$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa File: a188fe83-6643-4c1d-a083-434d151a0315.roa (raw, json) Hash identifier: z3vwWftyh+4XI0Zaf1FV47JPdtU+dFTZ8FpWmv8TM7E= Subject key identifier: 4F:DB:AA:B8:A9:49:3E:44:09:6D:4E:9D:16:0C:A8:9C:4A:FE:36:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B7D232536EFEB40DEC707C945EE4C4D42654800 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa Signing time: Thu 23 Jul 2026 15:00:10 +0000 ROA not before: Thu 23 Jul 2026 15:00:10 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7d:23:25:36:ef:eb:40:de:c7:07:c9:45:ee:4c:4d:42:65:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:10 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=a907218411ed9c3e048f5a8ece6545a28f2b5b45e814fd089e507eba006c8c78, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:c4:3c:ae:6b:0b:d0:57:42:70:1a:54:0b: 19:4d:ad:77:ce:a6:a8:d1:e6:35:fa:45:59:63:b4: c7:e4:bc:31:8e:4a:c5:cb:c0:c3:c4:ac:3f:3e:4b: 9e:82:0a:6e:3b:79:6d:3e:6c:5d:5f:b5:eb:a6:f7: cc:fb:1b:9b:80:6a:d7:09:bc:8e:c3:04:2b:5f:67: ec:13:96:a1:50:ed:a2:dd:ee:bd:bb:d8:23:08:b6: e6:c5:4a:67:22:9a:a8:67:36:38:00:e2:74:1f:bc: 2c:bf:8c:94:8f:25:b6:2e:43:db:2a:b4:ff:26:8f: 52:9d:e5:8b:2a:fe:94:b1:80:6a:7c:46:74:96:82: 20:1c:c0:ac:d4:9d:d3:73:08:97:23:7a:34:32:7e: d7:93:6b:7e:ea:35:40:f2:60:07:7a:4f:5a:a1:8d: 67:dd:2a:49:9d:b8:12:97:b4:4a:03:6f:f2:4d:67: 1e:c9:68:5b:0a:44:5c:8e:68:42:39:10:b6:91:0c: c5:d6:11:5d:9e:55:f5:b2:06:1d:be:23:5c:04:3c: 64:b2:da:63:5f:4f:5b:95:a3:56:99:20:0a:d2:f7: 10:26:81:09:ce:fd:50:2d:1b:47:83:7b:ff:a5:76: aa:80:96:37:01:0c:0b:72:69:0c:1d:64:49:44:ff: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:AA:B8:A9:49:3E:44:09:6D:4E:9D:16:0C:A8:9C:4A:FE:36:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a188fe83-6643-4c1d-a083-434d151a0315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6121::/48 Signature Algorithm: sha256WithRSAEncryption 4d:62:25:0b:a0:9e:52:08:9d:22:7f:7f:93:fa:6a:1a:6a:ae: 87:1c:16:be:60:6f:1a:b2:69:b8:19:01:30:b5:c3:09:1a:02: 07:38:1a:50:cb:26:bf:43:86:76:33:c9:f5:c0:67:ad:12:71: 2c:97:64:e7:6f:50:73:40:a4:40:ce:f1:84:fc:bd:9c:26:d7: 77:91:f0:80:c8:e5:1c:cf:c7:a1:ae:bf:7f:24:0d:08:44:a9: d1:4e:a0:fc:16:a2:6e:04:bb:3a:40:ea:bc:7f:ee:82:b4:ba: 29:e9:c6:7d:e2:07:d2:d3:9c:57:16:93:0c:c4:49:53:ab:d6: a6:9f:3c:86:13:13:a4:bc:f4:b4:9b:df:a3:fc:a6:8f:6e:d9: 9d:c7:08:ae:2e:3e:4b:42:3b:8d:ef:6e:1f:38:4c:91:d9:72: 15:cb:9a:b2:fa:c3:d6:91:7a:ad:f6:7f:8b:dd:7d:2d:73:22: fa:2c:99:9f:3a:ca:0d:ae:fa:2e:2c:e9:a9:fe:73:69:e4:64: c3:7e:bf:45:1b:72:53:08:f2:62:f3:3d:aa:f7:24:73:6f:62: 4e:d3:29:bd:84:e2:f7:bb:0a:5e:93:b3:e6:b4:89:d2:21:bc: dd:15:64:44:0a:dd:e9:9c:aa:1c:e2:d6:2d:99:c1:5b:4c:0a: de:a7:5b:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG30jJTbv60DexwfJRe5MTUJlSAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDEwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTA3MjE4NDExZWQ5YzNlMDQ4ZjVhOGVjZTY1NDVhMjhm MmI1YjQ1ZTgxNGZkMDg5ZTUwN2ViYTAwNmM4Yzc4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEIcQ8rmsL0FdCcBpUCxlNrXfOpqjR5jX6RVljtMfkvDGO SsXLwMPErD8+S56CCm47eW0+bF1fteum98z7G5uAatcJvI7DBCtfZ+wTlqFQ7aLd 7r272CMItubFSmcimqhnNjgA4nQfvCy/jJSPJbYuQ9sqtP8mj1Kd5Ysq/pSxgGp8 RnSWgiAcwKzUndNzCJcjejQyfteTa37qNUDyYAd6T1qhjWfdKkmduBKXtEoDb/JN Zx7JaFsKRFyOaEI5ELaRDMXWEV2eVfWyBh2+I1wEPGSy2mNfT1uVo1aZIArS9xAm gQnO/VAtG0eDe/+ldqqAljcBDAtyaQwdZElE/8xrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT9uquKlJPkQJbU6dFgyonEr+NvEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExODhmZTgzLTY2NDMtNGMxZC1hMDgzLTQzNGQxNTFhMDMxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBAE1iJQugnlIInSJ/f5P6ahpq roccFr5gbxqyabgZATC1wwkaAgc4GlDLJr9DhnYzyfXAZ60ScSyXZOdvUHNApEDO 8YT8vZwm13eR8IDI5RzPx6Guv38kDQhEqdFOoPwWom4EuzpA6rx/7oK0uinpxn3i B9LTnFcWkwzESVOr1qafPIYTE6S89LSb36P8po9u2Z3HCK4uPktCO43vbh84TJHZ chXLmrL6w9aReq32f4vdfS1zIvosmZ86yg2u+i4s6an+c2nkZMN+v0UbclMI8mLz Par3JHNvYk7TKb2E4ve7Cl6Ts+a0idIhvN0VZEQK3emcqhzi1i2ZwVtMCt6nW0g= -----END CERTIFICATE-----Generated at Fri Jul 24 11:06:55 2026 by rpki-client