$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa File: 57817121-2ded-4a32-92fa-48c260a4d9f6.roa (raw, json) Hash identifier: MHJYYurUi4lpMt6hYgUe1mg0uCkdbh09uGqxfH5XUPo= Subject key identifier: A6:A9:69:1E:8D:8F:03:34:6A:89:25:30:81:3A:B6:20:7B:94:17:DD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2492CCBEAA570037842996B0F70A9C3028CAFFA9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa Signing time: Mon 04 May 2026 15:10:39 +0000 ROA not before: Mon 04 May 2026 15:10:39 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:92:cc:be:aa:57:00:37:84:29:96:b0:f7:0a:9c:30:28:ca:ff:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:39 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=2138348ce758a7f8eeac889614b969468a695bbcf66738caf3fa5f70b1c12b0a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:06:db:ce:88:7e:28:d6:b0:d2:e4:cb:44: 88:a8:0f:ef:3d:5e:ba:57:16:eb:a7:21:7c:6d:9f: d6:67:95:55:e9:ba:4e:a3:bd:3c:29:e7:9c:59:47: bd:62:0a:97:ba:eb:85:60:c2:e7:73:fc:43:5c:f7: 4e:6d:74:ff:87:40:6b:b6:f1:9d:7a:c9:34:f7:8f: cb:f3:f5:f7:d1:56:12:82:67:9c:77:3d:64:ac:3f: 5e:a6:09:e9:5b:8d:7b:b7:77:06:18:43:1a:7e:6f: 25:ca:3f:f4:90:18:fc:a4:6c:4f:f6:cb:a4:f5:93: a0:62:cc:b0:3a:38:d7:e0:d5:bc:93:93:72:df:30: 50:ef:60:05:99:85:8d:a6:b1:9e:7b:4c:a5:41:f1: a2:e4:52:6f:c6:aa:c9:7d:d1:b7:aa:91:fc:8a:86: 11:94:b9:fe:6e:bb:c1:cf:e2:a0:81:82:12:90:26: 54:c8:ec:37:a7:a4:af:4f:ec:9c:b9:a2:12:9a:9d: 9d:2f:1b:50:59:62:23:f5:29:d4:a1:5b:cb:6d:5c: e8:eb:0b:45:00:97:28:6c:98:a1:1b:ec:c0:27:f0: 37:13:e5:79:1f:3d:29:ac:61:fc:1c:d7:98:ef:99: 49:03:62:9d:9e:0d:3a:35:02:1b:3d:89:29:e4:de: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:69:1E:8D:8F:03:34:6A:89:25:30:81:3A:B6:20:7B:94:17:DD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/57817121-2ded-4a32-92fa-48c260a4d9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611c::/48 Signature Algorithm: sha256WithRSAEncryption 67:3b:00:f8:66:b6:f9:01:43:47:09:2c:23:55:4c:e3:29:09: 71:d1:ed:56:64:00:9e:41:42:e4:eb:b8:37:94:34:ac:14:ce: aa:c6:d3:ae:4f:f2:cf:89:93:8f:66:0c:b4:31:05:74:67:df: 1c:f8:69:01:7b:d1:aa:d4:2a:64:07:a6:60:36:a2:c3:8f:e7: 95:b9:0c:1e:0e:68:ae:f5:20:cb:4a:b1:8b:db:1e:c1:e2:9f: 0a:12:e0:99:20:a8:73:cb:64:5d:78:ce:07:64:f7:cb:19:4b: 78:b2:c2:5d:9a:f1:7a:64:c9:65:f2:e4:ba:5a:a1:14:cb:70: 4d:fc:51:1b:91:f4:2a:f4:3d:77:ec:a6:f8:5a:d1:e6:0a:f3: b6:57:fb:57:ac:1c:39:ea:46:3c:db:42:33:11:61:a8:9b:fc: d4:b8:b6:4c:7c:94:1e:2e:4d:58:0c:a1:b2:af:70:1a:d5:63: da:23:fb:81:0a:fc:f0:69:56:0f:a7:72:ee:df:25:8f:d7:db: 8c:cc:52:87:00:33:09:2f:32:fc:42:3c:2c:81:0c:8d:2e:47: 89:e2:e4:86:3c:48:74:5c:4e:a0:b3:d6:de:01:76:c9:5e:92: 99:f0:d4:9c:29:09:4a:b7:ec:f4:29:8f:fa:5b:9e:d4:4e:4c: d9:15:9a:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJJLMvqpXADeEKZaw9wqcMCjK/6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDM5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTM4MzQ4Y2U3NThhN2Y4ZWVhYzg4OTYxNGI5Njk0Njhh Njk1YmJjZjY2NzM4Y2FmM2ZhNWY3MGIxYzEyYjBhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC4Abbzoh+KNaw0uTLRIioD+89XrpXFuunIXxtn9ZnlVXp uk6jvTwp55xZR71iCpe664Vgwudz/ENc905tdP+HQGu28Z16yTT3j8vz9ffRVhKC Z5x3PWSsP16mCelbjXu3dwYYQxp+byXKP/SQGPykbE/2y6T1k6BizLA6ONfg1byT k3LfMFDvYAWZhY2msZ57TKVB8aLkUm/Gqsl90beqkfyKhhGUuf5uu8HP4qCBghKQ JlTI7DenpK9P7Jy5ohKanZ0vG1BZYiP1KdShW8ttXOjrC0UAlyhsmKEb7MAn8DcT 5XkfPSmsYfwc15jvmUkDYp2eDTo1Ahs9iSnk3v7pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpqlpHo2PAzRqiSUwgTq2IHuUF90wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3ODE3MTIxLTJkZWQtNGEzMi05MmZhLTQ4YzI2MGE0ZDlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRwwDQYJKoZIhvcNAQELBQADggEBAGc7APhmtvkBQ0cJLCNVTOMp CXHR7VZkAJ5BQuTruDeUNKwUzqrG065P8s+Jk49mDLQxBXRn3xz4aQF70arUKmQH pmA2osOP55W5DB4OaK71IMtKsYvbHsHinwoS4JkgqHPLZF14zgdk98sZS3iywl2a 8XpkyWXy5LpaoRTLcE38URuR9Cr0PXfspvha0eYK87ZX+1esHDnqRjzbQjMRYaib /NS4tkx8lB4uTVgMobKvcBrVY9oj+4EK/PBpVg+ncu7fJY/X24zMUocAMwkvMvxC PCyBDI0uR4ni5IY8SHRcTqCz1t4Bdslekpnw1JwpCUq37PQpj/pbntROTNkVmoU= -----END CERTIFICATE-----Generated at Wed May 13 01:31:58 2026 by rpki-client