$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa File: eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa (raw, json) Hash identifier: bAqeirqnN2vDPeGj73zgi+KIPfdzAlz6SWOy7DL0L8Q= Subject key identifier: 51:01:DE:90:D2:DD:34:C8:AB:D8:5B:8F:56:01:E0:E3:AC:66:D0:F5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1D2F24BCC9DAD4EDD3E0D22D457EF26EDF5FD25A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa Signing time: Mon 20 Jul 2026 00:50:09 +0000 ROA not before: Mon 20 Jul 2026 00:50:09 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:24:bc:c9:da:d4:ed:d3:e0:d2:2d:45:7e:f2:6e:df:5f:d2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 20 00:50:09 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=7210f451fdfbd80c2df790121686d74c77a4930dddb2ed818073999b7987149c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:fd:45:2d:ff:06:6e:bc:43:4e:50:bb:94: 43:dd:89:50:b6:ba:5c:60:5b:ba:aa:05:e3:d7:90: c7:5d:5c:ba:fb:92:46:86:1f:3b:7d:78:37:70:80: b5:9f:ab:4c:04:aa:ce:b0:13:ad:fd:eb:cc:ca:54: 08:e4:6c:83:33:7a:83:f7:6b:71:24:fa:f3:3d:cf: ee:33:68:67:09:33:a8:86:1e:04:d5:ad:a4:d3:20: c9:11:40:51:05:0e:a0:8c:70:90:36:40:23:87:97: ac:38:af:90:a4:cf:08:9a:02:11:99:d5:4d:56:8d: 46:0a:07:30:fd:c9:b3:4f:19:ab:8e:0b:1f:2a:ae: 7b:2e:85:f9:90:f9:65:28:42:65:dc:d9:c5:5d:aa: 72:af:c1:09:27:5c:d6:fd:53:bb:7d:7f:21:09:4a: 40:f5:54:f2:a6:7f:16:b2:b6:f2:db:19:43:59:50: 05:27:90:32:bb:4d:d2:0d:32:3a:ea:6f:93:48:af: 88:4d:f7:78:12:1b:18:ce:dd:c0:fc:80:9d:82:aa: 9b:a7:ce:dd:95:b8:49:1e:5e:aa:74:cc:bc:d3:49: 88:ad:aa:8d:bd:52:cc:6a:71:cd:56:89:27:1d:7e: 77:a0:cb:f4:15:09:77:a4:ce:7a:2e:a0:ff:95:df: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:DE:90:D2:DD:34:C8:AB:D8:5B:8F:56:01:E0:E3:AC:66:D0:F5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 1d:17:bb:f6:16:23:77:a2:00:ba:de:7c:ea:26:7c:72:40:3a: bc:46:8b:26:c9:8a:e8:0c:bf:85:49:0a:7b:95:23:56:ae:92: 79:c9:b7:b1:e1:cf:26:af:66:1a:a7:28:28:dd:5c:24:3e:2e: 5b:ca:d9:0b:c7:87:0f:ee:52:39:b4:34:f4:c8:1f:80:3f:3b: e5:58:9a:ad:62:a8:ea:56:cc:4c:63:0d:5d:e2:db:71:02:98: 5f:5a:3a:f3:4d:85:ff:5c:c9:0a:48:b0:70:24:9b:24:81:dc: 7f:e7:e4:01:e1:3e:57:bd:d8:01:5e:8b:f3:b6:9d:8e:00:aa: f1:19:79:14:18:37:ff:ba:28:59:53:ec:4f:e2:67:db:c8:67: b0:88:6d:bc:be:a0:81:2a:6a:2e:1a:d1:82:a5:c8:5f:f3:af: c9:4f:e5:dc:ec:72:7d:6e:fa:26:dc:93:8e:be:95:ec:1a:f1: e2:e8:5e:61:11:09:99:00:80:e1:52:5b:10:d7:54:52:70:8a: c7:b0:f5:1e:6e:d8:e0:cd:11:02:c9:6b:62:d4:b3:30:3a:28: e8:16:34:3c:1d:f6:06:bb:84:6e:78:f8:96:31:10:98:9f:cb: 3a:86:46:2f:c7:b8:52:d6:a9:f8:b9:c5:1c:bf:4c:de:c2:b5: 7e:66:51:f9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHS8kvMna1O3T4NItRX7ybt9f0lowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIwMDA1MDA5WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjEwZjQ1MWZkZmJkODBjMmRmNzkwMTIxNjg2ZDc0Yzc3 YTQ5MzBkZGRiMmVkODE4MDczOTk5Yjc5ODcxNDljMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPLf1FLf8GbrxDTlC7lEPdiVC2ulxgW7qqBePXkMddXLr7 kkaGHzt9eDdwgLWfq0wEqs6wE63968zKVAjkbIMzeoP3a3Ek+vM9z+4zaGcJM6iG HgTVraTTIMkRQFEFDqCMcJA2QCOHl6w4r5CkzwiaAhGZ1U1WjUYKBzD9ybNPGauO Cx8qrnsuhfmQ+WUoQmXc2cVdqnKvwQknXNb9U7t9fyEJSkD1VPKmfxaytvLbGUNZ UAUnkDK7TdINMjrqb5NIr4hN93gSGxjO3cD8gJ2Cqpunzt2VuEkeXqp0zLzTSYit qo29Usxqcc1WiScdfnegy/QVCXekznouoP+V3zq5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUQHekNLdNMir2FuPVgHg46xm0PUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VhYTQ0ZDYwLTc0M2YtNDQ2ZS05YzIwLTBiMGI3MTdlZTFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQAwDQYJKoZIhvcNAQELBQADggEBAB0Xu/YWI3eiALrefOomfHJA OrxGiybJiugMv4VJCnuVI1auknnJt7HhzyavZhqnKCjdXCQ+LlvK2QvHhw/uUjm0 NPTIH4A/O+VYmq1iqOpWzExjDV3i23ECmF9aOvNNhf9cyQpIsHAkmySB3H/n5AHh Ple92AFei/O2nY4AqvEZeRQYN/+6KFlT7E/iZ9vIZ7CIbby+oIEqai4a0YKlyF/z r8lP5dzscn1u+ibck46+lewa8eLoXmERCZkAgOFSWxDXVFJwisew9R5u2ODNEQLJ a2LUszA6KOgWNDwd9ga7hG54+JYxEJifyzqGRi/HuFLWqfi5xRy/TN7CtX5mUfk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:19:30 2026 by rpki-client