$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa File: 60d13554-0aae-450a-879a-816f0a4209ac.roa (raw, json) Hash identifier: g3zBTZQrX8D5nLXb3weLSoqhvbWqXmZuKpl3hMDS0XI= Subject key identifier: C4:9C:55:14:A3:79:F5:2B:19:1D:73:B7:14:BB:37:2D:36:7E:70:53 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 461A820597D6CF249BA9B0F6C935FF9881CD8E8F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa Signing time: Fri 01 May 2026 00:00:36 +0000 ROA not before: Fri 01 May 2026 00:00:36 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1a:82:05:97:d6:cf:24:9b:a9:b0:f6:c9:35:ff:98:81:cd:8e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 1 00:00:36 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=9123db714d38308b00470e082bb53b6bee6470a3a90ae28a22c515549dcc9ff2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:a7:da:ec:06:78:7c:11:f6:c4:4a:59:98: 2b:4a:b3:cc:db:69:91:22:74:06:6c:73:36:c9:45: 12:16:f9:49:12:ac:e2:f6:c6:87:be:68:e8:26:46: ab:5c:89:0f:69:08:ee:a3:11:8f:e7:43:61:28:7e: 01:6a:82:fc:4c:a6:95:d0:54:4b:69:4a:1c:1d:1d: d2:70:0a:1d:99:30:e5:f6:77:de:cf:cf:3e:bc:08: 02:c4:f5:e4:23:b6:f8:a3:82:a9:63:c5:27:3b:a2: a1:c3:2c:be:63:4f:7a:3e:d8:50:0e:fc:c1:71:98: 88:9d:57:cf:66:48:6d:1b:78:89:d7:8c:34:bd:a6: 67:26:41:2f:68:5b:10:67:b7:ee:f1:37:b7:5a:3e: e4:92:80:df:78:2a:23:c0:25:95:ef:07:12:26:f8: b4:e2:41:3c:26:e7:aa:04:ec:70:53:18:1e:27:4d: ac:36:d3:d4:5d:02:be:66:ab:e5:5e:e0:16:f9:95: 52:db:ce:93:f5:41:bb:84:3a:63:3b:07:36:02:86: b0:f8:ae:1b:d0:fc:34:8f:50:8d:fa:e0:a0:b8:65: 11:31:2c:43:8f:0b:b7:cd:63:79:ec:0d:76:bf:22: 14:fa:d2:a6:be:c6:a6:f0:a2:f9:60:df:5b:ba:e7: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:55:14:A3:79:F5:2B:19:1D:73:B7:14:BB:37:2D:36:7E:70:53 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6101::/48 Signature Algorithm: sha256WithRSAEncryption 7a:60:69:69:63:77:ab:9a:60:af:8d:a6:34:21:15:a5:b3:db: 36:16:99:0b:56:93:8a:f3:bf:fe:80:51:4e:f6:18:81:af:65: de:64:5d:e5:59:ee:10:da:ef:3d:4e:a5:bf:81:ad:7e:a0:95: d0:c5:3f:4d:43:c0:46:0e:44:2b:01:a7:ab:1f:97:5b:4b:5b: 9b:19:43:be:58:5e:e8:30:f4:bb:40:0d:70:40:d1:86:28:5e: 44:e5:07:c9:e2:31:17:3b:7c:06:9e:74:78:0d:8a:f3:3e:04: 72:b4:5b:8f:66:e8:ff:db:5a:cb:55:70:97:1e:24:86:df:7c: 6b:28:75:f4:dd:43:30:82:02:0d:a0:3c:d8:22:f2:8c:53:0f: 0a:0e:55:ad:54:1f:90:45:51:c0:c6:89:94:84:67:64:1d:15: 79:f0:54:86:02:66:01:ba:97:d4:81:93:4d:6a:bc:64:7a:26: ca:ea:56:55:ed:bb:bd:d5:cc:4c:b5:46:13:82:f5:d8:9d:b9: 64:96:ee:b1:31:ed:09:2f:ad:8b:f6:1c:90:b1:4e:88:8d:ae: fa:ac:53:89:af:35:4b:68:d7:a3:41:7e:e7:00:54:7b:09:88: bc:89:96:19:ff:76:60:c1:df:66:fa:5d:41:d5:8a:c0:7d:4a: 50:89:8c:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURhqCBZfWzySbqbD2yTX/mIHNjo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTAxMDAwMDM2WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTIzZGI3MTRkMzgzMDhiMDA0NzBlMDgyYmI1M2I2YmVl NjQ3MGEzYTkwYWUyOGEyMmM1MTU1NDlkY2M5ZmYyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtx6fa7AZ4fBH2xEpZmCtKs8zbaZEidAZsczbJRRIW+UkS rOL2xoe+aOgmRqtciQ9pCO6jEY/nQ2EofgFqgvxMppXQVEtpShwdHdJwCh2ZMOX2 d97Pzz68CALE9eQjtvijgqljxSc7oqHDLL5jT3o+2FAO/MFxmIidV89mSG0beInX jDS9pmcmQS9oWxBnt+7xN7daPuSSgN94KiPAJZXvBxIm+LTiQTwm56oE7HBTGB4n Taw209RdAr5mq+Ve4Bb5lVLbzpP1QbuEOmM7BzYChrD4rhvQ/DSPUI364KC4ZREx LEOPC7fNY3nsDXa/IhT60qa+xqbwovlg31u652B/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxJxVFKN59SsZHXO3FLs3LTZ+cFMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwZDEzNTU0LTBhYWUtNDUwYS04NzlhLTgxNmYwYTQyMDlhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQEwDQYJKoZIhvcNAQELBQADggEBAHpgaWljd6uaYK+NpjQhFaWz 2zYWmQtWk4rzv/6AUU72GIGvZd5kXeVZ7hDa7z1Opb+BrX6gldDFP01DwEYORCsB p6sfl1tLW5sZQ75YXugw9LtADXBA0YYoXkTlB8niMRc7fAaedHgNivM+BHK0W49m 6P/bWstVcJceJIbffGsodfTdQzCCAg2gPNgi8oxTDwoOVa1UH5BFUcDGiZSEZ2Qd FXnwVIYCZgG6l9SBk01qvGR6JsrqVlXtu73VzEy1RhOC9diduWSW7rEx7QkvrYv2 HJCxToiNrvqsU4mvNUto16NBfucAVHsJiLyJlhn/dmDB32b6XUHVisB9SlCJjC4= -----END CERTIFICATE-----Generated at Wed May 13 00:41:44 2026 by rpki-client