$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa File: 11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa (raw, json) Hash identifier: afUUw80KaO1ksn56lD3xafs+QbXBa9oRIBQCod1r2ko= Subject key identifier: 6C:04:FE:35:58:7F:01:5F:71:ED:2B:5D:6F:49:6B:E0:13:2F:7E:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 098B2B40669883A7881ED76349E912FE0D2C3806 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa Signing time: Tue 14 Jul 2026 20:34:53 +0000 ROA not before: Tue 14 Jul 2026 20:34:53 +0000 ROA not after: Mon 12 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:2b:40:66:98:83:a7:88:1e:d7:63:49:e9:12:fe:0d:2c:38:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 14 20:34:53 2026 GMT Not After : Oct 12 23:59:59 2026 GMT Subject: serialNumber=e8024afe64c5684f3ff5327d46905527c3dcc86f20b9cdc15481f737be2e093a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:49:78:ab:e9:8e:73:f1:eb:ff:6f:30:17: 35:cd:1c:2d:a3:65:09:ec:33:94:76:7f:f5:b2:9b: 78:ca:cf:18:1c:a2:82:19:39:4b:73:4b:89:ff:38: 09:e8:76:aa:ee:a5:80:e8:10:de:c8:05:ef:9d:55: 9e:21:e3:aa:da:24:65:6b:9d:ce:d5:bb:a5:e7:fa: 30:6e:a6:cf:ac:de:66:be:23:cf:ab:bd:5b:8c:1c: e0:03:7a:45:13:bc:ed:6c:69:70:a8:a3:53:06:c9: 2c:0a:e2:b6:15:12:55:0c:2b:ec:da:a9:47:15:af: 43:8a:1f:7c:4f:67:29:ce:e8:d0:d3:eb:56:a0:23: b2:75:48:cb:82:19:9f:92:51:18:34:8a:6b:20:08: fa:50:56:cb:e0:33:50:56:43:54:15:12:54:56:e7: ea:95:80:fa:a3:00:ca:28:23:0a:ba:a2:48:6e:8c: c2:ec:a8:98:02:6d:4d:8f:e5:a5:0f:74:d4:07:50: 00:6f:28:aa:18:96:fd:0d:07:bf:aa:4c:14:89:78: 3b:09:a4:bf:fa:a6:a3:20:fa:1e:1f:7c:f9:b8:93: dd:1a:24:1d:9d:cc:be:6c:74:1d:9b:8c:4c:3a:de: 13:61:c7:73:01:3d:41:bb:fa:2c:6c:bb:c3:20:b1: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:FE:35:58:7F:01:5F:71:ED:2B:5D:6F:49:6B:E0:13:2F:7E:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11f89817-7fc8-4d9d-80e2-722f860ff0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption 74:33:4d:f9:1f:bf:43:a3:5f:56:65:14:11:73:e0:4b:b0:8c: 51:31:ed:af:8b:59:41:1a:4b:b1:4f:71:5a:50:4b:1e:0d:a9: 82:01:da:59:17:78:3e:71:51:c3:f2:c5:72:bb:b0:c5:01:21: 68:b4:ee:1b:23:43:db:3b:dd:aa:09:6c:fe:2b:29:96:d2:33: da:33:1f:a4:c8:fc:3a:62:aa:e7:a5:92:0a:90:38:0b:73:ab: f1:d8:56:35:23:ad:4a:6f:e7:6f:14:65:ba:79:58:00:d4:ab: 30:17:f7:02:75:5c:d1:35:27:53:59:20:d0:3f:d7:bd:1e:f9: d2:a2:e2:93:f3:28:ca:cc:00:77:1a:11:d6:43:17:0d:f4:21: 1b:50:13:78:d8:44:b2:24:51:6c:07:01:2e:60:06:0b:30:64: 3b:be:ac:ce:f2:8f:45:a8:98:f0:42:46:48:85:cb:21:8b:4d: fb:c4:4b:3a:8c:cc:df:c9:1f:99:aa:1d:2a:0d:be:6a:d1:7b: 95:2a:20:5e:02:c7:8d:70:e0:85:52:68:84:6a:5d:2c:87:71: 9f:2a:1a:40:34:b8:f4:5e:72:b1:8b:90:5a:5d:ce:9f:70:80: c2:5c:93:c6:bb:15:d4:c3:9e:50:8b:6b:a7:ef:81:b2:cc:d7: f4:9a:91:c9 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUCYsrQGaYg6eIHtdjSekS/g0sOAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzE0MjAzNDUzWhcNMjYxMDEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODAyNGFmZTY0YzU2ODRmM2ZmNTMyN2Q0NjkwNTUyN2Mz ZGNjODZmMjBiOWNkYzE1NDgxZjczN2JlMmUwOTNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJzEl4q+mOc/Hr/28wFzXNHC2jZQnsM5R2f/Wym3jKzxgc ooIZOUtzS4n/OAnodqrupYDoEN7IBe+dVZ4h46raJGVrnc7Vu6Xn+jBups+s3ma+ I8+rvVuMHOADekUTvO1saXCoo1MGySwK4rYVElUMK+zaqUcVr0OKH3xPZynO6NDT 61agI7J1SMuCGZ+SURg0imsgCPpQVsvgM1BWQ1QVElRW5+qVgPqjAMooIwq6okhu jMLsqJgCbU2P5aUPdNQHUABvKKoYlv0NB7+qTBSJeDsJpL/6pqMg+h4ffPm4k90a JB2dzL5sdB2bjEw63hNhx3MBPUG7+ixsu8MgsUvbAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUbAT+NVh/AV9x7Stdb0lr4BMvfi4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzExZjg5ODE3LTdmYzgtNGQ5ZC04MGUyLTcyMmY4NjBmZjBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQB0M035H79Do19WZRQRc+BLsIxR Me2vi1lBGkuxT3FaUEseDamCAdpZF3g+cVHD8sVyu7DFASFotO4bI0PbO92qCWz+ KymW0jPaMx+kyPw6YqrnpZIKkDgLc6vx2FY1I61Kb+dvFGW6eVgA1KswF/cCdVzR NSdTWSDQP9e9HvnSouKT8yjKzAB3GhHWQxcN9CEbUBN42ESyJFFsBwEuYAYLMGQ7 vqzO8o9FqJjwQkZIhcshi037xEs6jMzfyR+Zqh0qDb5q0XuVKiBeAseNcOCFUmiE al0sh3GfKhpANLj0XnKxi5BaXc6fcIDCXJPGuxXUw55Qi2un74GyzNf0mpHJ -----END CERTIFICATE-----Generated at Wed Jul 15 18:14:34 2026 by rpki-client