$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa File: 455cc001-6d98-49b1-ab73-9a1e06726f9f.roa (raw, json) Hash identifier: a9bS4AVNv1bPTX6nI1vAWRZE1Z7Dl+SbjLgZAA4W2is= Subject key identifier: 94:E7:2A:52:44:49:59:10:DB:22:3D:E4:10:4E:24:12:4C:DE:FE:9C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E139E0AD54E4CA9F36DBF161F867454A1DD7326 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa Signing time: Mon 27 Jul 2026 03:10:08 +0000 ROA not before: Mon 27 Jul 2026 03:10:08 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:13:9e:0a:d5:4e:4c:a9:f3:6d:bf:16:1f:86:74:54:a1:dd:73:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:08 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=b930d3419edd88c744477a2f828c7b855da91bf9cddff1874ae48627fc8ddac6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:31:04:4d:e8:5a:f0:e1:2d:83:7d:63:2c: 5a:a0:92:14:ee:41:c8:a0:9a:b5:9e:f0:12:ed:9b: 5a:f6:4a:e8:0f:9c:c2:d5:d6:86:f8:f9:d2:c7:2e: 21:5b:45:30:33:60:ba:4b:1f:5a:95:d6:94:a6:86: 59:4c:5a:6c:3d:69:b0:22:37:3c:c0:02:5a:19:ed: c2:9a:61:d0:20:cd:41:86:44:33:bf:c8:2c:4a:70: f1:ef:af:08:e8:bd:85:ad:e5:1c:c7:51:09:7c:20: 67:46:6a:dd:1b:1f:ed:ec:23:22:bd:85:bf:51:c7: 05:bc:97:ba:2a:11:fb:65:13:ff:fb:ae:d5:6a:c8: fd:32:95:39:d6:87:f9:fe:47:94:cd:14:10:1a:02: 58:19:20:d0:25:f5:7a:b0:a0:3b:df:3a:9d:77:b4: bb:5c:4c:da:e8:64:04:c7:b4:b1:dd:7f:9b:d3:04: 81:7d:f6:7a:27:73:96:6c:bb:70:4f:9b:8b:ac:45: 5e:f3:f3:11:0f:7f:47:03:c4:db:b7:45:a4:ba:92: 8b:fe:ac:d0:34:0d:b5:88:b1:69:06:a0:4e:63:d0: 04:4f:5d:45:fd:6c:f4:89:88:3f:b7:95:7a:5d:14: 1c:5a:dc:25:01:f1:3d:47:39:5d:6c:34:a2:7a:52: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:2A:52:44:49:59:10:DB:22:3D:E4:10:4E:24:12:4C:DE:FE:9C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:11::/48 Signature Algorithm: sha256WithRSAEncryption 09:d1:bb:82:8f:6c:e5:4e:5d:61:8a:b6:f7:25:6c:e7:09:70: 38:a6:c5:b0:57:67:bc:77:89:65:85:a1:61:cc:f2:07:0a:00: fe:a3:93:53:c0:dd:56:fd:a0:c0:54:27:bb:57:78:00:cd:29: 00:43:3b:f4:38:c8:77:3b:34:23:73:d7:88:e6:de:e8:24:32: d8:d9:d8:a5:72:88:89:1f:08:3e:83:79:47:a8:f0:3e:26:0f: 1c:e4:50:c7:9c:36:d9:83:2f:a1:d1:18:c4:fd:70:1f:5b:b5: 26:4d:fe:21:b5:cf:00:5c:97:11:ba:f3:e1:1f:46:70:09:a2: 61:bc:69:bf:83:57:62:74:8f:e2:f0:c2:3a:e4:ca:02:1f:6a: 2f:1f:b7:1e:6c:68:81:a7:e4:d3:af:4e:fa:0b:4e:22:f0:d2: 4b:94:8d:1f:90:ee:3d:42:39:63:2c:be:60:6e:cd:aa:22:3c: 95:de:30:51:a6:61:63:ac:a0:46:c5:2c:52:3d:10:a9:d0:5d: b0:f7:30:f2:8e:5a:86:74:1f:6a:ec:40:f4:b4:f9:40:84:ec: c6:91:8c:9b:e4:0c:ff:fb:7c:7b:23:ab:68:f9:c5:1c:2d:09: 8a:ff:96:30:e7:36:24:bb:1d:46:88:6e:37:e2:86:f3:b4:44: 64:c4:82:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPhOeCtVOTKnzbb8WH4Z0VKHdcyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDA4WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTMwZDM0MTllZGQ4OGM3NDQ0NzdhMmY4MjhjN2I4NTVk YTkxYmY5Y2RkZmYxODc0YWU0ODYyN2ZjOGRkYWM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPWTEETeha8OEtg31jLFqgkhTuQcigmrWe8BLtm1r2SugP nMLV1ob4+dLHLiFbRTAzYLpLH1qV1pSmhllMWmw9abAiNzzAAloZ7cKaYdAgzUGG RDO/yCxKcPHvrwjovYWt5RzHUQl8IGdGat0bH+3sIyK9hb9RxwW8l7oqEftlE//7 rtVqyP0ylTnWh/n+R5TNFBAaAlgZINAl9XqwoDvfOp13tLtcTNroZATHtLHdf5vT BIF99nonc5Zsu3BPm4usRV7z8xEPf0cDxNu3RaS6kov+rNA0DbWIsWkGoE5j0ARP XUX9bPSJiD+3lXpdFBxa3CUB8T1HOV1sNKJ6UtSjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlOcqUkRJWRDbIj3kEE4kEkze/pwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1NWNjMDAxLTZkOTgtNDliMS1hYjczLTlhMWUwNjcyNmY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwABEwDQYJKoZIhvcNAQELBQADggEBAAnRu4KPbOVOXWGKtvclbOcJ cDimxbBXZ7x3iWWFoWHM8gcKAP6jk1PA3Vb9oMBUJ7tXeADNKQBDO/Q4yHc7NCNz 14jm3ugkMtjZ2KVyiIkfCD6DeUeo8D4mDxzkUMecNtmDL6HRGMT9cB9btSZN/iG1 zwBclxG68+EfRnAJomG8ab+DV2J0j+LwwjrkygIfai8ftx5saIGn5NOvTvoLTiLw 0kuUjR+Q7j1COWMsvmBuzaoiPJXeMFGmYWOsoEbFLFI9EKnQXbD3MPKOWoZ0H2rs QPS0+UCE7MaRjJvkDP/7fHsjq2j5xRwtCYr/ljDnNiS7HUaIbjfihvO0RGTEgl8= -----END CERTIFICATE-----Generated at Mon Jul 27 22:11:21 2026 by rpki-client