$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/412d27cc-9069-4a13-8b53-262e6f757947.roa File: 412d27cc-9069-4a13-8b53-262e6f757947.roa (raw, json) Hash identifier: a8xw0jdT9tPy/Y8QijQgus6YCDqnVrDxbcaiqeQXeds= Subject key identifier: 73:83:E3:BC:35:FD:14:51:B3:CF:83:E8:30:15:C3:5C:CC:75:A3:43 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6FADB451754FCC8DC6514504B9E78820E77833FD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/412d27cc-9069-4a13-8b53-262e6f757947.roa Signing time: Thu 02 Jul 2026 00:00:08 +0000 ROA not before: Thu 02 Jul 2026 00:00:08 +0000 ROA not after: Wed 30 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ad:b4:51:75:4f:cc:8d:c6:51:45:04:b9:e7:88:20:e7:78:33:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 2 00:00:08 2026 GMT Not After : Sep 30 23:59:59 2026 GMT Subject: serialNumber=0e1ef6be3f2ec9117d50da554a253eb11ea2e4957d11c268274531f0ea332cc4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:55:9c:95:46:ea:65:44:e9:b2:7a:04:00: 1d:48:9a:95:40:9d:f4:81:12:5b:df:61:1c:c7:86: 52:2e:f8:ac:83:9f:8e:b1:ba:72:8e:7c:f8:d4:c8: bd:38:23:46:61:b7:48:65:27:f1:8f:ec:e8:c6:ba: 9f:82:7f:e6:f7:08:41:f6:24:ff:37:b2:f4:35:2b: 9a:bf:76:f3:52:cb:bd:fc:d7:64:ea:27:25:2f:b1: f7:b5:d3:98:c8:4a:6a:8f:98:04:fe:a3:c3:25:b9: bd:f2:06:c6:1c:63:69:90:ba:24:f3:d3:b4:c3:97: 68:35:32:f1:6f:90:fc:63:0d:36:5c:18:68:58:3f: ce:f0:3d:83:84:99:39:b2:9f:60:15:c7:17:0c:b6: 5f:0c:e9:f4:63:89:20:b2:3c:fc:bf:0c:e3:2f:01: bd:31:67:83:da:76:5a:8b:33:ab:b6:74:98:55:4e: b1:c5:8e:bf:d4:8f:16:e3:00:94:51:e1:21:ca:80: 59:ba:a7:5c:16:14:3b:b5:63:df:91:61:11:f4:2d: 7a:04:97:6c:b0:f4:65:eb:96:5e:19:24:fc:c4:4f: 3a:b7:0c:83:f7:59:59:67:bd:63:37:9e:49:2e:a4: 3a:24:ab:99:e5:b8:de:f8:6d:79:c0:61:1c:c4:3e: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:83:E3:BC:35:FD:14:51:B3:CF:83:E8:30:15:C3:5C:CC:75:A3:43 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/412d27cc-9069-4a13-8b53-262e6f757947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6021::/48 Signature Algorithm: sha256WithRSAEncryption 3b:21:49:50:b1:40:e5:cf:2e:1f:25:02:cb:25:8d:ed:37:50: 3c:67:a3:e4:a9:ef:68:cb:c2:37:f2:23:5e:73:76:57:a0:5d: 3a:b9:b9:97:e1:f0:fa:4c:34:00:b9:92:dc:8e:9a:79:0c:9b: 67:36:74:c2:0d:78:a6:06:3d:ce:8d:7d:ea:16:df:f9:23:95: 26:f0:13:53:3d:4c:07:c4:fa:b5:ce:cc:6b:67:40:54:5f:79: c7:6c:75:6b:4d:9a:1d:c3:92:da:25:29:df:74:ef:af:5d:24: 13:ed:63:43:c5:3e:99:83:02:78:3e:12:f4:8b:d4:7d:88:b0: cb:4c:fb:4f:07:50:d1:b2:d2:dc:50:4b:db:43:85:a7:2d:f4: 5d:48:91:0b:90:2b:cb:1f:bc:dd:b1:7f:ac:4e:86:d9:50:57: 10:06:f7:53:72:f0:96:60:42:c7:19:c6:e9:16:3d:bb:f3:8e: ab:1d:5a:82:f6:45:f4:cd:ff:8b:69:94:29:cb:94:13:32:42: de:0b:4b:66:c2:c4:19:ff:4d:e2:87:5b:bc:d4:4a:d1:b9:0a: 21:88:e1:b9:09:02:02:69:65:fa:9e:6e:ac:bf:92:b5:75:9e: 05:56:d8:84:cf:84:16:11:36:81:fd:35:78:2e:f8:0d:0c:77: 88:d9:93:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb620UXVPzI3GUUUEueeIIOd4M/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzAyMDAwMDA4WhcNMjYwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTFlZjZiZTNmMmVjOTExN2Q1MGRhNTU0YTI1M2ViMTFl YTJlNDk1N2QxMWMyNjgyNzQ1MzFmMGVhMzMyY2M0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwH1WclUbqZUTpsnoEAB1ImpVAnfSBElvfYRzHhlIu+KyD n46xunKOfPjUyL04I0Zht0hlJ/GP7OjGup+Cf+b3CEH2JP83svQ1K5q/dvNSy738 12TqJyUvsfe105jISmqPmAT+o8Mlub3yBsYcY2mQuiTz07TDl2g1MvFvkPxjDTZc GGhYP87wPYOEmTmyn2AVxxcMtl8M6fRjiSCyPPy/DOMvAb0xZ4PadlqLM6u2dJhV TrHFjr/UjxbjAJRR4SHKgFm6p1wWFDu1Y9+RYRH0LXoEl2yw9GXrll4ZJPzETzq3 DIP3WVlnvWM3nkkupDokq5nluN74bXnAYRzEPixXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc4PjvDX9FFGzz4PoMBXDXMx1o0MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQxMmQyN2NjLTkwNjktNGExMy04YjUzLTI2MmU2Zjc1Nzk0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCEwDQYJKoZIhvcNAQELBQADggEBADshSVCxQOXPLh8lAsslje03 UDxno+Sp72jLwjfyI15zdlegXTq5uZfh8PpMNAC5ktyOmnkMm2c2dMINeKYGPc6N feoW3/kjlSbwE1M9TAfE+rXOzGtnQFRfecdsdWtNmh3DktolKd90769dJBPtY0PF PpmDAng+EvSL1H2IsMtM+08HUNGy0txQS9tDhact9F1IkQuQK8sfvN2xf6xOhtlQ VxAG91Ny8JZgQscZxukWPbvzjqsdWoL2RfTN/4tplCnLlBMyQt4LS2bCxBn/TeKH W7zUStG5CiGI4bkJAgJpZfqebqy/krV1ngVW2ITPhBYRNoH9NXgu+A0Md4jZk1o= -----END CERTIFICATE-----Generated at Wed Jul 15 18:18:32 2026 by rpki-client