$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa File: 75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa (raw, json) Hash identifier: gUe8c3o0ApccwX1cfe5yE3c4x7jTjnYvRWmZHFDKZ7I= Subject key identifier: 86:31:76:A0:68:75:52:EA:6D:E2:29:FF:A6:1D:5F:F0:29:CD:EA:CE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4D33FF4C589D8D8246C8913F95574B68FF4B1EE8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa Signing time: Mon 04 May 2026 15:10:37 +0000 ROA not before: Mon 04 May 2026 15:10:37 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:33:ff:4c:58:9d:8d:82:46:c8:91:3f:95:57:4b:68:ff:4b:1e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:37 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=7a1339bace1182c90128ac48706a77379279c670ffeb0709be1cff8de05e908f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:42:60:d3:98:51:a3:3e:39:4f:c6:68:ea: 85:da:49:8a:80:28:ad:ec:24:4d:78:c5:9f:23:36: ef:cc:16:1c:82:32:0a:0c:11:e9:94:fe:5b:8d:a5: 05:d4:20:f5:ce:8e:91:12:21:ae:05:6c:56:3a:d1: f3:ec:00:d6:1c:ac:b8:3f:33:e4:4f:f2:e2:3a:cf: 6d:6d:04:85:67:a0:bf:5e:3c:89:43:be:32:44:7a: 2e:0e:5b:ac:66:d6:9e:3e:5f:72:40:f8:83:0c:7d: bb:a7:55:8d:dd:32:90:5a:9c:18:56:ef:69:b3:53: 00:2d:d0:9e:22:98:33:8f:f8:75:99:38:70:60:77: 62:86:09:3b:4b:a0:19:0f:7a:91:22:47:2b:6e:02: a6:d0:69:ef:c5:9f:2c:8d:96:f6:94:6f:60:5b:05: a1:00:7d:06:92:54:67:76:cd:62:32:2b:d4:d8:94: a4:1c:b3:cc:35:10:44:ee:ef:1a:85:95:b8:21:ae: e7:72:fa:f8:7a:af:d8:9d:48:2a:86:a8:aa:8a:85: 13:ae:18:ae:3c:d3:70:ed:d7:b6:82:b5:ce:74:45: 7a:bb:fe:18:92:8b:85:10:5f:a8:c9:94:ff:67:d5: 33:17:0f:41:2f:58:54:d0:3a:b3:e4:0b:3c:1a:2d: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:76:A0:68:75:52:EA:6D:E2:29:FF:A6:1D:5F:F0:29:CD:EA:CE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption 58:01:23:84:f6:72:2d:15:de:f2:3b:ea:b3:df:91:cb:ab:bc: a2:d5:bd:2b:21:b4:1f:62:e1:81:dc:46:75:98:4e:b0:ce:84: 06:47:7c:a0:12:4d:7e:77:6f:a8:da:7e:d8:fe:f5:f5:aa:9b: 66:98:09:35:02:06:f3:e6:4c:c7:a4:f7:9f:70:7f:4f:21:12: 80:01:89:82:95:78:ad:d5:a0:45:7b:7b:c5:6e:ac:b5:f6:cb: 31:f6:56:93:2f:78:b1:a1:bf:d7:08:05:99:15:7d:1e:e1:92: c5:3c:60:8c:3f:8f:af:d9:43:9e:bf:6a:45:36:5a:21:07:9b: ba:7d:57:52:d2:62:01:8e:2f:9c:44:a8:3b:0b:5b:d2:a6:9f: 28:46:15:63:6e:92:ef:bc:28:49:27:c8:8d:b0:62:15:30:9b: d1:f6:6e:08:e6:17:d7:3e:0a:93:99:82:1e:29:08:da:e4:7a: e0:b3:c2:55:7e:ed:2f:02:c3:8b:6a:df:5c:34:3b:b2:8d:c2: f5:c8:b5:ef:61:c8:a1:e9:d2:e5:15:02:26:23:59:13:2f:1c: 6f:4f:05:c9:5c:ae:42:3a:5a:5b:b9:0c:23:d8:38:56:d2:80: 43:bc:ca:ea:e7:f2:6e:23:00:3e:77:da:82:21:7e:fa:b3:e2: 35:55:93:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTTP/TFidjYJGyJE/lVdLaP9LHugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDM3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTEzMzliYWNlMTE4MmM5MDEyOGFjNDg3MDZhNzczNzky NzljNjcwZmZlYjA3MDliZTFjZmY4ZGUwNWU5MDhmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3xEJg05hRoz45T8Zo6oXaSYqAKK3sJE14xZ8jNu/MFhyC MgoMEemU/luNpQXUIPXOjpESIa4FbFY60fPsANYcrLg/M+RP8uI6z21tBIVnoL9e PIlDvjJEei4OW6xm1p4+X3JA+IMMfbunVY3dMpBanBhW72mzUwAt0J4imDOP+HWZ OHBgd2KGCTtLoBkPepEiRytuAqbQae/FnyyNlvaUb2BbBaEAfQaSVGd2zWIyK9TY lKQcs8w1EETu7xqFlbghrudy+vh6r9idSCqGqKqKhROuGK4803Dt17aCtc50RXq7 /hiSi4UQX6jJlP9n1TMXD0EvWFTQOrPkCzwaLaQ9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhjF2oGh1Uupt4in/ph1f8CnN6s4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc1ZTVlNmNlLWExMWEtNDA0NS1iY2M1LTM4YzUwODU5MjFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAFgBI4T2ci0V3vI76rPfkcur vKLVvSshtB9i4YHcRnWYTrDOhAZHfKASTX53b6jaftj+9fWqm2aYCTUCBvPmTMek 959wf08hEoABiYKVeK3VoEV7e8VurLX2yzH2VpMveLGhv9cIBZkVfR7hksU8YIw/ j6/ZQ56/akU2WiEHm7p9V1LSYgGOL5xEqDsLW9KmnyhGFWNuku+8KEknyI2wYhUw m9H2bgjmF9c+CpOZgh4pCNrkeuCzwlV+7S8Cw4tq31w0O7KNwvXIte9hyKHp0uUV AiYjWRMvHG9PBclcrkI6Wlu5DCPYOFbSgEO8yurn8m4jAD532oIhfvqz4jVVk6Q= -----END CERTIFICATE-----Generated at Wed May 13 01:46:19 2026 by rpki-client