$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa File: 97d95c79-c75b-4e23-b76f-f3c09c34947f.roa (raw, json) Hash identifier: nmhjPluc6IDIepRWZOgazvyoFC0y7jbUez8I2f976G0= Subject key identifier: BD:28:2D:E1:62:2D:F5:66:DE:B2:F3:E1:85:33:A6:F6:2F:8E:DC:03 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1DEA54B616183677D3DFDD9764576715404F02A7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa Signing time: Thu 23 Jul 2026 23:47:16 +0000 ROA not before: Thu 23 Jul 2026 23:47:16 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7402::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ea:54:b6:16:18:36:77:d3:df:dd:97:64:57:67:15:40:4f:02:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 23:47:16 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=9a87ce36986b0d718457d869e593549a9dcb6d008f1c282fd54d53a13c9f89ff, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:b8:ec:35:e6:e6:ad:b4:d2:b7:4a:8d:f9: 54:56:41:57:b4:2a:e3:12:b5:58:48:d1:bc:a3:52: 95:a7:8b:70:ca:0b:7f:7c:9c:52:cc:ff:de:60:f9: 84:22:88:25:e4:f8:5c:c6:c5:58:7c:50:57:1a:46: 06:5b:28:83:6e:99:e7:ba:09:0b:8f:70:a9:18:df: 8c:42:69:19:ad:a7:3e:bd:46:cf:00:a7:ec:fd:76: b7:4e:b5:37:fa:b2:41:f2:96:87:1d:d5:7c:75:0c: b9:e7:ec:2c:0e:c1:a1:5e:f8:3b:5d:a1:91:0d:b3: 6f:22:94:31:08:5b:2c:4e:dc:9d:6e:72:e3:28:10: a9:6f:9e:c9:00:dd:32:3c:a3:8b:f0:25:e6:a8:2d: 82:81:64:0d:5f:e4:a9:d9:c6:79:af:68:2e:f9:98: 62:51:c3:fb:38:8c:6f:f2:1a:0d:56:3f:82:d1:4b: 92:35:9e:29:70:c3:c1:76:c0:fe:a2:21:6a:39:16: 1f:02:a2:39:84:62:72:78:7f:21:6b:4f:b2:58:39: 31:e7:4e:d0:ec:ce:78:dc:6c:13:63:6f:ab:8d:64: 6e:94:7b:85:7f:6d:95:c9:60:44:80:71:33:5e:0f: ab:85:d5:ed:fb:07:49:65:9e:33:57:ea:4e:8b:be: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:28:2D:E1:62:2D:F5:66:DE:B2:F3:E1:85:33:A6:F6:2F:8E:DC:03 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97d95c79-c75b-4e23-b76f-f3c09c34947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7402::/48 Signature Algorithm: sha256WithRSAEncryption 54:a4:d4:bc:25:6e:3c:51:ae:ea:6f:a5:84:e8:25:e5:ea:40: 64:07:16:4e:83:d6:52:ed:c8:33:11:f0:cb:48:2e:ca:f9:fa: d8:9b:f4:5c:04:81:a3:b8:83:31:68:99:b8:79:1b:ee:2f:d9: 30:8a:8a:87:08:bb:87:ae:26:fc:5e:ee:1e:51:c4:ce:66:fc: 2a:1a:0e:c4:c1:5f:80:a6:01:f8:48:e1:d6:77:d0:19:07:52: d7:bb:a6:18:bf:b5:a0:d8:eb:07:db:4e:fc:09:9e:e5:11:f5: cf:78:f1:2f:23:2d:9a:8b:80:e2:c8:ef:50:fb:1a:47:48:19: 07:c9:78:d2:3d:d3:d5:0d:a7:8e:52:18:96:fd:20:a4:93:3e: f2:02:c6:68:7b:12:31:bf:23:e7:0a:5e:04:d8:1b:05:ca:39: 4d:9f:b4:5c:ab:d4:79:21:6a:9e:c7:2a:f8:37:32:b7:7d:3e: 74:4e:ec:34:cb:56:f2:c7:f1:28:1b:72:8a:ab:54:8a:a4:0b: bd:40:41:3b:b3:f8:4d:23:1d:b1:f2:fb:15:00:c8:37:6c:93: 56:00:4c:5f:c0:72:65:ff:1c:b4:a3:9d:9a:1d:cc:4f:92:a8: 29:d7:bf:b9:dd:81:48:f8:96:63:06:aa:39:c2:16:56:d8:8f: c0:23:14:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHepUthYYNnfT392XZFdnFUBPAqcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMjM0NzE2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTg3Y2UzNjk4NmIwZDcxODQ1N2Q4NjllNTkzNTQ5YTlk Y2I2ZDAwOGYxYzI4MmZkNTRkNTNhMTNjOWY4OWZmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZgrjsNebmrbTSt0qN+VRWQVe0KuMStVhI0byjUpWni3DK C398nFLM/95g+YQiiCXk+FzGxVh8UFcaRgZbKINumee6CQuPcKkY34xCaRmtpz69 Rs8Ap+z9drdOtTf6skHylocd1Xx1DLnn7CwOwaFe+DtdoZENs28ilDEIWyxO3J1u cuMoEKlvnskA3TI8o4vwJeaoLYKBZA1f5KnZxnmvaC75mGJRw/s4jG/yGg1WP4LR S5I1nilww8F2wP6iIWo5Fh8CojmEYnJ4fyFrT7JYOTHnTtDsznjcbBNjb6uNZG6U e4V/bZXJYESAcTNeD6uF1e37B0llnjNX6k6Lvpv/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvSgt4WIt9WbesvPhhTOm9i+O3AMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3ZDk1Yzc5LWM3NWItNGUyMy1iNzZmLWYzYzA5YzM0OTQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDydAIwDQYJKoZIhvcNAQELBQADggEBAFSk1LwlbjxRrupvpYToJeXq QGQHFk6D1lLtyDMR8MtILsr5+tib9FwEgaO4gzFombh5G+4v2TCKiocIu4euJvxe 7h5RxM5m/CoaDsTBX4CmAfhI4dZ30BkHUte7phi/taDY6wfbTvwJnuUR9c948S8j LZqLgOLI71D7GkdIGQfJeNI909UNp45SGJb9IKSTPvICxmh7EjG/I+cKXgTYGwXK OU2ftFyr1Hkhap7HKvg3Mrd9PnRO7DTLVvLH8SgbcoqrVIqkC71AQTuz+E0jHbHy +xUAyDdsk1YATF/AcmX/HLSjnZodzE+SqCnXv7ndgUj4lmMGqjnCFlbYj8AjFMY= -----END CERTIFICATE-----Generated at Fri Jul 24 17:47:58 2026 by rpki-client