$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa File: b5c62bbb-1686-4eb4-a175-a589cb237d72.roa (raw, json) Hash identifier: +wpvF5UX7tYw+Tibjc5GROh0bTUtW29hWr8x0rHlVgE= Subject key identifier: 91:C2:36:A7:4D:7A:9C:11:58:B2:DB:83:6E:58:30:39:6E:8C:4B:0C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02D0E9D7B0A91FFFA563D6F5CE17E9B20BBB5A8C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa Signing time: Thu 23 Jul 2026 15:00:31 +0000 ROA not before: Thu 23 Jul 2026 15:00:31 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d0:e9:d7:b0:a9:1f:ff:a5:63:d6:f5:ce:17:e9:b2:0b:bb:5a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:31 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=95cd7b0683195cbecc9777f88f354a7f1d428b6c68e3c089f7097cc5042d5076, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:55:a5:83:cc:d2:46:4e:31:a9:1a:33:68: c5:33:71:31:ae:ba:0b:b4:75:43:42:2d:ba:35:cd: 66:22:e3:69:3c:79:ff:bc:d0:94:cb:af:1d:a8:51: 2b:bb:69:b2:82:7b:e8:25:70:84:0b:4f:57:d7:7a: 4f:d1:da:7b:ae:fb:fe:38:6f:fc:29:a5:fc:74:b6: de:a9:ec:ca:55:51:87:32:58:3f:d1:97:2f:a0:bc: 3a:bc:6d:d0:f3:69:44:dd:0e:54:9c:3f:41:91:b2: f7:93:90:eb:90:3f:61:3e:53:8a:9d:0d:17:b8:0b: 79:df:c0:02:61:ed:fe:4d:06:e5:bc:5d:37:b8:6a: 82:dc:a6:4c:d2:2b:0b:b7:9c:a0:6e:a3:10:19:68: 93:16:5e:23:58:70:41:25:f8:a1:24:87:8c:a2:18: 79:8d:b3:e5:b0:58:05:9f:b6:a5:a9:c8:01:81:e0: b2:72:32:c3:6a:38:1c:13:6c:a9:46:46:47:d2:2b: f5:80:74:66:53:be:01:89:cf:33:88:ea:71:c4:6b: f1:b4:44:0b:ef:0c:b8:fb:18:9e:f9:25:e3:37:93: ef:3c:8a:ab:60:c5:15:da:cc:3e:f5:ab:31:68:6b: 11:e3:37:69:64:b8:66:e2:de:39:30:d9:8f:30:d0: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C2:36:A7:4D:7A:9C:11:58:B2:DB:83:6E:58:30:39:6E:8C:4B:0C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6112::/48 Signature Algorithm: sha256WithRSAEncryption 0d:3b:12:e3:19:7b:91:b3:d8:8b:56:ee:79:e5:2a:d5:69:61: 88:78:f4:77:60:5e:32:ec:5e:39:58:4d:83:84:f2:a4:3c:e2: c3:ce:e5:06:66:d3:ff:18:b8:ea:78:7e:bc:10:3d:4e:13:38: eb:a3:98:17:de:a2:ed:1b:6d:cd:1a:a7:e4:44:71:62:37:0e: fa:38:2c:14:0c:bb:8f:47:66:64:f9:11:25:40:03:21:79:11: 05:1e:01:ef:74:6f:cb:07:de:d7:8e:b4:50:0f:5c:90:30:07: 6c:b7:87:2b:ba:be:55:a0:c5:57:35:bf:9d:95:1e:d2:c4:6d: 09:bd:f9:d8:9f:60:96:e8:3b:34:f7:ee:70:91:e3:67:71:89: 77:e1:45:3c:0f:2d:c1:95:be:e8:53:45:0e:0e:eb:42:59:c3: 96:3d:ac:4e:fd:df:17:8f:e5:e7:02:6d:58:ae:0c:23:a2:39: ba:04:82:cc:8a:ad:42:24:6e:15:bd:34:06:60:9d:31:fe:3f: f9:15:8d:07:1e:f0:23:0c:c5:23:77:43:5d:38:f9:5d:da:1e: f7:a0:0c:b7:01:74:ef:e1:f8:64:a3:be:8c:c2:09:ce:89:88: 38:b4:4d:f9:83:80:df:37:f5:b0:e2:ca:68:24:87:5e:c3:23: f3:57:e1:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAtDp17CpH/+lY9b1zhfpsgu7WowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWNkN2IwNjgzMTk1Y2JlY2M5Nzc3Zjg4ZjM1NGE3ZjFk NDI4YjZjNjhlM2MwODlmNzA5N2NjNTA0MmQ1MDc2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsslWlg8zSRk4xqRozaMUzcTGuugu0dUNCLbo1zWYi42k8 ef+80JTLrx2oUSu7abKCe+glcIQLT1fXek/R2nuu+/44b/wppfx0tt6p7MpVUYcy WD/Rly+gvDq8bdDzaUTdDlScP0GRsveTkOuQP2E+U4qdDRe4C3nfwAJh7f5NBuW8 XTe4aoLcpkzSKwu3nKBuoxAZaJMWXiNYcEEl+KEkh4yiGHmNs+WwWAWftqWpyAGB 4LJyMsNqOBwTbKlGRkfSK/WAdGZTvgGJzzOI6nHEa/G0RAvvDLj7GJ75JeM3k+88 iqtgxRXazD71qzFoaxHjN2lkuGbi3jkw2Y8w0GL/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkcI2p016nBFYstuDblgwOW6MSwwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I1YzYyYmJiLTE2ODYtNGViNC1hMTc1LWE1ODljYjIzN2Q3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRIwDQYJKoZIhvcNAQELBQADggEBAA07EuMZe5Gz2ItW7nnlKtVp YYh49HdgXjLsXjlYTYOE8qQ84sPO5QZm0/8YuOp4frwQPU4TOOujmBfeou0bbc0a p+REcWI3Dvo4LBQMu49HZmT5ESVAAyF5EQUeAe90b8sH3teOtFAPXJAwB2y3hyu6 vlWgxVc1v52VHtLEbQm9+difYJboOzT37nCR42dxiXfhRTwPLcGVvuhTRQ4O60JZ w5Y9rE793xeP5ecCbViuDCOiOboEgsyKrUIkbhW9NAZgnTH+P/kVjQce8CMMxSN3 Q104+V3aHvegDLcBdO/h+GSjvozCCc6JiDi0TfmDgN839bDiymgkh17DI/NX4b8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:16:41 2026 by rpki-client