$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa File: 942359be-660a-411d-a2eb-7723143d6fd3.roa (raw, json) Hash identifier: iMv0OnP2zWHcy9vMh56xhcyfqykROuXVFnv6jJSE2bQ= Subject key identifier: EA:26:7C:4A:EA:F0:99:11:22:A0:74:51:04:0C:2F:50:46:83:78:13 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 63FE0619A1D1AA473508788C50E4DBE36639DB97 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa Signing time: Thu 23 Jul 2026 15:10:12 +0000 ROA not before: Thu 23 Jul 2026 15:10:12 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fe:06:19:a1:d1:aa:47:35:08:78:8c:50:e4:db:e3:66:39:db:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:12 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=82014ba8901be2b1b587f60e4e36998be26dab5cd12077e8a2a1747045f190e4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:70:5b:47:fe:14:04:ba:51:8c:b1:85:f8: a6:4d:66:83:8a:f2:62:bb:51:d2:29:86:54:f7:11: ba:23:44:e5:f6:04:09:ea:03:e4:15:fc:26:05:88: b6:6d:4d:6c:e9:0c:b4:2c:88:e4:e2:9d:8f:c1:d4: 3f:73:20:86:ba:0b:9a:33:67:f5:de:7b:0a:9c:f3: 90:fa:67:b9:1c:23:f6:ae:b2:4c:4d:81:00:8b:2f: c2:33:b5:7e:0d:67:7a:74:45:ec:e6:56:95:9e:82: 6d:81:ae:99:3b:43:18:30:24:25:43:b1:0c:ec:d1: 6b:b1:2b:06:7a:66:7f:ff:1c:21:15:14:c9:8c:88: 44:90:b9:3c:f3:d3:f9:8b:c2:c7:2a:c2:c9:8c:fd: 52:1f:8a:1e:cc:66:4e:d6:8d:7a:1d:83:a7:bb:33: 9d:80:d9:86:4a:73:f3:6a:f1:97:47:71:1a:3b:08: 41:67:40:20:42:11:06:48:6e:98:5f:b1:bc:45:69: e0:1e:fc:fa:c4:59:05:11:79:8b:34:b8:27:f0:5b: 54:75:90:d7:e2:91:91:5a:cb:5a:69:9a:5e:ec:29: 67:c5:06:b6:ee:74:96:ec:27:ee:4c:25:c4:b7:8c: 3f:2f:e9:c0:0c:52:d2:db:24:6a:7f:a8:87:07:f7: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:7C:4A:EA:F0:99:11:22:A0:74:51:04:0C:2F:50:46:83:78:13 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 09:90:73:7d:f2:e8:5b:4f:38:29:19:6c:97:6f:e4:89:76:3a: d9:fb:02:0d:0e:01:e3:18:b0:78:1a:f9:09:77:98:88:59:f6: c8:b4:3b:b8:6c:6e:04:8b:cb:d4:cb:6d:e4:8d:7a:06:64:11: f4:96:4d:b7:d4:12:44:bd:b7:68:37:3b:cd:7a:54:90:6a:11: 81:5c:08:37:bf:ac:41:f0:c0:e4:8f:78:fa:c5:db:e4:28:1f: 20:b9:0f:59:5c:9a:dd:5d:e7:40:ab:b6:3e:13:26:3b:99:24: d7:64:a4:8f:f2:35:9e:a6:cd:69:e4:5b:1a:4f:f4:c3:17:8a: c7:2f:de:04:9a:8b:9b:46:59:c4:a9:a6:e5:1b:6b:ec:a7:b8: 3e:4b:6f:d1:1d:7c:0c:3a:a1:85:7d:38:b8:1a:ac:20:7c:75: 0f:89:73:fd:ee:00:29:45:7d:3e:8a:ea:6f:64:d8:ec:ca:d3: a0:df:17:9a:5a:54:b1:2f:66:bc:52:5c:0b:cc:45:5f:fb:08: 64:6f:8e:19:5d:5c:c4:bd:54:36:01:40:ef:d3:6e:d6:40:7d: e3:22:3b:47:7f:ec:72:01:28:d5:1e:e0:a9:06:13:72:b9:f5: 82:7d:51:80:f0:a7:58:30:51:a5:6c:70:f2:0d:92:66:16:1e: fa:82:98:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY/4GGaHRqkc1CHiMUOTb42Y525cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDEyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjAxNGJhODkwMWJlMmIxYjU4N2Y2MGU0ZTM2OTk4YmUy NmRhYjVjZDEyMDc3ZThhMmExNzQ3MDQ1ZjE5MGU0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJRXBbR/4UBLpRjLGF+KZNZoOK8mK7UdIphlT3EbojROX2 BAnqA+QV/CYFiLZtTWzpDLQsiOTinY/B1D9zIIa6C5ozZ/Xeewqc85D6Z7kcI/au skxNgQCLL8IztX4NZ3p0RezmVpWegm2Brpk7QxgwJCVDsQzs0WuxKwZ6Zn//HCEV FMmMiESQuTzz0/mLwscqwsmM/VIfih7MZk7WjXodg6e7M52A2YZKc/Nq8ZdHcRo7 CEFnQCBCEQZIbphfsbxFaeAe/PrEWQUReYs0uCfwW1R1kNfikZFay1ppml7sKWfF BrbudJbsJ+5MJcS3jD8v6cAMUtLbJGp/qIcH9yFrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6iZ8SurwmREioHRRBAwvUEaDeBMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk0MjM1OWJlLTY2MGEtNDExZC1hMmViLTc3MjMxNDNkNmZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBAAmQc33y6FtPOCkZbJdv5Il2 Otn7Ag0OAeMYsHga+Ql3mIhZ9si0O7hsbgSLy9TLbeSNegZkEfSWTbfUEkS9t2g3 O816VJBqEYFcCDe/rEHwwOSPePrF2+QoHyC5D1lcmt1d50Crtj4TJjuZJNdkpI/y NZ6mzWnkWxpP9MMXiscv3gSai5tGWcSppuUba+ynuD5Lb9EdfAw6oYV9OLgarCB8 dQ+Jc/3uAClFfT6K6m9k2OzK06DfF5paVLEvZrxSXAvMRV/7CGRvjhldXMS9VDYB QO/TbtZAfeMiO0d/7HIBKNUe4KkGE3K59YJ9UYDwp1gwUaVscPINkmYWHvqCmHM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:54:37 2026 by rpki-client