$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa File: 21659f7e-dfb0-401c-964b-6f52493a3df0.roa (raw, json) Hash identifier: /I/9LOqNOyPnOwyOxofczUlzDlfXR/B3PMIDTxpaCd8= Subject key identifier: A5:E5:D0:75:1E:FF:72:42:1E:C0:79:E0:8F:5C:A7:82:91:ED:72:AC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7DA18EF57EDC8805F0562757FAAE1323D1E5859C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa Signing time: Mon 04 May 2026 15:00:05 +0000 ROA not before: Mon 04 May 2026 15:00:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a1:8e:f5:7e:dc:88:05:f0:56:27:57:fa:ae:13:23:d1:e5:85:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:00:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=bd2f4eae62019764e101ff93bef7a5043edb34269275ec18d690f5c6bfdded0e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:32:d3:be:33:19:d0:52:6f:3d:50:8a:8b: a6:49:07:e1:f3:e8:1c:ba:3c:01:ef:24:b4:a6:07: c8:9d:be:85:1c:59:36:5a:43:51:25:4f:af:a5:1d: 5c:7a:a6:88:3e:ee:a2:51:71:ac:f5:c8:6b:dc:c8: 76:a2:4f:50:ee:09:06:ca:8a:fa:d3:51:26:d2:cd: bc:c8:16:43:e4:ca:a5:12:1f:91:93:33:91:9b:ef: 0f:15:80:0c:f4:e7:b1:08:b3:a1:c7:a0:9b:bd:b5: 40:08:0e:4c:77:b4:44:7f:bb:8a:23:13:f3:0d:48: b8:bd:a3:4a:46:d5:a6:47:21:7a:23:71:e9:02:ae: ec:4c:32:e0:48:ce:12:d4:a6:3d:45:5d:f5:28:a1: 1a:6d:8e:e6:18:60:c5:9c:9e:1f:59:8e:35:74:5c: d9:25:2b:27:cc:9c:95:e2:14:aa:62:52:86:0f:48: 35:16:45:56:e2:b3:67:35:89:71:58:df:e0:4a:d5: b4:3a:3e:fc:79:78:e4:5e:7a:b8:73:c9:50:38:0c: 1d:04:2b:5f:a7:7f:b7:49:f8:e7:ff:6b:81:7d:ef: 2a:9c:8b:18:55:73:a5:a8:9d:fb:29:f7:5d:86:3e: 6b:5c:37:0a:d1:15:b5:1c:70:01:54:75:26:d0:cc: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E5:D0:75:1E:FF:72:42:1E:C0:79:E0:8F:5C:A7:82:91:ED:72:AC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/21659f7e-dfb0-401c-964b-6f52493a3df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 7b:2f:5c:c4:09:ad:5f:f9:4d:b4:d2:d6:d3:b9:8c:52:3f:a6: 8a:22:e7:22:18:05:7e:e4:0f:74:69:b6:fa:51:47:1e:8b:e8: 09:0f:10:fc:74:ff:b8:98:c7:9d:11:3c:53:a3:9c:d7:91:4b: 3e:96:23:83:b9:95:9c:5a:98:17:f2:48:ac:6e:5f:58:10:93: 73:25:dc:f3:3c:5c:be:10:ba:f0:b1:65:37:ea:1e:d4:86:24: 6a:38:49:5f:2d:5a:b2:93:0a:21:55:3d:20:8a:56:cd:70:7f: 7a:1f:c1:73:92:13:23:44:32:4a:f6:8c:57:1c:a6:39:a7:d4: 86:ef:17:37:3e:91:87:55:be:ff:3e:e6:25:40:a1:24:76:d6: c1:4a:55:f6:26:78:a1:f2:f2:89:14:0b:15:ce:56:23:67:e7: 90:93:6a:61:0a:a5:57:4d:32:f9:7f:b3:15:02:4a:87:ff:91: 62:5f:51:b2:9f:32:35:d7:c6:e6:5c:96:0d:1d:20:a2:ec:5e: 1a:9e:4c:06:27:6a:21:6f:d4:58:f8:41:60:ce:d6:fc:67:ed: 8d:c1:99:64:b9:ed:57:1d:79:ad:9b:29:48:27:19:21:ac:a0: 8b:22:64:52:61:e7:f2:b1:3c:52:48:9e:4f:8e:0c:97:41:f1: 52:5b:a5:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfaGO9X7ciAXwVidX+q4TI9HlhZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUwMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDJmNGVhZTYyMDE5NzY0ZTEwMWZmOTNiZWY3YTUwNDNl ZGIzNDI2OTI3NWVjMThkNjkwZjVjNmJmZGRlZDBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBUTLTvjMZ0FJvPVCKi6ZJB+Hz6By6PAHvJLSmB8idvoUc WTZaQ1ElT6+lHVx6pog+7qJRcaz1yGvcyHaiT1DuCQbKivrTUSbSzbzIFkPkyqUS H5GTM5Gb7w8VgAz057EIs6HHoJu9tUAIDkx3tER/u4ojE/MNSLi9o0pG1aZHIXoj cekCruxMMuBIzhLUpj1FXfUooRptjuYYYMWcnh9ZjjV0XNklKyfMnJXiFKpiUoYP SDUWRVbis2c1iXFY3+BK1bQ6Pvx5eOReerhzyVA4DB0EK1+nf7dJ+Of/a4F97yqc ixhVc6Wonfsp912GPmtcNwrRFbUccAFUdSbQzMS7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpeXQdR7/ckIewHngj1yngpHtcqwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIxNjU5ZjdlLWRmYjAtNDAxYy05NjRiLTZmNTI0OTNhM2RmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBAHsvXMQJrV/5TbTS1tO5jFI/ pooi5yIYBX7kD3RptvpRRx6L6AkPEPx0/7iYx50RPFOjnNeRSz6WI4O5lZxamBfy SKxuX1gQk3Ml3PM8XL4QuvCxZTfqHtSGJGo4SV8tWrKTCiFVPSCKVs1wf3ofwXOS EyNEMkr2jFccpjmn1IbvFzc+kYdVvv8+5iVAoSR21sFKVfYmeKHy8okUCxXOViNn 55CTamEKpVdNMvl/sxUCSof/kWJfUbKfMjXXxuZclg0dIKLsXhqeTAYnaiFv1Fj4 QWDO1vxn7Y3BmWS57Vcdea2bKUgnGSGsoIsiZFJh5/KxPFJInk+ODJdB8VJbpcY= -----END CERTIFICATE-----Generated at Tue May 12 23:44:12 2026 by rpki-client