$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13f667aa-a00c-4b6c-9646-0960f0960b3c.roa File: 13f667aa-a00c-4b6c-9646-0960f0960b3c.roa (raw, json) Hash identifier: YV74MzNzG+/S40wObCrwok9ZWce7t9W2RGsJKryjXFI= Subject key identifier: 59:35:9A:CD:34:CC:BD:D5:05:A0:61:0F:82:4D:F2:87:53:BC:3C:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E255DC7119612473333970BBECD8720E76C0E15 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13f667aa-a00c-4b6c-9646-0960f0960b3c.roa Signing time: Sun 02 Aug 2026 00:10:07 +0000 ROA not before: Sun 02 Aug 2026 00:10:07 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5507::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:5d:c7:11:96:12:47:33:33:97:0b:be:cd:87:20:e7:6c:0e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 2 00:10:07 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=d577edf5c0759a9f526a6bbf87f05841d7b8ef2c9663c88ad215b3a664cd9004, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:65:a1:41:c5:12:69:4d:e5:81:6c:6c:17: 6a:13:bd:a2:a0:51:f4:29:5f:35:28:59:af:ef:05: a5:37:ff:97:3d:87:bf:20:25:5e:91:69:99:5f:3d: 55:eb:63:e2:78:52:20:1b:88:7b:ff:e3:69:df:d2: ba:e2:8c:f1:01:68:66:4b:46:53:be:0a:58:60:fb: 68:55:be:5a:04:49:d7:40:1c:91:10:2f:d3:b2:c2: 93:dc:2d:04:45:9e:2e:3d:5b:cc:e2:52:73:31:a2: 49:79:ab:84:61:e0:86:48:47:0a:4f:6f:f7:24:0c: 73:6a:10:da:4b:37:80:10:75:32:f7:cb:6b:8b:91: fe:9b:36:ef:9d:24:13:5b:30:ad:e9:4b:8a:72:f7: d9:7c:8e:ac:36:1e:91:9d:ea:74:fc:66:38:c2:20: 9d:e8:18:36:3a:9d:b7:88:39:de:b2:79:d8:19:ee: b3:56:24:0b:f9:28:9f:62:73:b9:95:66:a8:1f:17: 8d:e4:0f:64:00:0f:23:bc:64:f0:69:dd:a4:d9:27: 19:aa:cb:78:34:32:ee:68:57:99:fd:f0:87:bb:f9: 1d:f7:9a:50:9b:57:a7:83:b3:c5:a1:84:45:59:3f: 1c:27:a1:ef:40:73:29:5d:19:2a:48:dd:d7:82:93: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:9A:CD:34:CC:BD:D5:05:A0:61:0F:82:4D:F2:87:53:BC:3C:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13f667aa-a00c-4b6c-9646-0960f0960b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5507::/48 Signature Algorithm: sha256WithRSAEncryption 04:ab:3f:87:43:0b:08:91:72:52:1f:77:7e:34:66:1c:9e:de: 37:e7:ab:4d:cd:50:84:89:40:66:29:67:2e:21:e4:4e:23:41: e0:29:5b:18:84:39:81:5a:16:fb:9b:ae:1d:82:df:45:06:91: ea:6e:31:28:3b:7e:60:cc:20:98:96:c5:f9:fd:81:60:b2:a2: 12:eb:95:5b:b3:95:c7:06:1b:02:8a:31:b5:06:b9:30:54:e1: ca:e8:cd:fe:3a:94:41:dc:d3:72:10:ec:0d:5a:5a:4f:5c:49: 88:36:ea:88:4c:28:1e:f9:67:21:59:b1:10:8b:2c:f0:c0:ce: 0d:48:eb:14:c4:d6:77:b4:49:be:44:10:6e:4c:8c:e7:95:ca: a6:2c:85:f5:27:96:ad:d5:f4:e6:b0:c9:96:f1:8f:fa:b2:70: 3f:81:35:61:9e:7e:4b:4b:9c:fc:a5:6d:b0:d0:ed:70:e7:48: 3b:b1:24:f8:33:38:94:04:29:f5:1d:0c:48:38:04:5c:73:b3: 89:f1:ad:11:d5:16:17:e7:3a:79:98:46:89:39:ef:eb:4b:46: 4b:d9:19:1b:e4:b6:2c:f3:8a:37:36:0b:cc:44:86:06:8d:7e: 9e:8f:e6:83:c3:9b:6c:97:bb:2b:2d:e3:68:17:cd:77:76:41: ea:95:99:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULiVdxxGWEkczM5cLvs2HIOdsDhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAyMDAxMDA3WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTc3ZWRmNWMwNzU5YTlmNTI2YTZiYmY4N2YwNTg0MWQ3 YjhlZjJjOTY2M2M4OGFkMjE1YjNhNjY0Y2Q5MDA0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPrWWhQcUSaU3lgWxsF2oTvaKgUfQpXzUoWa/vBaU3/5c9 h78gJV6RaZlfPVXrY+J4UiAbiHv/42nf0rrijPEBaGZLRlO+Clhg+2hVvloESddA HJEQL9OywpPcLQRFni49W8ziUnMxokl5q4Rh4IZIRwpPb/ckDHNqENpLN4AQdTL3 y2uLkf6bNu+dJBNbMK3pS4py99l8jqw2HpGd6nT8ZjjCIJ3oGDY6nbeIOd6yedgZ 7rNWJAv5KJ9ic7mVZqgfF43kD2QADyO8ZPBp3aTZJxmqy3g0Mu5oV5n98Ie7+R33 mlCbV6eDs8WhhEVZPxwnoe9AcyldGSpI3deCkyaZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWTWazTTMvdUFoGEPgk3yh1O8PBUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEzZjY2N2FhLWEwMGMtNGI2Yy05NjQ2LTA5NjBmMDk2MGIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQcwDQYJKoZIhvcNAQELBQADggEBAASrP4dDCwiRclIfd340Zhye 3jfnq03NUISJQGYpZy4h5E4jQeApWxiEOYFaFvubrh2C30UGkepuMSg7fmDMIJiW xfn9gWCyohLrlVuzlccGGwKKMbUGuTBU4crozf46lEHc03IQ7A1aWk9cSYg26ohM KB75ZyFZsRCLLPDAzg1I6xTE1ne0Sb5EEG5MjOeVyqYshfUnlq3V9OawyZbxj/qy cD+BNWGefktLnPylbbDQ7XDnSDuxJPgzOJQEKfUdDEg4BFxzs4nxrRHVFhfnOnmY Rok57+tLRkvZGRvktizzijc2C8xEhgaNfp6P5oPDm2yXuyst42gXzXd2QeqVmXk= -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:48 2026 by rpki-client