$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa File: d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa (raw, json) Hash identifier: 0GPVHoFOu2isF2ntGl8go9NojPN962B/lz86QKTOxgk= Subject key identifier: 98:6C:6C:6B:69:10:1C:54:8B:95:33:CB:8E:B6:4D:3E:34:8E:4A:1A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 111DFC0EE1575F466D1EF137478B70F96B1FA39F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa Signing time: Thu 23 Jul 2026 15:00:06 +0000 ROA not before: Thu 23 Jul 2026 15:00:06 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:fc:0e:e1:57:5f:46:6d:1e:f1:37:47:8b:70:f9:6b:1f:a3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:06 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=95d1d533773099e2a72428acd52e8fdb37f14615c72ccef69e66ed737c3df777, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:a6:64:4f:73:09:64:ac:45:33:b3:76:7e: a4:8f:92:fe:55:70:bb:5a:31:4c:f5:db:dd:c7:9f: e7:05:9e:3a:3f:bf:bc:ce:a7:09:f9:b8:5c:c6:9a: 09:f3:43:55:71:70:2a:91:e4:39:5e:ee:70:fe:87: 39:87:2c:ae:52:8e:eb:69:69:07:41:2d:bb:a8:3f: d8:2d:33:71:89:51:94:81:9e:a7:51:e5:b9:4b:50: 58:69:3f:2a:58:0e:f1:18:1c:c2:62:ed:50:80:80: 12:57:af:dc:4b:8e:8a:dc:67:40:35:fe:2c:0b:63: 99:bf:89:2a:99:09:fa:90:ed:3f:af:01:d0:72:dd: 30:48:cc:dc:15:70:83:3d:42:ac:4d:b5:f8:8b:3d: 92:58:ba:d4:63:78:06:8b:99:43:80:1f:a4:80:e6: 2c:5b:be:bd:11:9f:80:db:db:01:08:26:be:4a:2f: d7:ba:30:80:a3:7d:90:20:09:ca:4b:96:94:aa:57: f6:fa:90:78:75:93:b4:8d:7c:bd:00:5d:25:35:4a: 61:93:5a:7a:84:ea:48:85:88:b2:48:cf:27:e6:5a: ff:3c:32:1e:e5:bd:29:58:e0:98:76:eb:30:c5:2e: 33:e7:d5:59:71:f6:8e:04:ab:c5:91:db:39:f7:1f: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:6C:6B:69:10:1C:54:8B:95:33:CB:8E:B6:4D:3E:34:8E:4A:1A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 18:d9:11:84:fe:87:f1:9d:52:52:74:63:03:03:b8:ae:04:df: f3:1e:d6:59:bf:38:9b:8c:9f:ef:8f:8b:8b:5c:83:0c:4a:3f: df:b0:96:ed:3a:42:bd:13:7f:1c:22:5b:29:bb:c4:53:08:d8: 89:9b:5d:7a:d2:c2:7e:60:0d:81:47:dd:0c:fd:34:5b:a2:e1: 5e:02:a9:9f:42:22:52:76:82:08:45:a4:78:a3:d3:13:42:20: 7b:e4:52:21:ff:f5:c6:82:d1:9a:9e:ad:d8:12:88:9e:e2:3d: 11:e1:a2:60:b2:83:1f:88:5b:98:de:28:bd:c8:af:5d:1e:c6: f0:cf:7e:8c:6c:4c:03:97:3e:a1:ce:ee:ef:7d:24:12:89:58: ba:bc:5a:6e:ad:01:fe:f3:87:73:c4:8c:94:66:fa:9b:6a:99: 37:a5:99:a6:3a:c5:49:17:27:be:11:ac:06:9f:7a:66:ff:80: 8f:d8:10:5a:c2:1c:36:31:db:64:7b:7e:9c:fd:44:7d:cd:86: c9:fb:08:24:cb:a8:c4:c0:f4:06:aa:82:8a:6f:9d:16:7d:38: 12:55:63:75:f7:de:53:98:c0:aa:20:15:91:ad:12:51:32:5c: f4:a1:1a:d2:8f:b7:46:7e:43:54:f0:6b:7c:49:0a:a2:38:28: fc:e6:f6:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUER38DuFXX0ZtHvE3R4tw+Wsfo58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWQxZDUzMzc3MzA5OWUyYTcyNDI4YWNkNTJlOGZkYjM3 ZjE0NjE1YzcyY2NlZjY5ZTY2ZWQ3MzdjM2RmNzc3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCErqZkT3MJZKxFM7N2fqSPkv5VcLtaMUz1293Hn+cFnjo/ v7zOpwn5uFzGmgnzQ1VxcCqR5Dle7nD+hzmHLK5SjutpaQdBLbuoP9gtM3GJUZSB nqdR5blLUFhpPypYDvEYHMJi7VCAgBJXr9xLjorcZ0A1/iwLY5m/iSqZCfqQ7T+v AdBy3TBIzNwVcIM9QqxNtfiLPZJYutRjeAaLmUOAH6SA5ixbvr0Rn4Db2wEIJr5K L9e6MICjfZAgCcpLlpSqV/b6kHh1k7SNfL0AXSU1SmGTWnqE6kiFiLJIzyfmWv88 Mh7lvSlY4Jh26zDFLjPn1Vlx9o4Eq8WR2zn3H5D3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmGxsa2kQHFSLlTPLjrZNPjSOShowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyMWQwMWQyLWU0NzctNDBlMC1hOTUwLTVjMGNjNGM1MWNhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBABjZEYT+h/GdUlJ0YwMDuK4E 3/Me1lm/OJuMn++Pi4tcgwxKP9+wlu06Qr0TfxwiWym7xFMI2ImbXXrSwn5gDYFH 3Qz9NFui4V4CqZ9CIlJ2gghFpHij0xNCIHvkUiH/9caC0ZqerdgSiJ7iPRHhomCy gx+IW5jeKL3Ir10exvDPfoxsTAOXPqHO7u99JBKJWLq8Wm6tAf7zh3PEjJRm+ptq mTelmaY6xUkXJ74RrAafemb/gI/YEFrCHDYx22R7fpz9RH3Nhsn7CCTLqMTA9Aaq gopvnRZ9OBJVY3X33lOYwKogFZGtElEyXPShGtKPt0Z+Q1Twa3xJCqI4KPzm9rc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:19 2026 by rpki-client