$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa File: 99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa (raw, json) Hash identifier: T/RcWwpnHqa0/quriMBZpFNpBJkRfYy16RJtBgRaptk= Subject key identifier: 31:96:E5:D6:B4:A2:02:22:EE:D2:DA:CD:D5:C6:A2:0B:7E:9F:A5:09 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 080FD2FFD16AB637C3765CBC18A83FB903C2AF63 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa Signing time: Fri 10 Jul 2026 19:02:24 +0000 ROA not before: Fri 10 Jul 2026 19:02:24 +0000 ROA not after: Thu 08 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0f:d2:ff:d1:6a:b6:37:c3:76:5c:bc:18:a8:3f:b9:03:c2:af:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 10 19:02:24 2026 GMT Not After : Oct 8 23:59:59 2026 GMT Subject: serialNumber=1eb1083d4a45c29d80a146ccd12fc9cbd29fd7f2e55acb4219e2308f27ffc297, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:17:1e:3b:a7:bb:b7:18:60:4f:f9:2d:26: 22:5f:6d:26:1f:4a:98:76:4f:f9:fe:ff:ae:c6:3d: 51:ef:02:16:82:84:ca:cb:d6:a0:c1:61:dc:21:43: 6d:77:9f:58:1e:2d:4b:40:72:2e:70:db:62:e7:1e: 9b:c0:ef:7b:1b:fe:31:1c:33:fd:5d:9d:1d:52:a0: 46:e8:ee:4d:d9:39:7a:c0:bb:d2:2b:ad:02:3b:34: b4:8b:16:b6:0b:03:8c:b4:27:c8:b5:68:84:92:bf: ac:98:8c:26:68:15:55:87:7f:94:e1:4b:6a:8f:d6: 57:4f:93:28:05:08:4a:c1:e0:bd:ae:d2:83:12:be: 63:77:68:eb:e1:d7:b2:85:86:64:16:e9:26:b2:77: b5:de:f7:19:f4:74:e5:50:b6:89:eb:28:c7:0d:64: c8:f7:fa:37:fc:d9:ed:4d:4c:78:3c:26:64:a0:e1: d0:61:b8:39:d5:3e:83:65:eb:40:08:b5:09:b5:96: 7d:28:77:a2:8c:a6:77:9c:b3:33:b4:cb:e8:c0:e1: 68:9c:eb:36:31:d5:a1:41:db:86:75:29:8c:cc:8e: 08:cc:44:cb:f5:8f:96:4b:c0:c3:b2:71:b4:c0:6d: 90:f4:22:71:91:ae:12:ab:6d:88:c9:9a:c7:ef:22: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:E5:D6:B4:A2:02:22:EE:D2:DA:CD:D5:C6:A2:0B:7E:9F:A5:09 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/99ebc2bd-9281-49b2-a2a4-7444ebbb3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4200::/40 Signature Algorithm: sha256WithRSAEncryption 42:6b:03:eb:4e:59:0f:5d:07:36:4f:0d:75:2d:c6:31:04:16: cd:4d:ff:8d:8f:d9:5e:06:0e:5f:4f:3f:5b:ad:24:ad:0d:dd: 01:36:a4:37:e1:b9:56:55:83:55:29:62:22:e7:b4:00:da:8c: 03:4c:ae:d8:a4:0d:63:57:51:0d:ba:b8:a8:e1:ee:81:97:80: a2:f0:fd:6e:a2:98:d9:2f:6e:da:96:e3:15:cc:22:6a:1d:f5: 22:cb:8c:6a:23:83:7f:8e:7a:13:00:71:21:d6:f1:e9:80:26: 74:2c:b2:f5:4c:94:eb:a6:02:3e:59:22:16:31:97:e8:9b:d8: 56:a8:f0:8b:ee:d8:ae:24:5b:35:dd:77:34:20:7d:dd:8d:e6: 66:a5:00:b1:d2:cb:6e:b6:00:11:5b:4b:aa:06:87:5c:41:c6: 8c:4a:3b:03:e9:10:51:59:45:e8:57:47:2d:27:1a:9b:cc:36: 05:25:71:f6:2d:90:11:a3:94:cb:2f:1f:3e:a0:7b:18:05:22: a2:e6:fe:dc:86:5d:c3:da:aa:3c:0e:ad:17:79:40:2d:5e:90: 98:99:60:5f:94:03:ec:70:b0:e9:62:fc:3f:0a:0a:e6:7a:b6: 53:62:a4:2d:3e:e2:54:f6:d5:e6:a8:99:45:5f:16:6b:23:e7: 01:95:1b:52 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCA/S/9FqtjfDdly8GKg/uQPCr2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzEwMTkwMjI0WhcNMjYxMDA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWIxMDgzZDRhNDVjMjlkODBhMTQ2Y2NkMTJmYzljYmQy OWZkN2YyZTU1YWNiNDIxOWUyMzA4ZjI3ZmZjMjk3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2dRceO6e7txhgT/ktJiJfbSYfSph2T/n+/67GPVHvAhaC hMrL1qDBYdwhQ213n1geLUtAci5w22LnHpvA73sb/jEcM/1dnR1SoEbo7k3ZOXrA u9IrrQI7NLSLFrYLA4y0J8i1aISSv6yYjCZoFVWHf5ThS2qP1ldPkygFCErB4L2u 0oMSvmN3aOvh17KFhmQW6Sayd7Xe9xn0dOVQtonrKMcNZMj3+jf82e1NTHg8JmSg 4dBhuDnVPoNl60AItQm1ln0od6KMpnecszO0y+jA4Wic6zYx1aFB24Z1KYzMjgjM RMv1j5ZLwMOycbTAbZD0InGRrhKrbYjJmsfvIvF/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMZbl1rSiAiLu0trN1caiC36fpQkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk5ZWJjMmJkLTkyODEtNDliMi1hMmE0LTc0NDRlYmJiMzgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQjANBgkqhkiG9w0BAQsFAAOCAQEAQmsD605ZD10HNk8NdS3GMQQW zU3/jY/ZXgYOX08/W60krQ3dATakN+G5VlWDVSliIue0ANqMA0yu2KQNY1dRDbq4 qOHugZeAovD9bqKY2S9u2pbjFcwiah31IsuMaiODf456EwBxIdbx6YAmdCyy9UyU 66YCPlkiFjGX6JvYVqjwi+7YriRbNd13NCB93Y3mZqUAsdLLbrYAEVtLqgaHXEHG jEo7A+kQUVlF6FdHLScam8w2BSVx9i2QEaOUyy8fPqB7GAUioub+3IZdw9qqPA6t F3lALV6QmJlgX5QD7HCw6WL8PwoK5nq2U2KkLT7iVPbV5qiZRV8WayPnAZUbUg== -----END CERTIFICATE-----Generated at Sun Jul 12 18:33:18 2026 by rpki-client