$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa File: 0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa (raw, json) Hash identifier: EZHa1bJszjwg3R3gk+aQB/i7lkAynkuskEZLOBfM7aU= Subject key identifier: 8C:B6:CB:58:AC:32:70:16:07:E9:93:57:9D:09:9A:23:85:04:B6:6D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0565A08F927A535E12330A7764EA615EB4C383F5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa Signing time: Mon 04 May 2026 15:00:05 +0000 ROA not before: Mon 04 May 2026 15:00:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:65:a0:8f:92:7a:53:5e:12:33:0a:77:64:ea:61:5e:b4:c3:83:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:00:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=359d80f7a3cb3d77f2aab03cfc1812611bab0449da770e349ae16856e4d373a5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:ca:9b:d7:3b:6c:5b:cc:e2:50:3e:82:a3: de:eb:f1:f8:94:c3:4c:17:21:14:27:20:06:f6:df: 29:15:42:93:ec:e0:2b:93:90:d8:ce:06:97:f4:24: 14:3b:3b:71:36:2e:e9:af:9c:0d:50:58:55:86:4e: a2:2a:09:b1:50:d6:c1:d9:ba:c7:6a:f0:49:82:7f: d7:ca:fd:77:73:c2:c2:a9:83:4e:a8:53:5c:0d:68: 53:4f:ca:b6:3e:0f:5a:1d:1f:63:84:08:a7:96:f5: 00:6a:18:92:4a:bf:7a:78:bb:84:df:ce:e4:a7:49: 6e:bf:01:1c:02:25:e5:6d:21:33:25:7d:7c:c1:5b: 28:ec:d3:55:03:05:fd:85:97:91:55:a9:ca:52:80: 18:e7:81:34:01:fa:54:f9:d8:27:56:f8:e3:16:94: d5:ca:79:19:61:3d:2a:a2:ec:61:74:eb:89:43:f3: ad:d7:0e:13:ec:2a:2a:5a:34:bb:1e:d4:ca:1d:9c: ef:84:77:e8:c9:1c:8e:b3:97:4d:1c:fe:23:f7:06: 71:7b:ee:f4:3c:5b:b7:02:96:df:63:c4:8a:46:72: 71:16:a4:23:ba:74:15:52:7f:fe:d7:84:b0:3a:2c: 71:d1:e6:47:c3:83:27:32:36:c8:6e:3a:8b:17:fe: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B6:CB:58:AC:32:70:16:07:E9:93:57:9D:09:9A:23:85:04:B6:6D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d9d03af-42d8-4cd2-b702-c5ecd6988e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610d::/48 Signature Algorithm: sha256WithRSAEncryption 68:d5:11:30:e4:aa:61:84:09:5d:e6:d7:66:57:2b:33:b6:b5: 30:1c:67:aa:66:58:30:42:7d:fa:f1:34:5a:5e:2c:36:4c:82: f0:20:14:1c:10:53:60:74:51:c4:1e:a8:21:c7:5f:21:ab:43: 57:4b:58:13:7b:f8:8f:43:b8:f1:24:9f:24:ad:08:4b:a3:f3: cc:3c:ba:54:bc:7b:64:d4:ce:df:f1:67:10:da:60:c0:99:a0: a5:ec:70:8c:31:fa:62:5d:26:d0:a3:53:d4:c1:a1:8b:a9:d1: b0:f7:9e:d9:20:9b:88:5e:7f:5c:8b:8b:f2:86:55:54:dd:a0: 38:43:03:87:66:91:d8:06:e0:a2:99:3d:2d:fe:db:63:90:10: b1:f6:5f:17:db:e4:f2:4b:5d:9b:57:3c:f1:b7:d8:e8:1e:46: d5:b4:5f:8a:6d:89:14:69:4e:65:d4:48:c0:f1:0c:ea:95:87: 4f:99:87:8a:a3:4f:21:40:62:b9:a0:be:1b:4e:a1:ec:99:67: 4e:53:2b:86:41:62:cb:b3:81:e3:46:34:18:dd:9b:80:59:98: 93:55:72:62:bc:cb:bd:87:c7:bd:d7:e3:45:a0:94:cd:f7:7f: e7:74:e4:ab:27:a3:1f:7d:4d:d3:56:84:03:e7:ac:27:ca:3a: dc:16:02:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBWWgj5J6U14SMwp3ZOphXrTDg/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUwMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTlkODBmN2EzY2IzZDc3ZjJhYWIwM2NmYzE4MTI2MTFi YWIwNDQ5ZGE3NzBlMzQ5YWUxNjg1NmU0ZDM3M2E1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnP8qb1ztsW8ziUD6Co97r8fiUw0wXIRQnIAb23ykVQpPs 4CuTkNjOBpf0JBQ7O3E2LumvnA1QWFWGTqIqCbFQ1sHZusdq8EmCf9fK/XdzwsKp g06oU1wNaFNPyrY+D1odH2OECKeW9QBqGJJKv3p4u4TfzuSnSW6/ARwCJeVtITMl fXzBWyjs01UDBf2Fl5FVqcpSgBjngTQB+lT52CdW+OMWlNXKeRlhPSqi7GF064lD 863XDhPsKipaNLse1ModnO+Ed+jJHI6zl00c/iP3BnF77vQ8W7cClt9jxIpGcnEW pCO6dBVSf/7XhLA6LHHR5kfDgycyNshuOosX/tRXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjLbLWKwycBYH6ZNXnQmaI4UEtm0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBkOWQwM2FmLTQyZDgtNGNkMi1iNzAyLWM1ZWNkNjk4OGU4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ0wDQYJKoZIhvcNAQELBQADggEBAGjVETDkqmGECV3m12ZXKzO2 tTAcZ6pmWDBCffrxNFpeLDZMgvAgFBwQU2B0UcQeqCHHXyGrQ1dLWBN7+I9DuPEk nyStCEuj88w8ulS8e2TUzt/xZxDaYMCZoKXscIwx+mJdJtCjU9TBoYup0bD3ntkg m4hef1yLi/KGVVTdoDhDA4dmkdgG4KKZPS3+22OQELH2Xxfb5PJLXZtXPPG32Oge RtW0X4ptiRRpTmXUSMDxDOqVh0+Zh4qjTyFAYrmgvhtOoeyZZ05TK4ZBYsuzgeNG NBjdm4BZmJNVcmK8y72Hx73X40WglM33f+d05Ksnox99TdNWhAPnrCfKOtwWAns= -----END CERTIFICATE-----Generated at Wed May 13 01:25:20 2026 by rpki-client