$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/810667ad-b89f-4e8f-889c-bcd407c3fe7b.roa File: 810667ad-b89f-4e8f-889c-bcd407c3fe7b.roa (raw, json) Hash identifier: sloJnmHULt6aaguuolZtc1Y+P8eUPUIhbLgBZ7J8KZE= Subject key identifier: 71:31:00:79:E3:69:C8:00:B1:AC:E6:8F:B3:C5:36:E0:F9:C1:B8:ED Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 63A9EE0D76685115519ADDEC180D91BE77EAFB8E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/810667ad-b89f-4e8f-889c-bcd407c3fe7b.roa Signing time: Fri 08 May 2026 03:10:38 +0000 ROA not before: Fri 08 May 2026 03:10:38 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a9:ee:0d:76:68:51:15:51:9a:dd:ec:18:0d:91:be:77:ea:fb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 8 03:10:38 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=54b49ad6b7b87055f86e007eae4a94b32dbe48043dcdd65847ddb369caf226e3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:1a:00:40:34:4e:d5:bc:22:27:2c:56:6f: ed:31:8b:f6:6d:ff:65:86:b8:36:66:19:b7:42:ae: 5c:b2:01:6b:f8:64:e8:82:a5:86:e6:7f:1f:7c:04: 0e:3a:7e:68:90:82:d2:b3:8a:aa:c9:73:cf:95:5e: d7:2d:de:3e:30:d9:1c:90:f5:cd:14:05:58:8e:ea: 18:5a:e7:4b:de:17:8f:b1:0d:5b:b8:af:da:0f:67: 63:b8:16:fe:17:fe:57:1b:11:4a:1d:b1:69:0f:64: 47:c5:2c:e6:09:11:56:d8:d6:8f:11:1d:b3:97:d7: 8e:4b:34:cf:d0:eb:7c:55:0e:51:40:94:b3:e7:fe: fa:bd:71:38:91:da:51:5b:af:c0:75:22:e2:dd:c5: c8:7b:19:ab:e9:d5:49:06:9d:56:80:59:be:97:cb: 7e:df:0a:03:10:72:59:5c:3d:e7:b3:a9:7a:0d:12: f1:01:90:58:0a:00:fd:c5:d3:e9:8f:33:55:51:f5: 11:2c:a9:3c:e4:8b:f4:f8:85:36:2a:74:a3:f4:10: 2d:76:65:77:32:25:4b:42:70:44:0b:fe:ad:65:6c: 98:83:03:9f:ce:e4:93:e5:23:52:fb:f3:1e:28:b9: e9:d4:2b:93:61:16:64:20:1f:80:7f:1d:8e:ed:ae: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:00:79:E3:69:C8:00:B1:AC:E6:8F:B3:C5:36:E0:F9:C1:B8:ED X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/810667ad-b89f-4e8f-889c-bcd407c3fe7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption a8:09:bf:4a:8b:41:a1:43:bf:fb:7f:b5:07:46:9c:76:95:e5: fa:34:71:51:b7:22:fa:13:c6:b0:f7:7e:b8:82:ec:a3:c5:5c: 51:43:b9:d4:6c:e5:d8:48:5f:13:de:c8:ae:88:a3:76:be:2b: 8f:e9:eb:6f:4b:ac:77:e5:b8:d8:62:8b:ef:0f:52:da:fa:c1: 51:c0:19:f7:e1:7e:b8:04:f4:f6:d3:1a:a9:b3:96:f0:25:f1: 81:df:66:e2:31:8a:65:35:13:78:2d:19:22:be:98:94:ae:31: 52:5b:8d:90:c9:f8:40:85:24:c2:a4:db:45:c8:fd:4d:6c:36: 8f:3b:9a:5b:5f:a2:4d:d7:33:9a:fb:b8:2f:6f:0c:98:e6:23: af:e8:fd:ea:aa:f7:35:c1:20:92:f8:54:e6:a9:0f:a5:95:a5: ad:0b:9e:17:a3:18:10:ff:8d:93:69:40:71:ca:ec:35:5b:c1: 3d:99:ff:5b:59:f6:2f:28:9d:0b:55:55:a6:e4:0f:b4:dc:4f: 31:b5:03:c5:9b:20:9c:47:eb:f6:47:7e:2b:a0:9c:5a:87:6e: f4:22:23:86:94:7a:8a:2d:7a:fb:e3:43:32:6a:2d:19:eb:7a: 79:5c:32:34:99:16:3e:ca:cd:bf:f8:91:8f:32:2f:84:f5:a8: 28:ce:1b:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY6nuDXZoURVRmt3sGA2Rvnfq+44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA4MDMxMDM4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGI0OWFkNmI3Yjg3MDU1Zjg2ZTAwN2VhZTRhOTRiMzJk YmU0ODA0M2RjZGQ2NTg0N2RkYjM2OWNhZjIyNmUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaTxoAQDRO1bwiJyxWb+0xi/Zt/2WGuDZmGbdCrlyyAWv4 ZOiCpYbmfx98BA46fmiQgtKziqrJc8+VXtct3j4w2RyQ9c0UBViO6hha50veF4+x DVu4r9oPZ2O4Fv4X/lcbEUodsWkPZEfFLOYJEVbY1o8RHbOX145LNM/Q63xVDlFA lLPn/vq9cTiR2lFbr8B1IuLdxch7Gavp1UkGnVaAWb6Xy37fCgMQcllcPeezqXoN EvEBkFgKAP3F0+mPM1VR9REsqTzki/T4hTYqdKP0EC12ZXcyJUtCcEQL/q1lbJiD A5/O5JPlI1L78x4ouenUK5NhFmQgH4B/HY7tripPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcTEAeeNpyACxrOaPs8U24PnBuO0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgxMDY2N2FkLWI4OWYtNGU4Zi04ODljLWJjZDQwN2MzZmU3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAKgJv0qLQaFDv/t/tQdGnHaV 5fo0cVG3IvoTxrD3friC7KPFXFFDudRs5dhIXxPeyK6Io3a+K4/p629LrHfluNhi i+8PUtr6wVHAGffhfrgE9PbTGqmzlvAl8YHfZuIximU1E3gtGSK+mJSuMVJbjZDJ +ECFJMKk20XI/U1sNo87mltfok3XM5r7uC9vDJjmI6/o/eqq9zXBIJL4VOapD6WV pa0LnhejGBD/jZNpQHHK7DVbwT2Z/1tZ9i8onQtVVabkD7TcTzG1A8WbIJxH6/ZH fiugnFqHbvQiI4aUeootevvjQzJqLRnrenlcMjSZFj7Kzb/4kY8yL4T1qCjOG9M= -----END CERTIFICATE-----Generated at Tue May 12 23:52:40 2026 by rpki-client