$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa File: 1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa (raw, json) Hash identifier: JD5Cg9hrZ9p5VJbrPwL7pU/ME+q7S9UZ3El2NWU+Nv8= Subject key identifier: 28:18:6F:E3:9A:45:F0:80:5F:63:B4:20:08:2E:CC:FD:44:64:BC:F6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7DCDA16001ACE3D853B6E4848A176B05C7DB6573 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa Signing time: Mon 06 Jul 2026 23:32:55 +0000 ROA not before: Mon 06 Jul 2026 23:32:55 +0000 ROA not after: Sun 04 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cd:a1:60:01:ac:e3:d8:53:b6:e4:84:8a:17:6b:05:c7:db:65:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 6 23:32:55 2026 GMT Not After : Oct 4 23:59:59 2026 GMT Subject: serialNumber=35599254cc595d807b8799196f2dbf20736b01a9bd78070d5af866b08126d439, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:c9:fe:30:96:23:8f:85:84:a3:3f:cf:ef: 2c:95:33:9e:66:3b:9b:fd:7d:05:6d:88:28:e9:63: 9d:41:b7:a1:be:e8:95:a0:cb:99:e6:a8:8f:9e:f8: dd:4f:98:09:a6:3b:4c:85:4a:d0:d4:bc:2b:80:cb: 51:b4:9a:aa:66:67:16:6d:6c:4f:10:72:ed:e6:60: 0a:e7:47:6d:e6:0a:7c:50:a3:91:28:4c:bb:ca:42: 60:fa:9a:fe:a5:38:68:d9:1f:77:30:1c:5c:16:36: 6b:47:af:51:7b:7a:65:ca:56:39:70:63:a7:07:76: 14:3c:b6:03:35:bb:76:6d:00:18:7e:f1:d2:17:1e: 48:cf:6c:ab:c2:2a:45:fe:12:5b:61:bf:af:2f:6c: 29:4e:38:ad:86:8e:be:95:63:e6:8d:d0:9c:34:09: 09:17:cd:32:c7:c8:8b:4e:ba:aa:36:7d:0d:b2:fc: a9:54:23:dd:a1:7c:28:1f:8a:ed:f4:24:37:1f:5b: 36:48:6f:d2:16:e6:4b:e4:55:34:d3:ed:2a:b6:86: fb:b1:ce:62:df:9a:72:c9:8f:5b:f8:b6:0b:5c:79: 6f:4a:27:da:74:f3:70:f5:0d:00:58:c4:e1:81:1a: c1:2e:a2:a7:4a:c9:6e:d4:cf:89:c8:74:b9:2b:20: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:6F:E3:9A:45:F0:80:5F:63:B4:20:08:2E:CC:FD:44:64:BC:F6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7400::/38 Signature Algorithm: sha256WithRSAEncryption a2:96:f4:6c:71:05:0b:36:ee:86:cf:c8:25:5a:e0:e9:fd:0c: 95:22:79:34:62:12:78:a4:92:49:6a:cf:ec:71:33:43:e5:97: 73:fe:f3:ad:ca:e4:48:1d:5d:69:70:67:b9:1d:9c:d1:47:29: ce:29:cb:e3:1e:aa:f3:45:e4:21:14:94:7a:49:21:1e:b2:fe: a4:ae:ef:d5:ed:47:3f:69:bf:65:5a:3b:39:b6:fa:15:95:90: 43:69:be:80:f4:79:0f:a9:01:99:26:28:9e:de:98:e3:4f:4b: 79:d6:a2:8a:a5:05:6d:b0:0b:c0:ac:0b:c0:3f:56:00:82:f9: df:fa:bf:ee:86:61:5e:a3:2c:24:5f:8c:d6:45:46:8b:13:4e: cd:30:e8:c2:a3:3a:a5:0b:6f:54:6b:d0:22:fd:22:a6:00:57: 88:13:e9:4c:07:38:36:8d:f0:bc:05:dd:4f:3e:91:fb:0c:67: fc:97:0a:44:6d:84:b7:b3:81:41:8d:cd:63:45:f9:a9:dd:ed: 06:6b:d1:c9:2b:04:09:95:76:0e:ea:80:e8:a9:e8:87:50:33: fe:34:31:d6:95:f6:c1:45:02:66:58:76:45:42:80:42:5b:37: 54:91:9a:8f:b7:dc:39:f2:db:11:e3:4c:65:c2:52:41:27:08: 3e:c1:7c:e7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfc2hYAGs49hTtuSEihdrBcfbZXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzA2MjMzMjU1WhcNMjYxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTU5OTI1NGNjNTk1ZDgwN2I4Nzk5MTk2ZjJkYmYyMDcz NmIwMWE5YmQ3ODA3MGQ1YWY4NjZiMDgxMjZkNDM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoj8n+MJYjj4WEoz/P7yyVM55mO5v9fQVtiCjpY51Bt6G+ 6JWgy5nmqI+e+N1PmAmmO0yFStDUvCuAy1G0mqpmZxZtbE8Qcu3mYArnR23mCnxQ o5EoTLvKQmD6mv6lOGjZH3cwHFwWNmtHr1F7emXKVjlwY6cHdhQ8tgM1u3ZtABh+ 8dIXHkjPbKvCKkX+Elthv68vbClOOK2Gjr6VY+aN0Jw0CQkXzTLHyItOuqo2fQ2y /KlUI92hfCgfiu30JDcfWzZIb9IW5kvkVTTT7Sq2hvuxzmLfmnLJj1v4tgtceW9K J9p083D1DQBYxOGBGsEuoqdKyW7Uz4nIdLkrIO4fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKBhv45pF8IBfY7QgCC7M/URkvPYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0OTZkM2Q1LWI1MDMtNGI1MC04ZTM1LWE1ZDhmNDM4ZDVhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAPDydDANBgkqhkiG9w0BAQsFAAOCAQEAopb0bHEFCzbuhs/IJVrg6f0M lSJ5NGISeKSSSWrP7HEzQ+WXc/7zrcrkSB1daXBnuR2c0UcpzinL4x6q80XkIRSU ekkhHrL+pK7v1e1HP2m/ZVo7Obb6FZWQQ2m+gPR5D6kBmSYont6Y409LedaiiqUF bbALwKwLwD9WAIL53/q/7oZhXqMsJF+M1kVGixNOzTDowqM6pQtvVGvQIv0ipgBX iBPpTAc4No3wvAXdTz6R+wxn/JcKRG2Et7OBQY3NY0X5qd3tBmvRySsECZV2DuqA 6Knoh1Az/jQx1pX2wUUCZlh2RUKAQls3VJGaj7fcOfLbEeNMZcJSQScIPsF85w== -----END CERTIFICATE-----Generated at Thu Jul 9 17:08:04 2026 by rpki-client