQRYeRy2jkIntLsyG6eKfB+xq9s lrh+Q/4lgU07Nnn4plWOzm7fmNZMI7ZmYpS6frwhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUez9ziGSyXye7l1D4MxBYU3PTDuAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhiZWZlYWNiLWI5OTEtNDA4Yi05MTJlLWE1YTc0NGZjMTNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBAGnfA6Jhhx+I4Mnd8pqqJ4fZ YnSfIC55rwVyOHu8TjgxmHEWlPX80+QfAROrWMlqURrx9r4BHWUGFEyb0kKephOA gdKOUsvQP8PnlBwyMoSZ9FyB7f+hTJdTd56j0u1z9+vS40MDwtTYMeNjPqNX7CUm bD0df6qDQ+xO/7pSeyTCp0vvIStKIWDKD+gk5XkhWUTX7+ZK5VZL89tuDKDow6VY XwKiWPcAQrC7POswqITXbZVmht+Mf7RPR7813R66NECyW/LoTZO9/JRbCq1aKiMX fkKkx3QcIZnSEVWlK3dd2zRcrcC5OmEIqCvP0wnTYx+r3Lkg/joXzZdsIscjpv4= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:14 2026 by rpki-client