$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa File: 37975e87-9196-4469-ae20-4f749fae5aab.roa (raw, json) Hash identifier: fM1QACGdt9cVsNT2A6t726QChV35QzbacJ7I5pcX/gc= Subject key identifier: 11:69:DB:17:9D:73:2E:D2:82:7C:F8:C2:4C:51:D0:BC:74:6F:7B:AE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24540FA31C1E818EFAA0522D66538FCEB7A51DAD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa Signing time: Thu 02 Jul 2026 00:00:06 +0000 ROA not before: Thu 02 Jul 2026 00:00:06 +0000 ROA not after: Wed 30 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:54:0f:a3:1c:1e:81:8e:fa:a0:52:2d:66:53:8f:ce:b7:a5:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 2 00:00:06 2026 GMT Not After : Sep 30 23:59:59 2026 GMT Subject: serialNumber=ccd709de1a8d1d83281ef9fd9639c06ff8bf7ed21e48e11adf95a44b9f018f7c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6c:5d:ac:7c:80:f7:cf:88:59:16:f4:e5:cd: ea:d3:a0:3b:ee:0f:00:0b:88:5c:d2:e6:f7:28:23: fb:18:38:a8:b9:14:d9:63:ff:1c:a4:ce:cc:13:de: a4:20:db:a1:da:01:c4:80:c4:f2:2b:1f:75:84:a7: b6:88:63:0e:05:16:cf:1d:3b:58:a9:96:bf:a3:2a: e5:5b:27:f9:a9:bd:03:3a:d4:7f:cc:31:44:cc:ca: c7:97:fa:5c:ba:65:dc:ba:30:26:cd:aa:94:1e:da: c6:69:94:33:de:c6:3f:2c:6a:fc:80:96:0b:5c:d3: 16:ae:3e:e2:67:d9:e8:35:00:c0:a3:47:d5:43:bd: 1f:4c:c2:39:b7:eb:66:2d:cd:18:2b:cf:20:54:41: ae:5c:13:0d:e4:7b:0f:df:ff:34:cc:82:8d:67:c1: af:5f:32:0c:fc:8d:8d:7d:40:18:f3:23:ec:2f:92: 2e:fe:00:09:59:17:20:0e:1b:74:93:f9:09:be:55: fe:05:c3:87:05:bc:1a:07:bd:ab:ee:90:c1:9d:f5: e9:4c:65:8e:bd:f3:de:d5:b4:f9:1e:92:53:9f:04: 3b:c4:5a:e4:f5:4f:97:d7:af:3b:c6:bd:c1:96:91: 27:70:fd:ce:cc:8d:a5:01:2b:d6:eb:2c:d3:3e:af: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:DB:17:9D:73:2E:D2:82:7C:F8:C2:4C:51:D0:BC:74:6F:7B:AE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37975e87-9196-4469-ae20-4f749fae5aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6028::/48 Signature Algorithm: sha256WithRSAEncryption 3d:24:4d:8b:22:32:f3:c9:6c:bc:a7:eb:be:3d:cb:7b:05:42: c1:4f:ec:11:21:40:06:f8:24:8f:1a:3e:af:30:23:9c:67:dd: f8:f7:3b:cc:63:b4:40:18:db:da:3c:9d:33:f3:95:f6:c0:01: fd:7a:df:17:53:5b:3e:ae:ce:c1:0b:53:83:29:a6:cf:87:e0: 14:2c:85:98:09:72:00:a9:d5:72:35:4a:1e:f2:39:32:5a:7b: 3c:d0:fe:fc:ef:3a:a7:33:27:b3:ee:71:7f:d3:fb:09:ff:9a: c5:11:fa:8b:23:3b:10:78:d4:9b:b7:6b:f9:20:77:7d:0b:eb: b0:be:ff:6c:23:e2:e1:d8:f0:73:39:90:43:12:95:19:26:86: 04:2e:92:02:e9:a5:39:62:7a:c2:ed:e7:6a:e5:03:b9:31:ec: 8a:c9:17:17:d4:44:c2:33:70:5a:66:10:02:b3:a1:c2:3b:1d: fd:4c:51:c7:e2:fb:eb:73:97:45:52:48:62:47:c1:24:4a:2f: b6:80:ff:40:a5:75:f1:bf:7c:d7:fc:d6:4a:bb:84:df:99:37: c0:bc:3b:aa:72:09:cd:5e:7e:2c:1c:0f:d4:86:56:07:2e:19: 71:39:da:0c:8a:0b:05:ab:37:9c:8e:7a:e3:09:f4:eb:4f:2d: 3b:64:0e:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJFQPoxwegY76oFItZlOPzrelHa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzAyMDAwMDA2WhcNMjYwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2Q3MDlkZTFhOGQxZDgzMjgxZWY5ZmQ5NjM5YzA2ZmY4 YmY3ZWQyMWU0OGUxMWFkZjk1YTQ0YjlmMDE4ZjdjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1bF2sfID3z4hZFvTlzerToDvuDwALiFzS5vcoI/sYOKi5 FNlj/xykzswT3qQg26HaAcSAxPIrH3WEp7aIYw4FFs8dO1iplr+jKuVbJ/mpvQM6 1H/MMUTMyseX+ly6Zdy6MCbNqpQe2sZplDPexj8savyAlgtc0xauPuJn2eg1AMCj R9VDvR9Mwjm362YtzRgrzyBUQa5cEw3kew/f/zTMgo1nwa9fMgz8jY19QBjzI+wv ki7+AAlZFyAOG3ST+Qm+Vf4Fw4cFvBoHvavukMGd9elMZY69897VtPkeklOfBDvE WuT1T5fXrzvGvcGWkSdw/c7MjaUBK9brLNM+r8S3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEWnbF51zLtKCfPjCTFHQvHRve64wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3OTc1ZTg3LTkxOTYtNDQ2OS1hZTIwLTRmNzQ5ZmFlNWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCgwDQYJKoZIhvcNAQELBQADggEBAD0kTYsiMvPJbLyn6749y3sF QsFP7BEhQAb4JI8aPq8wI5xn3fj3O8xjtEAY29o8nTPzlfbAAf163xdTWz6uzsEL U4Mpps+H4BQshZgJcgCp1XI1Sh7yOTJaezzQ/vzvOqczJ7PucX/T+wn/msUR+osj OxB41Ju3a/kgd30L67C+/2wj4uHY8HM5kEMSlRkmhgQukgLppTliesLt52rlA7kx 7IrJFxfURMIzcFpmEAKzocI7Hf1MUcfi++tzl0VSSGJHwSRKL7aA/0CldfG/fNf8 1kq7hN+ZN8C8O6pyCc1efiwcD9SGVgcuGXE52gyKCwWrN5yOeuMJ9OtPLTtkDrY= -----END CERTIFICATE-----Generated at Wed Jul 15 18:18:17 2026 by rpki-client