$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa File: d258d57d-021e-4cb2-93b0-750fadc6ca66.roa (raw, json) Hash identifier: vZDlaiALV9bT3eeqcN0qJB/D1LqwphQwsY4UxkLQaWg= Subject key identifier: 38:F2:4F:DE:B6:7E:40:35:C8:6F:E2:AA:56:71:F1:B2:A8:85:D0:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0826A2D92F34A816FA2AF9491FE095EFF37DE57A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa Signing time: Thu 23 Jul 2026 15:00:09 +0000 ROA not before: Thu 23 Jul 2026 15:00:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:26:a2:d9:2f:34:a8:16:fa:2a:f9:49:1f:e0:95:ef:f3:7d:e5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=77ad554dba64183f73de151adb25c6022e55913918adb6657d3dd3fff6bb60c5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:30:b3:28:7d:64:46:31:2d:e4:28:ef:02:14: 5d:2c:54:2b:64:5f:d8:30:8f:5e:e8:84:da:e1:87: 9c:06:70:14:81:7f:4a:8c:c2:04:3a:cc:72:03:6e: 5b:62:9d:a3:c2:24:43:6f:3c:99:6e:f6:2b:e0:06: 6d:eb:25:50:4f:6a:64:ac:f3:b2:69:21:d7:c3:f7: f9:a2:28:0a:b0:e4:9a:e1:6b:25:93:9a:f4:66:d2: b5:97:30:f0:a8:e6:99:cb:dd:84:ac:ce:80:55:82: 59:6b:1f:46:50:59:a9:71:f0:7c:26:6f:3c:a5:75: 39:8d:84:55:86:31:dd:40:8c:20:d8:ad:ca:41:59: 38:c6:99:54:a5:0b:a9:c8:fc:6a:dc:d6:59:2d:ca: 57:ec:68:b4:50:1a:fb:9b:55:ab:21:1c:c7:08:8b: b4:ea:e7:63:2d:76:6d:aa:a7:fe:e5:cd:7a:54:35: 4b:bc:49:ab:05:04:a1:a8:8f:3f:ae:7c:9a:38:ab: df:76:1d:94:55:5a:77:bd:cc:d6:cd:c6:c4:ed:ba: aa:f7:bb:95:8d:b3:ca:af:99:86:cd:09:c4:4a:5b: 93:95:cd:fa:d4:6c:50:8e:e1:65:96:7e:36:f2:6d: b0:eb:d0:56:47:cb:e1:4b:cd:2c:47:a1:8b:6f:be: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:4F:DE:B6:7E:40:35:C8:6F:E2:AA:56:71:F1:B2:A8:85:D0:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611f::/48 Signature Algorithm: sha256WithRSAEncryption 76:25:d2:13:9e:00:03:80:a7:82:59:be:d4:25:c2:d4:2d:ac: 37:7f:90:0e:71:f0:b0:9b:76:e4:8b:5d:31:5d:1b:33:71:9e: f5:12:74:37:0a:31:47:8b:48:90:d1:a6:b4:73:b6:7f:8a:46: d1:91:0c:94:59:55:ea:68:22:e5:10:ec:d2:8c:37:26:b0:82: 2f:fa:7b:a8:f7:2b:49:5b:44:9f:c9:a6:c7:45:28:9f:bb:30: 26:8c:08:3f:63:52:bd:32:2e:e9:76:2d:43:b4:7b:20:fd:13: 42:84:97:6a:e1:4b:a9:7c:e2:c5:45:dc:b3:ea:c2:97:4e:3c: c0:ee:87:30:fa:1a:b3:27:34:8e:c7:96:03:30:b4:a0:30:f6: 78:e8:6e:94:36:0d:57:52:e0:9a:8d:0e:ad:95:eb:86:66:00: 35:bb:0e:1c:ab:9b:d5:58:e7:61:45:df:f1:e5:1e:09:b3:01: f8:47:0c:31:24:6b:ee:74:a0:82:02:e8:1b:7b:5e:c6:5c:57: e8:1d:46:5c:d1:91:77:7a:98:cf:cb:3b:52:a9:c4:a3:e3:09: 31:c4:ad:bf:20:ad:27:47:47:b8:92:cb:3c:87:a8:ab:8a:0c: 77:d3:3b:a8:3f:80:39:e8:1b:45:a5:17:db:c6:9c:6e:a4:1f: 26:b0:1b:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCCai2S80qBb6KvlJH+CV7/N95XowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDA5WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2FkNTU0ZGJhNjQxODNmNzNkZTE1MWFkYjI1YzYwMjJl NTU5MTM5MThhZGI2NjU3ZDNkZDNmZmY2YmI2MGM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzMLMofWRGMS3kKO8CFF0sVCtkX9gwj17ohNrhh5wGcBSB f0qMwgQ6zHIDbltinaPCJENvPJlu9ivgBm3rJVBPamSs87JpIdfD9/miKAqw5Jrh ayWTmvRm0rWXMPCo5pnL3YSszoBVgllrH0ZQWalx8HwmbzyldTmNhFWGMd1AjCDY rcpBWTjGmVSlC6nI/Grc1lktylfsaLRQGvubVashHMcIi7Tq52Mtdm2qp/7lzXpU NUu8SasFBKGojz+ufJo4q992HZRVWne9zNbNxsTtuqr3u5WNs8qvmYbNCcRKW5OV zfrUbFCO4WWWfjbybbDr0FZHy+FLzSxHoYtvvisnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOPJP3rZ+QDXIb+KqVnHxsqiF0C4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNThkNTdkLTAyMWUtNGNiMi05M2IwLTc1MGZhZGM2Y2E2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR8wDQYJKoZIhvcNAQELBQADggEBAHYl0hOeAAOAp4JZvtQlwtQt rDd/kA5x8LCbduSLXTFdGzNxnvUSdDcKMUeLSJDRprRztn+KRtGRDJRZVepoIuUQ 7NKMNyawgi/6e6j3K0lbRJ/JpsdFKJ+7MCaMCD9jUr0yLul2LUO0eyD9E0KEl2rh S6l84sVF3LPqwpdOPMDuhzD6GrMnNI7HlgMwtKAw9njobpQ2DVdS4JqNDq2V64Zm ADW7Dhyrm9VY52FF3/HlHgmzAfhHDDEka+50oIIC6Bt7XsZcV+gdRlzRkXd6mM/L O1KpxKPjCTHErb8grSdHR7iSyzyHqKuKDHfTO6g/gDnoG0WlF9vGnG6kHyawG20= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:35 2026 by rpki-client