$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa File: 2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json) Hash identifier: lX23xl/yi25+eljRL0Z6QIiIrpSxUOJqY1lObiziqlE= Subject key identifier: 5B:7A:0D:E8:84:22:7C:0C:BC:0D:98:BE:4C:82:5E:DC:D2:D8:14:0E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 668FFFFC8BAD83CE750EFD870F65697382C2D170 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa Signing time: Mon 11 May 2026 01:30:09 +0000 ROA not before: Mon 11 May 2026 01:30:09 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8f:ff:fc:8b:ad:83:ce:75:0e:fd:87:0f:65:69:73:82:c2:d1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 11 01:30:09 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=6b3151e9b20d3c1a4967fc121f7d63c32df1764e945aa51fdc049e1625ea4947, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:fb:7c:fd:d6:c6:62:3e:1e:51:27:fc:fc: 2a:e4:ea:e0:f1:52:21:5b:9b:b9:54:43:4a:b2:22: 6e:82:0c:17:9a:1f:b6:5e:54:51:84:f9:67:14:30: 12:29:57:8e:06:b3:ee:15:a2:3a:a6:7f:f8:3f:0c: 6f:8c:78:90:24:1b:c6:cb:68:07:87:cc:2c:f7:51: c4:36:e0:9f:30:17:64:04:5b:3a:35:ef:74:76:5b: 94:3b:95:fa:12:d7:42:9e:5a:e8:ed:60:33:b3:b3: 56:bf:c5:3b:a3:fc:c3:6c:b1:3a:f1:9d:4b:ae:a5: 8c:6c:af:2f:54:38:6f:5f:53:f5:c8:d6:05:ca:75: 3e:49:d5:44:09:aa:1e:a3:d7:01:6d:1a:5e:0a:de: 81:a6:36:ad:b5:3b:4a:22:3b:f3:26:9a:f2:4e:17: 93:67:3a:c0:e4:90:3f:a1:97:af:d6:2a:a1:98:2e: db:36:65:1a:26:97:d1:70:04:2c:a3:0c:6e:5b:fe: a8:bb:36:f6:98:17:e1:50:ed:ea:03:e6:5d:c6:fc: 24:a1:42:e8:19:4a:f2:3c:b1:a9:78:83:5a:c3:1b: 40:78:74:d9:72:f4:1a:39:3e:7b:0a:48:7f:73:6e: fb:35:78:c7:87:44:4c:c7:28:f3:41:8b:d5:7a:2a: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7A:0D:E8:84:22:7C:0C:BC:0D:98:BE:4C:82:5E:DC:D2:D8:14:0E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:80::/44 Signature Algorithm: sha256WithRSAEncryption 71:73:2b:90:be:ae:00:20:1c:8d:ce:d3:e7:35:c3:20:60:b2: 56:47:fb:1d:08:d5:72:8a:f6:1d:45:40:91:e4:a6:76:a6:94: d3:1c:85:20:5e:32:fa:23:2b:4f:b9:36:41:4d:3e:ca:92:80: e8:4c:0f:b5:8f:76:43:e6:6f:a9:4e:39:a3:f7:ed:a2:39:67: e7:32:86:a9:81:ff:18:8d:64:c0:98:93:21:95:a8:2a:d3:e5: a7:b4:9c:4a:8d:98:47:11:89:d0:aa:b0:ac:3b:20:35:27:6e: 3a:c8:15:4b:68:34:a1:13:f4:ce:91:ff:a3:a5:71:82:f6:44: 1e:86:ac:ae:ae:7b:b3:3c:a9:25:1f:84:eb:fb:f1:88:e4:66: d1:7f:e7:4e:a2:62:a9:c4:4f:49:a5:9e:62:0d:2f:92:f1:c0: 7f:a6:ff:fe:7a:f0:c8:88:5d:a8:9f:a8:7d:0b:df:97:24:5c: f4:69:58:b7:8c:57:9c:dc:9f:7b:e8:2d:c3:ba:42:97:18:12: 4f:df:f0:d1:4d:f8:38:5d:1d:c5:00:35:2f:41:e4:35:4e:51: e1:d5:c5:c3:fd:1c:71:26:c7:9f:86:76:71:66:f6:da:6f:4f: 02:03:a7:e6:2e:b3:12:f2:cb:1e:33:92:8f:56:15:c0:90:73: be:0c:f1:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZo///Iutg851Dv2HD2Vpc4LC0XAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTExMDEzMDA5WhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjMxNTFlOWIyMGQzYzFhNDk2N2ZjMTIxZjdkNjNjMzJk ZjE3NjRlOTQ1YWE1MWZkYzA0OWUxNjI1ZWE0OTQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMQ/t8/dbGYj4eUSf8/Crk6uDxUiFbm7lUQ0qyIm6CDBea H7ZeVFGE+WcUMBIpV44Gs+4Vojqmf/g/DG+MeJAkG8bLaAeHzCz3UcQ24J8wF2QE Wzo173R2W5Q7lfoS10KeWujtYDOzs1a/xTuj/MNssTrxnUuupYxsry9UOG9fU/XI 1gXKdT5J1UQJqh6j1wFtGl4K3oGmNq21O0oiO/MmmvJOF5NnOsDkkD+hl6/WKqGY Lts2ZRoml9FwBCyjDG5b/qi7NvaYF+FQ7eoD5l3G/CShQugZSvI8sal4g1rDG0B4 dNly9Bo5PnsKSH9zbvs1eMeHREzHKPNBi9V6Kv6VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW3oN6IQifAy8DZi+TIJe3NLYFA4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiODk2MjFhLTZjMjktNGNiZi04OTc2LTM5MzBjNGU1ZDkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAIAwDQYJKoZIhvcNAQELBQADggEBAHFzK5C+rgAgHI3O0+c1wyBg slZH+x0I1XKK9h1FQJHkpnamlNMchSBeMvojK0+5NkFNPsqSgOhMD7WPdkPmb6lO OaP37aI5Z+cyhqmB/xiNZMCYkyGVqCrT5ae0nEqNmEcRidCqsKw7IDUnbjrIFUto NKET9M6R/6OlcYL2RB6GrK6ue7M8qSUfhOv78YjkZtF/506iYqnET0mlnmINL5Lx wH+m//568MiIXaifqH0L35ckXPRpWLeMV5zcn3voLcO6QpcYEk/f8NFN+DhdHcUA NS9B5DVOUeHVxcP9HHEmx5+GdnFm9tpvTwIDp+YusxLyyx4zko9WFcCQc74M8Vk= -----END CERTIFICATE-----Generated at Tue May 12 23:08:55 2026 by rpki-client