$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa File: 7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa (raw, json) Hash identifier: +1tOXl5ow78TWZ78lfav+WMtTcJDjjGshv2mvr2mfcI= Subject key identifier: 5C:1B:F5:6B:4B:86:51:29:5E:06:65:83:C2:59:D3:14:9A:5E:E0:83 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 501B440CF5EC5E598B70A688C638A7D865FC8EDD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa Signing time: Mon 27 Jul 2026 03:10:09 +0000 ROA not before: Mon 27 Jul 2026 03:10:09 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1b:44:0c:f5:ec:5e:59:8b:70:a6:88:c6:38:a7:d8:65:fc:8e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:09 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=56df2a99292254386831a52df663fe4ff270f1cb4a31493c6e248a149a7890d1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:a0:0d:47:08:2f:bb:1c:8d:14:c6:1c:af: f1:75:bf:95:f2:7b:67:74:ea:eb:db:6c:ba:27:d3: 54:8f:b1:58:ea:b0:4b:7b:22:07:ce:a3:fe:d8:b4: df:c5:52:97:62:22:52:73:4b:ae:ed:78:ea:97:64: e1:1d:e5:11:46:6e:17:7a:06:79:ed:44:cc:79:42: 18:83:5e:6a:c4:a0:c8:a4:08:92:8d:53:de:dd:01: 9a:31:77:41:5b:8b:7e:6e:61:0b:16:ab:c2:2c:eb: 66:fc:59:b7:b1:6d:e2:e6:7d:96:2b:34:bf:34:9a: ec:2f:f1:7a:f3:b1:d9:b6:79:88:f1:12:31:9d:59: 1e:ad:55:ef:b9:98:e4:b3:f2:db:4e:9b:1a:bb:30: 7c:55:e5:8f:d0:d4:be:2f:ea:10:23:2d:6d:79:53: 5b:17:6b:41:a8:61:6e:80:21:56:1a:8c:86:4a:91: a4:d7:ea:08:0c:0f:36:f1:6c:78:8b:48:80:6b:29: 7a:22:73:bb:b3:25:d1:05:7d:be:72:ef:8d:f2:8a: a4:85:a8:1a:f8:74:af:ca:a5:55:72:97:5e:9d:e3: cd:b4:34:c1:22:ed:43:c5:9b:53:27:17:cb:08:9b: 24:7a:a9:ad:2a:af:27:96:7e:7d:39:3f:13:9e:71: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1B:F5:6B:4B:86:51:29:5E:06:65:83:C2:59:D3:14:9A:5E:E0:83 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f010::/44 Signature Algorithm: sha256WithRSAEncryption 88:b9:d2:c8:a7:53:cc:b3:76:21:08:d3:9c:88:0d:c0:db:8c: f1:1b:8a:87:90:7c:20:24:4b:ac:00:41:90:d8:f8:62:68:c9: 7e:d6:3a:44:07:14:a9:15:2a:1b:01:08:db:10:04:1e:2b:10: 10:87:7f:5f:7b:c9:ea:3f:a0:fc:ec:47:4d:51:6e:17:3c:3c: 96:dc:5d:56:17:7a:47:6e:c1:71:be:5c:9a:90:e5:e5:fb:73: 67:b4:c6:db:31:ab:77:99:65:8b:58:f7:f8:c2:7e:bc:b0:79: c3:02:2d:5e:8b:26:1c:0f:e8:86:b4:a4:c4:24:03:04:50:bb: 9a:ac:f3:b4:44:0a:0e:34:2a:77:03:db:53:32:63:1e:d0:df: 70:55:04:98:84:29:3c:8c:30:d8:fc:91:af:fe:fc:a0:8f:d5: ee:0f:40:6b:f7:d4:b7:33:b8:2d:d0:e6:85:b0:d7:95:b9:38: 3e:41:b3:fa:37:87:ee:6a:b6:5e:41:73:18:fb:26:2d:3f:24: b2:cc:9b:c4:32:38:ac:83:d9:b8:ab:3c:07:bb:af:32:8b:8b: 4f:fb:2f:71:3d:2c:00:15:a5:68:76:6a:52:80:eb:93:da:37: f0:49:ae:af:e9:32:ed:ba:dc:f9:5b:0f:61:6f:9a:66:80:4f: b5:fe:ad:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUBtEDPXsXlmLcKaIxjin2GX8jt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDA5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmRmMmE5OTI5MjI1NDM4NjgzMWE1MmRmNjYzZmU0ZmYy NzBmMWNiNGEzMTQ5M2M2ZTI0OGExNDlhNzg5MGQxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvm6ANRwgvuxyNFMYcr/F1v5Xye2d06uvbbLon01SPsVjq sEt7IgfOo/7YtN/FUpdiIlJzS67teOqXZOEd5RFGbhd6BnntRMx5QhiDXmrEoMik CJKNU97dAZoxd0Fbi35uYQsWq8Is62b8WbexbeLmfZYrNL80muwv8Xrzsdm2eYjx EjGdWR6tVe+5mOSz8ttOmxq7MHxV5Y/Q1L4v6hAjLW15U1sXa0GoYW6AIVYajIZK kaTX6ggMDzbxbHiLSIBrKXoic7uzJdEFfb5y743yiqSFqBr4dK/KpVVyl16d4820 NMEi7UPFm1MnF8sImyR6qa0qryeWfn05PxOecQeFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXBv1a0uGUSleBmWDwlnTFJpe4IMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkZGRkN2JmLTVkZmMtNGEyMC05YjhkLWRmZmMwMjNjOTg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78BAwDQYJKoZIhvcNAQELBQADggEBAIi50sinU8yzdiEI05yIDcDb jPEbioeQfCAkS6wAQZDY+GJoyX7WOkQHFKkVKhsBCNsQBB4rEBCHf197yeo/oPzs R01Rbhc8PJbcXVYXekduwXG+XJqQ5eX7c2e0xtsxq3eZZYtY9/jCfrywecMCLV6L JhwP6Ia0pMQkAwRQu5qs87RECg40KncD21MyYx7Q33BVBJiEKTyMMNj8ka/+/KCP 1e4PQGv31LczuC3Q5oWw15W5OD5Bs/o3h+5qtl5Bcxj7Ji0/JLLMm8QyOKyD2bir PAe7rzKLi0/7L3E9LAAVpWh2alKA65PaN/BJrq/pMu263PlbD2FvmmaAT7X+rVo= -----END CERTIFICATE-----Generated at Mon Jul 27 22:07:44 2026 by rpki-client