$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa File: ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa (raw, json) Hash identifier: OkDamg6Nk0PE+CfUDsodDPotJo4ySzwnT5H7gDokeKQ= Subject key identifier: B8:67:59:B9:C1:F7:07:B3:6F:5E:57:C3:EA:38:22:13:0D:68:02:D1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3781178642AF85D8768CF5896D26CF63513D39F3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa Signing time: Thu 23 Jul 2026 15:00:32 +0000 ROA not before: Thu 23 Jul 2026 15:00:32 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:81:17:86:42:af:85:d8:76:8c:f5:89:6d:26:cf:63:51:3d:39:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:32 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=9e7dcecf667e8af57b946a06aaa7bf0ff69e53f2eac1381b4cc4993564216384, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:b0:35:61:1e:83:8a:83:21:4b:31:8b:a2: a0:80:41:f3:2c:ff:94:ed:ef:1f:67:3e:e3:fb:0a: 50:3d:b7:1c:85:81:4e:fb:2c:26:05:c5:21:97:cc: a8:7c:51:57:cf:ca:27:76:92:4d:72:2f:a7:6e:c8: f5:5e:68:84:a3:66:16:bf:75:62:be:43:f3:37:c1: 2a:d5:c6:59:4b:f4:89:b7:0d:b2:17:52:29:d1:66: 67:17:7e:56:ed:30:34:42:ab:e8:76:bb:da:25:4c: c2:36:19:87:a4:be:95:9c:dd:36:6a:51:e9:8c:48: fd:2e:8b:29:e7:76:b5:9a:9a:bc:8d:6d:ee:f4:82: 0c:9e:f9:85:58:8b:44:f3:11:44:45:1f:fb:a6:ac: 6c:d4:da:e5:8a:0c:3c:b2:95:69:72:39:e3:59:bf: e2:9f:2e:c6:26:22:9f:6a:09:c1:a9:5f:e5:c6:8d: 20:a1:11:d6:80:50:27:98:ea:8a:37:5c:d1:95:b9: 22:31:50:39:00:0a:35:1d:00:aa:6c:8c:38:08:73: 8a:53:15:c7:8a:9c:03:64:30:9b:4e:c4:8b:5f:c7: 1d:67:e8:8d:90:1b:7f:61:41:ba:2f:d1:b4:4b:6e: c2:11:19:1f:0a:a0:44:41:8f:fd:56:cf:6f:13:ea: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:67:59:B9:C1:F7:07:B3:6F:5E:57:C3:EA:38:22:13:0D:68:02:D1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 9b:53:87:c5:66:b3:a5:d7:7a:c6:1b:d1:76:6c:72:90:4c:a0: be:5f:c7:c9:3e:ba:0f:e5:bc:0e:1e:6e:a7:0e:d1:db:ab:07: 64:4e:5c:c9:a1:4d:4a:04:8c:2a:51:e1:21:70:90:85:1c:5b: 25:33:fa:b7:24:b9:22:f0:34:77:bd:6f:b1:d7:81:95:8a:c1: 30:64:25:75:0d:11:3f:a8:82:82:4b:4a:a8:f4:8f:2d:28:d8: a4:02:80:0a:55:0b:85:f6:24:8c:29:2b:53:50:37:44:3a:a2: b2:34:a6:88:90:1e:d8:62:15:08:26:71:86:47:d1:74:53:4f: a2:36:1e:bd:5c:5a:e0:09:e9:37:5d:76:e3:6d:35:25:53:60: a5:ef:f6:54:2c:e2:f1:8c:d3:3e:d6:9d:57:40:af:7d:9c:6b: b3:62:6f:5c:d0:1d:bc:8e:3c:e0:b1:51:fd:c9:ef:61:86:93: 4e:3b:96:36:f7:c9:d1:54:a0:45:90:59:be:6d:68:8c:44:70: d3:b0:2f:fb:db:51:79:80:0c:31:11:8f:4f:af:ea:49:cc:54: ae:69:36:e9:69:05:ca:45:ae:45:e0:50:2b:9a:85:32:a8:d1: 4e:69:8b:8f:47:f9:8b:fd:11:62:bd:9d:91:92:ac:87:a1:eb: 53:70:f3:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN4EXhkKvhdh2jPWJbSbPY1E9OfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTdkY2VjZjY2N2U4YWY1N2I5NDZhMDZhYWE3YmYwZmY2 OWU1M2YyZWFjMTM4MWI0Y2M0OTkzNTY0MjE2Mzg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCECLA1YR6DioMhSzGLoqCAQfMs/5Tt7x9nPuP7ClA9txyF gU77LCYFxSGXzKh8UVfPyid2kk1yL6duyPVeaISjZha/dWK+Q/M3wSrVxllL9Im3 DbIXUinRZmcXflbtMDRCq+h2u9olTMI2GYekvpWc3TZqUemMSP0uiynndrWamryN be70ggye+YVYi0TzEURFH/umrGzU2uWKDDyylWlyOeNZv+KfLsYmIp9qCcGpX+XG jSChEdaAUCeY6oo3XNGVuSIxUDkACjUdAKpsjDgIc4pTFceKnANkMJtOxItfxx1n 6I2QG39hQbov0bRLbsIRGR8KoERBj/1Wz28T6nlfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuGdZucH3B7NvXlfD6jgiEw1oAtEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JhNjk5YzFlLTllMTctNDEzNC05ZDFmLThiYTk3ZmZkOWYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBAJtTh8Vms6XXesYb0XZscpBM oL5fx8k+ug/lvA4ebqcO0durB2ROXMmhTUoEjCpR4SFwkIUcWyUz+rckuSLwNHe9 b7HXgZWKwTBkJXUNET+ogoJLSqj0jy0o2KQCgApVC4X2JIwpK1NQN0Q6orI0poiQ HthiFQgmcYZH0XRTT6I2Hr1cWuAJ6TddduNtNSVTYKXv9lQs4vGM0z7WnVdAr32c a7Nib1zQHbyOPOCxUf3J72GGk047ljb3ydFUoEWQWb5taIxEcNOwL/vbUXmADDER j0+v6knMVK5pNulpBcpFrkXgUCuahTKo0U5pi49H+Yv9EWK9nZGSrIeh61Nw89c= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:12 2026 by rpki-client