$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60e02e76-6e89-413a-8fbb-1dfbb986c769.roa File: 60e02e76-6e89-413a-8fbb-1dfbb986c769.roa (raw, json) Hash identifier: TFpOH1jYXmNVwMR783NC41AsUhugC9/mZibDHLBnTsk= Subject key identifier: 4B:A5:D4:C4:C9:DA:67:64:1F:08:DE:EC:2D:24:09:FA:22:10:F8:2D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7F7320E637E325F50B63D0F4861F49C0A1E14CC0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60e02e76-6e89-413a-8fbb-1dfbb986c769.roa Signing time: Mon 03 Aug 2026 00:40:06 +0000 ROA not before: Mon 03 Aug 2026 00:40:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:73:20:e6:37:e3:25:f5:0b:63:d0:f4:86:1f:49:c0:a1:e1:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 3 00:40:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=06274435e36ee1ced4a8e7078f0fbc407d4a343df22fd6801e5e143fa99535ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7a:59:73:82:83:ad:4e:44:77:cb:90:0b:dd: 27:5e:a3:17:24:78:ea:86:00:8b:81:7a:b6:87:53: 93:67:75:c6:4d:14:cc:5e:19:09:46:37:2c:ec:df: 1c:84:cc:6a:cf:66:d8:7b:22:0b:d9:27:25:08:dc: f0:7e:ec:8a:57:e4:e4:8b:33:a5:b5:3b:b0:08:01: e8:bf:03:99:9c:66:8e:f8:95:ff:fb:b2:de:e7:ca: ea:5e:5a:91:90:2e:19:23:01:97:15:54:84:6d:a1: c1:1f:4e:9d:95:92:f8:4f:92:7b:17:5b:6f:ad:45: 18:c5:6d:dd:72:28:5f:d4:dd:4f:ac:57:10:e7:ba: 13:c1:f1:b7:2d:65:ce:98:ab:32:1a:de:8d:6d:07: b3:54:d9:bc:7a:b6:b2:d7:d5:38:9f:3f:1e:e8:4c: 16:e6:fd:56:54:08:dc:d1:fd:21:8f:32:6b:23:a0: 98:73:44:6e:2a:ba:26:64:6e:e3:a8:63:f0:f1:87: 31:e1:34:a1:ff:10:90:86:4a:97:43:3f:f7:dd:e3: 52:14:d7:e2:20:5f:80:0b:87:8b:72:e2:9c:9e:ee: 7f:31:93:ee:ba:96:c8:18:53:d9:84:51:f5:09:85: 7a:3a:c6:81:ff:2e:70:38:5f:48:97:8e:00:62:79: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A5:D4:C4:C9:DA:67:64:1F:08:DE:EC:2D:24:09:FA:22:10:F8:2D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60e02e76-6e89-413a-8fbb-1dfbb986c769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:d000::/36 Signature Algorithm: sha256WithRSAEncryption 28:e6:6c:41:70:43:56:62:88:ca:fe:a4:88:5c:4a:e7:a7:8b: 90:a8:e5:85:5b:bf:08:3e:7f:46:8b:34:b0:a0:9f:a9:d9:fc: f8:fc:90:29:12:82:a5:13:16:ec:c5:65:b2:c8:0a:cc:89:0f: 18:32:d1:a8:6c:11:c5:0d:0d:08:c9:a8:f5:d4:e6:31:6c:2b: 6c:97:6b:24:20:5f:36:c8:35:d9:45:71:2c:0f:bd:d0:de:9d: 11:dc:fd:bf:00:d6:9b:4c:c1:b3:1b:f7:3d:54:2a:d2:99:57: 10:37:c1:21:69:3c:3d:66:bb:47:f1:8b:c4:c0:9f:17:a4:11: 5d:b4:5c:f0:aa:a5:5d:30:56:a7:00:e0:d7:a5:08:aa:90:cd: 5c:04:d7:20:d7:05:7a:0d:c2:33:5e:44:f0:c3:d3:da:2f:95: 67:e6:91:80:99:79:8b:23:de:2c:6e:de:85:cd:d8:6a:c1:52: a4:fa:68:44:35:4f:7e:73:7f:c0:72:11:8f:fe:c7:36:e6:0b: f0:19:f9:e3:b6:23:bb:9e:74:f6:19:91:57:1c:10:23:1e:01: 3e:fe:69:22:92:27:f2:fe:69:7b:8f:09:19:b9:52:09:ce:e2: fa:a6:5a:7e:7d:ad:5e:9e:52:2d:28:22:57:c1:fe:b8:32:b8: ba:3e:49:5d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUf3Mg5jfjJfULY9D0hh9JwKHhTMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODAzMDA0MDA2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjI3NDQzNWUzNmVlMWNlZDRhOGU3MDc4ZjBmYmM0MDdk NGEzNDNkZjIyZmQ2ODAxZTVlMTQzZmE5OTUzNWVlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6ellzgoOtTkR3y5AL3SdeoxckeOqGAIuBeraHU5NndcZN FMxeGQlGNyzs3xyEzGrPZth7IgvZJyUI3PB+7IpX5OSLM6W1O7AIAei/A5mcZo74 lf/7st7nyupeWpGQLhkjAZcVVIRtocEfTp2VkvhPknsXW2+tRRjFbd1yKF/U3U+s VxDnuhPB8bctZc6YqzIa3o1tB7NU2bx6trLX1TifPx7oTBbm/VZUCNzR/SGPMmsj oJhzRG4quiZkbuOoY/DxhzHhNKH/EJCGSpdDP/fd41IU1+IgX4ALh4ty4pye7n8x k+66lsgYU9mEUfUJhXo6xoH/LnA4X0iXjgBieQRtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUS6XUxMnaZ2QfCN7sLSQJ+iIQ+C0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwZTAyZTc2LTZlODktNDEzYS04ZmJiLTFkZmJiOTg2Yzc2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD70DANBgkqhkiG9w0BAQsFAAOCAQEAKOZsQXBDVmKIyv6kiFxK56eL kKjlhVu/CD5/Ros0sKCfqdn8+PyQKRKCpRMW7MVlssgKzIkPGDLRqGwRxQ0NCMmo 9dTmMWwrbJdrJCBfNsg12UVxLA+90N6dEdz9vwDWm0zBsxv3PVQq0plXEDfBIWk8 PWa7R/GLxMCfF6QRXbRc8KqlXTBWpwDg16UIqpDNXATXINcFeg3CM15E8MPT2i+V Z+aRgJl5iyPeLG7ehc3YasFSpPpoRDVPfnN/wHIRj/7HNuYL8Bn547Yju5509hmR VxwQIx4BPv5pIpIn8v5pe48JGblSCc7i+qZafn2tXp5SLSgiV8H+uDK4uj5JXQ== -----END CERTIFICATE-----Generated at Tue Aug 18 02:14:21 2026 by rpki-client