$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa File: c1ddf06f-fa7b-4d9a-969b-553930838905.roa (raw, json) Hash identifier: jcYSx3HWR+R7nLv/OCdvjvLvIIXnA0w//VlGLRg+fBg= Subject key identifier: 41:DC:96:DB:27:91:33:DD:19:75:A3:3E:27:92:C2:3D:B0:8F:69:9C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3A949CC7984A728D29C7E76419A56BA0BF52FA3A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa Signing time: Thu 23 Jul 2026 15:00:08 +0000 ROA not before: Thu 23 Jul 2026 15:00:08 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:9c:c7:98:4a:72:8d:29:c7:e7:64:19:a5:6b:a0:bf:52:fa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:08 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=c0c96dfee3fcdc646652f071aaa4b37e6518d3a649a7207bf4d7068c5654e8a2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:6a:86:2f:f1:dd:63:c0:46:07:8b:b3:55: 62:62:25:4d:c7:d2:11:b4:02:aa:8b:cf:24:b9:c3: 92:0d:71:d2:48:62:23:d2:c8:50:e8:a8:45:8d:bc: 43:55:76:c3:23:38:71:92:d3:56:d4:72:01:5a:b8: f0:67:1b:fa:94:4a:60:c2:10:1b:9d:fb:ad:e2:3e: 0e:aa:65:77:6f:94:df:7d:ca:ff:3f:f8:58:d1:29: ab:48:2b:c7:cd:08:8b:a4:40:94:b6:b2:58:db:75: 25:b9:12:46:28:2a:57:a5:e7:b8:81:be:55:f3:12: 29:91:f3:3f:d0:2b:0b:2f:47:b1:11:76:d6:14:67: 6a:44:87:0a:94:0c:c1:db:5c:23:3b:b4:00:74:d3: a1:7d:26:49:b1:ad:af:2c:d2:f8:21:7d:bc:fa:0e: 0a:36:e2:a9:f7:7e:1a:58:21:e6:a7:d3:d5:e2:b0: 55:b0:0d:aa:ac:87:b7:32:e7:2e:b8:81:57:b5:33: 06:4b:7f:a3:7a:54:07:d9:bf:c5:c6:47:04:e6:70: 2c:7f:c1:56:e9:f5:17:3b:07:f3:c4:af:ed:1c:78: e6:21:99:eb:75:ba:18:a3:3e:35:20:e0:bc:3f:4a: 0c:ea:74:8b:2b:a0:8a:9f:3c:8a:39:18:f1:20:62: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:96:DB:27:91:33:DD:19:75:A3:3E:27:92:C2:3D:B0:8F:69:9C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6119::/48 Signature Algorithm: sha256WithRSAEncryption 2f:96:71:9e:ea:1a:41:ad:99:b2:f0:c4:be:83:c1:f0:95:e8: 34:49:71:a0:4d:00:8b:00:71:d8:7e:b3:7d:4b:0b:1e:33:87: d0:bd:0c:4a:0e:5f:5c:d9:db:eb:55:e8:63:ac:a9:ae:f7:f8: e2:7b:f3:57:4a:78:0b:81:34:db:d6:b3:c1:75:c1:ad:a3:5f: b4:c7:93:67:84:ec:23:07:59:65:f1:cc:be:cd:61:f5:c4:c7: 42:3e:de:7b:61:62:b1:bc:ad:a7:0f:6a:78:bf:f9:da:21:97: 3c:80:23:9d:25:88:39:75:11:cb:52:d6:73:ed:81:b9:32:6c: 0a:ca:17:4e:48:dc:ff:07:f5:1e:f7:5e:62:f5:26:5e:1d:49: 90:49:9a:e1:94:e0:d3:04:30:ea:d0:da:1d:71:16:bc:31:a1: 4b:f3:39:5a:7f:cd:7d:7e:9b:ff:8c:f9:dc:20:73:aa:b2:ed: f3:02:fd:59:30:15:90:06:19:e7:41:3e:d4:f4:46:ea:ff:5e: 9a:b9:7d:13:9f:2f:ee:ed:92:74:ae:70:b4:10:28:8f:dc:46: 8c:8b:41:e0:70:38:e4:7d:7b:5c:da:e1:8d:2f:79:e5:de:58: e2:d2:52:6a:9b:a5:90:4a:ab:a7:f1:5d:4c:ca:3f:fc:6d:9a: fb:3b:2e:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOpScx5hKco0px+dkGaVroL9S+jowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGM5NmRmZWUzZmNkYzY0NjY1MmYwNzFhYWE0YjM3ZTY1 MThkM2E2NDlhNzIwN2JmNGQ3MDY4YzU2NTRlOGEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp6mqGL/HdY8BGB4uzVWJiJU3H0hG0AqqLzyS5w5INcdJI YiPSyFDoqEWNvENVdsMjOHGS01bUcgFauPBnG/qUSmDCEBud+63iPg6qZXdvlN99 yv8/+FjRKatIK8fNCIukQJS2sljbdSW5EkYoKlel57iBvlXzEimR8z/QKwsvR7ER dtYUZ2pEhwqUDMHbXCM7tAB006F9Jkmxra8s0vghfbz6Dgo24qn3fhpYIean09Xi sFWwDaqsh7cy5y64gVe1MwZLf6N6VAfZv8XGRwTmcCx/wVbp9Rc7B/PEr+0ceOYh met1uhijPjUg4Lw/SgzqdIsroIqfPIo5GPEgYgjTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQdyW2yeRM90ZdaM+J5LCPbCPaZwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MxZGRmMDZmLWZhN2ItNGQ5YS05NjliLTU1MzkzMDgzODkwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRkwDQYJKoZIhvcNAQELBQADggEBAC+WcZ7qGkGtmbLwxL6DwfCV 6DRJcaBNAIsAcdh+s31LCx4zh9C9DEoOX1zZ2+tV6GOsqa73+OJ781dKeAuBNNvW s8F1wa2jX7THk2eE7CMHWWXxzL7NYfXEx0I+3nthYrG8racPani/+dohlzyAI50l iDl1EctS1nPtgbkybArKF05I3P8H9R73XmL1Jl4dSZBJmuGU4NMEMOrQ2h1xFrwx oUvzOVp/zX1+m/+M+dwgc6qy7fMC/VkwFZAGGedBPtT0Rur/Xpq5fROfL+7tknSu cLQQKI/cRoyLQeBwOOR9e1za4Y0veeXeWOLSUmqbpZBKq6fxXUzKP/xtmvs7Lsk= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:59 2026 by rpki-client