$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa File: bbfbc983-8785-4005-ba44-919d00df7ff9.roa (raw, json) Hash identifier: +ZYpF+S3p6ZsrHFKC5gwX5HSNCPovMpAM8gr3LL5V/s= Subject key identifier: 51:43:68:7D:13:42:31:2F:54:C2:93:E1:FD:F9:4C:29:3B:7D:9C:BE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 66296320EB6CACBCE2DAA995563B9E9298C38542 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa Signing time: Thu 02 Jul 2026 00:00:06 +0000 ROA not before: Thu 02 Jul 2026 00:00:06 +0000 ROA not after: Wed 30 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:29:63:20:eb:6c:ac:bc:e2:da:a9:95:56:3b:9e:92:98:c3:85:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 2 00:00:06 2026 GMT Not After : Sep 30 23:59:59 2026 GMT Subject: serialNumber=f5f6f53bc940fa26df634cb41e50303de762cc35b93c664c05be5129033f5f6b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:4b:e4:97:d1:ee:c4:cb:4b:7f:24:e0:30: 76:3e:b4:d6:56:15:5e:19:cb:81:75:77:a2:b7:aa: 76:b1:51:b1:dd:a4:0b:52:06:cb:ef:3d:a2:35:1e: e8:60:35:4e:a3:d3:ed:a7:58:02:45:80:28:38:13: a3:c4:23:18:92:a3:f6:ee:65:54:d9:26:f7:a7:bf: 43:cc:4e:bc:e0:c0:4b:6c:b0:fe:1e:06:ee:f0:41: 69:a4:e6:bb:80:02:3f:1d:4b:68:dd:20:67:8a:cd: 13:5e:11:72:7f:b2:18:0e:2e:13:a7:62:c0:c0:bc: c5:d6:30:db:20:b8:66:6c:7f:e5:96:55:ef:92:f9: a1:1e:01:15:9e:0d:17:7a:c2:5d:69:90:03:a7:ad: f0:26:b5:1f:68:c6:14:ee:29:3c:57:ed:3a:76:6c: 35:28:5e:cb:e0:e3:9d:59:2e:c2:5d:b3:6b:08:1e: 2d:e1:b0:28:aa:27:0d:64:f2:85:22:bb:f1:01:e6: 01:18:a1:85:8b:58:65:e2:ee:07:88:80:27:3e:fd: 30:b6:dc:0b:82:c5:42:01:08:3b:df:61:51:99:2b: e1:77:7d:52:d9:7b:70:9d:2b:95:20:b9:03:b7:20: 5c:19:50:11:58:fd:15:35:be:db:3d:06:14:dd:f4: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:68:7D:13:42:31:2F:54:C2:93:E1:FD:F9:4C:29:3B:7D:9C:BE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bbfbc983-8785-4005-ba44-919d00df7ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6020::/44 Signature Algorithm: sha256WithRSAEncryption 18:a3:de:7c:58:5b:52:21:41:6a:8b:00:cb:a1:bb:7b:ec:60: 79:08:8a:c8:71:a3:87:93:00:a3:fc:ab:6e:4c:92:83:fd:a0: 4a:81:2d:b9:73:2d:19:cf:67:ff:4d:15:57:36:ec:18:df:ff: 26:13:b4:81:8a:7a:19:a4:de:e7:6e:37:c4:b6:7c:26:4e:f0: 84:0d:dd:7b:38:16:d5:b6:08:11:7a:da:1d:13:48:ce:f9:78: 84:f1:46:8c:f1:d9:c9:a6:b0:6b:5b:45:23:6d:ed:94:0d:fc: 80:ee:c7:1d:30:47:a7:64:81:e1:df:b8:72:51:d9:fa:74:57: 0a:33:bf:43:16:50:16:5f:f2:8f:ec:37:d4:bc:29:97:56:bf: 67:b2:1f:71:56:c7:ac:ec:97:a7:e4:ab:bd:ff:e6:bb:16:21: 5e:5d:f9:84:eb:4a:e9:09:98:cd:0f:09:67:79:c4:19:db:5c: 30:f8:24:3b:61:8c:5c:12:c2:92:75:ff:42:fc:51:ec:5e:33: 42:ee:64:10:e6:75:83:fb:9b:14:f9:d3:55:5f:6f:0a:b7:a5: 6a:b6:09:5d:6f:1d:24:74:d3:6a:ed:ba:a7:05:8a:51:a5:6f: 5b:a1:ad:dd:c3:50:a4:7c:e8:5f:f3:45:a8:50:6f:b1:11:a5: 0b:a0:1b:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZiljIOtsrLzi2qmVVjuekpjDhUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzAyMDAwMDA2WhcNMjYwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWY2ZjUzYmM5NDBmYTI2ZGY2MzRjYjQxZTUwMzAzZGU3 NjJjYzM1YjkzYzY2NGMwNWJlNTEyOTAzM2Y1ZjZiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4sUvkl9HuxMtLfyTgMHY+tNZWFV4Zy4F1d6K3qnaxUbHd pAtSBsvvPaI1HuhgNU6j0+2nWAJFgCg4E6PEIxiSo/buZVTZJvenv0PMTrzgwEts sP4eBu7wQWmk5ruAAj8dS2jdIGeKzRNeEXJ/shgOLhOnYsDAvMXWMNsguGZsf+WW Ve+S+aEeARWeDRd6wl1pkAOnrfAmtR9oxhTuKTxX7Tp2bDUoXsvg451ZLsJds2sI Hi3hsCiqJw1k8oUiu/EB5gEYoYWLWGXi7geIgCc+/TC23AuCxUIBCDvfYVGZK+F3 fVLZe3CdK5UguQO3IFwZUBFY/RU1vts9BhTd9BJvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUUNofRNCMS9UwpPh/flMKTt9nL4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiZmJjOTgzLTg3ODUtNDAwNS1iYTQ0LTkxOWQwMGRmN2ZmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYCAwDQYJKoZIhvcNAQELBQADggEBABij3nxYW1IhQWqLAMuhu3vs YHkIishxo4eTAKP8q25MkoP9oEqBLblzLRnPZ/9NFVc27Bjf/yYTtIGKehmk3udu N8S2fCZO8IQN3Xs4FtW2CBF62h0TSM75eITxRozx2cmmsGtbRSNt7ZQN/IDuxx0w R6dkgeHfuHJR2fp0Vwozv0MWUBZf8o/sN9S8KZdWv2eyH3FWx6zsl6fkq73/5rsW IV5d+YTrSukJmM0PCWd5xBnbXDD4JDthjFwSwpJ1/0L8UexeM0LuZBDmdYP7mxT5 01Vfbwq3pWq2CV1vHSR002rtuqcFilGlb1uhrd3DUKR86F/zRahQb7ERpQugG3g= -----END CERTIFICATE-----Generated at Wed Jul 15 18:15:08 2026 by rpki-client