$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa File: f8738a51-4689-46b8-a472-d4d0afaca2d7.roa (raw, json) Hash identifier: 91ypu3F7nLbrWjpz/LlXJtYQOEB38fsuWRHATf1A0Tc= Subject key identifier: D5:95:F7:01:9F:80:1F:B8:19:95:04:2E:51:B0:A3:3D:22:6F:60:B8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7A4F68040C05AFCF891D91DBF31C81AB4FFCF807 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa Signing time: Thu 23 Jul 2026 15:00:34 +0000 ROA not before: Thu 23 Jul 2026 15:00:34 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:68:04:0c:05:af:cf:89:1d:91:db:f3:1c:81:ab:4f:fc:f8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:00:34 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=cb58180b494ceda1a8c7d36a1427de16a53354cbd4da22e11a71f22c18256461, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:93:29:f1:d8:fe:d5:af:d1:b7:9a:dc:22: cf:0c:42:62:cc:a0:6e:a1:1d:85:e0:8c:62:d2:4b: dd:c4:18:ed:e1:29:69:cd:ac:ba:f5:ac:82:b1:e7: 99:e2:26:e8:0e:05:eb:cc:4c:3e:2a:91:a1:57:1d: 61:36:96:eb:cb:70:e3:b1:c4:f5:70:34:64:b0:fd: 7f:eb:7c:fc:20:7b:2e:39:29:14:7f:fa:ca:0c:9e: 03:78:15:42:b6:76:4c:1e:af:df:29:54:64:dc:23: 60:4e:fe:ce:14:10:21:2f:0b:41:80:5f:ab:45:d0: 72:07:40:06:8c:8d:a1:23:35:8f:00:80:86:f6:15: a2:67:97:45:a6:4e:3a:cc:d8:11:d8:7c:12:8c:03: 3c:60:e7:9a:0e:2e:6a:04:1a:5e:5d:77:66:2c:3c: a7:2f:4f:c8:bd:4c:e8:b2:88:35:d8:1d:99:b4:b6: 48:78:c4:20:e6:eb:78:f6:4c:87:2d:3f:2c:05:fa: 73:d5:02:b6:c5:fa:61:8a:53:6d:5b:cd:f0:65:a8: 69:0a:57:8d:75:84:b7:29:fb:4c:2d:0d:8a:d6:5d: fe:cd:49:00:45:37:ae:66:79:05:89:10:88:53:1e: a5:7b:86:fd:d1:85:9e:f8:80:2c:4a:d2:52:27:21: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:F7:01:9F:80:1F:B8:19:95:04:2E:51:B0:A3:3D:22:6F:60:B8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4::/48 Signature Algorithm: sha256WithRSAEncryption 2b:6d:9f:a7:b9:39:db:3a:1a:7c:c9:a6:3d:05:cc:2b:b3:a5: 6f:54:cb:51:ff:3e:a5:c5:6a:c5:24:f5:fe:5a:0c:f2:99:de: f4:27:af:c6:6f:ef:bb:01:b6:ca:b5:1a:e5:c5:4d:d0:f2:6a: 79:ea:63:c8:2c:cf:84:81:7f:c2:48:55:e5:21:cf:93:2c:74: a5:94:3c:c3:bb:71:c9:5f:6a:66:d5:72:f0:55:d2:95:f8:d0: 3d:c2:7f:31:9d:81:70:03:ab:ab:b1:de:53:cd:e7:ce:40:02: ab:1e:ee:d7:dc:67:cb:d8:fc:ee:7d:9f:62:bf:2c:b3:58:46: 55:d5:de:4a:23:84:29:6f:3a:b3:ab:36:25:60:8e:34:89:8f: b0:59:5a:75:d9:82:51:4b:37:56:3a:28:04:47:e8:f5:67:cd: 04:d4:0d:ce:d0:05:93:35:77:97:6d:78:27:a8:6b:25:8a:72: 85:0e:35:65:79:9f:f1:33:a8:1c:b9:29:b3:6c:87:06:dd:e6: d7:f4:dc:17:9d:73:23:2e:c1:9b:ef:c2:e7:bb:78:23:a6:8c: 91:ab:54:37:18:f9:73:3f:e7:1e:5e:fc:7d:92:54:31:9a:48: 4e:8d:0e:a0:62:c7:30:d1:90:c8:17:07:70:e6:c8:7e:6c:62: b2:62:a5:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUek9oBAwFr8+JHZHb8xyBq0/8+AcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDM0WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjU4MTgwYjQ5NGNlZGExYThjN2QzNmExNDI3ZGUxNmE1 MzM1NGNiZDRkYTIyZTExYTcxZjIyYzE4MjU2NDYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUoJMp8dj+1a/Rt5rcIs8MQmLMoG6hHYXgjGLSS93EGO3h KWnNrLr1rIKx55niJugOBevMTD4qkaFXHWE2luvLcOOxxPVwNGSw/X/rfPwgey45 KRR/+soMngN4FUK2dkwer98pVGTcI2BO/s4UECEvC0GAX6tF0HIHQAaMjaEjNY8A gIb2FaJnl0WmTjrM2BHYfBKMAzxg55oOLmoEGl5dd2YsPKcvT8i9TOiyiDXYHZm0 tkh4xCDm63j2TIctPywF+nPVArbF+mGKU21bzfBlqGkKV411hLcp+0wtDYrWXf7N SQBFN65meQWJEIhTHqV7hv3RhZ74gCxK0lInIWj1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1ZX3AZ+AH7gZlQQuUbCjPSJvYLgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NzM4YTUxLTQ2ODktNDZiOC1hNDcyLWQ0ZDBhZmFjYTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAQwDQYJKoZIhvcNAQELBQADggEBACttn6e5Ods6GnzJpj0FzCuz pW9Uy1H/PqXFasUk9f5aDPKZ3vQnr8Zv77sBtsq1GuXFTdDyannqY8gsz4SBf8JI VeUhz5MsdKWUPMO7cclfambVcvBV0pX40D3CfzGdgXADq6ux3lPN585AAqse7tfc Z8vY/O59n2K/LLNYRlXV3kojhClvOrOrNiVgjjSJj7BZWnXZglFLN1Y6KARH6PVn zQTUDc7QBZM1d5dteCeoayWKcoUONWV5n/EzqBy5KbNshwbd5tf03BedcyMuwZvv wue7eCOmjJGrVDcY+XM/5x5e/H2SVDGaSE6NDqBixzDRkMgXB3DmyH5sYrJipaY= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:20 2026 by rpki-client