$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa File: dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa (raw, json) Hash identifier: wthHSwb4FJ5hTqV1DC6dbiGpU9UdKBm87DfRzpERAMc= Subject key identifier: AC:A6:00:A5:A4:DF:70:02:C7:6A:70:A2:E4:8F:11:8F:3C:AB:0F:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5EC7BE43B7D97FAEBBCB23CADAFCFAAA38C5300C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa Signing time: Thu 23 Jul 2026 15:00:32 +0000 ROA not before: Thu 23 Jul 2026 15:00:32 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c7:be:43:b7:d9:7f:ae:bb:cb:23:ca:da:fc:fa:aa:38:c5:30:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:32 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=dde646f135572ab873c0c6e8c2b27c376bfb7a68b23bc860718680c4fb5586d3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:8c:32:f0:b9:c3:ee:0d:dc:bf:a5:ce:64: dc:84:ec:4e:28:fd:c1:a1:b2:f6:17:0f:86:08:a7: fc:ed:9e:1f:d3:49:37:a0:b3:cc:34:53:ee:76:6d: 62:d8:75:b6:f5:c1:98:0d:fa:ca:88:04:6c:a5:b6: cd:c2:c1:61:ca:9b:84:7c:f1:b5:b2:b8:23:6c:42: 84:19:0a:df:10:63:2b:48:16:36:29:a4:fe:7d:10: fa:97:04:7f:40:83:e5:4e:0e:5f:4d:28:ac:fc:c0: ce:a7:12:98:0e:1b:12:1c:36:c0:98:31:c9:fe:32: 6c:4f:ef:4a:48:b6:d6:a8:4d:b1:0d:d9:f7:2d:19: fb:9c:14:27:49:1b:98:f8:b1:5a:fd:a6:90:31:f5: 64:d5:36:ed:cb:3d:78:3b:72:6d:99:ba:14:ea:f4: 7e:0e:5e:f5:3f:71:3e:5b:71:24:d0:db:ba:70:c3: 13:04:ac:84:c2:29:05:1b:20:c1:c8:27:30:91:44: 8a:b6:50:98:4a:fa:cd:a9:43:0c:ed:11:f1:89:0a: 58:d0:42:76:ec:34:00:a2:11:5f:bd:59:ac:b6:55: ac:f4:0a:0b:47:54:aa:f9:96:c5:bf:50:c1:78:0a: d7:f6:c1:0a:e4:d9:3f:6a:da:6e:ae:00:93:93:6c: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A6:00:A5:A4:DF:70:02:C7:6A:70:A2:E4:8F:11:8F:3C:AB:0F:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6112::/48 Signature Algorithm: sha256WithRSAEncryption 81:b7:dc:79:d8:67:6f:7b:90:60:62:7a:5e:35:d0:68:76:24: a5:8b:cc:52:18:38:41:7c:31:7d:32:e1:02:31:1c:11:67:72: 17:69:39:9d:ed:4d:7a:85:ef:e9:c3:66:87:26:95:e9:8a:45: c7:84:95:e8:0d:3e:7d:d9:41:73:96:bd:7b:75:ad:a3:1f:4c: da:06:60:8c:ba:b5:f2:8b:bc:3f:7c:8b:b3:e9:2f:d3:42:ad: c5:92:d9:70:d7:97:37:0d:c5:cb:e0:7c:5b:b3:31:c1:47:22: 4e:e0:78:ff:e0:b6:ad:9d:a3:f7:ec:e2:41:33:27:ad:f5:cd: fc:d8:ea:fb:df:00:d8:43:f1:db:03:13:da:06:fa:4b:88:1d: 14:13:9e:21:5e:fe:1e:f6:0b:de:8b:c3:5f:80:fd:87:f9:a0: 00:42:da:9b:06:95:0d:10:e0:70:c3:2c:58:82:d1:45:1f:1e: 4e:e0:8f:60:d8:49:93:0c:7b:da:a8:71:60:0a:b4:43:cd:bf: 47:4d:bf:13:83:bb:be:67:1f:10:d5:65:ef:32:3f:dc:7e:99: 77:92:90:59:17:95:b4:5a:ef:b3:25:3a:a4:f4:53:01:9c:b4: 6f:83:82:fe:55:88:7a:18:72:88:dc:19:e0:a5:01:e3:3f:4e: ae:b2:4a:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXse+Q7fZf667yyPK2vz6qjjFMAwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGU2NDZmMTM1NTcyYWI4NzNjMGM2ZThjMmIyN2MzNzZi ZmI3YTY4YjIzYmM4NjA3MTg2ODBjNGZiNTU4NmQzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwvIwy8LnD7g3cv6XOZNyE7E4o/cGhsvYXD4YIp/ztnh/T STegs8w0U+52bWLYdbb1wZgN+sqIBGylts3CwWHKm4R88bWyuCNsQoQZCt8QYytI FjYppP59EPqXBH9Ag+VODl9NKKz8wM6nEpgOGxIcNsCYMcn+MmxP70pIttaoTbEN 2fctGfucFCdJG5j4sVr9ppAx9WTVNu3LPXg7cm2ZuhTq9H4OXvU/cT5bcSTQ27pw wxMErITCKQUbIMHIJzCRRIq2UJhK+s2pQwztEfGJCljQQnbsNACiEV+9Way2Vaz0 CgtHVKr5lsW/UMF4Ctf2wQrk2T9q2m6uAJOTbMbHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrKYApaTfcALHanCi5I8RjzyrD80wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhYzZhNWNhLTQ5OTEtNDcwNy05NjQ2LTVlZWVjZTdiMGJjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRIwDQYJKoZIhvcNAQELBQADggEBAIG33HnYZ297kGBiel410Gh2 JKWLzFIYOEF8MX0y4QIxHBFnchdpOZ3tTXqF7+nDZocmlemKRceElegNPn3ZQXOW vXt1raMfTNoGYIy6tfKLvD98i7PpL9NCrcWS2XDXlzcNxcvgfFuzMcFHIk7geP/g tq2do/fs4kEzJ631zfzY6vvfANhD8dsDE9oG+kuIHRQTniFe/h72C96Lw1+A/Yf5 oABC2psGlQ0Q4HDDLFiC0UUfHk7gj2DYSZMMe9qocWAKtEPNv0dNvxODu75nHxDV Ze8yP9x+mXeSkFkXlbRa77MlOqT0UwGctG+Dgv5ViHoYcojcGeClAeM/Tq6ySrA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:53:14 2026 by rpki-client