$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa File: f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa (raw, json) Hash identifier: XKDkIDXEkk3K1j4GbmixVWMPdESJwKIeXrp8B1V2Pis= Subject key identifier: 1C:E6:44:99:C5:36:D3:23:5C:5C:4D:15:7A:9B:A4:CE:11:9E:68:8A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1611781E1E18B42D840BF7E18111D4D281977220 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa Signing time: Thu 23 Jul 2026 15:10:37 +0000 ROA not before: Thu 23 Jul 2026 15:10:37 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:11:78:1e:1e:18:b4:2d:84:0b:f7:e1:81:11:d4:d2:81:97:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 23 15:10:37 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=5934070e953f05231750dd4e0d2501423c0a824119010a9383f3d162351c3582, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:0a:b0:6d:8e:79:70:c8:04:5e:dc:55:b4: fc:11:9a:50:99:1a:9c:1a:8b:92:88:84:7f:80:f5: 5f:24:38:dd:1e:38:86:4b:ca:9a:9e:c5:8b:8b:c9: 25:e7:ef:49:47:af:5d:73:d6:a9:ef:18:a1:ca:6f: 97:ff:82:82:c6:b2:47:f2:8f:11:af:79:1c:2b:b4: d7:dd:e0:a6:ce:9f:c1:7e:26:fc:cf:94:83:17:b3: 45:e4:2d:76:78:bf:6a:5c:2a:8f:1d:55:29:b9:b9: c7:bf:28:9d:25:4c:30:45:51:f5:3f:50:e2:90:9e: 77:6b:7b:74:9f:15:67:5b:2d:e4:e2:6c:95:6e:12: 58:79:da:b2:fb:2c:e4:f7:cd:be:8f:f8:7c:7f:bb: 7f:30:82:c0:4a:2a:14:87:cf:f2:5b:3d:ed:cc:30: 3c:96:c9:7b:72:ed:6a:72:bf:3d:26:76:13:04:11: 55:49:cc:97:11:1e:ed:7b:ea:1a:22:fe:9d:39:58: 46:5e:5c:af:97:99:1c:19:3f:01:91:c1:de:84:b6: 73:b8:dd:c0:99:f5:0a:d3:56:79:e9:35:0e:cf:f9: 25:80:65:88:e4:49:47:fb:c5:9c:e0:6c:8e:61:a4: ab:8e:49:91:5d:00:c8:96:35:76:82:eb:8d:a7:3c: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E6:44:99:C5:36:D3:23:5C:5C:4D:15:7A:9B:A4:CE:11:9E:68:8A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6118::/48 Signature Algorithm: sha256WithRSAEncryption 1f:c4:92:41:3e:a5:b1:83:61:d4:42:2d:d3:13:bd:fd:87:4a: a0:fd:f8:81:78:c9:40:80:c4:ba:2f:12:24:34:60:80:12:78: aa:a2:fc:bc:ba:7f:2f:08:04:5d:00:81:24:9b:a6:c6:db:62: 8e:4b:3e:d6:ad:67:2e:13:b4:4c:62:e8:23:06:a3:27:c9:2e: e3:2e:95:70:d7:66:70:08:3f:36:f2:54:49:ef:aa:59:8d:41: 08:ff:c4:02:2f:2e:fe:fd:9d:03:a0:71:68:fe:77:38:79:97: b1:c4:dd:15:3a:fa:fa:1c:a4:97:f8:3f:ee:0c:80:97:ab:80: cd:bf:96:02:1e:0b:e1:ee:a1:46:8d:73:49:25:41:fa:e9:ee: 95:94:55:70:9a:d1:df:58:f4:f7:82:92:81:6f:ef:3a:01:58: 14:2d:2d:ac:4e:c5:64:2b:55:79:75:5d:64:2e:bf:75:97:71: 51:05:ed:f7:76:13:99:53:2c:a7:88:8a:3b:65:d8:64:4d:b0: ee:5f:ef:b2:41:0d:48:ab:da:31:a5:39:ef:06:c2:73:c5:79: cd:d2:5e:4d:79:06:32:c4:76:bc:e3:80:27:3e:eb:68:5b:fc: dc:e9:6c:22:76:5c:e3:a9:db:db:80:52:13:7f:fd:dd:a9:1e: 3c:2d:ca:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFhF4Hh4YtC2EC/fhgRHU0oGXciAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDM3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTM0MDcwZTk1M2YwNTIzMTc1MGRkNGUwZDI1MDE0MjNj MGE4MjQxMTkwMTBhOTM4M2YzZDE2MjM1MWMzNTgyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkRgqwbY55cMgEXtxVtPwRmlCZGpwai5KIhH+A9V8kON0e OIZLypqexYuLySXn70lHr11z1qnvGKHKb5f/goLGskfyjxGveRwrtNfd4KbOn8F+ JvzPlIMXs0XkLXZ4v2pcKo8dVSm5uce/KJ0lTDBFUfU/UOKQnndre3SfFWdbLeTi bJVuElh52rL7LOT3zb6P+Hx/u38wgsBKKhSHz/JbPe3MMDyWyXty7Wpyvz0mdhME EVVJzJcRHu176hoi/p05WEZeXK+XmRwZPwGRwd6EtnO43cCZ9QrTVnnpNQ7P+SWA ZYjkSUf7xZzgbI5hpKuOSZFdAMiWNXaC642nPCjJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHOZEmcU20yNcXE0VepukzhGeaIowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y5NGE1ZmFlLWQwYTUtNDUwYS05NWQ3LTdkY2E0YjMzYmE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRgwDQYJKoZIhvcNAQELBQADggEBAB/EkkE+pbGDYdRCLdMTvf2H SqD9+IF4yUCAxLovEiQ0YIASeKqi/Ly6fy8IBF0AgSSbpsbbYo5LPtatZy4TtExi 6CMGoyfJLuMulXDXZnAIPzbyVEnvqlmNQQj/xAIvLv79nQOgcWj+dzh5l7HE3RU6 +vocpJf4P+4MgJergM2/lgIeC+HuoUaNc0klQfrp7pWUVXCa0d9Y9PeCkoFv7zoB WBQtLaxOxWQrVXl1XWQuv3WXcVEF7fd2E5lTLKeIijtl2GRNsO5f77JBDUir2jGl Oe8GwnPFec3SXk15BjLEdrzjgCc+62hb/NzpbCJ2XOOp29uAUhN//d2pHjwtyg4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:23 2026 by rpki-client