$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa File: 8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json) Hash identifier: QPBnFaZwhZP4ZJXTD6eDjinB0nW672oMmQRW38KtXHA= Subject key identifier: BE:40:E9:5D:39:BB:B5:25:59:EC:04:BB:86:EE:A2:CF:19:34:31:3B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 485D4E3395B69E7E54655085199B530E68272113 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa Signing time: Mon 04 May 2026 15:10:04 +0000 ROA not before: Mon 04 May 2026 15:10:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:4e:33:95:b6:9e:7e:54:65:50:85:19:9b:53:0e:68:27:21:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=4cb0fb278c2041761c10a4bf39889f978fe2b9607c6497dc83b341eaa5672cf8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:67:22:50:7b:63:fd:e5:b6:5a:14:64:99: 59:99:18:87:1a:f0:dc:2c:13:ed:b0:23:03:9e:63: 95:b4:50:d7:b1:83:f8:ce:d6:5a:4d:bf:4c:f3:ed: fe:2c:49:4f:96:7f:08:56:05:e8:93:0a:7d:c0:29: 9f:ba:e8:dd:a5:4e:84:20:20:9c:b9:12:ec:20:5b: c3:f5:d3:7f:6a:de:98:8b:c2:6c:7c:4b:d7:45:a9: ef:9f:4b:34:8a:89:73:08:9a:97:20:ab:d0:e7:33: d8:a5:a6:bd:90:4a:f0:f8:77:dd:ca:a7:3f:63:cf: 0a:f9:58:c1:1a:ed:47:db:96:17:1a:de:d6:70:0e: 43:cb:46:58:69:7f:e4:01:80:ff:45:93:01:be:b0: 9f:20:24:d2:c1:d9:2c:6f:15:07:7f:95:31:57:45: 8c:a0:4f:d2:98:0d:6a:65:d1:cd:46:38:b4:8d:d2: 71:09:73:fe:78:e3:4c:cd:89:b0:43:7b:18:67:6e: b8:65:16:12:02:ca:57:14:60:36:25:04:46:4d:70: 06:18:37:d6:f9:3f:7d:0d:f2:33:61:0f:0b:64:e0: 97:6f:47:23:6c:62:8f:8e:3d:15:f7:aa:5f:ec:14: e2:a1:7f:49:56:a4:6d:99:43:f5:96:7f:eb:a7:e3: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:E9:5D:39:BB:B5:25:59:EC:04:BB:86:EE:A2:CF:19:34:31:3B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption 2b:d6:ec:63:96:4e:00:33:61:98:7a:8e:e8:e9:a7:99:82:a3: d2:34:07:16:ee:11:07:8f:69:29:04:1a:7d:84:50:2c:63:fb: 10:d5:78:30:1f:05:32:fc:a7:85:d6:4d:23:ae:8a:55:07:92: a8:a9:6f:d8:98:d5:bb:0b:79:5d:bf:f5:69:73:80:69:42:96: 48:0a:59:4a:1c:40:db:21:0f:ee:60:ad:b5:b5:af:c3:1e:1f: 8b:6c:3b:ee:31:59:89:a6:43:76:a7:03:07:52:7d:b3:b9:83: 74:38:23:2f:ae:6f:c4:9a:69:0c:8f:f8:9a:b9:2f:5c:08:02: 49:c1:a7:7f:8f:2c:fa:e4:c8:78:63:9c:91:27:e3:f6:28:22: 2f:7c:d3:cd:49:96:15:c7:dd:32:7f:f2:68:4a:28:39:5e:36: 30:9e:a3:b8:28:cc:d8:25:81:2c:aa:e2:52:12:87:30:f7:d5: e4:4f:ec:07:c8:44:fb:c1:cc:7b:d2:3d:20:6f:07:26:e5:2a: de:e7:b3:6a:0c:44:6c:28:e1:8e:86:5b:44:84:52:8e:1c:fa: 90:33:01:e3:17:52:79:d8:ad:76:8b:56:ad:ae:81:92:24:ca: 73:b5:36:b0:eb:e2:0c:ce:7d:cb:29:f7:97:15:da:8b:26:e7: 25:5c:6f:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSF1OM5W2nn5UZVCFGZtTDmgnIRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDA0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2IwZmIyNzhjMjA0MTc2MWMxMGE0YmYzOTg4OWY5Nzhm ZTJiOTYwN2M2NDk3ZGM4M2IzNDFlYWE1NjcyY2Y4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCihmciUHtj/eW2WhRkmVmZGIca8NwsE+2wIwOeY5W0UNex g/jO1lpNv0zz7f4sSU+WfwhWBeiTCn3AKZ+66N2lToQgIJy5EuwgW8P1039q3piL wmx8S9dFqe+fSzSKiXMImpcgq9DnM9ilpr2QSvD4d93Kpz9jzwr5WMEa7Ufblhca 3tZwDkPLRlhpf+QBgP9FkwG+sJ8gJNLB2SxvFQd/lTFXRYygT9KYDWpl0c1GOLSN 0nEJc/5440zNibBDexhnbrhlFhICylcUYDYlBEZNcAYYN9b5P30N8jNhDwtk4Jdv RyNsYo+OPRX3ql/sFOKhf0lWpG2ZQ/WWf+un4/1FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvkDpXTm7tSVZ7AS7hu6izxk0MTswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhiZWZlYWNiLWI5OTEtNDA4Yi05MTJlLWE1YTc0NGZjMTNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBACvW7GOWTgAzYZh6jujpp5mC o9I0BxbuEQePaSkEGn2EUCxj+xDVeDAfBTL8p4XWTSOuilUHkqipb9iY1bsLeV2/ 9WlzgGlClkgKWUocQNshD+5grbW1r8MeH4tsO+4xWYmmQ3anAwdSfbO5g3Q4Iy+u b8SaaQyP+Jq5L1wIAknBp3+PLPrkyHhjnJEn4/YoIi98081JlhXH3TJ/8mhKKDle NjCeo7gozNglgSyq4lIShzD31eRP7AfIRPvBzHvSPSBvByblKt7ns2oMRGwo4Y6G W0SEUo4c+pAzAeMXUnnYrXaLVq2ugZIkynO1NrDr4gzOfcsp95cV2osm5yVcbwc= -----END CERTIFICATE-----Generated at Wed May 13 00:10:04 2026 by rpki-client