$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa File: ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa (raw, json) Hash identifier: oqI6xG4tqZ74WEwFHRnmXgG3wqpY7bPyF5qxzEA7guE= Subject key identifier: D1:8F:31:46:F7:8D:FC:D2:F9:D1:18:DB:FD:06:6E:F7:DD:C5:BA:6A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0DFDFE822021B3B0AEAD26025F56CADC1C7868E5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa Signing time: Tue 28 Jul 2026 00:00:10 +0000 ROA not before: Tue 28 Jul 2026 00:00:10 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f3:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fd:fe:82:20:21:b3:b0:ae:ad:26:02:5f:56:ca:dc:1c:78:68:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 28 00:00:10 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=cbb4c0f0678dd005d026fd4be4d7b04d380c3fbfa2654aa6e4a1a774ffca907d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:85:66:68:d3:5f:55:db:e6:60:2f:3a:da: d4:af:9d:35:a2:da:db:b0:a1:cb:79:0e:c7:38:05: e2:b0:a8:71:d6:6e:22:a4:7e:a6:c3:2c:68:07:56: 98:33:83:0e:09:06:0f:ae:7e:15:4b:67:99:ad:a1: 29:22:d1:cf:7a:59:5d:42:ca:dc:2d:95:55:fd:89: 10:3e:ff:52:d9:7f:ba:84:b0:da:0b:07:c5:8b:a2: fa:df:23:2a:66:02:15:c0:67:fd:04:ae:41:42:20: be:ab:f5:bc:d1:e3:c1:92:54:4b:84:d8:b6:8b:5e: 28:4e:84:bf:69:8a:c5:17:b4:f7:25:23:14:83:09: 0a:4a:3a:ed:e2:33:d6:67:e6:63:fa:b4:7e:bd:6c: 32:27:2f:f9:91:0a:f1:cd:2f:dc:f2:2e:c1:8f:35: f9:d9:04:18:cd:2f:a4:13:80:90:18:4d:2f:f6:8b: 61:9f:66:33:de:6d:6d:0d:88:8d:93:e9:d1:ac:07: 96:d5:ea:91:0b:bb:9b:cc:46:61:ff:16:b3:f1:24: 42:39:20:1a:16:a3:e3:c1:d3:ec:3b:b5:7c:d3:10: 03:6f:f1:c6:b2:0b:a8:99:84:5f:c2:fe:42:15:9f: d8:e7:2b:20:61:11:a0:5c:5e:8c:ca:a8:e7:cc:95: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:31:46:F7:8D:FC:D2:F9:D1:18:DB:FD:06:6E:F7:DD:C5:BA:6A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 07:bc:d2:ef:c1:99:5b:15:bc:f9:8f:0d:a3:bc:82:c1:8a:35: a2:42:d1:a1:66:5f:06:63:95:a3:ef:71:50:11:3e:48:f3:6f: b8:8f:7d:77:a7:1b:02:af:c5:92:5b:dd:be:a6:38:d3:fe:eb: 04:97:c5:79:de:47:4d:fc:56:ad:0e:50:76:bc:cf:3b:5b:5a: f1:9d:76:55:5e:93:ca:02:a6:39:79:d1:d3:9f:b9:b9:a4:f3: 72:c7:d8:10:33:5a:ca:ec:8c:79:5e:f2:30:0b:9e:e1:4d:3d: 8f:be:91:d4:0f:5a:1d:5d:d1:b1:a3:46:90:83:ea:bc:f1:18: 99:e0:10:11:18:ec:f7:06:68:90:52:82:7d:08:df:9d:a6:a4: e8:fd:f9:be:a3:36:9f:95:f8:07:14:1f:f8:08:1d:16:f3:9f: 98:9a:b0:b9:fd:cf:3e:14:aa:3b:4f:d2:27:0b:fd:32:df:ae: 00:23:3d:6a:07:40:10:ca:3f:c3:a6:8e:44:6d:93:b0:b4:d5: 9c:7b:15:a6:dd:e6:4c:19:06:bf:9b:a4:7c:da:68:7b:6b:34: ee:4c:83:85:70:66:b0:5d:a2:3f:31:e8:84:02:56:c5:7d:e2: 5f:ba:cd:2b:0a:05:59:e2:3a:11:77:cb:1a:97:5c:36:69:12: c3:85:78:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDf3+giAhs7CurSYCX1bK3Bx4aOUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI4MDAwMDEwWhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmI0YzBmMDY3OGRkMDA1ZDAyNmZkNGJlNGQ3YjA0ZDM4 MGMzZmJmYTI2NTRhYTZlNGExYTc3NGZmY2E5MDdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZnYVmaNNfVdvmYC862tSvnTWi2tuwoct5Dsc4BeKwqHHW biKkfqbDLGgHVpgzgw4JBg+ufhVLZ5mtoSki0c96WV1CytwtlVX9iRA+/1LZf7qE sNoLB8WLovrfIypmAhXAZ/0ErkFCIL6r9bzR48GSVEuE2LaLXihOhL9pisUXtPcl IxSDCQpKOu3iM9Zn5mP6tH69bDInL/mRCvHNL9zyLsGPNfnZBBjNL6QTgJAYTS/2 i2GfZjPebW0NiI2T6dGsB5bV6pELu5vMRmH/FrPxJEI5IBoWo+PB0+w7tXzTEANv 8cayC6iZhF/C/kIVn9jnKyBhEaBcXozKqOfMlXchAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0Y8xRveN/NL50Rjb/QZu993FumowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FjOTYzZjFhLTU3ZmEtNDZhZi1iOWYwLWFhNzYwZGVkM2Y3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAAe80u/BmVsVvPmPDaO8gsGK NaJC0aFmXwZjlaPvcVARPkjzb7iPfXenGwKvxZJb3b6mONP+6wSXxXneR038Vq0O UHa8zztbWvGddlVek8oCpjl50dOfubmk83LH2BAzWsrsjHle8jALnuFNPY++kdQP Wh1d0bGjRpCD6rzxGJngEBEY7PcGaJBSgn0I352mpOj9+b6jNp+V+AcUH/gIHRbz n5iasLn9zz4UqjtP0icL/TLfrgAjPWoHQBDKP8OmjkRtk7C01Zx7Fabd5kwZBr+b pHzaaHtrNO5Mg4VwZrBdoj8x6IQCVsV94l+6zSsKBVniOhF3yxqXXDZpEsOFeEI= -----END CERTIFICATE-----Generated at Tue Jul 28 21:21:15 2026 by rpki-client