$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa File: b2d641cc-0376-4d82-897a-3d5596d61679.roa (raw, json) Hash identifier: 7Kt/Qxkc7MhLSalJowOSIY8+71KuAH0zRES5BHE0K1o= Subject key identifier: 07:13:4C:37:D3:76:4C:6B:70:A9:F0:86:64:A1:1A:55:38:1D:F6:17 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 595A6DEBAD9F5EE86AF5303828A7894E697574D3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa Signing time: Mon 20 Jul 2026 00:50:08 +0000 ROA not before: Mon 20 Jul 2026 00:50:08 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:6d:eb:ad:9f:5e:e8:6a:f5:30:38:28:a7:89:4e:69:75:74:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 20 00:50:08 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=d951d011079d5424651d7c737ef64f776c7861a163e36333217159d34b6d7fad, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:6d:75:c8:ea:f4:42:2a:9e:43:49:66:cd: 71:52:07:9a:eb:20:75:48:52:44:fc:55:cd:c3:d6: 72:34:f8:80:3d:52:8e:90:a7:a7:83:62:5b:a4:e2: fd:fc:ac:f2:b0:5c:3f:5a:1b:20:45:8a:9c:d2:62: 33:fd:8c:c6:4e:5f:e2:15:6d:4f:1a:2c:8a:ee:47: 98:c3:e2:ab:0d:79:b2:18:81:01:bc:ed:e4:6b:62: f2:70:1b:7e:df:8b:c0:cb:b1:29:d5:f5:a6:ba:60: 36:01:09:3f:3f:cc:70:5e:88:62:a8:76:6b:65:55: 6e:6e:d6:aa:67:2b:e5:85:c2:c6:ab:15:93:65:a0: c3:e4:c6:e9:57:73:29:c4:5d:3d:bd:00:e6:51:b5: 25:9c:c9:1f:18:69:9e:8a:a8:37:80:39:cc:1b:93: 0e:6c:23:7d:00:65:f5:2c:2f:9d:a2:29:dd:e0:50: 06:44:ea:ce:3d:9d:0e:95:e6:51:e1:a0:f5:ad:da: 93:fd:3e:55:73:bc:e7:d1:c7:fe:26:bf:67:35:4f: 5a:b3:ef:32:3b:83:fd:3f:6c:8c:44:0c:eb:44:7f: 2c:d3:c6:ac:73:cf:0b:15:c4:d6:4c:b5:34:87:ca: e2:ca:c5:13:45:d6:dd:1c:c3:6d:db:94:7a:38:40: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:13:4C:37:D3:76:4C:6B:70:A9:F0:86:64:A1:1A:55:38:1D:F6:17 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7101::/48 Signature Algorithm: sha256WithRSAEncryption 7d:11:b2:0d:f6:25:39:df:1c:ba:27:cf:8d:85:6c:4a:d7:d7: ed:95:fe:13:62:5c:d9:b1:8e:4e:29:22:5b:c9:df:23:38:ad: e0:dd:3f:89:87:a8:8d:4c:8d:00:da:b0:82:66:d2:eb:09:43: 16:f5:b2:db:d9:fc:7c:9c:ec:52:2d:68:87:03:33:a0:67:91: 08:b1:87:11:cc:42:b7:9d:49:a9:b2:f5:81:d3:7b:9d:5a:19: ac:ed:e0:8e:43:ac:c5:cd:39:f9:9c:46:58:08:24:b0:ae:b1: b7:ec:f2:1c:77:e7:5c:7f:9a:78:15:58:c0:72:d7:6b:44:66: 80:15:cc:3a:0d:7d:d7:ba:9f:6e:ed:83:0e:f3:3b:93:e6:ce: 59:a8:3b:03:47:2a:75:83:6b:da:0a:b0:84:df:f7:e5:76:60: 13:55:1e:f8:c0:21:dc:70:fd:66:a0:5a:fc:42:8a:26:d2:17: 5e:a1:bb:70:59:4e:29:9e:9d:0e:53:d3:fc:86:df:df:0d:40: 49:7c:02:ba:89:f2:83:c5:a9:9c:0d:74:68:b9:ab:f8:50:88: 9a:7a:59:c6:31:1c:3d:23:39:df:9e:97:d1:29:d3:02:6d:68: c0:3f:b8:c5:58:77:c6:0b:d8:90:c6:42:72:70:94:90:99:9a: b0:e5:c7:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWVpt662fXuhq9TA4KKeJTml1dNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIwMDA1MDA4WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTUxZDAxMTA3OWQ1NDI0NjUxZDdjNzM3ZWY2NGY3NzZj Nzg2MWExNjNlMzYzMzMyMTcxNTlkMzRiNmQ3ZmFkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeDm11yOr0QiqeQ0lmzXFSB5rrIHVIUkT8Vc3D1nI0+IA9 Uo6Qp6eDYluk4v38rPKwXD9aGyBFipzSYjP9jMZOX+IVbU8aLIruR5jD4qsNebIY gQG87eRrYvJwG37fi8DLsSnV9aa6YDYBCT8/zHBeiGKodmtlVW5u1qpnK+WFwsar FZNloMPkxulXcynEXT29AOZRtSWcyR8YaZ6KqDeAOcwbkw5sI30AZfUsL52iKd3g UAZE6s49nQ6V5lHhoPWt2pP9PlVzvOfRx/4mv2c1T1qz7zI7g/0/bIxEDOtEfyzT xqxzzwsVxNZMtTSHyuLKxRNF1t0cw23blHo4QFJLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBxNMN9N2TGtwqfCGZKEaVTgd9hcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IyZDY0MWNjLTAzNzYtNGQ4Mi04OTdhLTNkNTU5NmQ2MTY3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycQEwDQYJKoZIhvcNAQELBQADggEBAH0Rsg32JTnfHLonz42FbErX 1+2V/hNiXNmxjk4pIlvJ3yM4reDdP4mHqI1MjQDasIJm0usJQxb1stvZ/Hyc7FIt aIcDM6BnkQixhxHMQredSamy9YHTe51aGazt4I5DrMXNOfmcRlgIJLCusbfs8hx3 51x/mngVWMBy12tEZoAVzDoNfde6n27tgw7zO5PmzlmoOwNHKnWDa9oKsITf9+V2 YBNVHvjAIdxw/WagWvxCiibSF16hu3BZTimenQ5T0/yG398NQEl8ArqJ8oPFqZwN dGi5q/hQiJp6WcYxHD0jOd+el9Ep0wJtaMA/uMVYd8YL2JDGQnJwlJCZmrDlx0Y= -----END CERTIFICATE-----Generated at Fri Jul 24 09:53:11 2026 by rpki-client