$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa File: bdb829ba-87c3-4d1d-8abd-8291c956971f.roa (raw, json) Hash identifier: q8r1HoBpzpBsNVuU5U/LGYtqpciHeLRJBpkyqstW3jo= Subject key identifier: 7C:9C:B5:51:12:69:FB:7A:4E:B1:FD:BB:B4:EE:32:3A:68:13:0C:43 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6724541BFAEB8C2BCDCAD79B535A433C518CE769 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa Signing time: Sun 26 Jul 2026 00:00:43 +0000 ROA not before: Sun 26 Jul 2026 00:00:43 +0000 ROA not after: Sat 24 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:1c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:24:54:1b:fa:eb:8c:2b:cd:ca:d7:9b:53:5a:43:3c:51:8c:e7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 26 00:00:43 2026 GMT Not After : Oct 24 23:59:59 2026 GMT Subject: serialNumber=d95794db5f4cee922d6796caf1eef8894827485b96aa07da6def8620569b1d52, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:69:1f:21:a5:91:da:4d:c7:0b:87:33:24: 15:b4:75:fd:d8:f2:7f:55:ae:89:14:32:88:83:58: 2d:d9:04:a9:85:b1:59:f7:d0:b6:0f:c0:66:d3:9d: e1:0b:61:82:67:91:f6:95:c3:1c:0d:d0:96:91:1e: fa:e7:c7:dc:34:ca:e1:7c:67:89:e0:67:8e:a5:9a: 95:20:20:27:a9:88:cd:83:af:d8:c1:08:53:ee:9e: a5:1e:ae:24:99:8b:51:0d:3e:03:5b:83:a3:64:c7: 68:99:3b:74:14:b2:a9:00:de:9a:1d:8a:d7:f3:31: bf:16:47:d7:ab:5b:88:ee:50:2b:53:ed:d1:f5:02: 83:5a:97:ce:9b:3b:f5:3b:62:a6:56:ec:7f:bb:3e: 52:69:8e:21:41:1c:48:a4:c9:b8:2a:9e:b8:b8:f7: 4e:0f:02:45:3e:a3:29:67:e4:71:9a:20:f2:29:4f: fb:a6:b4:06:7a:2c:db:45:e2:e4:f5:1d:dd:de:b4: 48:56:1f:34:63:64:97:9d:f4:5d:8e:99:2f:d7:6d: 05:47:31:1c:cd:76:11:fc:91:8a:5e:c7:91:22:bc: b1:e2:c2:d8:3f:ba:dd:c9:4a:99:ad:1e:87:1f:5f: 18:19:66:2c:d9:bd:a8:0c:82:e1:dd:db:c3:8c:36: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9C:B5:51:12:69:FB:7A:4E:B1:FD:BB:B4:EE:32:3A:68:13:0C:43 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bdb829ba-87c3-4d1d-8abd-8291c956971f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:1c::/46 Signature Algorithm: sha256WithRSAEncryption 79:66:73:ac:2f:66:0a:a0:f2:d2:ba:1a:87:61:99:4b:60:99: 52:ba:43:9e:50:5d:10:06:f9:16:3a:6d:d0:63:2a:48:4e:51: 3c:ea:36:eb:84:e4:df:41:94:04:ab:5d:8c:c4:fe:f7:23:ee: 9f:ae:4d:ea:71:23:44:77:e8:9f:41:ff:e5:37:4d:44:af:64: bc:03:7f:3b:e6:8b:46:4a:b1:c2:47:40:88:e7:5b:16:ec:9d: 3d:bc:57:c6:01:08:e5:b0:df:6c:6a:78:1e:2a:18:ac:6c:09: e1:48:76:f4:4e:a0:a8:3d:08:c1:f8:df:1a:af:3a:fa:77:2f: b5:94:9f:db:b1:01:2f:28:3d:e3:f4:81:9b:fd:87:80:f1:45: ee:17:9c:a6:4e:4b:1d:07:c8:bd:fb:fd:a6:80:90:a9:2a:51: 07:8a:97:57:0b:9f:c9:50:3e:3b:03:9b:4b:fd:e1:49:31:f7: bf:7b:7d:df:f2:d1:a0:9e:a0:6f:53:e1:e7:3f:b8:59:3c:ed: 3c:05:4d:ed:05:7b:9a:47:99:26:e5:5b:83:fc:a9:56:3c:31: 6a:2b:ab:76:b5:39:50:6c:c5:20:a6:56:0e:88:ec:88:d5:e9: aa:e9:55:15:92:bb:07:73:4f:b7:9c:76:fa:1c:69:f9:34:ce: e4:28:5b:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZyRUG/rrjCvNytebU1pDPFGM52kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI2MDAwMDQzWhcNMjYxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTU3OTRkYjVmNGNlZTkyMmQ2Nzk2Y2FmMWVlZjg4OTQ4 Mjc0ODViOTZhYTA3ZGE2ZGVmODYyMDU2OWIxZDUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4b2kfIaWR2k3HC4czJBW0df3Y8n9VrokUMoiDWC3ZBKmF sVn30LYPwGbTneELYYJnkfaVwxwN0JaRHvrnx9w0yuF8Z4ngZ46lmpUgICepiM2D r9jBCFPunqUeriSZi1ENPgNbg6Nkx2iZO3QUsqkA3poditfzMb8WR9erW4juUCtT 7dH1AoNal86bO/U7YqZW7H+7PlJpjiFBHEikybgqnri4904PAkU+oyln5HGaIPIp T/umtAZ6LNtF4uT1Hd3etEhWHzRjZJed9F2OmS/XbQVHMRzNdhH8kYpex5EivLHi wtg/ut3JSpmtHocfXxgZZizZvagMguHd28OMNgBfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfJy1URJp+3pOsf27tO4yOmgTDEMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkYjgyOWJhLTg3YzMtNGQxZC04YWJkLTgyOTFjOTU2OTcxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDxABwwDQYJKoZIhvcNAQELBQADggEBAHlmc6wvZgqg8tK6GodhmUtg mVK6Q55QXRAG+RY6bdBjKkhOUTzqNuuE5N9BlASrXYzE/vcj7p+uTepxI0R36J9B /+U3TUSvZLwDfzvmi0ZKscJHQIjnWxbsnT28V8YBCOWw32xqeB4qGKxsCeFIdvRO oKg9CMH43xqvOvp3L7WUn9uxAS8oPeP0gZv9h4DxRe4XnKZOSx0HyL37/aaAkKkq UQeKl1cLn8lQPjsDm0v94Ukx9797fd/y0aCeoG9T4ec/uFk87TwFTe0Fe5pHmSbl W4P8qVY8MWorq3a1OVBsxSCmVg6I7IjV6arpVRWSuwdzT7ecdvocafk0zuQoWxM= -----END CERTIFICATE-----Generated at Sun Aug 9 01:43:45 2026 by rpki-client