$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa File: 692c7242-c4b2-4ece-8520-4fff6db89e7e.roa (raw, json) Hash identifier: 49VwMBrmuo/goTPM8GjXiee+TKAnQi5hPNUXxltYxJ4= Subject key identifier: 19:90:8F:5A:5A:23:8C:E2:5E:2D:C9:8F:4B:FB:41:43:33:59:9F:31 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 55AD25E746827B5E6EEDE88E7C7E04B18C2B5783 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa Signing time: Mon 04 May 2026 15:20:04 +0000 ROA not before: Mon 04 May 2026 15:20:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ad:25:e7:46:82:7b:5e:6e:ed:e8:8e:7c:7e:04:b1:8c:2b:57:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:20:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a9138f38ec73be1294fad83dc32b43555fe275d01dd564872fc7dc7ea5eaee56, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:5d:9e:0c:a3:15:39:44:da:26:e4:72:68: bb:e3:a9:09:5b:34:de:89:2b:f3:e3:fd:be:a9:7a: d7:65:43:70:49:d4:8c:eb:01:8c:ea:a8:cf:ec:81: 45:76:28:c3:a4:97:61:98:4d:36:39:cf:b1:76:db: 47:d7:6f:42:74:cf:25:44:b2:c5:06:e8:f9:28:71: 8a:02:78:ec:1b:6e:f5:a4:5a:49:d3:c8:a2:e2:1d: dc:5b:11:cd:67:5a:d1:d6:4f:a6:d9:6f:cf:62:5f: 5e:ea:5f:8e:6d:2d:a4:26:3c:18:cf:c2:75:02:27: 38:31:9a:43:22:01:03:9b:cd:bd:5c:50:88:67:f4: e2:c1:f2:d5:f1:30:9d:79:0e:c6:14:cd:78:0f:98: e4:95:a2:24:54:4c:e0:e7:d7:e4:b9:81:79:4d:32: 98:c1:92:b3:d4:b2:0a:f3:a1:1b:42:57:47:72:e2: 55:9a:7c:6a:9b:2a:c9:68:b7:ce:48:1a:e0:67:58: 7d:c4:7f:9e:5a:0c:17:2e:a3:63:95:d4:38:c1:7d: ea:f7:2e:e4:7b:d0:9d:61:d4:f8:bb:b3:35:9d:01: 83:88:61:4d:4a:71:a7:0a:5e:cf:f4:98:7c:9e:ef: d2:a9:ab:b8:12:d2:a8:93:aa:fc:77:79:b2:67:82: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:8F:5A:5A:23:8C:E2:5E:2D:C9:8F:4B:FB:41:43:33:59:9F:31 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/692c7242-c4b2-4ece-8520-4fff6db89e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6115::/48 Signature Algorithm: sha256WithRSAEncryption 83:6e:0e:23:db:8c:5d:53:43:b8:6f:22:69:e5:ca:bc:50:23: 85:8e:c9:5f:a5:cd:a1:db:00:c4:ef:6e:26:df:e6:0d:68:cf: cd:57:bb:55:d3:6f:e7:93:fd:9a:a6:84:b5:3c:3b:d0:86:88: 71:71:db:50:1f:8c:c9:05:a1:74:9a:32:61:7d:d3:b2:e9:00: c8:21:66:50:f3:51:8d:35:dc:22:b2:66:26:6f:97:21:a5:f9: 78:d3:fc:56:62:fc:1a:16:26:d4:a9:71:0a:08:6a:03:de:f2: cc:bf:e6:d3:ac:24:c9:20:b8:a9:bd:41:c2:d9:f7:45:61:6c: a8:17:2b:b2:5d:70:0c:78:1e:1a:c1:90:a3:77:dc:ad:02:a3: 58:7e:48:85:51:f6:7f:ac:7b:7c:63:4b:93:6a:45:e9:b8:47: df:42:4f:37:f6:d9:cb:8e:fa:41:4d:fc:45:99:57:b0:e4:a8: 93:0a:14:16:da:98:f6:5d:84:1a:e3:c8:1a:5e:0e:a7:b6:db: 1c:23:89:d4:0f:24:b7:d0:24:3a:d3:d4:38:91:ca:96:f2:15: 30:c0:c0:f3:a5:c0:59:e8:c0:94:ed:2a:51:5f:63:27:38:5d: 6f:61:90:2f:6e:ad:d3:d8:da:71:67:31:0b:72:28:81:49:82: 17:c3:15:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVa0l50aCe15u7eiOfH4EsYwrV4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUyMDA0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTEzOGYzOGVjNzNiZTEyOTRmYWQ4M2RjMzJiNDM1NTVm ZTI3NWQwMWRkNTY0ODcyZmM3ZGM3ZWE1ZWFlZTU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbGl2eDKMVOUTaJuRyaLvjqQlbNN6JK/Pj/b6petdlQ3BJ 1IzrAYzqqM/sgUV2KMOkl2GYTTY5z7F220fXb0J0zyVEssUG6PkocYoCeOwbbvWk WknTyKLiHdxbEc1nWtHWT6bZb89iX17qX45tLaQmPBjPwnUCJzgxmkMiAQObzb1c UIhn9OLB8tXxMJ15DsYUzXgPmOSVoiRUTODn1+S5gXlNMpjBkrPUsgrzoRtCV0dy 4lWafGqbKslot85IGuBnWH3Ef55aDBcuo2OV1DjBfer3LuR70J1h1Pi7szWdAYOI YU1KcacKXs/0mHye79Kpq7gS0qiTqvx3ebJngvUvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGZCPWlojjOJeLcmPS/tBQzNZnzEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MmM3MjQyLWM0YjItNGVjZS04NTIwLTRmZmY2ZGI4OWU3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRUwDQYJKoZIhvcNAQELBQADggEBAINuDiPbjF1TQ7hvImnlyrxQ I4WOyV+lzaHbAMTvbibf5g1oz81Xu1XTb+eT/ZqmhLU8O9CGiHFx21AfjMkFoXSa MmF907LpAMghZlDzUY013CKyZiZvlyGl+XjT/FZi/BoWJtSpcQoIagPe8sy/5tOs JMkguKm9QcLZ90VhbKgXK7JdcAx4HhrBkKN33K0Co1h+SIVR9n+se3xjS5NqRem4 R99CTzf22cuO+kFN/EWZV7DkqJMKFBbamPZdhBrjyBpeDqe22xwjidQPJLfQJDrT 1DiRypbyFTDAwPOlwFnowJTtKlFfYyc4XW9hkC9urdPY2nFnMQtyKIFJghfDFQg= -----END CERTIFICATE-----Generated at Wed May 13 01:25:48 2026 by rpki-client