$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa File: 9f647429-dee3-462f-9ab5-be55ce250b9b.roa (raw, json) Hash identifier: HelBIQEjojFII9Ghzc/Gw4c8jbX0STke//ssT3+qUZ8= Subject key identifier: E4:E7:EC:FA:02:7C:1F:30:90:ED:E3:7A:D1:C7:19:BC:13:F8:D4:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 076D601C9E1B723A7A73176C2A6257E94B17F902 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa Signing time: Mon 22 Jun 2026 00:20:08 +0000 ROA not before: Mon 22 Jun 2026 00:20:08 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6d:60:1c:9e:1b:72:3a:7a:73:17:6c:2a:62:57:e9:4b:17:f9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 22 00:20:08 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=d05cacb6348ff5e88a55dacc3257dc497d67b7d1f424eb2e990d2cdadbad6518, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ce:af:f1:c2:b0:f6:04:bd:5e:b8:88:a9:e4: e5:ee:4d:cf:09:97:fc:99:8f:dc:08:de:67:b2:55: b9:c2:11:6b:fe:a8:20:8f:82:f3:b9:fe:45:6c:90: e6:6b:fd:92:ea:10:51:ca:74:3c:14:7c:3f:1f:a0: 06:fc:10:90:8a:aa:e7:3c:a2:ee:00:07:1f:23:c2: 3f:82:83:64:d3:f2:3a:ac:ba:2a:c5:02:f0:2a:f2: 59:9e:7f:72:c1:3c:29:ae:52:33:d6:e1:9e:8d:d5: 95:db:2d:a0:17:dd:a4:f7:72:fa:cb:42:c3:b6:5a: 7e:89:82:aa:80:5f:3d:81:d8:38:95:39:00:c4:e7: c1:3e:6c:28:a8:49:90:f5:ae:ac:c9:0c:e6:85:14: 40:67:c4:b1:1c:b3:cc:a8:a4:e7:ad:2c:e8:9f:5c: 17:bf:2a:55:71:99:a9:4d:4c:0c:95:d7:8e:56:50: f7:54:be:ca:b7:8d:4a:1f:24:e7:00:bb:d6:81:70: d9:0c:2d:16:b6:eb:bb:a7:fd:4d:6e:f6:e5:70:0c: db:c6:d8:d2:c1:09:ae:90:43:c6:87:5f:0e:1e:5a: b3:3e:71:91:8a:39:93:ef:fb:d6:4a:07:11:99:8d: 96:af:46:07:62:ad:66:52:77:37:49:45:07:5f:9d: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:EC:FA:02:7C:1F:30:90:ED:E3:7A:D1:C7:19:BC:13:F8:D4:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:70::/44 Signature Algorithm: sha256WithRSAEncryption 80:3d:94:e5:59:03:0c:e5:89:ea:77:76:75:66:f1:fa:ba:72: 3e:13:87:62:69:d7:08:b6:c5:40:8a:e6:b4:e1:23:31:d5:cd: 59:b7:f9:7e:4e:1b:8c:f4:f2:72:de:2f:1d:74:2c:79:5c:91: 74:b9:3a:26:76:c6:7c:89:c3:55:f0:47:65:dd:bc:5b:89:e5: 1a:95:d2:3e:a4:80:0a:4d:56:a5:eb:f2:49:43:8d:0e:4c:f1: 8f:50:0f:14:77:5c:9b:60:82:91:ae:63:2f:35:4e:5f:e2:e7: 25:c7:75:54:67:1d:4b:f9:4d:3e:0e:1c:87:4f:77:21:9c:02: 3e:2b:e9:ab:62:3b:e8:ac:11:90:73:90:b9:bf:19:de:a3:5e: 8f:14:b2:b8:eb:a7:6a:33:2a:bb:cf:8c:2b:89:1e:65:ee:1a: 45:67:24:e0:49:f6:1c:e8:b9:8e:9c:c2:8a:e5:32:8c:80:a6: 60:10:38:29:aa:19:07:03:eb:53:92:41:b6:12:a9:b3:5f:d1: e7:e2:b4:a9:03:e5:41:47:58:70:85:ba:77:46:25:94:97:7f: d9:4f:26:31:4f:db:60:ef:19:e5:06:32:fc:e8:89:22:32:ac: 9e:cf:be:2d:64:4b:05:b9:0b:61:6d:fc:20:a9:4e:ba:bf:43: 2a:32:f0:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB21gHJ4bcjp6cxdsKmJX6UsX+QIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjIyMDAyMDA4WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDVjYWNiNjM0OGZmNWU4OGE1NWRhY2MzMjU3ZGM0OTdk NjdiN2QxZjQyNGViMmU5OTBkMmNkYWRiYWQ2NTE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4zq/xwrD2BL1euIip5OXuTc8Jl/yZj9wI3meyVbnCEWv+ qCCPgvO5/kVskOZr/ZLqEFHKdDwUfD8foAb8EJCKquc8ou4ABx8jwj+Cg2TT8jqs uirFAvAq8lmef3LBPCmuUjPW4Z6N1ZXbLaAX3aT3cvrLQsO2Wn6JgqqAXz2B2DiV OQDE58E+bCioSZD1rqzJDOaFFEBnxLEcs8yopOetLOifXBe/KlVxmalNTAyV145W UPdUvsq3jUofJOcAu9aBcNkMLRa267un/U1u9uVwDNvG2NLBCa6QQ8aHXw4eWrM+ cZGKOZPv+9ZKBxGZjZavRgdirWZSdzdJRQdfnVS7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5Ofs+gJ8HzCQ7eN60ccZvBP41FcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlmNjQ3NDI5LWRlZTMtNDYyZi05YWI1LWJlNTVjZTI1MGI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAHAwDQYJKoZIhvcNAQELBQADggEBAIA9lOVZAwzliep3dnVm8fq6 cj4Th2Jp1wi2xUCK5rThIzHVzVm3+X5OG4z08nLeLx10LHlckXS5OiZ2xnyJw1Xw R2XdvFuJ5RqV0j6kgApNVqXr8klDjQ5M8Y9QDxR3XJtggpGuYy81Tl/i5yXHdVRn HUv5TT4OHIdPdyGcAj4r6atiO+isEZBzkLm/Gd6jXo8Usrjrp2ozKrvPjCuJHmXu GkVnJOBJ9hzouY6cworlMoyApmAQOCmqGQcD61OSQbYSqbNf0efitKkD5UFHWHCF undGJZSXf9lPJjFP22DvGeUGMvzoiSIyrJ7Pvi1kSwW5C2Ft/CCpTrq/Qyoy8Kc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:53:07 2026 by rpki-client