$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa File: 710c8ea0-f6b4-4fbe-9653-22174e063099.roa (raw, json) Hash identifier: VVUK7bcZYWEODNej950bXEWGNLv6Na7dgn9ITmDKwEw= Subject key identifier: 4B:A2:B4:05:16:2A:D6:BB:76:80:92:BD:59:0C:C3:7F:77:52:92:28 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68370A7A751149BF9661EE367EEB622F2F1BA15A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa Signing time: Tue 28 Apr 2026 00:10:08 +0000 ROA not before: Tue 28 Apr 2026 00:10:08 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:37:0a:7a:75:11:49:bf:96:61:ee:36:7e:eb:62:2f:2f:1b:a1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 28 00:10:08 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=c5860d94adb9ac8a125d766337ac39247abf2067d0677b66d3fb1b66a119f4b1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:04:36:81:8b:4c:7b:ef:ca:62:7c:cd:9d: 62:f2:ba:7b:9c:87:3f:e0:1d:48:4a:42:eb:eb:0e: 95:26:14:b7:e8:a3:d5:3c:ee:41:2d:55:37:43:f0: f2:79:37:08:52:60:4c:23:c3:aa:53:a3:32:b6:82: b8:9c:93:72:bf:76:7e:e6:02:34:84:fe:df:31:b3: c2:0d:76:d7:dd:dd:24:40:c0:39:50:8b:52:22:03: f4:d7:9d:a2:37:87:e6:98:43:23:45:be:11:89:5e: 00:57:ed:a8:76:d6:e8:fc:e6:9e:4e:1e:ec:24:64: 8e:b0:c1:4e:c7:24:60:91:ab:fc:58:59:a7:50:02: 94:9a:b5:fe:31:d4:c7:60:fd:6e:57:ca:42:4e:32: b9:42:28:91:90:f2:23:ab:0f:f6:89:ed:47:3b:e9: d1:ff:da:9e:2b:40:6e:fc:04:9e:6e:44:da:08:8e: 8a:dd:95:28:03:e2:cd:7b:85:d2:b2:c9:61:d3:b7: 2e:ea:d6:ae:82:5d:66:c3:c5:82:66:46:4d:de:9b: 5b:0e:15:aa:02:09:57:2f:b2:b9:fe:ca:a4:4e:e5: ed:22:01:79:76:9a:6e:e9:ee:c8:f1:ec:a2:5e:be: cb:43:99:83:1a:f0:a6:e4:a1:ca:04:3e:30:3c:71: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A2:B4:05:16:2A:D6:BB:76:80:92:BD:59:0C:C3:7F:77:52:92:28 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/710c8ea0-f6b4-4fbe-9653-22174e063099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:90::/44 Signature Algorithm: sha256WithRSAEncryption 5e:0c:1d:b1:41:cd:f2:a9:d1:98:d0:fc:b0:f7:6f:7e:83:c3: 86:02:96:a8:36:55:1c:4c:e0:18:1b:88:8a:9b:3d:40:5a:79: a6:9b:d1:ea:29:13:59:6f:a3:44:e7:e6:17:49:ac:47:f1:77: 77:76:38:e9:d8:18:3d:da:56:68:4e:b5:ad:22:e2:e9:9a:33: ef:f7:50:48:ed:0c:13:56:71:ec:7b:55:7a:8a:a9:8c:b8:d8: 38:8c:ad:d1:fd:e8:ad:89:24:96:86:e9:5f:95:81:3b:a6:ff: c7:7c:4b:6a:ef:be:b0:ba:3a:b8:9b:45:c4:e9:68:6d:21:33: 0c:3a:78:c6:33:f1:38:6d:fa:81:a6:15:0c:3c:be:9a:52:26: 35:6f:02:46:5b:36:3d:d4:00:11:97:1c:4d:4c:a4:17:19:c5: fd:96:0a:06:9d:fb:f8:46:0d:68:94:4b:ec:47:74:4b:59:d0: 3f:bc:14:d2:68:0f:4d:2b:d1:79:07:74:69:76:52:dc:2b:d4: a9:6d:9b:65:d0:7d:a9:ec:94:68:b8:c7:96:5e:8f:96:f6:4b: 2f:51:65:29:32:60:ae:4d:a1:9d:88:b5:33:fa:a1:9b:43:60: 33:cb:84:a2:ce:6c:38:47:00:02:c5:1b:45:ce:63:c7:23:e8: 10:4b:27:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaDcKenURSb+WYe42futiLy8boVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDI4MDAxMDA4WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTg2MGQ5NGFkYjlhYzhhMTI1ZDc2NjMzN2FjMzkyNDdh YmYyMDY3ZDA2NzdiNjZkM2ZiMWI2NmExMTlmNGIxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxnQQ2gYtMe+/KYnzNnWLyunuchz/gHUhKQuvrDpUmFLfo o9U87kEtVTdD8PJ5NwhSYEwjw6pTozK2grick3K/dn7mAjSE/t8xs8INdtfd3SRA wDlQi1IiA/TXnaI3h+aYQyNFvhGJXgBX7ah21uj85p5OHuwkZI6wwU7HJGCRq/xY WadQApSatf4x1Mdg/W5XykJOMrlCKJGQ8iOrD/aJ7Uc76dH/2p4rQG78BJ5uRNoI jordlSgD4s17hdKyyWHTty7q1q6CXWbDxYJmRk3em1sOFaoCCVcvsrn+yqRO5e0i AXl2mm7p7sjx7KJevstDmYMa8KbkocoEPjA8cUZZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUS6K0BRYq1rt2gJK9WQzDf3dSkigwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxMGM4ZWEwLWY2YjQtNGZiZS05NjUzLTIyMTc0ZTA2MzA5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAJAwDQYJKoZIhvcNAQELBQADggEBAF4MHbFBzfKp0ZjQ/LD3b36D w4YClqg2VRxM4BgbiIqbPUBaeaab0eopE1lvo0Tn5hdJrEfxd3d2OOnYGD3aVmhO ta0i4umaM+/3UEjtDBNWcex7VXqKqYy42DiMrdH96K2JJJaG6V+VgTum/8d8S2rv vrC6OribRcTpaG0hMww6eMYz8Tht+oGmFQw8vppSJjVvAkZbNj3UABGXHE1MpBcZ xf2WCgad+/hGDWiUS+xHdEtZ0D+8FNJoD00r0XkHdGl2Utwr1Kltm2XQfanslGi4 x5Zej5b2Sy9RZSkyYK5NoZ2ItTP6oZtDYDPLhKLObDhHAALFG0XOY8cj6BBLJzg= -----END CERTIFICATE-----Generated at Wed May 13 03:19:36 2026 by rpki-client