$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2125684d-f88e-48b1-9091-d6b4c68c5748.roa File: 2125684d-f88e-48b1-9091-d6b4c68c5748.roa (raw, json) Hash identifier: pAEo19qRTSC42PhHLTeex9LCRwVj/sd1Vclqv0SYsv0= Subject key identifier: 0A:D3:9E:4E:07:77:C0:EC:E8:3E:B0:46:25:25:C6:06:5F:63:59:88 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52D01537D4DCF9B8FF132546D6F1725A30773089 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2125684d-f88e-48b1-9091-d6b4c68c5748.roa Signing time: Wed 29 Jul 2026 00:00:04 +0000 ROA not before: Wed 29 Jul 2026 00:00:04 +0000 ROA not after: Tue 27 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0fb:f000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d0:15:37:d4:dc:f9:b8:ff:13:25:46:d6:f1:72:5a:30:77:30:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 29 00:00:04 2026 GMT Not After : Oct 27 23:59:59 2026 GMT Subject: serialNumber=0d247083a2b535e6b89993df53dcbdd2622c88876166c6461bf17e588515e871, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:26:92:26:b7:18:83:d5:1d:b9:61:23:81: a1:c4:68:a2:70:da:b2:d3:50:13:fd:cc:ee:58:69: 23:99:d8:fe:ae:26:d0:69:91:bd:e1:f7:a6:ae:8b: 0f:59:7d:08:e8:20:fa:c7:ef:ce:0f:4f:b7:e5:e6: 34:05:ac:fa:80:a8:f1:f9:81:d6:02:f3:02:bc:d4: fd:2c:e5:bd:d0:33:ac:4d:ae:78:22:d3:77:00:40: cd:23:e7:95:4f:15:32:04:3f:ae:c3:74:aa:d6:e2: 5c:e8:7c:af:bb:0b:f4:9b:e8:b5:32:03:54:11:e3: 01:ab:1d:e0:5f:d9:81:6e:b0:70:1d:54:ef:93:68: c2:09:30:80:a6:d7:b8:b6:3a:f3:b0:38:4e:18:69: f4:1f:ea:59:f2:b7:80:64:8c:9e:6b:31:04:7e:d2: 3e:ef:41:62:ae:92:4c:69:21:2b:4f:ff:ac:6c:73: e7:93:7c:5e:56:4e:0e:b5:0e:ba:f1:8d:e0:7f:d1: ad:68:a2:c9:f5:49:4e:f3:e8:56:0f:97:53:2a:16: 32:91:c8:2d:c9:32:a3:f9:c8:2b:dd:08:6f:f7:33: 0b:a1:e6:5b:86:11:ba:70:63:67:f1:83:0a:71:df: ea:b4:df:b5:76:7b:1e:36:25:50:1b:eb:59:8d:48: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:9E:4E:07:77:C0:EC:E8:3E:B0:46:25:25:C6:06:5F:63:59:88 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2125684d-f88e-48b1-9091-d6b4c68c5748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/47 Signature Algorithm: sha256WithRSAEncryption 6e:a0:07:8b:54:02:0b:06:15:68:c8:e4:b5:b4:80:01:ff:2b: f5:15:4f:46:52:1d:7f:c4:28:f1:f4:5a:1f:ba:b7:3e:d5:85: b8:4c:9e:4c:b5:12:71:b9:f5:9f:62:b3:95:d6:10:70:66:a1: db:d9:53:3f:d5:4e:45:96:03:9d:7e:0a:3d:58:dc:df:f3:d2: 04:79:69:f7:22:2b:76:30:c8:04:c7:64:64:d0:4b:46:5a:8a: d1:87:0d:95:21:d7:ca:6b:a8:73:9f:63:41:24:f5:30:0a:fb: 74:53:5e:e5:d6:8e:a2:03:54:c4:c4:75:bb:ad:be:58:d6:7a: 31:a1:cb:95:0c:bb:c7:ab:53:e5:9f:38:8f:7c:28:a7:86:70: cb:ea:93:64:ca:17:68:b1:da:09:2d:68:02:7b:34:38:88:9e: 85:4a:f9:ad:0f:f9:98:89:b7:5f:43:ee:bd:31:b4:23:b9:1d: e8:1f:ce:7f:e9:15:e4:43:b1:a6:ed:9e:ab:6f:08:44:37:7f: bf:ef:93:98:ba:70:09:67:83:91:31:ea:70:8a:ce:14:c1:f5: 02:92:f1:a7:b0:f3:cf:a6:ee:7a:12:64:c9:4e:46:87:eb:6e: 5a:47:50:6c:5f:e0:ff:a4:34:c9:f8:43:00:a3:29:ba:50:79: 9b:da:7c:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUtAVN9Tc+bj/EyVG1vFyWjB3MIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI5MDAwMDA0WhcNMjYxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDI0NzA4M2EyYjUzNWU2Yjg5OTkzZGY1M2RjYmRkMjYy MmM4ODg3NjE2NmM2NDYxYmYxN2U1ODg1MTVlODcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgcyaSJrcYg9UduWEjgaHEaKJw2rLTUBP9zO5YaSOZ2P6u JtBpkb3h96auiw9ZfQjoIPrH784PT7fl5jQFrPqAqPH5gdYC8wK81P0s5b3QM6xN rngi03cAQM0j55VPFTIEP67DdKrW4lzofK+7C/Sb6LUyA1QR4wGrHeBf2YFusHAd VO+TaMIJMICm17i2OvOwOE4YafQf6lnyt4BkjJ5rMQR+0j7vQWKukkxpIStP/6xs c+eTfF5WTg61DrrxjeB/0a1oosn1SU7z6FYPl1MqFjKRyC3JMqP5yCvdCG/3Mwuh 5luGEbpwY2fxgwpx3+q037V2ex42JVAb61mNSFg5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCtOeTgd3wOzoPrBGJSXGBl9jWYgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIxMjU2ODRkLWY4OGUtNDhiMS05MDkxLWQ2YjRjNjhjNTc0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAG6gB4tUAgsGFWjI5LW0gAH/ K/UVT0ZSHX/EKPH0Wh+6tz7VhbhMnky1EnG59Z9is5XWEHBmodvZUz/VTkWWA51+ Cj1Y3N/z0gR5afciK3YwyATHZGTQS0ZaitGHDZUh18prqHOfY0Ek9TAK+3RTXuXW jqIDVMTEdbutvljWejGhy5UMu8erU+WfOI98KKeGcMvqk2TKF2ix2gktaAJ7NDiI noVK+a0P+ZiJt19D7r0xtCO5Hegfzn/pFeRDsabtnqtvCEQ3f7/vk5i6cAlng5Ex 6nCKzhTB9QKS8aew88+m7noSZMlORofrblpHUGxf4P+kNMn4QwCjKbpQeZvafEQ= -----END CERTIFICATE-----Generated at Wed Jul 29 02:01:34 2026 by rpki-client