$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa File: 973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa (raw, json) Hash identifier: QfbbUS3Oa14hj5LZoFxY6bSVA41h6VSM/Kv5DIcCC7s= Subject key identifier: 03:31:3F:78:E2:7B:18:0F:9A:5E:73:CD:8C:57:64:AA:B3:5A:EC:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C004EF372EE6CEFF07E09FB6173145051193E4F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa Signing time: Thu 23 Jul 2026 15:00:30 +0000 ROA not before: Thu 23 Jul 2026 15:00:30 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:00:4e:f3:72:ee:6c:ef:f0:7e:09:fb:61:73:14:50:51:19:3e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:30 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=3bb9542eea1b871aab4c407f33c4cdf0cec587be3f9000971db03698cb90b70c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:7a:7c:80:0a:83:e8:8a:7d:e8:ed:f6:60: 90:62:e2:ae:c8:a5:a0:13:0f:e2:35:00:2e:d8:b2: 00:d9:b8:0c:12:64:9e:3c:04:87:2b:4a:03:c7:11: 34:b5:cd:63:b5:23:2d:b6:77:db:96:ac:15:79:16: 8b:c9:7d:07:09:b1:cb:e5:f8:71:94:b0:a1:1c:ea: b2:8d:d9:2d:3d:5b:7b:be:ae:c6:be:da:4f:8a:2a: 67:de:4d:6e:fc:52:f1:43:19:b7:99:62:0f:10:fb: 58:23:62:d7:86:c9:8f:c4:13:40:a0:65:e2:eb:a9: 12:2a:b8:a1:52:5e:db:34:78:fc:7d:6f:61:c3:6d: cb:c9:59:c1:ea:d7:4b:cf:0e:fd:cb:06:31:52:b6: 73:9a:29:fc:de:4a:e9:3a:11:29:d2:89:82:61:02: 5f:fb:51:e5:69:8c:10:5c:18:9d:ca:c1:85:08:61: 56:95:6e:fa:3a:70:76:d7:cb:10:7e:6a:52:19:02: 96:27:34:9c:c3:45:93:dc:b4:f0:a9:c2:f2:6d:5b: 0c:f9:02:1d:56:cd:e7:28:1e:f3:ed:90:a0:1b:c5: 59:c9:b2:64:67:2a:40:7c:d4:7b:f7:61:e6:d3:22: 82:98:c0:df:34:12:39:60:ed:a5:d4:93:28:ec:4b: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:3F:78:E2:7B:18:0F:9A:5E:73:CD:8C:57:64:AA:B3:5A:EC:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 0b:5e:4c:be:c4:b2:b8:01:d7:f6:78:b3:32:1d:8d:fa:90:76: c0:1f:a2:4a:49:13:60:ef:da:b3:0c:5f:95:37:cb:b6:03:a6: fe:99:ea:70:86:d1:42:ea:50:14:8f:02:0b:2a:9c:95:4d:e7: 6c:cb:63:2d:f2:89:e4:9d:84:18:00:0b:db:32:0d:35:98:8a: 08:20:3b:43:61:9c:13:8d:e5:70:4d:62:c5:3d:4a:e2:46:e6: de:d8:3e:3d:78:8a:61:b1:72:87:1e:eb:fd:63:8a:74:d1:f9: ce:31:e8:43:b4:af:4b:f6:03:4f:93:c5:f0:b7:b2:03:f0:38: cf:8d:53:75:83:fd:ba:3f:ed:12:ee:c5:e8:ca:e6:a3:f4:7c: a1:30:5e:9c:66:06:92:89:11:39:55:90:24:83:1f:e8:85:d5: f3:50:73:de:82:91:5b:fb:7b:cb:a4:4e:b3:68:3c:11:1a:f1: 07:d7:31:bb:45:63:20:c8:f7:bc:6e:b7:05:f5:4f:0d:1f:a6: f7:28:76:9c:d1:2b:33:58:f7:43:10:66:b8:9e:3c:8b:8b:e0: 60:c3:b9:e3:6d:2b:84:00:23:b0:72:f8:b8:df:25:48:62:23: b1:e9:68:1a:ba:87:24:c1:55:f2:cb:17:39:3d:9e:90:2d:54: 58:99:6d:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfABO83LubO/wfgn7YXMUUFEZPk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmI5NTQyZWVhMWI4NzFhYWI0YzQwN2YzM2M0Y2RmMGNl YzU4N2JlM2Y5MDAwOTcxZGIwMzY5OGNiOTBiNzBjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCG/Xp8gAqD6Ip96O32YJBi4q7IpaATD+I1AC7YsgDZuAwS ZJ48BIcrSgPHETS1zWO1Iy22d9uWrBV5FovJfQcJscvl+HGUsKEc6rKN2S09W3u+ rsa+2k+KKmfeTW78UvFDGbeZYg8Q+1gjYteGyY/EE0CgZeLrqRIquKFSXts0ePx9 b2HDbcvJWcHq10vPDv3LBjFStnOaKfzeSuk6ESnSiYJhAl/7UeVpjBBcGJ3KwYUI YVaVbvo6cHbXyxB+alIZApYnNJzDRZPctPCpwvJtWwz5Ah1WzecoHvPtkKAbxVnJ smRnKkB81Hv3YebTIoKYwN80Ejlg7aXUkyjsS8qRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAzE/eOJ7GA+aXnPNjFdkqrNa7PEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3M2U4MjFjLThiMmMtNGMyYi05M2ZjLTJlMDBlZjcyMWZkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAAteTL7EsrgB1/Z4szIdjfqQ dsAfokpJE2Dv2rMMX5U3y7YDpv6Z6nCG0ULqUBSPAgsqnJVN52zLYy3yieSdhBgA C9syDTWYigggO0NhnBON5XBNYsU9SuJG5t7YPj14imGxcoce6/1jinTR+c4x6EO0 r0v2A0+TxfC3sgPwOM+NU3WD/bo/7RLuxejK5qP0fKEwXpxmBpKJETlVkCSDH+iF 1fNQc96CkVv7e8ukTrNoPBEa8QfXMbtFYyDI97xutwX1Tw0fpvcodpzRKzNY90MQ ZriePIuL4GDDueNtK4QAI7By+LjfJUhiI7HpaBq6hyTBVfLLFzk9npAtVFiZbak= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:17 2026 by rpki-client