$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa File: ee2c3586-4c23-4045-b98b-d28000a3bd55.roa (raw, json) Hash identifier: DtIA/2zM6xs+f6kQF8eZRpjCJaP6rpgBYiLqmxwixIo= Subject key identifier: 79:9A:85:3C:8E:A2:95:8F:17:E1:1F:78:25:B1:22:00:C4:DE:3B:5E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C00649A08155921214F37D8C39E92A803123479 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa Signing time: Thu 23 Jul 2026 15:10:10 +0000 ROA not before: Thu 23 Jul 2026 15:10:10 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5503::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:00:64:9a:08:15:59:21:21:4f:37:d8:c3:9e:92:a8:03:12:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:10 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=8fd7d9413cadcfffb6bdfce7171a80346a46280baf257c9fccb6a97904a7bc5d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:fc:4f:78:2e:bc:b8:ce:a3:3f:5e:19:18: b1:46:4b:de:e8:59:26:1f:25:44:47:6a:65:29:ae: ae:19:d2:ac:5d:3e:f7:a6:51:cd:c6:c9:b1:15:76: 3d:9c:19:f6:e3:8b:e4:de:c9:bb:24:53:82:4f:67: ad:1b:3d:9e:81:b7:0c:31:c8:ad:85:f7:4f:94:b8: 1b:d6:2a:5c:f5:2b:fe:67:a8:1f:35:d2:08:8d:43: f6:1e:2f:8b:d7:da:aa:f1:6b:02:29:ec:2f:ca:9c: 0e:d6:cc:ce:63:56:bd:40:0c:57:77:9d:0a:7c:a3: f4:59:6c:9f:b7:9b:0d:54:7f:29:2d:83:c4:0f:78: ae:60:c4:58:1a:74:d0:92:78:ea:6f:45:a6:6a:98: 31:f7:13:4e:95:46:be:51:a6:9b:24:56:a4:88:af: da:dd:e1:b2:8e:56:c9:b9:a2:f3:b6:c7:d8:aa:9b: f8:ff:bd:5d:d8:bb:be:e7:0b:2f:29:76:41:f2:15: 8b:81:18:08:8e:51:b3:29:41:b7:89:70:7c:2c:d6: 6c:ae:e4:27:9d:a6:0d:6c:a9:97:fb:eb:e3:7d:24: 08:93:61:c0:98:15:d0:f7:b7:95:e3:bb:d3:be:68: 76:f3:3c:f8:05:61:e3:ae:9d:e2:d7:14:08:6b:55: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:85:3C:8E:A2:95:8F:17:E1:1F:78:25:B1:22:00:C4:DE:3B:5E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5503::/48 Signature Algorithm: sha256WithRSAEncryption 16:bc:ee:50:d9:b4:f1:e3:8c:c5:1c:2f:d0:28:b3:be:7e:74: d6:9f:83:bb:16:5a:57:51:b5:70:68:e9:d9:af:83:44:94:86: 9e:48:9a:4d:f3:2a:7c:bc:03:78:9b:38:db:e5:37:9d:42:7d: bf:c9:87:cf:91:90:c2:bb:f8:95:9a:17:77:9b:a4:d2:eb:b6: 8d:1d:77:7e:a6:78:1e:16:32:f2:d0:92:07:23:b0:6d:be:d6: 06:85:a7:91:08:57:c2:50:c7:c7:fb:f6:79:91:84:fe:c0:85: bd:78:88:3c:c4:3b:a8:c0:3c:85:87:be:3f:e0:75:a4:1c:1a: 54:41:62:f1:c1:c4:58:6c:59:c7:b5:05:c6:62:60:df:1b:78: b1:9a:8a:13:a8:51:85:c7:18:cb:ce:5b:1b:34:ab:7c:9d:ca: 8d:f5:8e:b7:55:ad:4e:56:77:0e:b5:c9:cf:88:ed:0b:6d:53: 1d:cb:73:4b:85:4a:d4:61:d6:07:91:e6:80:0a:1c:0a:33:7d: 46:ec:ac:30:e4:ab:8f:2f:4d:d9:0a:5a:85:02:96:a4:64:dc: 4b:a0:af:2a:2a:e0:27:8e:24:15:64:73:44:87:11:f3:7a:fb: 11:ab:63:1b:29:fd:5a:84:5c:35:4c:ec:11:2c:cc:65:d9:e7: d2:c3:1c:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHABkmggVWSEhTzfYw56SqAMSNHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDEwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmQ3ZDk0MTNjYWRjZmZmYjZiZGZjZTcxNzFhODAzNDZh NDYyODBiYWYyNTdjOWZjY2I2YTk3OTA0YTdiYzVkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmNfxPeC68uM6jP14ZGLFGS97oWSYfJURHamUprq4Z0qxd PvemUc3GybEVdj2cGfbji+TeybskU4JPZ60bPZ6BtwwxyK2F90+UuBvWKlz1K/5n qB810giNQ/YeL4vX2qrxawIp7C/KnA7WzM5jVr1ADFd3nQp8o/RZbJ+3mw1Ufykt g8QPeK5gxFgadNCSeOpvRaZqmDH3E06VRr5RppskVqSIr9rd4bKOVsm5ovO2x9iq m/j/vV3Yu77nCy8pdkHyFYuBGAiOUbMpQbeJcHws1myu5Cedpg1sqZf76+N9JAiT YcCYFdD3t5Xju9O+aHbzPPgFYeOuneLXFAhrVT3rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeZqFPI6ilY8X4R94JbEiAMTeO14wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VlMmMzNTg2LTRjMjMtNDA0NS1iOThiLWQyODAwMGEzYmQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQMwDQYJKoZIhvcNAQELBQADggEBABa87lDZtPHjjMUcL9Aos75+ dNafg7sWWldRtXBo6dmvg0SUhp5Imk3zKny8A3ibONvlN51Cfb/Jh8+RkMK7+JWa F3ebpNLrto0dd36meB4WMvLQkgcjsG2+1gaFp5EIV8JQx8f79nmRhP7Ahb14iDzE O6jAPIWHvj/gdaQcGlRBYvHBxFhsWce1BcZiYN8beLGaihOoUYXHGMvOWxs0q3yd yo31jrdVrU5Wdw61yc+I7QttUx3Lc0uFStRh1geR5oAKHAozfUbsrDDkq48vTdkK WoUClqRk3Eugryoq4CeOJBVkc0SHEfN6+xGrYxsp/VqEXDVM7BEszGXZ59LDHNk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:01:21 2026 by rpki-client