$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa File: b801f8fd-dbab-4a07-86be-11a07359c259.roa (raw, json) Hash identifier: a7YXzvLf77vFF6u83kErepd120Z069P9vImuF4JA7yU= Subject key identifier: 61:2B:CB:38:AA:CD:9C:D3:C5:4E:F2:CB:03:3E:60:A6:6E:78:A0:96 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2B06A6AEC7BF015F82D251E5790A64ADB0E3468C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa Signing time: Mon 27 Jul 2026 03:10:10 +0000 ROA not before: Mon 27 Jul 2026 03:10:10 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:06:a6:ae:c7:bf:01:5f:82:d2:51:e5:79:0a:64:ad:b0:e3:46:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:10 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=efaf50ca5e5bf3b355ced17a781d602de9d3ab6dd863bef0c622d1163edc5954, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:5c:87:72:c6:a8:02:cd:19:85:59:b4:54: cb:62:4c:40:07:2c:9e:28:71:a7:c4:d5:60:76:79: 08:09:3d:09:a8:73:cc:ae:3d:e3:f9:fa:53:05:23: c6:ef:b6:9d:3f:b6:af:3b:1c:9e:ff:01:e7:0c:81: cd:f9:40:bb:99:be:15:9e:fe:b0:39:28:37:16:a1: 94:fe:16:ef:70:1b:05:49:5c:8b:24:9d:ac:4f:14: a9:01:0f:6a:5e:fd:5d:50:4e:94:b3:a7:fc:ad:28: c6:4a:2c:e5:2c:ba:ce:23:d6:c8:29:51:88:7d:62: 53:9a:78:ca:c9:99:18:ec:65:8c:65:1c:51:bc:13: 8a:29:45:5e:75:f7:eb:e4:d8:0a:35:45:ae:f7:80: 3b:ae:50:b0:2e:5b:63:c0:6f:d9:f7:eb:20:da:f9: fe:1b:01:df:da:e7:02:33:a0:8a:55:8e:aa:e9:d7: 76:a7:bd:1c:8e:88:f9:03:7a:73:64:5f:12:4e:7a: 0f:64:2e:d5:b0:df:94:5f:a3:3a:6e:1f:e0:29:fc: 00:6f:84:26:88:fe:7c:66:cf:fc:24:99:96:af:2c: 41:56:b1:fd:24:88:62:21:22:e2:d1:33:5e:9c:2b: 94:7e:59:ea:2e:7b:ee:4a:b5:43:6d:d1:80:c3:90: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2B:CB:38:AA:CD:9C:D3:C5:4E:F2:CB:03:3E:60:A6:6E:78:A0:96 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b801f8fd-dbab-4a07-86be-11a07359c259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 37:1a:f4:00:94:82:6e:1e:be:64:20:d7:86:cd:31:34:af:1b: 0e:89:c1:1f:d4:d7:0e:93:be:ff:62:56:4e:55:ed:71:b9:4d: c0:17:fc:f4:32:9d:df:aa:45:2b:9c:c2:bb:95:63:ce:c1:fe: 76:98:48:50:84:6a:3a:a0:e7:67:ce:43:bc:03:a3:70:4d:aa: 58:f4:47:6e:27:03:d1:c4:59:85:c1:d5:4d:e2:e5:4d:a5:94: e1:09:8b:d6:49:b2:df:4e:35:3d:bc:c7:32:04:0b:1c:a7:c8: 97:3d:ab:5e:cd:56:40:ac:1e:c2:10:1e:f1:f7:9b:11:eb:93: 17:c0:4d:88:ca:78:b4:13:cf:b9:0c:a5:e6:21:55:0b:76:85: 62:d4:19:d7:86:a9:56:cf:fe:0c:44:2e:02:58:79:ca:f1:72: a0:68:e1:3b:db:c5:f8:2b:8e:4c:05:db:d7:15:d9:38:a0:a0: cb:06:eb:53:cc:f7:88:33:8f:fe:47:0d:b9:d6:89:86:ce:ca: 53:2b:24:03:8b:b9:19:f9:db:ac:5a:ac:19:48:09:8e:1e:c9: 4d:af:65:64:9f:ee:fa:6f:8b:9a:86:80:cb:70:9c:6a:ad:8c: dc:e4:76:aa:e6:c7:46:ee:e7:6f:a5:83:01:76:8d:09:93:e9: 6b:ba:97:73 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKwamrse/AV+C0lHleQpkrbDjRowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDEwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmFmNTBjYTVlNWJmM2IzNTVjZWQxN2E3ODFkNjAyZGU5 ZDNhYjZkZDg2M2JlZjBjNjIyZDExNjNlZGM1OTU0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbllyHcsaoAs0ZhVm0VMtiTEAHLJ4ocafE1WB2eQgJPQmo c8yuPeP5+lMFI8bvtp0/tq87HJ7/AecMgc35QLuZvhWe/rA5KDcWoZT+Fu9wGwVJ XIsknaxPFKkBD2pe/V1QTpSzp/ytKMZKLOUsus4j1sgpUYh9YlOaeMrJmRjsZYxl HFG8E4opRV519+vk2Ao1Ra73gDuuULAuW2PAb9n36yDa+f4bAd/a5wIzoIpVjqrp 13anvRyOiPkDenNkXxJOeg9kLtWw35RfozpuH+Ap/ABvhCaI/nxmz/wkmZavLEFW sf0kiGIhIuLRM16cK5R+Weoue+5KtUNt0YDDkLhXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYSvLOKrNnNPFTvLLAz5gpm54oJYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I4MDFmOGZkLWRiYWItNGEwNy04NmJlLTExYTA3MzU5YzI1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEANxr0AJSCbh6+ZCDXhs0xNK8b DonBH9TXDpO+/2JWTlXtcblNwBf89DKd36pFK5zCu5VjzsH+dphIUIRqOqDnZ85D vAOjcE2qWPRHbicD0cRZhcHVTeLlTaWU4QmL1kmy3041PbzHMgQLHKfIlz2rXs1W QKwewhAe8febEeuTF8BNiMp4tBPPuQyl5iFVC3aFYtQZ14apVs/+DEQuAlh5yvFy oGjhO9vF+CuOTAXb1xXZOKCgywbrU8z3iDOP/kcNudaJhs7KUyskA4u5GfnbrFqs GUgJjh7JTa9lZJ/u+m+LmoaAy3Ccaq2M3OR2qubHRu7nb6WDAXaNCZPpa7qXcw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:32 2026 by rpki-client