$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa File: c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa (raw, json) Hash identifier: TjHmLxPOzI2bcPnekBHd3R01sdoZ0TfbQYpKIyhWHOo= Subject key identifier: 25:2E:2B:A7:0C:C5:24:03:A1:47:EA:98:5F:A4:0C:84:AC:1B:10:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3AF6F4C540C48875041B9DA94199BBB5E9BB1EAE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa Signing time: Thu 23 Jul 2026 15:10:47 +0000 ROA not before: Thu 23 Jul 2026 15:10:47 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f6:f4:c5:40:c4:88:75:04:1b:9d:a9:41:99:bb:b5:e9:bb:1e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:47 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=98708c83e697627a74b4e571c4c6e3617b542d2f0c474724342cc3bcbf456fb5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:51:62:35:73:d1:cc:9a:bb:94:48:36:a6: 6b:88:a1:09:e6:2a:2b:64:e4:88:5c:70:43:bb:c2: b9:05:9a:7e:33:73:34:70:66:a1:83:dc:40:60:33: 9a:d9:63:d4:1d:c4:48:b7:50:8c:d8:ab:cf:df:7d: 8d:29:4a:7c:87:af:e2:3e:44:a5:61:b5:c9:dc:b0: a1:63:1b:a6:0e:6f:d1:a2:62:df:3e:34:c5:5d:9e: 4e:0e:6a:c7:65:cb:21:db:41:39:fc:b2:10:ec:3e: 1d:b2:36:bb:e8:bb:56:6b:bf:c5:6d:cb:13:74:69: b4:f6:eb:08:26:54:72:70:d3:0f:43:76:c6:63:ac: ab:27:2e:45:d1:cd:09:95:8c:9d:cb:6e:8d:ab:04: 8a:69:ea:39:9e:66:61:8e:ed:88:98:b2:ee:2f:0d: d6:e8:af:41:a4:a3:7a:9a:cc:35:62:21:4b:cc:35: c0:de:d9:f9:99:7f:8f:59:ef:38:67:4e:f4:67:f2: ea:b1:02:40:16:60:ef:13:ef:e5:05:54:bf:ec:f0: 96:bb:25:aa:20:c9:4a:cf:0d:c4:c9:c2:7a:f4:9f: 75:b3:cd:09:96:52:0a:9e:82:8c:27:ca:bb:73:44: 87:5e:62:a0:57:f9:d0:72:5e:85:ec:0d:9e:06:18: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2E:2B:A7:0C:C5:24:03:A1:47:EA:98:5F:A4:0C:84:AC:1B:10:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption 82:79:f0:a0:6e:e3:63:ba:25:b6:ad:d9:f6:d4:ab:8f:5f:d9: 15:ee:35:d0:56:37:27:c3:d0:eb:a1:aa:de:3a:7d:1a:1e:eb: c3:40:14:61:f7:1e:3c:7b:e3:67:a9:61:9c:61:2c:cb:dd:7f: 2f:2f:e2:75:94:41:d1:e0:00:85:30:a0:c1:fc:2a:73:c5:68: 27:44:de:59:da:52:3e:e4:2e:20:50:15:a1:d9:e5:80:9f:e1: 13:9f:3b:75:7a:52:d8:8f:b8:0b:bb:84:f1:cd:1a:f6:e1:d8: fb:48:8e:32:cb:5e:98:22:f6:68:ef:02:0e:ef:2b:cf:f9:c3: 6a:98:f0:6e:30:24:3f:a0:28:4e:87:49:fa:81:f9:53:2c:d9: 27:cf:b0:f9:8d:82:a6:cd:27:28:47:14:35:6e:07:ea:c8:2e: f0:71:63:12:e5:f8:f2:ef:37:0a:f8:f2:98:9b:35:b5:8e:fe: ff:5f:b5:d4:bd:dc:04:d5:e2:8e:19:e0:38:b3:db:d4:40:df: 52:70:7f:a7:45:3f:ae:9c:fd:0d:a4:ea:58:01:61:e4:84:7c: 78:e0:53:02:84:a1:d6:0e:66:32:0a:e7:d4:cb:7f:e2:03:64: ca:31:7f:a5:3c:60:64:c4:da:0f:d1:29:69:f0:d5:ea:08:f9: d1:86:01:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOvb0xUDEiHUEG52pQZm7tem7Hq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDQ3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODcwOGM4M2U2OTc2MjdhNzRiNGU1NzFjNGM2ZTM2MTdi NTQyZDJmMGM0NzQ3MjQzNDJjYzNiY2JmNDU2ZmI1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCccVFiNXPRzJq7lEg2pmuIoQnmKitk5IhccEO7wrkFmn4z czRwZqGD3EBgM5rZY9QdxEi3UIzYq8/ffY0pSnyHr+I+RKVhtcncsKFjG6YOb9Gi Yt8+NMVdnk4OasdlyyHbQTn8shDsPh2yNrvou1Zrv8VtyxN0abT26wgmVHJw0w9D dsZjrKsnLkXRzQmVjJ3Lbo2rBIpp6jmeZmGO7YiYsu4vDdbor0Gko3qazDViIUvM NcDe2fmZf49Z7zhnTvRn8uqxAkAWYO8T7+UFVL/s8Ja7JaogyUrPDcTJwnr0n3Wz zQmWUgqegownyrtzRIdeYqBX+dByXoXsDZ4GGDAxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJS4rpwzFJAOhR+qYX6QMhKwbEEIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MwYjBiODgwLWU2MzItNGNhNy04YjYxLTA2NThlODg0NmY4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAIJ58KBu42O6Jbat2fbUq49f 2RXuNdBWNyfD0Ouhqt46fRoe68NAFGH3Hjx742epYZxhLMvdfy8v4nWUQdHgAIUw oMH8KnPFaCdE3lnaUj7kLiBQFaHZ5YCf4ROfO3V6UtiPuAu7hPHNGvbh2PtIjjLL Xpgi9mjvAg7vK8/5w2qY8G4wJD+gKE6HSfqB+VMs2SfPsPmNgqbNJyhHFDVuB+rI LvBxYxLl+PLvNwr48pibNbWO/v9ftdS93ATV4o4Z4Diz29RA31Jwf6dFP66c/Q2k 6lgBYeSEfHjgUwKEodYOZjIK59TLf+IDZMoxf6U8YGTE2g/RKWnw1eoI+dGGASI= -----END CERTIFICATE-----Generated at Fri Jul 24 04:55:51 2026 by rpki-client