$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa File: 357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa (raw, json) Hash identifier: n9JK+Xr0n2eZ4dtA0bkeMAxJh+BoMRTgOw9hebw1QiU= Subject key identifier: 1C:6F:47:7B:A1:1D:AA:58:DA:37:1D:C0:9F:C5:E1:AC:8B:E7:08:D7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 31684AC6C2DCED22335AFEB15B0EB366631CB481 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa Signing time: Mon 04 May 2026 15:10:24 +0000 ROA not before: Mon 04 May 2026 15:10:24 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:4a:c6:c2:dc:ed:22:33:5a:fe:b1:5b:0e:b3:66:63:1c:b4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:24 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=325956677b12e99dfb26fd873f0d6569e13e3f61e671a5ceb24d182a81a074e9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:7c:d5:a3:1c:e1:1c:94:31:56:77:1a:1c: 3c:25:df:53:3b:30:7f:e2:35:e6:be:31:6e:1e:4d: 6a:e0:dd:77:f1:f1:84:72:a2:a3:02:38:80:59:1b: 70:f7:06:96:b4:54:bd:47:fb:e4:68:b4:6e:a5:7d: ee:7f:5c:08:8a:68:38:eb:25:69:e8:7f:d8:0f:ba: dc:e9:b0:84:c3:20:ef:e6:b5:56:c9:2c:51:2f:61: e9:a1:9a:81:12:69:80:73:5a:e7:9c:47:70:d9:0c: dd:ff:84:f1:f4:b1:56:75:57:6c:93:7f:dc:c6:68: 62:53:60:78:e5:46:32:93:d5:8f:02:e1:2e:a1:f9: 41:f7:ac:43:8c:66:3e:e2:05:4d:96:ba:cb:26:ce: 65:a1:45:b3:b9:0d:fc:8d:95:7f:60:d0:27:02:22: b8:fb:02:96:c1:68:58:64:0d:a2:d1:39:d1:32:ea: 99:4f:01:90:4d:b7:3d:3d:24:9e:31:65:ce:13:db: 54:b1:7f:e1:0d:0f:ab:5a:d2:d4:30:c5:a1:51:7f: 96:44:33:f6:7a:e5:1c:17:04:03:f3:a9:46:6a:5d: e6:08:ab:4e:40:69:4c:c6:d7:51:aa:da:fe:66:a7: 83:59:8a:b4:cf:f1:14:90:1f:fb:94:af:60:ef:2e: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:47:7B:A1:1D:AA:58:DA:37:1D:C0:9F:C5:E1:AC:8B:E7:08:D7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption 44:30:3b:8b:1b:ff:f4:19:85:6c:3b:53:d1:e9:fa:57:63:3b: 58:2c:15:e4:4e:d6:3d:e4:24:0f:e6:d2:05:eb:a6:1f:db:d6: 83:10:ab:0f:67:81:aa:3e:b0:2c:02:05:f0:ae:e5:04:3d:ee: 6a:4b:d3:a9:b6:6b:32:21:81:bb:12:74:ff:b7:39:f1:70:d8: bc:2a:23:4b:c8:cc:cb:48:77:24:f3:77:9c:07:7c:c7:1d:96: e7:b1:ec:b4:33:19:22:0d:63:af:99:fd:ee:c3:dc:cd:66:0c: cc:03:ba:42:c1:68:6e:22:aa:64:e3:08:06:0c:73:09:29:0c: 04:8f:89:8a:65:f2:71:8d:da:df:44:b5:ca:ee:77:d0:63:8c: f0:8c:08:2c:25:81:77:14:7e:c6:c9:81:8b:7a:35:9b:9a:81: 47:78:6a:de:85:6c:f3:3d:8a:20:6c:83:63:4b:2a:13:6c:3f: 14:d9:46:ee:2d:0b:93:c8:e0:79:77:e9:2c:4e:88:4e:56:59: e8:0c:ef:2a:6d:99:b2:6f:34:75:35:90:42:26:7e:d7:56:51: 4c:6a:6d:96:ab:6c:ce:29:7e:1e:23:53:39:e3:25:ab:1d:4c: 03:15:30:15:bc:28:6d:90:b9:ae:77:bc:09:e0:03:e0:62:0d: 56:63:81:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMWhKxsLc7SIzWv6xWw6zZmMctIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDI0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjU5NTY2NzdiMTJlOTlkZmIyNmZkODczZjBkNjU2OWUx M2UzZjYxZTY3MWE1Y2ViMjRkMTgyYTgxYTA3NGU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFDnzVoxzhHJQxVncaHDwl31M7MH/iNea+MW4eTWrg3Xfx 8YRyoqMCOIBZG3D3Bpa0VL1H++RotG6lfe5/XAiKaDjrJWnof9gPutzpsITDIO/m tVbJLFEvYemhmoESaYBzWuecR3DZDN3/hPH0sVZ1V2yTf9zGaGJTYHjlRjKT1Y8C 4S6h+UH3rEOMZj7iBU2WussmzmWhRbO5DfyNlX9g0CcCIrj7ApbBaFhkDaLROdEy 6plPAZBNtz09JJ4xZc4T21Sxf+END6ta0tQwxaFRf5ZEM/Z65RwXBAPzqUZqXeYI q05AaUzG11Gq2v5mp4NZirTP8RSQH/uUr2DvLnulAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHG9He6EdqljaNx3An8XhrIvnCNcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1N2ExNWU3LTBkZDgtNGFjNC04OGI0LTA5OTZhMWY3ZTdiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBAEQwO4sb//QZhWw7U9Hp+ldj O1gsFeRO1j3kJA/m0gXrph/b1oMQqw9ngao+sCwCBfCu5QQ97mpL06m2azIhgbsS dP+3OfFw2LwqI0vIzMtIdyTzd5wHfMcdluex7LQzGSINY6+Z/e7D3M1mDMwDukLB aG4iqmTjCAYMcwkpDASPiYpl8nGN2t9Etcrud9BjjPCMCCwlgXcUfsbJgYt6NZua gUd4at6FbPM9iiBsg2NLKhNsPxTZRu4tC5PI4Hl36SxOiE5WWegM7yptmbJvNHU1 kEImftdWUUxqbZarbM4pfh4jUznjJasdTAMVMBW8KG2Qua53vAngA+BiDVZjgak= -----END CERTIFICATE-----Generated at Tue May 12 23:05:25 2026 by rpki-client