$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa File: 3c688a84-5bab-44fa-a324-bd3905146d46.roa (raw, json) Hash identifier: HL+UELy8c+NmS23Y5Z5Tpmmn5W7xJLahiXXd27Zjrq0= Subject key identifier: E8:34:FA:65:F0:F3:C1:05:20:E6:74:02:BB:C2:39:55:2D:AF:02:34 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 473E93EAABE1946D5F712F336B01ED99D8B05BB6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa Signing time: Sat 04 Jul 2026 00:00:03 +0000 ROA not before: Sat 04 Jul 2026 00:00:03 +0000 ROA not after: Fri 02 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3e:93:ea:ab:e1:94:6d:5f:71:2f:33:6b:01:ed:99:d8:b0:5b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 4 00:00:03 2026 GMT Not After : Oct 2 23:59:59 2026 GMT Subject: serialNumber=d1af1cf23809a9406c81861c5f17892ed26298e3a9bfff58e59cbe73775565eb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:99:dd:f6:8c:0a:fd:31:4b:46:75:c3:ed: d7:67:8c:04:76:42:93:13:53:47:f6:ac:b3:14:a9: 3b:a5:44:d7:f9:80:3d:4f:36:84:9f:e1:1f:8e:a4: b4:fc:9e:8d:69:a6:17:c0:11:92:01:64:cb:0b:99: bc:58:82:36:b2:17:84:61:0d:df:5d:72:a6:42:44: e3:92:cf:0c:74:eb:1c:3f:12:b7:b5:92:d1:67:1e: 90:de:d0:95:f8:96:34:b6:f1:aa:54:59:2c:35:76: b5:32:f8:ec:02:d4:99:65:7c:ca:75:df:2a:ca:09: ca:45:7d:91:9e:be:43:07:81:16:bd:31:03:99:24: ac:da:e7:54:da:ed:2b:ea:24:ed:4f:1f:85:70:a8: a9:85:fa:8f:19:77:ae:d0:bc:fb:a4:4d:53:9c:06: 85:81:49:07:c1:b0:be:a0:e4:32:41:d1:ef:72:0f: 46:fa:a0:2a:71:36:fa:bb:84:97:8a:f3:1c:62:8a: c9:0f:ef:39:b2:48:1a:da:4f:91:f1:83:24:09:91: 3d:aa:3d:c6:27:6d:37:72:18:9e:09:df:e8:f4:3e: 0b:40:8b:70:79:c5:72:20:82:31:a3:a1:60:c2:f0: c1:c5:78:47:ff:07:57:0e:f9:cd:a6:bc:30:96:36: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:34:FA:65:F0:F3:C1:05:20:E6:74:02:BB:C2:39:55:2D:AF:02:34 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:c000::/36 Signature Algorithm: sha256WithRSAEncryption 89:48:8e:cb:e2:b6:5c:cb:47:b4:f4:74:85:ec:e7:e7:80:89: c5:68:a0:cd:8b:d2:08:8d:76:b0:96:09:33:9d:eb:f0:9d:16: ea:a9:83:20:05:c0:11:32:f3:45:f8:97:09:b9:66:e8:ec:97: 36:a6:68:b9:6d:8d:5d:46:f8:90:32:9e:f4:6d:02:48:72:bc: b1:b2:33:e8:82:62:9c:e2:ff:fb:85:fb:df:94:66:83:1f:71: 54:f1:51:24:df:c1:37:8e:ed:94:25:4a:90:fe:65:f0:32:2b: 41:79:34:83:ae:2f:a2:2b:51:ac:ce:92:ef:52:04:6a:bc:56: 1b:2d:42:ef:8a:7e:bf:4d:87:b0:e2:12:85:2b:1a:87:9b:15: b1:c0:de:07:e3:b4:60:e1:b5:7c:df:b0:9c:4f:cc:7d:2f:89: 59:40:9f:76:76:58:8f:f8:12:f7:61:db:f7:83:cf:7f:9b:13: 40:18:d9:9d:a9:e2:5c:33:04:ad:d0:5d:d5:62:d8:7e:9a:f6: 9a:e8:fc:b4:8f:2e:33:a3:f0:fd:5a:57:3f:7d:e3:46:d5:a7: 71:37:af:0a:d0:13:df:41:bd:61:bf:78:1b:6c:06:1c:d4:df: c6:2e:32:e2:1c:f7:36:42:39:bd:37:1f:ec:0a:0e:aa:90:2b: 5b:cb:50:3a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURz6T6qvhlG1fcS8zawHtmdiwW7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzA0MDAwMDAzWhcNMjYxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWFmMWNmMjM4MDlhOTQwNmM4MTg2MWM1ZjE3ODkyZWQy NjI5OGUzYTliZmZmNThlNTljYmU3Mzc3NTU2NWViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCroJnd9owK/TFLRnXD7ddnjAR2QpMTU0f2rLMUqTulRNf5 gD1PNoSf4R+OpLT8no1pphfAEZIBZMsLmbxYgjayF4RhDd9dcqZCROOSzwx06xw/ Ere1ktFnHpDe0JX4ljS28apUWSw1drUy+OwC1JllfMp13yrKCcpFfZGevkMHgRa9 MQOZJKza51Ta7SvqJO1PH4VwqKmF+o8Zd67QvPukTVOcBoWBSQfBsL6g5DJB0e9y D0b6oCpxNvq7hJeK8xxiiskP7zmySBraT5HxgyQJkT2qPcYnbTdyGJ4J3+j0PgtA i3B5xXIggjGjoWDC8MHFeEf/B1cO+c2mvDCWNkvxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6DT6ZfDzwQUg5nQCu8I5VS2vAjQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNjNjg4YTg0LTViYWItNDRmYS1hMzI0LWJkMzkwNTE0NmQ0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD7wDANBgkqhkiG9w0BAQsFAAOCAQEAiUiOy+K2XMtHtPR0hezn54CJ xWigzYvSCI12sJYJM53r8J0W6qmDIAXAETLzRfiXCblm6OyXNqZouW2NXUb4kDKe 9G0CSHK8sbIz6IJinOL/+4X735Rmgx9xVPFRJN/BN47tlCVKkP5l8DIrQXk0g64v oitRrM6S71IEarxWGy1C74p+v02HsOIShSsah5sVscDeB+O0YOG1fN+wnE/MfS+J WUCfdnZYj/gS92Hb94PPf5sTQBjZnaniXDMErdBd1WLYfpr2muj8tI8uM6Pw/VpX P33jRtWncTevCtAT30G9Yb94G2wGHNTfxi4y4hz3NkI5vTcf7AoOqpArW8tQOg== -----END CERTIFICATE-----Generated at Sat Jul 18 20:45:41 2026 by rpki-client