$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa File: 9064d4f5-965a-4659-9876-beff899ab4b1.roa (raw, json) Hash identifier: fZkZBql6Ojr72Hw4baK0Vs/W2eqQIi8zJsdqySzyQlw= Subject key identifier: 9E:0F:00:81:35:C5:FB:88:A7:A8:94:5A:4A:A9:59:95:A0:9C:4C:50 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6183A5119AF096DFA1246C817086CE921328E6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa Signing time: Thu 23 Jul 2026 15:00:29 +0000 ROA not before: Thu 23 Jul 2026 15:00:29 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:83:a5:11:9a:f0:96:df:a1:24:6c:81:70:86:ce:92:13:28:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:29 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=63842bc790036e0decb3ca8d1465e76d3896124de7847314f9e94344d37d99a6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:34:5c:48:10:4d:92:58:1f:a7:20:bd:09: f2:22:78:36:bf:46:86:53:03:5f:4d:45:7d:52:93: ad:ed:de:1c:77:05:31:83:2b:b5:af:7e:cb:ae:e8: 7a:bb:48:cf:02:45:48:43:fc:79:ef:18:16:58:cd: 9e:00:de:42:af:95:c4:b8:73:a6:78:6e:81:96:32: 2f:f3:1b:5c:6a:86:4e:b2:d7:78:0d:92:a7:77:af: f9:ad:0f:41:a0:35:50:48:d9:2a:71:2a:4d:58:f0: 3f:a1:bb:dc:2d:51:49:7d:38:41:7f:d0:dd:19:4f: 45:7f:5e:0c:a5:c0:18:95:70:6f:5d:ea:ea:a5:de: 98:05:11:cc:f7:7d:f1:58:86:32:8c:c2:d2:a7:92: dd:05:a4:83:56:cc:cb:f5:19:c1:1c:9c:8a:f5:2d: be:b3:40:e4:f5:a9:ec:37:64:bb:c6:05:b9:33:27: ce:26:22:2e:67:bb:8a:9a:f2:dc:94:7b:14:00:8a: 2c:b8:f9:f4:1e:af:02:f5:00:2d:65:22:d7:d3:e1: 20:2f:fe:88:8a:16:dc:21:ed:67:ce:18:ff:e5:c5: 41:b3:6b:e9:6b:ed:fa:99:de:17:af:58:bc:f7:b0: b0:17:a9:4a:dc:53:33:4d:66:7b:36:c9:ab:2c:40: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0F:00:81:35:C5:FB:88:A7:A8:94:5A:4A:A9:59:95:A0:9C:4C:50 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9064d4f5-965a-4659-9876-beff899ab4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6114::/48 Signature Algorithm: sha256WithRSAEncryption 37:9a:cf:eb:bf:ae:a5:d8:8d:8a:77:b2:b9:41:b4:7c:97:1d: 82:e4:b1:db:d1:8e:e9:70:ba:5c:f8:ca:07:65:c0:7a:cf:e6: c1:83:e6:7a:26:ed:b1:ee:0d:06:56:af:01:50:b3:c3:12:61: 1c:39:ca:28:ae:3e:0e:25:dd:ce:af:32:0f:fa:08:6a:ef:26: b8:8c:33:a5:3e:33:c6:5f:ee:bf:d1:0b:2e:b7:69:5a:68:36: 71:cd:0a:11:eb:7f:bf:0d:a4:9a:1d:f1:20:4a:f3:62:ba:f0: 26:6c:89:13:b8:0d:f1:fe:47:4c:86:6a:b5:29:0c:1a:f4:ed: 7f:3f:d9:34:30:6d:30:91:9e:10:06:4c:57:5f:44:12:d5:72: 2a:9e:6b:1a:46:b3:ce:2f:97:b5:60:1b:ff:1b:c8:b3:d0:91: 7c:cf:e5:42:ea:19:14:49:8c:73:c2:e7:bf:e0:d9:8f:df:9a: 02:f8:cf:96:b4:7b:63:75:92:78:a2:2a:e0:95:da:02:8f:e0: 18:d8:bb:ae:09:0e:cc:fd:be:47:87:c6:ed:ba:77:88:1f:6c: 05:7f:b1:a4:50:7a:66:59:5b:a2:a7:d1:91:6d:38:2c:44:ac: 82:fb:2e:6a:0f:fe:80:c4:0a:64:88:7a:4d:41:bc:84:f5:ee: a8:ea:2e:38 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITYYOlEZrwlt+hJGyBcIbOkhMo5jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJiNTg0NWMzMDdkMGJmNjFiMTM0YjhhYjcxMTU0NTgyNmIx NzA3ZmQ1ZjBhZjg0ZGEwODAeFw0yNjA3MjMxNTAwMjlaFw0yNjEwMjEyMzU5NTla MHoxSTBHBgNVBAUTQDYzODQyYmM3OTAwMzZlMGRlY2IzY2E4ZDE0NjVlNzZkMzg5 NjEyNGRlNzg0NzMxNGY5ZTk0MzQ0ZDM3ZDk5YTYxLTArBgNVBAMTJGZiYjI3NTc2 LWNhYzItNDM4MS05YTUzLTZjMTVlMGRjMjZmZjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMP9NFxIEE2SWB+nIL0J8iJ4Nr9GhlMDX01FfVKTre3eHHcF MYMrta9+y67oertIzwJFSEP8ee8YFljNngDeQq+VxLhzpnhugZYyL/MbXGqGTrLX eA2Sp3ev+a0PQaA1UEjZKnEqTVjwP6G73C1RSX04QX/Q3RlPRX9eDKXAGJVwb13q 6qXemAURzPd98ViGMozC0qeS3QWkg1bMy/UZwRycivUtvrNA5PWp7Ddku8YFuTMn ziYiLme7ipry3JR7FACKLLj59B6vAvUALWUi19PhIC/+iIoW3CHtZ84Y/+XFQbNr 6Wvt+pneF69YvPewsBepStxTM01mezbJqyxAjWsCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSeDwCBNcX7iKeolFpKqVmVoJxMUDAfBgNVHSMEGDAWgBQuGOIIoYJXGwl9 0iOnFp5A6+mJPTAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv NTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZhOTUzN2E4LWE2 ODUtNGI0OC05ZmE4LTgzNjJlNGZjNDdhZS9iNTg0NWMzMDdkMGJmNjFiMTM0Yjhh YjcxMTU0NTgyNmIxNzA3ZmQ1ZjBhZjg0ZGEwOC5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS81MTdmM2VkNy01OGI1LTQ3OTYtYmUzNy0xNGQ2 MmU0OGYwNTYvOTA2NGQ0ZjUtOTY1YS00NjU5LTk4NzYtYmVmZjg5OWFiNGIxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzct MTRkNjJlNDhmMDU2L0NfWWJFMHVLdHhGVVdDYXhjSF9WOEstRTJnZy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYA8PBhFDANBgkqhkiG9w0BAQsFAAOCAQEAN5rP67+updiNineyuUG0fJcd guSx29GO6XC6XPjKB2XAes/mwYPmeibtse4NBlavAVCzwxJhHDnKKK4+DiXdzq8y D/oIau8muIwzpT4zxl/uv9ELLrdpWmg2cc0KEet/vw2kmh3xIErzYrrwJmyJE7gN 8f5HTIZqtSkMGvTtfz/ZNDBtMJGeEAZMV19EEtVyKp5rGkazzi+XtWAb/xvIs9CR fM/lQuoZFEmMc8Lnv+DZj9+aAvjPlrR7Y3WSeKIq4JXaAo/gGNi7rgkOzP2+R4fG 7bp3iB9sBX+xpFB6ZllboqfRkW04LESsgvsuag/+gMQKZIh6TUG8hPXuqOouOA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:22:52 2026 by rpki-client