$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/48713909-c1f3-4664-9c83-d3f0ba77a7f0.roa File: 48713909-c1f3-4664-9c83-d3f0ba77a7f0.roa (raw, json) Hash identifier: 3zdTsQJy4GHDPA32BMyCezlQ51+AxYFKa25yTwkD4fI= Subject key identifier: 74:D9:DB:93:41:C7:4D:49:F1:86:D2:09:65:10:23:CC:AB:7F:9C:8F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2FD8DC1C341037F624266488C1B21FB32C72DAAE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/48713909-c1f3-4664-9c83-d3f0ba77a7f0.roa Signing time: Mon 04 May 2026 15:20:04 +0000 ROA not before: Mon 04 May 2026 15:20:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:108::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d8:dc:1c:34:10:37:f6:24:26:64:88:c1:b2:1f:b3:2c:72:da:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:20:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=95863690c3cf111ff4344545f002d0c47c58fe522d21f5fbfebd42a9dbea09d9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:8f:3d:69:69:6c:96:38:aa:17:cd:d0:a7: 37:fe:97:08:f8:3a:27:56:09:26:30:76:ca:61:14: 04:3a:6f:16:66:8d:99:b9:bf:17:84:e8:3e:7e:9b: 04:d2:5f:f6:8d:80:fa:34:83:a7:3f:22:51:50:45: bf:95:11:5e:f2:d9:c9:31:93:ae:96:9e:66:b1:77: 2b:99:c8:72:da:b9:c6:1e:34:66:e7:93:c6:bb:b0: 52:b2:03:75:5e:97:38:24:2f:35:21:3b:fd:b7:19: 8a:6d:59:78:77:51:54:a5:b0:f4:a5:61:ec:d5:b7: fc:00:2a:c6:bc:4b:76:d4:a5:c2:a2:5e:52:8f:2b: 53:ce:56:3e:9b:e1:06:95:83:d1:7e:44:34:49:95: 56:d6:da:17:8d:0d:58:ea:db:05:5c:9a:07:bf:f0: dd:86:16:9a:6b:52:4f:9c:88:cd:6e:9b:a5:1b:19: d8:ca:88:df:52:1b:a4:0b:da:56:10:23:ba:cc:8c: 4c:c0:6e:a4:c0:61:4b:51:d9:8e:be:9e:d6:a5:88: 31:d1:47:23:d1:c8:12:a1:2e:0c:c7:c4:3f:99:24: c5:e4:f4:20:6b:36:71:60:c4:3e:bc:68:75:a5:31: 4a:32:e1:5b:2f:7b:f2:c5:d5:5f:fb:9d:68:97:20: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:DB:93:41:C7:4D:49:F1:86:D2:09:65:10:23:CC:AB:7F:9C:8F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/48713909-c1f3-4664-9c83-d3f0ba77a7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:108::/47 Signature Algorithm: sha256WithRSAEncryption 6d:7f:fc:4d:31:a2:bf:19:17:67:1c:4b:41:10:12:af:dc:8a: 15:39:21:78:9a:9e:fa:40:cf:18:06:04:46:de:4e:44:60:5d: c4:03:8c:5c:df:52:8e:1e:ef:f7:7e:bb:52:37:ee:d2:80:ce: 1d:bf:87:86:23:be:c7:93:8f:87:73:85:6f:f3:ed:52:4d:04: 44:e5:12:f9:c2:dd:bf:e1:f0:0d:ca:76:2c:02:a5:84:4c:7b: de:a7:fb:05:dc:75:7f:c8:76:d7:52:23:dd:50:0c:73:a7:00: 88:5b:bb:cd:d0:88:ca:85:fd:53:35:c2:53:70:b4:aa:40:10: cf:4c:5d:58:df:03:03:7d:5e:59:37:41:6d:c1:19:cd:f6:6a: a9:6b:e7:b3:3a:bc:64:ad:b4:55:d8:a6:67:ee:04:80:c0:2f: 62:ba:ec:8d:d3:ee:38:8c:22:12:35:80:4e:69:ad:2d:81:d9: a0:3d:7d:dc:26:54:44:61:df:98:34:0d:61:6a:5c:72:95:c6: 49:94:66:27:5d:6a:89:27:6b:1f:83:53:d9:5a:b8:e6:65:a9: 1a:3e:ee:30:4e:0d:df:9b:de:6e:c6:6a:0c:a8:67:5a:22:9e: 16:c9:30:cb:a9:80:14:4c:cb:90:82:e3:3a:76:18:99:eb:2a: 09:05:47:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL9jcHDQQN/YkJmSIwbIfsyxy2q4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUyMDA0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTg2MzY5MGMzY2YxMTFmZjQzNDQ1NDVmMDAyZDBjNDdj NThmZTUyMmQyMWY1ZmJmZWJkNDJhOWRiZWEwOWQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbJI89aWlsljiqF83Qpzf+lwj4OidWCSYwdsphFAQ6bxZm jZm5vxeE6D5+mwTSX/aNgPo0g6c/IlFQRb+VEV7y2ckxk66WnmaxdyuZyHLaucYe NGbnk8a7sFKyA3VelzgkLzUhO/23GYptWXh3UVSlsPSlYezVt/wAKsa8S3bUpcKi XlKPK1POVj6b4QaVg9F+RDRJlVbW2heNDVjq2wVcmge/8N2GFpprUk+ciM1um6Ub GdjKiN9SG6QL2lYQI7rMjEzAbqTAYUtR2Y6+ntaliDHRRyPRyBKhLgzHxD+ZJMXk 9CBrNnFgxD68aHWlMUoy4Vsve/LF1V/7nWiXIOnDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdNnbk0HHTUnxhtIJZRAjzKt/nI8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ4NzEzOTA5LWMxZjMtNDY2NC05YzgzLWQzZjBiYTc3YTdmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQgwDQYJKoZIhvcNAQELBQADggEBAG1//E0xor8ZF2ccS0EQEq/c ihU5IXianvpAzxgGBEbeTkRgXcQDjFzfUo4e7/d+u1I37tKAzh2/h4YjvseTj4dz hW/z7VJNBETlEvnC3b/h8A3KdiwCpYRMe96n+wXcdX/IdtdSI91QDHOnAIhbu83Q iMqF/VM1wlNwtKpAEM9MXVjfAwN9Xlk3QW3BGc32aqlr57M6vGSttFXYpmfuBIDA L2K67I3T7jiMIhI1gE5prS2B2aA9fdwmVERh35g0DWFqXHKVxkmUZiddaoknax+D U9lauOZlqRo+7jBODd+b3m7GagyoZ1oinhbJMMupgBRMy5CC4zp2GJnrKgkFRy4= -----END CERTIFICATE-----Generated at Wed May 13 01:46:07 2026 by rpki-client