$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa File: 9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa (raw, json) Hash identifier: OQy/TOhcfJxQFqYcqMeQpyGYncsk2BRbaStZj44jRr8= Subject key identifier: AD:F7:02:44:8C:C4:A4:5B:60:10:63:4C:63:CE:2E:FC:1D:01:EA:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02FAC9ED8C112477FD33D9B27EC348BA76E4C2BB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa Signing time: Fri 17 Jul 2026 00:10:04 +0000 ROA not before: Fri 17 Jul 2026 00:10:04 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:18::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fa:c9:ed:8c:11:24:77:fd:33:d9:b2:7e:c3:48:ba:76:e4:c2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 17 00:10:04 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=7c88d9b962b210979c6e8c9263ef2725ce955ccaa86e7867b0716470b463fac4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:ce:a2:2f:35:db:6c:97:fc:6b:db:03:c3: 78:a2:b8:1a:db:29:03:e2:d9:49:a3:09:90:b7:a1: 4f:1a:0b:75:96:af:01:a0:66:1f:cd:a4:e3:44:c4: 18:0e:60:55:ef:36:2d:8a:fc:b6:a0:cb:ec:d1:24: 06:d7:5e:61:15:af:48:80:4d:f4:4e:44:11:39:39: cf:5f:3b:02:4c:28:3f:72:c1:18:b5:db:48:a3:59: 2a:81:f9:11:89:ed:23:29:80:76:0d:30:18:36:e2: 4b:c9:6f:ac:8d:0d:c6:12:44:c5:ab:a5:d1:ad:73: 45:99:95:60:88:3c:ff:a9:b0:c6:20:7d:4b:91:dd: ab:c9:29:f9:d7:5a:9e:8c:42:a4:52:f5:16:c3:1d: 64:fe:d7:3e:24:5a:99:35:6f:66:a6:e5:69:21:92: 3d:4a:7d:69:eb:56:78:08:4d:c7:67:28:33:1b:90: 3d:65:d4:d0:03:24:83:44:68:38:f7:99:93:96:85: 97:65:40:18:c3:2a:0b:f3:a0:c9:94:4f:7c:57:1d: 00:c8:af:a0:21:01:4d:0a:61:2d:16:0b:1d:7c:5b: 7a:62:95:59:74:b3:58:a3:74:0b:22:dc:21:64:69: 75:62:76:48:b6:16:70:52:6b:ab:c6:93:1f:0d:18: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F7:02:44:8C:C4:A4:5B:60:10:63:4C:63:CE:2E:FC:1D:01:EA:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:18::/46 Signature Algorithm: sha256WithRSAEncryption 51:a2:5f:b7:15:b9:ed:21:5e:66:d1:eb:07:20:60:21:a0:78: be:76:12:c0:ae:bd:b1:04:88:2a:98:02:5e:23:90:3d:a9:65: fa:f5:47:af:bf:e9:43:86:be:7b:4c:ea:18:99:d4:46:46:45: 1d:aa:45:eb:de:17:87:13:31:9b:09:f5:a7:17:18:82:aa:61: b2:a1:a5:17:2e:0c:78:a2:fb:f3:aa:60:f4:19:7a:14:71:bc: 12:ab:04:c4:e1:bb:c6:a3:73:ba:72:f9:81:db:bc:25:94:2e: ee:8e:68:df:af:05:43:71:bb:b5:ea:7d:b5:76:40:8d:f6:f3: ab:ee:6b:ab:48:f8:a3:98:7e:bd:c1:36:20:0d:50:3a:cc:20: d9:33:74:75:af:32:9c:fe:61:12:27:05:72:46:50:5c:ed:3d: 4a:c3:c0:ae:04:05:10:9b:dc:61:a4:58:0e:18:f2:a0:f7:24: 89:78:96:a5:33:d8:d1:86:92:8e:8b:19:ea:8d:fd:b9:97:a2: 35:d9:7b:a1:e0:56:40:18:8f:95:a1:1a:a3:28:98:f1:a3:a5: b4:47:7d:ff:08:6e:1c:4e:8c:31:65:9f:21:36:f1:ec:b9:3c: e7:57:d0:fe:80:dd:1b:61:5e:81:fd:88:b1:a0:7a:89:4f:b9: 81:57:51:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAvrJ7YwRJHf9M9myfsNIunbkwrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzE3MDAxMDA0WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yzg4ZDliOTYyYjIxMDk3OWM2ZThjOTI2M2VmMjcyNWNl OTU1Y2NhYTg2ZTc4NjdiMDcxNjQ3MGI0NjNmYWM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq/c6iLzXbbJf8a9sDw3iiuBrbKQPi2UmjCZC3oU8aC3WW rwGgZh/NpONExBgOYFXvNi2K/Lagy+zRJAbXXmEVr0iATfRORBE5Oc9fOwJMKD9y wRi120ijWSqB+RGJ7SMpgHYNMBg24kvJb6yNDcYSRMWrpdGtc0WZlWCIPP+psMYg fUuR3avJKfnXWp6MQqRS9RbDHWT+1z4kWpk1b2am5Wkhkj1KfWnrVngITcdnKDMb kD1l1NADJINEaDj3mZOWhZdlQBjDKgvzoMmUT3xXHQDIr6AhAU0KYS0WCx18W3pi lVl0s1ijdAsi3CFkaXVidki2FnBSa6vGkx8NGBxrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrfcCRIzEpFtgEGNMY84u/B0B6uIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlhNGNkOGM4LTliYzAtNGZiYi05MWRjLTJhODJiYTBkZjg2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDxABgwDQYJKoZIhvcNAQELBQADggEBAFGiX7cVue0hXmbR6wcgYCGg eL52EsCuvbEEiCqYAl4jkD2pZfr1R6+/6UOGvntM6hiZ1EZGRR2qReveF4cTMZsJ 9acXGIKqYbKhpRcuDHii+/OqYPQZehRxvBKrBMThu8ajc7py+YHbvCWULu6OaN+v BUNxu7XqfbV2QI3286vua6tI+KOYfr3BNiANUDrMINkzdHWvMpz+YRInBXJGUFzt PUrDwK4EBRCb3GGkWA4Y8qD3JIl4lqUz2NGGko6LGeqN/bmXojXZe6HgVkAYj5Wh GqMomPGjpbRHff8IbhxOjDFlnyE28ey5POdX0P6A3RthXoH9iLGgeolPuYFXUWo= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:31 2026 by rpki-client