$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa File: 6ccba569-7caf-468c-b996-e7a0034a48e4.roa (raw, json) Hash identifier: fUhm/A3Y6q3MFmfjkjnieP1R3TvRs3k4/ZYS2xJGNk0= Subject key identifier: 5B:C3:8F:77:54:64:02:FD:2A:83:2A:97:1A:60:E1:5D:57:96:A6:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 71E352CC0FE1AD253911C606591291B8015366E2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa Signing time: Mon 04 May 2026 15:10:19 +0000 ROA not before: Mon 04 May 2026 15:10:19 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e3:52:cc:0f:e1:ad:25:39:11:c6:06:59:12:91:b8:01:53:66:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:19 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=8f9c459aa990014d6c46fad760016529933ab84269dae02329f41022b429e24a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:b0:a9:d6:06:3b:97:f6:3d:9a:ff:d2:c9: 2e:79:d7:f3:10:c1:4e:ff:fd:0e:a6:51:2a:a3:58: 39:df:cd:e4:36:08:b5:9d:23:3e:a3:fc:20:fa:80: 30:90:09:7f:95:c0:ec:3c:80:19:78:b0:97:8b:3c: dc:fb:07:99:1d:1f:f5:ff:d6:53:b1:41:c8:a1:be: 90:4d:76:24:53:0d:37:01:1c:1c:81:96:62:c2:9c: 91:4b:d4:4a:3f:29:1c:46:c5:7f:a1:23:e6:61:fd: e1:c9:0a:75:2b:31:83:25:a4:93:10:d6:44:f5:ce: b5:d6:71:64:55:8e:78:76:70:d5:85:ef:02:58:47: 9b:07:ce:a5:da:a0:fe:87:42:1b:37:12:10:41:8a: b6:8e:5f:dc:c0:3d:6f:a8:0b:d8:15:84:7e:59:02: 5c:15:81:bf:4d:ba:a6:49:5c:3a:fc:6a:2c:6a:a1: 6c:a8:3e:19:3d:62:5b:82:18:b4:70:cf:ae:ef:41: ca:85:79:a1:24:d5:e7:96:20:82:fd:43:6c:5d:0b: 80:db:cb:d9:56:07:49:1d:5d:c1:8b:da:0b:19:32: 6b:e4:a9:0c:03:31:56:a4:b6:e4:72:c4:21:45:42: eb:a9:f4:25:7d:5b:22:ea:08:73:14:c8:bd:39:98: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:8F:77:54:64:02:FD:2A:83:2A:97:1A:60:E1:5D:57:96:A6:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption a7:7b:ce:db:87:bd:57:4a:b1:02:70:ad:5a:83:1d:02:11:9b: ba:25:47:28:bd:d7:32:78:76:45:de:74:f8:c1:f7:91:b3:4a: e5:79:b3:5f:4b:22:d6:35:a0:41:7c:24:06:de:a1:98:19:fa: 6d:3d:96:e3:ca:4d:28:cf:20:29:eb:9b:7a:31:9d:38:c6:ac: dd:fb:ab:d2:dc:50:58:1e:9b:91:ac:bf:64:06:f2:37:a1:c0: 7b:30:8c:0b:d5:29:01:86:2f:42:de:8d:83:89:84:2e:9a:6c: 29:ef:c5:37:a3:80:60:8d:a1:5d:76:e3:75:d5:d7:7b:c1:42: 86:64:01:24:07:cf:f4:a4:d0:24:33:60:35:96:f6:21:3f:52: b3:d6:71:2c:fa:9c:9a:38:6d:17:4c:b5:67:90:44:8c:0b:5f: 9f:80:5d:03:bb:45:c3:22:62:af:9f:81:3f:50:ef:7f:15:fc: 0b:6a:8f:28:b3:ec:4f:9a:47:58:79:dd:bf:6e:26:07:e6:d8: 6b:87:71:b9:0e:ac:00:1f:80:b0:8c:04:a9:9e:e6:0d:c8:59: cf:59:61:2f:d0:e9:ba:fa:4a:35:82:71:a9:72:ab:df:20:5f: a2:c5:26:ce:5a:9e:f7:99:79:48:55:0e:53:66:b4:9f:3f:e2: c3:63:e5:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUceNSzA/hrSU5EcYGWRKRuAFTZuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDE5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjljNDU5YWE5OTAwMTRkNmM0NmZhZDc2MDAxNjUyOTkz M2FiODQyNjlkYWUwMjMyOWY0MTAyMmI0MjllMjRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZeLCp1gY7l/Y9mv/SyS551/MQwU7//Q6mUSqjWDnfzeQ2 CLWdIz6j/CD6gDCQCX+VwOw8gBl4sJeLPNz7B5kdH/X/1lOxQcihvpBNdiRTDTcB HByBlmLCnJFL1Eo/KRxGxX+hI+Zh/eHJCnUrMYMlpJMQ1kT1zrXWcWRVjnh2cNWF 7wJYR5sHzqXaoP6HQhs3EhBBiraOX9zAPW+oC9gVhH5ZAlwVgb9NuqZJXDr8aixq oWyoPhk9YluCGLRwz67vQcqFeaEk1eeWIIL9Q2xdC4Dby9lWB0kdXcGL2gsZMmvk qQwDMVaktuRyxCFFQuup9CV9WyLqCHMUyL05mDjTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW8OPd1RkAv0qgyqXGmDhXVeWplcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZjY2JhNTY5LTdjYWYtNDY4Yy1iOTk2LWU3YTAwMzRhNDhlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAKd7ztuHvVdKsQJwrVqDHQIR m7olRyi91zJ4dkXedPjB95GzSuV5s19LItY1oEF8JAbeoZgZ+m09luPKTSjPICnr m3oxnTjGrN37q9LcUFgem5Gsv2QG8jehwHswjAvVKQGGL0LejYOJhC6abCnvxTej gGCNoV1243XV13vBQoZkASQHz/Sk0CQzYDWW9iE/UrPWcSz6nJo4bRdMtWeQRIwL X5+AXQO7RcMiYq+fgT9Q738V/Atqjyiz7E+aR1h53b9uJgfm2GuHcbkOrAAfgLCM BKme5g3IWc9ZYS/Q6br6SjWCcalyq98gX6LFJs5anveZeUhVDlNmtJ8/4sNj5YY= -----END CERTIFICATE-----Generated at Wed May 13 01:25:21 2026 by rpki-client