$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6939390a-b25d-45cf-aa34-f6ba281ea03a.roa File: 6939390a-b25d-45cf-aa34-f6ba281ea03a.roa (raw, json) Hash identifier: hKQbGQ63vXyAKe46nniFZfSfvxDI74lckp2zo3+I5lY= Subject key identifier: 9A:7A:4F:89:2A:4C:A5:58:A7:1D:42:EB:23:5C:73:23:7C:E4:50:A5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4F866DEE232697D948328E553CC80E0CC3656339 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6939390a-b25d-45cf-aa34-f6ba281ea03a.roa Signing time: Mon 04 May 2026 15:10:42 +0000 ROA not before: Mon 04 May 2026 15:10:42 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:86:6d:ee:23:26:97:d9:48:32:8e:55:3c:c8:0e:0c:c3:65:63:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:42 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=b762bceeaa83319d82b1cbfeb018df59157cf403815080e88444ba6cf4cff43c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:a2:61:71:34:0a:c9:f8:9d:6c:51:ad:21: 64:28:b5:e9:fb:bf:e7:83:3d:24:ad:94:ca:45:35: b9:f6:de:7f:72:99:a5:95:8d:5f:77:e8:bc:0c:6d: 68:60:e4:f3:9c:5d:a9:1d:33:e4:da:80:cd:aa:d7: 10:42:75:c8:be:55:7b:af:f3:22:a8:02:a8:14:ed: 20:e3:a3:dc:d5:57:62:83:cd:76:ed:da:a7:8c:e3: f9:4d:9c:d9:15:d2:4e:18:6c:86:56:75:03:1b:c5: f7:b7:ee:f2:33:b0:60:d2:00:2a:6d:ef:e7:ea:3d: 66:5a:0a:95:d9:0d:00:fb:04:33:c9:93:8d:09:b9: 33:f6:f7:8e:83:14:d7:44:e9:4e:40:98:f8:d8:0f: 36:df:5d:e9:6f:c4:d1:72:64:56:e0:10:ee:8b:ea: d5:dc:77:be:3f:74:44:8c:df:db:ef:ca:73:13:e0: 49:11:de:48:0b:4e:e0:b1:fd:f6:d0:d4:42:25:66: d2:1b:e1:80:c4:b5:f3:83:fb:a3:86:46:d4:1d:81: 60:8d:59:0d:32:f6:5a:5b:6f:22:27:14:1e:e3:4a: c6:9b:73:24:33:d7:6a:71:a4:3a:77:c8:ad:34:c5: fa:24:e3:f0:fc:87:8d:4b:6d:af:70:98:15:80:32: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7A:4F:89:2A:4C:A5:58:A7:1D:42:EB:23:5C:73:23:7C:E4:50:A5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6939390a-b25d-45cf-aa34-f6ba281ea03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6113::/48 Signature Algorithm: sha256WithRSAEncryption 78:f7:53:0e:a8:89:0d:2a:d6:2c:ad:04:f5:c6:da:90:f7:91: f2:16:fb:b5:09:28:be:2b:68:88:cc:18:c2:9d:cb:64:3f:b7: 01:8a:41:7e:96:be:69:eb:68:68:d1:6d:80:39:f5:33:22:cc: f9:26:e7:99:78:12:20:71:50:8a:c2:2f:d9:24:2e:2f:8b:03: 3c:09:ef:66:b2:3b:95:b8:8c:fd:d6:40:dd:f6:c6:95:9f:dd: 78:39:17:fe:15:a6:fc:54:b1:38:04:04:10:28:59:aa:59:52: 68:a4:4f:95:bb:36:54:24:7d:88:56:06:60:f5:c2:4e:41:06: 61:46:b6:36:1d:ef:12:5e:5e:0b:5e:d7:3e:9d:ce:93:82:23: 4d:8e:db:39:c6:44:50:f1:1b:db:fa:f1:73:ba:36:f3:58:70: f0:36:94:3d:20:29:9e:82:f1:26:5c:2e:3d:36:44:ca:7c:4e: d2:e1:f0:2f:fa:32:ac:5a:9d:cc:46:bc:42:ef:39:52:5d:df: 06:bd:ec:f7:98:d1:28:69:8c:73:82:80:9e:82:87:bc:3b:f3: 1d:b0:c9:da:fb:9b:f9:38:19:b6:df:fc:67:ab:80:47:98:e1: 7b:84:51:eb:85:48:aa:94:59:cd:66:af:d7:d0:b8:32:f8:2c: 4f:a6:c7:6e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT4Zt7iMml9lIMo5VPMgODMNlYzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDQyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzYyYmNlZWFhODMzMTlkODJiMWNiZmViMDE4ZGY1OTE1 N2NmNDAzODE1MDgwZTg4NDQ0YmE2Y2Y0Y2ZmNDNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz4aJhcTQKyfidbFGtIWQoten7v+eDPSStlMpFNbn23n9y maWVjV936LwMbWhg5POcXakdM+TagM2q1xBCdci+VXuv8yKoAqgU7SDjo9zVV2KD zXbt2qeM4/lNnNkV0k4YbIZWdQMbxfe37vIzsGDSACpt7+fqPWZaCpXZDQD7BDPJ k40JuTP2946DFNdE6U5AmPjYDzbfXelvxNFyZFbgEO6L6tXcd74/dESM39vvynMT 4EkR3kgLTuCx/fbQ1EIlZtIb4YDEtfOD+6OGRtQdgWCNWQ0y9lpbbyInFB7jSsab cyQz12pxpDp3yK00xfok4/D8h41Lba9wmBWAMqefAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmnpPiSpMpVinHULrI1xzI3zkUKUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MzkzOTBhLWIyNWQtNDVjZi1hYTM0LWY2YmEyODFlYTAzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRMwDQYJKoZIhvcNAQELBQADggEBAHj3Uw6oiQ0q1iytBPXG2pD3 kfIW+7UJKL4raIjMGMKdy2Q/twGKQX6WvmnraGjRbYA59TMizPkm55l4EiBxUIrC L9kkLi+LAzwJ72ayO5W4jP3WQN32xpWf3Xg5F/4VpvxUsTgEBBAoWapZUmikT5W7 NlQkfYhWBmD1wk5BBmFGtjYd7xJeXgte1z6dzpOCI02O2znGRFDxG9v68XO6NvNY cPA2lD0gKZ6C8SZcLj02RMp8TtLh8C/6MqxancxGvELvOVJd3wa97PeY0ShpjHOC gJ6Ch7w78x2wydr7m/k4Gbbf/GergEeY4XuEUeuFSKqUWc1mr9fQuDL4LE+mx24= -----END CERTIFICATE-----Generated at Wed May 13 01:18:11 2026 by rpki-client