$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa File: da111c82-234c-46a2-a1ef-e848103120cb.roa (raw, json) Hash identifier: eA7thkVo5q1jkzl0gML5yJY3G/NnrmFbwF9G/kSy0F4= Subject key identifier: 78:7C:C4:10:75:85:4E:7B:97:67:8D:0C:2D:EE:2D:55:4A:EE:15:1A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2075166D67EE5F07BC182F2599FFBD858C356FA7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa Signing time: Tue 21 Jul 2026 00:20:03 +0000 ROA not before: Tue 21 Jul 2026 00:20:03 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:110::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:16:6d:67:ee:5f:07:bc:18:2f:25:99:ff:bd:85:8c:35:6f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 21 00:20:03 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=2597166b833349d1bf3052727666542b46dcde9bc2cf4476eb8eeb025a52c7e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:e3:72:50:ff:74:6f:2c:7f:90:57:c2:50: 8f:46:4a:d9:52:ba:63:9d:d2:4a:c4:eb:70:2c:2e: 0c:76:ff:c5:a4:f7:16:a0:00:5a:0d:2b:8d:a4:d5: 75:2f:8b:24:ba:d1:1f:8f:cc:0c:7a:cd:5a:6c:cd: 7a:42:ae:b9:47:e2:04:43:58:86:2f:9d:05:d4:8d: 1a:1c:61:0c:6a:3a:a0:de:85:a7:1b:2d:49:e6:42: 52:96:6a:5a:79:d0:6d:83:25:96:b5:02:c5:8b:8d: 95:de:a0:e8:6a:10:26:fa:dc:81:75:f1:25:9a:98: 62:b9:e9:94:48:1f:e0:3a:61:24:aa:91:c7:fe:da: 41:55:0e:20:3a:89:8b:1b:a2:04:8a:d7:e7:1c:2b: b3:e5:ab:b2:97:6a:d5:ae:3c:28:5b:c7:80:72:91: 5a:41:d9:00:f8:07:98:f8:11:79:ba:0c:80:d3:a9: aa:40:5f:4b:5f:5b:d0:cb:3a:be:d9:32:8f:72:13: 76:52:40:d0:79:e6:10:5d:35:d7:d5:fc:de:ed:14: 14:94:1d:3f:5d:9b:09:1e:6a:aa:da:9b:51:20:2e: ed:50:a9:e2:96:05:06:23:68:f3:25:dd:71:01:b6: 94:66:df:1b:27:05:d6:cd:be:c3:da:42:80:b6:88: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7C:C4:10:75:85:4E:7B:97:67:8D:0C:2D:EE:2D:55:4A:EE:15:1A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:110::/47 Signature Algorithm: sha256WithRSAEncryption 00:e4:31:88:19:55:05:ca:0b:01:75:72:3e:26:50:3a:95:62: 74:77:b9:52:1e:e6:ca:a4:a1:02:62:eb:ff:29:59:ac:4e:2a: d4:8b:f5:d8:39:65:fd:30:b8:be:74:9a:73:93:19:58:e7:f2: 4e:05:b2:1b:8c:ec:8e:78:4c:1b:e5:92:e9:74:90:6e:55:d3: 64:fe:13:2b:a5:8e:ab:42:30:e5:53:0b:79:91:51:37:5d:65: 07:da:6b:58:5a:e8:a7:39:22:39:86:56:27:a6:fc:b3:99:3b: 92:d1:67:8d:93:49:78:49:07:eb:21:a0:f6:32:d3:4b:cf:db: e7:5b:a5:d3:50:d3:ce:a8:bd:f2:02:ab:fc:d5:da:cc:3a:04: a2:60:a4:0f:04:ac:cc:6a:22:21:f2:81:1f:a4:bb:ed:6e:39: 58:97:04:f4:a6:bb:2c:32:46:cc:03:b7:2d:4f:37:33:52:72: 67:42:51:cb:86:ef:fc:5e:5b:2a:65:c2:a6:c9:d1:67:3e:87: f0:bb:2c:78:56:d0:81:ab:87:6a:04:9b:2d:2c:b0:70:2b:ad: 38:68:ab:ed:16:50:e7:90:47:f9:a4:d6:f5:ac:b4:8f:f3:22: 61:c2:b6:72:29:79:6f:d4:cf:98:48:df:06:6c:e8:12:70:0c: fa:82:a4:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIHUWbWfuXwe8GC8lmf+9hYw1b6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIxMDAyMDAzWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTk3MTY2YjgzMzM0OWQxYmYzMDUyNzI3NjY2NTQyYjQ2 ZGNkZTliYzJjZjQ0NzZlYjhlZWIwMjVhNTJjN2U1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVQONyUP90byx/kFfCUI9GStlSumOd0krE63AsLgx2/8Wk 9xagAFoNK42k1XUviyS60R+PzAx6zVpszXpCrrlH4gRDWIYvnQXUjRocYQxqOqDe hacbLUnmQlKWalp50G2DJZa1AsWLjZXeoOhqECb63IF18SWamGK56ZRIH+A6YSSq kcf+2kFVDiA6iYsbogSK1+ccK7Plq7KXatWuPChbx4BykVpB2QD4B5j4EXm6DIDT qapAX0tfW9DLOr7ZMo9yE3ZSQNB55hBdNdfV/N7tFBSUHT9dmwkeaqram1EgLu1Q qeKWBQYjaPMl3XEBtpRm3xsnBdbNvsPaQoC2iPZdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeHzEEHWFTnuXZ40MLe4tVUruFRowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhMTExYzgyLTIzNGMtNDZhMi1hMWVmLWU4NDgxMDMxMjBjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwARAwDQYJKoZIhvcNAQELBQADggEBAADkMYgZVQXKCwF1cj4mUDqV YnR3uVIe5sqkoQJi6/8pWaxOKtSL9dg5Zf0wuL50mnOTGVjn8k4FshuM7I54TBvl kul0kG5V02T+EyuljqtCMOVTC3mRUTddZQfaa1ha6Kc5IjmGViem/LOZO5LRZ42T SXhJB+shoPYy00vP2+dbpdNQ086ovfICq/zV2sw6BKJgpA8ErMxqIiHygR+ku+1u OViXBPSmuywyRswDty1PNzNScmdCUcuG7/xeWyplwqbJ0Wc+h/C7LHhW0IGrh2oE my0ssHArrThoq+0WUOeQR/mk1vWstI/zImHCtnIpeW/Uz5hI3wZs6BJwDPqCpCA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:15 2026 by rpki-client