$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d6a71dd-6c13-4c12-97c5-c8190b819f77.roa File: 1d6a71dd-6c13-4c12-97c5-c8190b819f77.roa (raw, json) Hash identifier: mI72b8s1LlOLI1QwXDWep/jj+GlEFzeWOJgGvvYHCKE= Subject key identifier: 36:C0:78:AC:0A:C1:2A:A9:E1:DA:7B:21:1B:7E:81:D2:57:CE:93:08 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1DCA2A5280723A367217CF0CA955C92980251012 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d6a71dd-6c13-4c12-97c5-c8190b819f77.roa Signing time: Fri 08 May 2026 03:10:37 +0000 ROA not before: Fri 08 May 2026 03:10:37 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ca:2a:52:80:72:3a:36:72:17:cf:0c:a9:55:c9:29:80:25:10:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 8 03:10:37 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=f093d46a287e3c44be5481c0386700566a61bf9213056fc444c0dd1ed6d99012, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:6e:57:c2:70:0f:fa:c0:41:56:3d:1a:44: d9:df:ad:b3:d5:db:55:d8:56:59:fe:c9:15:f8:db: 4f:ef:b1:37:52:d6:52:ca:11:39:1b:36:f6:ed:20: 83:d3:99:83:8c:2b:2f:b8:29:cd:ab:57:67:57:63: 63:14:98:1b:df:65:2a:e5:87:c7:a0:6a:da:85:07: 3c:9a:ab:32:2c:c1:49:6c:70:cf:f4:35:0d:6e:07: 7f:1d:a4:f4:4b:6a:77:5f:9b:5a:68:4a:a2:4e:14: 5d:b2:81:f9:de:f1:e1:c1:92:ef:29:51:9d:ac:1c: dc:bb:45:96:e0:0e:10:5f:d4:c8:14:c6:c0:2a:5c: 4a:fa:ef:54:24:b7:54:69:40:0b:e3:9f:82:c5:53: 0b:0e:8e:fe:c5:92:45:4e:ae:7a:fb:27:71:6f:09: 5e:04:6e:a0:63:a5:a1:5c:65:25:b5:1b:92:fa:bd: b4:0f:92:47:80:16:ed:88:73:09:dc:2f:83:c5:1c: ea:a2:3a:01:d1:7e:a9:46:76:00:53:bd:6e:5b:ff: 45:8f:a6:ad:cc:f3:e0:bc:58:80:a7:eb:09:cb:af: 3c:9b:a0:ab:f0:87:1b:96:7b:43:b2:2e:b6:82:af: 3c:4b:d0:04:00:b7:80:63:fa:cf:93:35:8f:8e:bd: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C0:78:AC:0A:C1:2A:A9:E1:DA:7B:21:1B:7E:81:D2:57:CE:93:08 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1d6a71dd-6c13-4c12-97c5-c8190b819f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 5f:1a:b1:6b:46:93:cd:79:37:5b:79:df:02:96:1f:f9:59:95: c2:0f:98:6f:38:f5:c9:aa:d0:8c:48:06:91:60:4d:cd:da:8c: 89:ab:0b:bb:f0:6e:27:da:22:6f:fc:a5:9a:93:6a:c7:20:58: a5:fd:ae:e9:95:55:fe:3a:1d:a9:1c:24:80:00:28:9f:dd:13: c2:e5:0f:2f:7f:0f:a5:8e:e8:b6:74:e8:41:bf:fc:b1:3b:49: c5:6f:0e:3d:10:73:fb:01:ef:a9:7d:64:a1:3a:cb:f0:8c:c2: fb:af:ce:fa:c3:85:19:fa:79:fc:dd:02:59:8f:6b:e8:b3:8f: 20:4e:77:67:e9:82:d7:11:f0:e1:52:09:6e:c2:d0:66:1b:a9: 78:bf:2d:00:46:25:be:8c:3d:e4:1c:05:b0:85:25:64:66:ae: ee:24:73:ca:e1:f7:54:55:d6:62:27:f4:f3:06:58:87:28:c8: 64:a5:bf:ff:d0:35:59:34:2e:5b:74:46:40:0a:59:3f:17:52: e5:d2:5a:cf:b4:11:8d:e4:de:cb:3e:b4:59:0f:e7:9d:26:47: b9:e9:b2:28:5b:a7:e2:ec:2e:88:ba:43:d5:f8:fe:a8:1b:1f: d5:9f:b0:12:1f:10:e2:51:20:1f:39:21:a6:b1:6b:45:ca:87: 42:33:b9:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHcoqUoByOjZyF88MqVXJKYAlEBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA4MDMxMDM3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDkzZDQ2YTI4N2UzYzQ0YmU1NDgxYzAzODY3MDA1NjZh NjFiZjkyMTMwNTZmYzQ0NGMwZGQxZWQ2ZDk5MDEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs2W5XwnAP+sBBVj0aRNnfrbPV21XYVln+yRX420/vsTdS 1lLKETkbNvbtIIPTmYOMKy+4Kc2rV2dXY2MUmBvfZSrlh8egatqFBzyaqzIswUls cM/0NQ1uB38dpPRLandfm1poSqJOFF2ygfne8eHBku8pUZ2sHNy7RZbgDhBf1MgU xsAqXEr671Qkt1RpQAvjn4LFUwsOjv7FkkVOrnr7J3FvCV4EbqBjpaFcZSW1G5L6 vbQPkkeAFu2IcwncL4PFHOqiOgHRfqlGdgBTvW5b/0WPpq3M8+C8WICn6wnLrzyb oKvwhxuWe0OyLraCrzxL0AQAt4Bj+s+TNY+OvZhTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNsB4rArBKqnh2nshG36B0lfOkwgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFkNmE3MWRkLTZjMTMtNGMxMi05N2M1LWM4MTkwYjgxOWY3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAF8asWtGk815N1t53wKWH/lZ lcIPmG849cmq0IxIBpFgTc3ajImrC7vwbifaIm/8pZqTascgWKX9rumVVf46Hakc JIAAKJ/dE8LlDy9/D6WO6LZ06EG//LE7ScVvDj0Qc/sB76l9ZKE6y/CMwvuvzvrD hRn6efzdAlmPa+izjyBOd2fpgtcR8OFSCW7C0GYbqXi/LQBGJb6MPeQcBbCFJWRm ru4kc8rh91RV1mIn9PMGWIcoyGSlv//QNVk0Llt0RkAKWT8XUuXSWs+0EY3k3ss+ tFkP550mR7npsihbp+LsLoi6Q9X4/qgbH9WfsBIfEOJRIB85Iaaxa0XKh0IzuQo= -----END CERTIFICATE-----Generated at Wed May 13 01:46:22 2026 by rpki-client