$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa File: e261d9a6-4c2a-42cf-aec3-29a76a536226.roa (raw, json) Hash identifier: SuwXEw+7lK6xbBRa9eVYTfbvqosjIag/ptA74CyNSus= Subject key identifier: A1:DC:F0:AF:24:88:28:84:C9:B8:ED:2B:89:03:63:C5:35:DE:F7:08 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48527A36CCDC4395AD579D965A940A3E53AB2E13 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa Signing time: Sun 12 Jul 2026 00:00:06 +0000 ROA not before: Sun 12 Jul 2026 00:00:06 +0000 ROA not after: Sat 10 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:52:7a:36:cc:dc:43:95:ad:57:9d:96:5a:94:0a:3e:53:ab:2e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 12 00:00:06 2026 GMT Not After : Oct 10 23:59:59 2026 GMT Subject: serialNumber=da04ddc190aa51ba030495090332c450a2062136d822495967f345b388fafba2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:da:cb:0a:6e:dc:1f:0b:a5:d8:f0:46:e1: 75:37:75:bb:24:2a:80:d8:a0:18:bb:78:e8:12:37: 60:6b:e7:bb:96:45:c7:8c:bc:3c:f7:3e:a7:fb:55: 98:4c:63:d3:3d:d2:7e:61:d5:af:a9:4d:2b:bb:57: 3f:2c:5d:e3:84:00:68:f0:13:e8:a3:7e:0e:c7:23: c3:50:9c:a6:ae:36:d7:14:3f:40:a4:df:59:4a:03: 85:09:94:41:e4:b3:4e:02:d6:9d:ee:59:8c:81:af: d1:28:c5:f5:c4:06:77:c2:a0:9b:ac:62:b1:f9:a9: 7e:9f:38:18:74:b7:82:7b:7a:cb:0d:d6:c1:84:eb: 49:2e:3f:05:20:0a:e4:5c:b9:32:40:89:b2:7d:5a: c6:dc:b3:a5:c5:a1:02:15:78:62:15:00:41:25:ac: 26:9c:5b:5f:bc:bc:81:0f:5a:85:45:65:dd:9a:f2: 2c:f2:76:6f:13:51:ff:a8:9f:fd:dd:b2:c4:fc:01: c5:d7:71:cf:65:6d:d9:5f:a6:3e:b2:e2:7f:f7:55: eb:18:58:28:b6:ab:ae:09:3f:f3:8b:c0:68:bd:27: 81:dc:ca:2e:f9:3d:83:5e:31:0a:5a:d4:0a:46:88: 67:f9:8a:eb:72:1d:70:05:b4:95:dd:23:66:eb:20: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DC:F0:AF:24:88:28:84:C9:B8:ED:2B:89:03:63:C5:35:DE:F7:08 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e261d9a6-4c2a-42cf-aec3-29a76a536226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5504::/48 Signature Algorithm: sha256WithRSAEncryption 19:f9:b2:ae:5e:11:13:02:fd:af:e2:7b:7a:e5:46:b1:3d:e9: 88:40:60:18:36:8a:62:56:d6:98:f2:57:d0:1d:a5:c7:84:5e: 2d:75:ed:90:55:e3:e2:b5:62:24:62:e9:ed:7a:52:95:e5:30: 36:3d:94:c5:ba:80:06:9f:15:d3:5e:d2:e8:33:20:17:cf:09: 3f:3a:fc:9f:98:f2:29:38:31:30:ee:26:cb:af:a4:03:65:44: 68:a9:af:c0:80:8f:cb:03:b7:9d:ab:d5:ce:cc:4b:c0:52:a1: bd:24:57:ed:94:08:ef:35:60:11:10:e3:0c:15:0b:6f:d5:2d: ba:d5:56:3a:37:47:0a:42:dc:ad:8f:44:b1:0c:4f:b9:59:07: 47:84:97:b2:a2:23:67:8c:f4:0b:78:9f:dd:62:3c:20:ac:39: 6e:8d:10:f5:4f:70:86:e9:38:00:73:42:b6:d7:a7:9f:c4:17: 15:9f:30:ec:56:2e:c7:7c:a4:43:a8:ab:ca:cc:4d:28:ea:e9: eb:22:fa:73:13:50:4c:c0:2b:53:51:be:87:21:a5:33:df:2a: 36:e9:a9:31:8d:1b:bc:ca:4e:e9:d0:f9:83:e5:77:97:48:73: 08:06:12:d0:8a:fb:5e:b8:73:2d:0e:21:9c:99:95:bb:e9:8c: 5a:1b:d9:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSFJ6NszcQ5WtV52WWpQKPlOrLhMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzEyMDAwMDA2WhcNMjYxMDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTA0ZGRjMTkwYWE1MWJhMDMwNDk1MDkwMzMyYzQ1MGEy MDYyMTM2ZDgyMjQ5NTk2N2YzNDViMzg4ZmFmYmEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDI9rLCm7cHwul2PBG4XU3dbskKoDYoBi7eOgSN2Br57uW RceMvDz3Pqf7VZhMY9M90n5h1a+pTSu7Vz8sXeOEAGjwE+ijfg7HI8NQnKauNtcU P0Ck31lKA4UJlEHks04C1p3uWYyBr9EoxfXEBnfCoJusYrH5qX6fOBh0t4J7essN 1sGE60kuPwUgCuRcuTJAibJ9Wsbcs6XFoQIVeGIVAEElrCacW1+8vIEPWoVFZd2a 8izydm8TUf+on/3dssT8AcXXcc9lbdlfpj6y4n/3VesYWCi2q64JP/OLwGi9J4Hc yi75PYNeMQpa1ApGiGf5iutyHXAFtJXdI2brIGm5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUodzwrySIKITJuO0riQNjxTXe9wgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UyNjFkOWE2LTRjMmEtNDJjZi1hZWMzLTI5YTc2YTUzNjIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQQwDQYJKoZIhvcNAQELBQADggEBABn5sq5eERMC/a/ie3rlRrE9 6YhAYBg2imJW1pjyV9AdpceEXi117ZBV4+K1YiRi6e16UpXlMDY9lMW6gAafFdNe 0ugzIBfPCT86/J+Y8ik4MTDuJsuvpANlRGipr8CAj8sDt52r1c7MS8BSob0kV+2U CO81YBEQ4wwVC2/VLbrVVjo3RwpC3K2PRLEMT7lZB0eEl7KiI2eM9At4n91iPCCs OW6NEPVPcIbpOABzQrbXp5/EFxWfMOxWLsd8pEOoq8rMTSjq6esi+nMTUEzAK1NR vochpTPfKjbpqTGNG7zKTunQ+YPld5dIcwgGEtCK+164cy0OIZyZlbvpjFob2RY= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:00 2026 by rpki-client