$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa File: 5f4411f4-d7d7-440d-94e8-36abe496c512.roa (raw, json) Hash identifier: aOmy0VfHS6diukwnYe1m1+FNVnKHmdt0l5frBD9mPwo= Subject key identifier: 3F:48:6D:FF:F0:3D:67:C5:A1:FF:6C:31:27:AD:25:B0:E6:D8:D1:2B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3C661226E8D75F6C7EDDB10727CD11E9451E0491 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa Signing time: Sat 09 May 2026 00:10:03 +0000 ROA not before: Sat 09 May 2026 00:10:03 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f3:f000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:66:12:26:e8:d7:5f:6c:7e:dd:b1:07:27:cd:11:e9:45:1e:04:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 9 00:10:03 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=f819e593b464620a035bda48d4ddfb498956f288edc08f87f88d46a0de8e9da0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:a3:c2:46:51:4b:00:ab:d9:94:91:df:2f: 68:15:80:8e:be:3c:d2:c8:43:40:0e:9d:58:2a:85: a1:f3:44:d4:c4:33:ea:9e:43:d9:1f:05:c7:3f:40: 0f:42:1c:58:79:7c:3d:ac:86:a5:f1:22:c6:02:f3: a9:b0:df:cb:d5:54:c9:af:50:37:03:a4:2f:75:09: 95:f8:31:1d:ca:c1:e2:ef:62:c9:bc:0a:00:cb:05: a2:97:2c:97:52:3d:e3:46:eb:82:06:80:c8:fe:25: 55:8c:aa:b6:ed:78:85:20:6c:b8:85:47:47:f7:64: 93:b4:36:e4:c9:1f:7d:e9:d0:99:ac:17:54:81:bf: 2b:1a:1a:1b:ca:4c:37:ab:3a:73:f3:44:5c:1d:0f: 08:f0:25:71:43:c9:4e:5a:f1:e0:49:95:8f:8a:c9: 3e:b9:20:5b:30:74:9d:32:26:3d:36:6d:c1:ba:32: 19:07:ee:78:69:84:09:82:81:52:f1:cf:ef:ed:bd: b9:07:c5:7c:9c:a8:c0:03:70:85:8b:f7:e2:64:af: ca:2b:85:65:9a:3f:7c:4f:82:49:27:6b:36:6c:07: 5e:a7:07:5d:00:97:07:97:d4:c2:a5:7c:e3:dc:30: 34:85:90:57:d0:03:a2:07:fe:98:07:1d:2b:6e:7f: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:48:6D:FF:F0:3D:67:C5:A1:FF:6C:31:27:AD:25:B0:E6:D8:D1:2B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f4411f4-d7d7-440d-94e8-36abe496c512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/47 Signature Algorithm: sha256WithRSAEncryption 52:29:5c:87:db:6e:15:62:3a:e8:58:2d:aa:3e:d0:a2:0e:e6: dd:81:6f:66:1e:a9:2e:ba:01:c5:e9:f7:f7:21:63:5c:a2:0c: 90:49:4f:0e:f8:bb:65:71:9f:a0:c6:33:f1:6d:c7:d7:ee:d1: 7c:09:f2:55:0e:60:a7:03:60:13:59:92:44:a9:94:eb:d8:ee: 78:a1:8f:ab:d5:e4:db:30:62:18:9d:45:90:dd:35:3b:cf:0c: ee:b5:f2:ef:b7:31:c2:84:8c:f8:c6:e2:2a:d4:ec:d9:f8:81: be:4d:eb:ec:1c:8f:59:20:2d:42:ae:39:52:8c:98:3e:d5:c3: a3:13:16:c7:7c:95:e1:40:4b:03:fd:35:22:af:0b:4a:32:a5: 06:fb:00:95:8e:44:90:cc:d2:6b:7a:b4:f0:8a:00:06:4d:72: 3f:6e:be:f3:2f:2b:b0:cb:7d:7b:19:09:bb:08:e7:58:71:e3: e8:89:bf:01:b2:70:57:ce:89:fe:47:53:ba:22:36:bb:e6:cb: dc:27:62:c8:a9:c7:ea:f5:c9:82:88:57:4c:0e:07:92:32:df: d4:12:07:c3:38:e7:da:6b:c2:de:7b:bc:57:6c:e9:36:e4:d4: c0:36:ce:4c:3e:b9:c3:b0:97:48:51:20:42:55:8e:21:e3:e8: 6e:b1:d2:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPGYSJujXX2x+3bEHJ80R6UUeBJEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA5MDAxMDAzWhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODE5ZTU5M2I0NjQ2MjBhMDM1YmRhNDhkNGRkZmI0OTg5 NTZmMjg4ZWRjMDhmODdmODhkNDZhMGRlOGU5ZGEwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIEaPCRlFLAKvZlJHfL2gVgI6+PNLIQ0AOnVgqhaHzRNTE M+qeQ9kfBcc/QA9CHFh5fD2shqXxIsYC86mw38vVVMmvUDcDpC91CZX4MR3KweLv Ysm8CgDLBaKXLJdSPeNG64IGgMj+JVWMqrbteIUgbLiFR0f3ZJO0NuTJH33p0Jms F1SBvysaGhvKTDerOnPzRFwdDwjwJXFDyU5a8eBJlY+KyT65IFswdJ0yJj02bcG6 MhkH7nhphAmCgVLxz+/tvbkHxXycqMADcIWL9+Jkr8orhWWaP3xPgkknazZsB16n B10AlweX1MKlfOPcMDSFkFfQA6IH/pgHHStuf7MbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP0ht//A9Z8Wh/2wxJ60lsObY0SswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVmNDQxMWY0LWQ3ZDctNDQwZC05NGU4LTM2YWJlNDk2YzUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAFIpXIfbbhViOuhYLao+0KIO 5t2Bb2YeqS66AcXp9/chY1yiDJBJTw74u2Vxn6DGM/Ftx9fu0XwJ8lUOYKcDYBNZ kkSplOvY7nihj6vV5NswYhidRZDdNTvPDO618u+3McKEjPjG4irU7Nn4gb5N6+wc j1kgLUKuOVKMmD7Vw6MTFsd8leFASwP9NSKvC0oypQb7AJWORJDM0mt6tPCKAAZN cj9uvvMvK7DLfXsZCbsI51hx4+iJvwGycFfOif5HU7oiNrvmy9wnYsipx+r1yYKI V0wOB5Iy39QSB8M459prwt57vFds6Tbk1MA2zkw+ucOwl0hRIEJVjiHj6G6x0uM= -----END CERTIFICATE-----Generated at Tue May 12 23:41:28 2026 by rpki-client