$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa File: 6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa (raw, json) Hash identifier: ROkt0t0CZik157Cs3srbrtGh9ShHNJHFDKc2LiD/NQE= Subject key identifier: BC:44:F1:94:45:5E:3C:76:FE:92:D1:C6:F0:B2:76:26:AE:68:8C:A4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C2476E8A6A6807F18B57471B007F5F6B7197099 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa Signing time: Tue 28 Apr 2026 00:10:09 +0000 ROA not before: Tue 28 Apr 2026 00:10:09 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:24:76:e8:a6:a6:80:7f:18:b5:74:71:b0:07:f5:f6:b7:19:70:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 28 00:10:09 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=ab454da4008e7ac4dc03fab27bc99d2889afbd61250eef9971fd5907eb4eebdf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:b1:eb:a4:76:d3:1b:85:0a:c9:43:2f:11: 4e:ef:69:65:6a:c8:6f:e5:af:04:be:5f:00:c7:e0: c4:fb:a2:78:58:f7:9c:c5:ad:ad:ad:ab:f1:ca:da: 3c:d4:ee:d1:fe:e5:7f:b0:80:e5:28:cb:7c:48:59: 32:31:9a:43:a6:cb:06:73:de:fd:a6:0e:d3:2f:86: 5f:f3:fd:5d:38:2e:3e:84:3c:e6:ac:50:a9:b9:87: 48:fd:18:44:e3:bd:cb:05:60:90:e2:9a:71:d5:d6: d7:17:7e:63:8a:cc:50:30:5d:86:16:82:ac:2b:c3: ab:76:bc:31:76:39:48:36:77:9c:30:ca:80:02:7b: da:b9:2b:28:0d:92:12:7f:dd:3f:8f:58:3b:28:45: 9b:25:4d:ee:3d:c5:e6:49:5b:a2:f9:2b:d0:81:3d: 76:b1:a5:1d:a1:02:8e:a3:ca:e1:00:c8:33:08:f1: 95:86:bf:6d:2f:1c:c0:8f:eb:73:7a:b6:df:2b:fa: 9b:8e:74:bb:49:cd:c6:32:23:dc:c4:8f:a2:cc:11: 88:8d:4a:69:14:08:9b:74:1b:4e:03:f5:73:d8:43: 4e:a2:21:75:38:f4:37:d5:72:4b:88:90:a3:16:d5: d8:89:dc:c1:5c:0c:50:4e:ac:ef:3a:18:94:80:6d: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:44:F1:94:45:5E:3C:76:FE:92:D1:C6:F0:B2:76:26:AE:68:8C:A4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b01::/48 Signature Algorithm: sha256WithRSAEncryption a2:e7:e0:c0:cf:ae:ad:49:7d:34:ff:ba:14:d0:94:26:8b:24: 0e:ea:0a:bc:12:19:ba:73:ec:a8:2b:ea:7d:2f:7d:a8:ba:7d: e4:fd:0f:90:7b:55:18:79:d6:25:66:eb:3c:8f:42:91:2e:72: b8:8d:7d:3f:cf:96:86:ce:62:9f:f2:29:4e:80:30:17:9a:be: 2d:ab:1f:c9:83:2e:2a:b0:22:98:7d:d3:54:ee:f2:81:1f:5c: fc:69:44:68:b5:b6:e0:92:aa:8a:3c:af:5d:79:8e:2d:61:76: cb:8b:eb:11:41:20:cb:ea:9e:08:e0:82:34:58:10:b2:ed:5f: 1a:58:13:49:40:66:e7:d3:a9:b9:94:53:df:b1:a1:7e:f4:1a: 30:82:5c:cc:4b:fc:fb:37:28:68:1f:32:3c:8d:f6:1f:e3:73: c2:c1:72:0c:a5:99:38:2c:ab:ed:4e:f6:1d:59:e8:51:26:bb: f1:06:97:6f:6a:c1:07:81:a5:0d:00:d0:b3:b5:bc:57:1f:56: bc:11:de:91:29:5b:8e:a8:de:ad:d3:18:42:f2:63:8c:fb:7a: af:7a:56:cb:10:82:f6:05:74:2f:a4:09:30:b6:1e:e8:21:d8: 8b:50:bc:28:a3:d3:e8:72:26:5a:c9:53:ed:ab:65:78:db:3e: 4e:82:3d:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHCR26KamgH8YtXRxsAf19rcZcJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDI4MDAxMDA5WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjQ1NGRhNDAwOGU3YWM0ZGMwM2ZhYjI3YmM5OWQyODg5 YWZiZDYxMjUwZWVmOTk3MWZkNTkwN2ViNGVlYmRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCav7HrpHbTG4UKyUMvEU7vaWVqyG/lrwS+XwDH4MT7onhY 95zFra2tq/HK2jzU7tH+5X+wgOUoy3xIWTIxmkOmywZz3v2mDtMvhl/z/V04Lj6E POasUKm5h0j9GETjvcsFYJDimnHV1tcXfmOKzFAwXYYWgqwrw6t2vDF2OUg2d5ww yoACe9q5KygNkhJ/3T+PWDsoRZslTe49xeZJW6L5K9CBPXaxpR2hAo6jyuEAyDMI 8ZWGv20vHMCP63N6tt8r+puOdLtJzcYyI9zEj6LMEYiNSmkUCJt0G04D9XPYQ06i IXU49DfVckuIkKMW1diJ3MFcDFBOrO86GJSAbTkDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvETxlEVePHb+ktHG8LJ2Jq5ojKQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhYzQwNGViLTZhMzItNGFjMS1iOWQ1LTM5MTk4NmE2Mzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwEwDQYJKoZIhvcNAQELBQADggEBAKLn4MDPrq1JfTT/uhTQlCaL JA7qCrwSGbpz7Kgr6n0vfai6feT9D5B7VRh51iVm6zyPQpEucriNfT/PlobOYp/y KU6AMBeavi2rH8mDLiqwIph901Tu8oEfXPxpRGi1tuCSqoo8r115ji1hdsuL6xFB IMvqngjggjRYELLtXxpYE0lAZufTqbmUU9+xoX70GjCCXMxL/Ps3KGgfMjyN9h/j c8LBcgylmTgsq+1O9h1Z6FEmu/EGl29qwQeBpQ0A0LO1vFcfVrwR3pEpW46o3q3T GELyY4z7eq96VssQgvYFdC+kCTC2Hugh2ItQvCij0+hyJlrJU+2rZXjbPk6CPds= -----END CERTIFICATE-----Generated at Wed May 13 01:18:44 2026 by rpki-client