$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa File: a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa (raw, json) Hash identifier: X3KjEUaRbsV4zHs4JOgHV+/llAhHRiv5YOK34Gogoyw= Subject key identifier: D0:CC:35:42:8E:0F:F6:B6:55:47:24:0D:6A:D5:42:8F:9A:75:C1:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6971BCF68770044B594C644A462360B8EF908CF1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa Signing time: Thu 23 Jul 2026 15:10:50 +0000 ROA not before: Thu 23 Jul 2026 15:10:50 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:71:bc:f6:87:70:04:4b:59:4c:64:4a:46:23:60:b8:ef:90:8c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:50 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=4aaa7b21c78e5902215e49da9644437618eb04e9738eb5f7a9400959d1eb6a07, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:47:d8:1c:45:d7:db:fa:ba:0e:ce:0d:d5: ec:19:73:f3:05:78:d7:28:43:53:ed:fa:cc:f0:28: 1e:da:06:c2:6e:58:bc:4c:5d:b3:f6:e1:0d:86:03: 51:2d:81:82:34:38:42:f2:20:9c:a4:7b:60:c5:e2: 1e:24:52:24:60:8b:d0:40:11:2b:fe:9f:0b:30:1e: 02:d6:f4:d8:00:b4:36:4a:18:3b:6e:83:a6:de:53: 87:94:3f:d5:56:4a:b4:0b:25:24:91:ef:89:8c:00: 0e:2b:66:45:e3:18:bb:db:10:97:58:fb:42:44:16: db:85:7f:56:69:b9:4a:9b:40:71:7d:c8:fa:90:83: 53:a8:6e:03:f2:44:67:d6:28:4e:62:4e:74:c7:04: d9:06:d0:b2:05:50:42:5a:9f:db:e1:9d:08:96:f1: 16:e9:e8:09:a3:5a:13:89:46:b8:ae:93:c9:fc:2c: b9:34:da:be:50:db:26:22:48:43:45:51:69:c7:b4: ec:68:59:68:c7:f5:56:4c:99:51:48:da:22:e9:46: 06:e0:95:d0:be:dc:c7:7a:d5:29:68:92:24:90:d1: b0:b0:c7:f2:e3:a7:3a:2a:76:8d:38:ea:c8:3f:e7: 01:ab:93:96:e4:f2:a0:80:a1:0d:09:0d:fb:0c:e6: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:35:42:8E:0F:F6:B6:55:47:24:0D:6A:D5:42:8F:9A:75:C1:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a312ea2d-65f8-4e4e-8771-5e0f7a99cd4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6116::/48 Signature Algorithm: sha256WithRSAEncryption 7a:1a:1f:89:cf:3a:fa:18:e2:92:b3:ac:e4:1c:4c:c0:ec:73: 91:00:cf:aa:35:51:92:da:5c:66:ee:a9:1c:b6:25:93:d2:bc: e9:6b:a5:b7:00:98:ec:cb:46:9d:2d:a5:6c:5f:7c:f9:bf:a0: 4e:27:ea:df:a6:7b:7b:e2:c4:bf:41:e7:22:64:a3:51:a7:bc: b8:2a:66:6e:aa:0d:50:b2:de:00:c8:8f:99:f4:32:0c:ed:e9: 3e:2b:c7:8f:e1:3a:42:54:60:e2:2e:0a:93:7b:5e:a6:7b:5e: 4b:5c:de:02:db:0c:1a:fc:d9:6a:37:5e:89:0a:82:80:f4:ea: ef:a5:be:9d:c2:64:4d:47:05:e5:4f:5d:94:fc:0c:4c:cc:87: 2c:eb:66:7a:c2:70:df:f3:16:09:61:65:b5:1d:83:7c:d8:0a: bc:39:8b:46:fe:c7:48:e5:10:cc:6b:f1:5a:64:e3:ca:05:58: 76:5b:53:ea:15:1e:fa:b7:af:83:ee:e5:d2:41:ff:e0:88:0b: ec:ea:43:40:5c:ee:a0:83:e8:2c:b8:cc:71:fd:93:05:c2:e5: b7:2a:5e:3a:12:29:7e:9e:20:36:42:ac:b7:43:d9:c6:02:72: 50:3a:79:fd:36:ae:4f:39:bf:16:d8:e5:93:65:41:db:29:2e: d5:cd:2d:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaXG89odwBEtZTGRKRiNguO+QjPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDUwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWFhN2IyMWM3OGU1OTAyMjE1ZTQ5ZGE5NjQ0NDM3NjE4 ZWIwNGU5NzM4ZWI1ZjdhOTQwMDk1OWQxZWI2YTA3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA40fYHEXX2/q6Ds4N1ewZc/MFeNcoQ1Pt+szwKB7aBsJu WLxMXbP24Q2GA1EtgYI0OELyIJyke2DF4h4kUiRgi9BAESv+nwswHgLW9NgAtDZK GDtug6beU4eUP9VWSrQLJSSR74mMAA4rZkXjGLvbEJdY+0JEFtuFf1ZpuUqbQHF9 yPqQg1OobgPyRGfWKE5iTnTHBNkG0LIFUEJan9vhnQiW8Rbp6AmjWhOJRriuk8n8 LLk02r5Q2yYiSENFUWnHtOxoWWjH9VZMmVFI2iLpRgbgldC+3Md61SlokiSQ0bCw x/Ljpzoqdo046sg/5wGrk5bk8qCAoQ0JDfsM5pDFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0Mw1Qo4P9rZVRyQNatVCj5p1wfswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzMTJlYTJkLTY1ZjgtNGU0ZS04NzcxLTVlMGY3YTk5Y2Q0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRYwDQYJKoZIhvcNAQELBQADggEBAHoaH4nPOvoY4pKzrOQcTMDs c5EAz6o1UZLaXGbuqRy2JZPSvOlrpbcAmOzLRp0tpWxffPm/oE4n6t+me3vixL9B 5yJko1GnvLgqZm6qDVCy3gDIj5n0Mgzt6T4rx4/hOkJUYOIuCpN7XqZ7Xktc3gLb DBr82Wo3XokKgoD06u+lvp3CZE1HBeVPXZT8DEzMhyzrZnrCcN/zFglhZbUdg3zY Crw5i0b+x0jlEMxr8Vpk48oFWHZbU+oVHvq3r4Pu5dJB/+CIC+zqQ0Bc7qCD6Cy4 zHH9kwXC5bcqXjoSKX6eIDZCrLdD2cYCclA6ef02rk85vxbY5ZNlQdspLtXNLUA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:18:57 2026 by rpki-client