$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa File: d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa (raw, json) Hash identifier: t9eVT/LjeGYG87RV8eUkOSQ2uuQ+sR0GJnUovkFQHyw= Subject key identifier: B2:4A:6E:1E:3B:60:85:FC:FE:E8:DC:63:01:A6:B5:E0:83:F9:DE:30 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68DFCD786116F19A5995FF8CF1D95DE0765519E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa Signing time: Thu 23 Jul 2026 15:10:51 +0000 ROA not before: Thu 23 Jul 2026 15:10:51 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:df:cd:78:61:16:f1:9a:59:95:ff:8c:f1:d9:5d:e0:76:55:19:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:51 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=6437ab70ca40651effae7859596bbb7b37c503a930df99aa347dc216d7f075ac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:d6:61:8e:dd:23:45:9e:45:01:4c:18:b2: 92:81:29:1a:da:d8:f8:3d:12:a2:b9:30:52:83:e4: 1a:2e:c8:d7:93:a6:3e:dd:77:05:18:0c:51:e1:4a: 83:6c:94:09:68:af:e9:09:46:44:ff:bf:3d:48:c3: 86:56:66:c6:6c:05:cf:65:ac:77:34:bb:df:7f:27: c3:b7:5d:ae:d7:c9:1e:d3:36:48:3d:d9:33:96:d5: b6:1f:f1:7d:1e:01:64:1f:41:5a:11:5f:07:c3:af: 0f:c6:69:e7:39:cd:9d:52:0d:49:bf:ba:85:6e:a7: 23:c3:c0:52:fb:ba:22:d0:5d:ff:b9:e8:40:ed:dd: e6:78:66:c4:9e:b9:96:89:c1:88:96:1f:8a:a3:38: 31:d6:04:71:30:85:e9:07:3e:f3:92:23:63:8d:45: 2b:45:a6:13:67:f4:39:08:a9:c4:98:28:19:de:c5: 70:5e:02:b9:51:f5:af:c3:9e:29:81:b0:c3:09:3e: 33:6b:db:40:d6:07:78:0c:bc:7b:77:62:4e:fd:3c: 2a:3a:43:23:03:ad:c5:ae:85:5a:de:42:61:cb:8c: 0c:2e:a3:fa:c5:fb:16:79:60:cc:05:e4:15:a6:a2: f4:9c:07:9b:11:b4:8a:9c:1b:26:b8:13:4a:c8:cc: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:6E:1E:3B:60:85:FC:FE:E8:DC:63:01:A6:B5:E0:83:F9:DE:30 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d87c0155-8519-40f6-b9d9-99e1ab6574d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611c::/48 Signature Algorithm: sha256WithRSAEncryption 2d:95:dc:9a:29:25:a3:bc:33:74:5c:c8:7d:b9:17:6d:fe:9d: 11:78:44:1c:bf:c0:c4:d9:16:68:bc:3a:b4:36:24:4d:4f:76: 6d:4d:51:58:f5:1d:b7:65:14:8c:4b:03:6a:04:5a:a8:1a:79: ae:b7:a5:b4:56:44:18:73:7b:d7:25:48:84:ab:24:c5:63:4a: 30:90:b0:8a:bf:5e:b3:98:b4:c3:0f:ff:f3:ad:b4:ab:4e:f2: ac:0a:1b:37:c1:9b:14:53:fd:f3:03:07:b9:3d:18:e8:2b:f0: 64:13:f9:4b:88:b2:e3:23:f8:95:c6:d9:51:4d:3d:73:40:4a: 98:ad:54:49:39:b2:66:ae:9e:70:ac:32:dc:2c:47:b7:6c:a2: 6b:66:4b:1b:cc:ac:fa:d4:41:e4:ab:a9:da:e6:41:1d:b6:5a: 33:75:3a:c1:dc:08:df:46:08:c0:f0:4e:98:2a:61:75:29:c8: 68:c4:ed:fb:fb:d0:0f:b5:bd:95:74:68:9b:f7:41:03:77:f3: d6:11:d1:af:07:50:dc:2e:20:9b:ee:a7:94:d9:cb:47:fd:f9: 10:77:9a:f6:4f:17:37:e9:6f:d5:1d:0e:8d:83:54:99:9f:63: ca:55:95:44:74:bb:b9:67:31:d7:65:5a:96:64:17:4a:23:db: 0d:e2:34:32 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaN/NeGEW8ZpZlf+M8dld4HZVGegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDUxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDM3YWI3MGNhNDA2NTFlZmZhZTc4NTk1OTZiYmI3YjM3 YzUwM2E5MzBkZjk5YWEzNDdkYzIxNmQ3ZjA3NWFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbfdZhjt0jRZ5FAUwYspKBKRra2Pg9EqK5MFKD5BouyNeT pj7ddwUYDFHhSoNslAlor+kJRkT/vz1Iw4ZWZsZsBc9lrHc0u99/J8O3Xa7XyR7T Nkg92TOW1bYf8X0eAWQfQVoRXwfDrw/Gaec5zZ1SDUm/uoVupyPDwFL7uiLQXf+5 6EDt3eZ4ZsSeuZaJwYiWH4qjODHWBHEwhekHPvOSI2ONRStFphNn9DkIqcSYKBne xXBeArlR9a/DnimBsMMJPjNr20DWB3gMvHt3Yk79PCo6QyMDrcWuhVreQmHLjAwu o/rF+xZ5YMwF5BWmovScB5sRtIqcGya4E0rIzJ2fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUskpuHjtghfz+6NxjAaa14IP53jAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q4N2MwMTU1LTg1MTktNDBmNi1iOWQ5LTk5ZTFhYjY1NzRkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRwwDQYJKoZIhvcNAQELBQADggEBAC2V3JopJaO8M3RcyH25F23+ nRF4RBy/wMTZFmi8OrQ2JE1Pdm1NUVj1HbdlFIxLA2oEWqgaea63pbRWRBhze9cl SISrJMVjSjCQsIq/XrOYtMMP//OttKtO8qwKGzfBmxRT/fMDB7k9GOgr8GQT+UuI suMj+JXG2VFNPXNASpitVEk5smaunnCsMtwsR7dsomtmSxvMrPrUQeSrqdrmQR22 WjN1OsHcCN9GCMDwTpgqYXUpyGjE7fv70A+1vZV0aJv3QQN389YR0a8HUNwuIJvu p5TZy0f9+RB3mvZPFzfpb9UdDo2DVJmfY8pVlUR0u7lnMddlWpZkF0oj2w3iNDI= -----END CERTIFICATE-----Generated at Thu Jul 23 22:35:16 2026 by rpki-client