$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa File: 8d691919-536d-4192-bb94-4b09044e4c56.roa (raw, json) Hash identifier: dIdaqpS8d2loWdOS0rsXTTRhWSD3Sm2Tr2LzEXn8/zA= Subject key identifier: D0:BA:2C:25:1D:3C:A8:3D:84:FD:D0:72:6E:44:E6:88:68:39:37:17 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E18E6B239072D5B4C40D213D8C3C46E1F967BA3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa Signing time: Sat 02 May 2026 00:20:03 +0000 ROA not before: Sat 02 May 2026 00:20:03 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:110::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:18:e6:b2:39:07:2d:5b:4c:40:d2:13:d8:c3:c4:6e:1f:96:7b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 2 00:20:03 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=6bb3b84f19b56678e027a191a03b24c383e5724036b3542a10f4a791b54d00e0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6e:5f:67:10:7e:a9:f8:71:a9:5d:23:6d:e6: 31:dd:ce:19:e4:96:ea:2c:f4:33:a0:6e:38:2d:0e: 62:8d:33:db:f7:26:13:21:9c:59:75:cf:e3:d1:42: 31:ba:95:77:0b:9b:3c:50:dd:05:8f:1b:35:58:29: 07:03:a8:86:c3:60:fa:bc:4b:51:ec:1f:bd:db:ec: 82:23:1f:fe:19:a7:18:63:93:79:05:81:25:68:28: e7:ef:78:18:71:db:86:96:ca:db:be:b9:4b:a9:83: fa:26:d4:c1:4c:03:8f:4c:28:29:c3:fc:12:2c:eb: 9d:91:bb:dd:4e:57:af:c5:4e:64:12:67:aa:9a:f4: bd:44:f9:d3:07:42:a7:f2:a5:45:9a:b4:99:d8:c1: 5b:00:39:9b:b2:90:36:10:62:5e:63:49:fb:c5:81: 95:d6:bf:6c:aa:22:f3:5f:a5:2a:ae:e3:1b:35:c9: 4b:ae:81:0d:08:66:31:20:86:d1:87:b6:2b:3a:1d: 40:82:56:68:4b:e5:b2:0b:77:f4:b5:0f:e7:84:95: 3a:78:a0:cc:66:15:81:cd:3c:6c:46:25:19:bb:70: 59:f9:a6:64:02:10:a8:cd:2f:79:26:68:b6:03:04: 4b:25:41:13:ad:da:f9:68:62:a2:b4:ff:50:f0:a1: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:2C:25:1D:3C:A8:3D:84:FD:D0:72:6E:44:E6:88:68:39:37:17 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d691919-536d-4192-bb94-4b09044e4c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:110::/47 Signature Algorithm: sha256WithRSAEncryption 23:7c:82:f4:27:04:64:f1:88:4d:52:4d:0b:4c:d6:67:93:b5: 81:ae:ab:09:04:c3:ce:b7:ed:39:11:6b:b8:3b:69:96:dd:7a: 05:45:d7:44:34:d8:ae:ed:ba:42:30:51:8e:b6:f5:84:d1:99: dd:8d:49:8b:ae:06:25:2b:c3:76:f2:04:5e:9e:b4:27:a4:d8: bd:80:ae:91:5e:d4:c5:6d:36:d9:b9:9e:77:9e:22:ac:fa:b7: a4:cb:d6:f2:87:f3:e6:d6:01:1d:4e:dd:37:ef:b5:74:ff:f9: 4c:ec:c1:17:82:2a:67:d6:44:56:59:35:21:1d:2e:35:38:35: b8:b8:97:ac:77:02:ca:c8:56:91:10:df:e9:f4:93:b0:b5:99: 8a:01:6c:2c:f0:a1:9c:a4:7d:b0:cb:fd:3e:2f:19:b6:87:2c: 11:e8:4b:24:6f:30:77:52:26:0c:ae:77:97:bb:ff:d8:b4:3f: 4a:4d:9c:85:3c:a0:8d:8b:7c:46:7d:87:b0:45:b9:35:ba:e8: 5a:88:a6:1f:46:5b:27:1d:13:21:3b:b5:f6:46:3e:e3:d0:12: 3a:15:9c:29:fd:9a:62:d5:5f:87:8a:8b:6e:ee:1d:3c:92:94: 31:5f:34:39:10:cb:a3:01:ca:69:c9:ba:fd:31:59:e3:bd:3a: 27:31:bb:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPhjmsjkHLVtMQNIT2MPEbh+We6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTAyMDAyMDAzWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmIzYjg0ZjE5YjU2Njc4ZTAyN2ExOTFhMDNiMjRjMzgz ZTU3MjQwMzZiMzU0MmExMGY0YTc5MWI1NGQwMGUwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmbl9nEH6p+HGpXSNt5jHdzhnkluos9DOgbjgtDmKNM9v3 JhMhnFl1z+PRQjG6lXcLmzxQ3QWPGzVYKQcDqIbDYPq8S1HsH73b7IIjH/4Zpxhj k3kFgSVoKOfveBhx24aWytu+uUupg/om1MFMA49MKCnD/BIs652Ru91OV6/FTmQS Z6qa9L1E+dMHQqfypUWatJnYwVsAOZuykDYQYl5jSfvFgZXWv2yqIvNfpSqu4xs1 yUuugQ0IZjEghtGHtis6HUCCVmhL5bILd/S1D+eElTp4oMxmFYHNPGxGJRm7cFn5 pmQCEKjNL3kmaLYDBEslQROt2vloYqK0/1DwoYg1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0LosJR08qD2E/dBybkTmiGg5NxcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkNjkxOTE5LTUzNmQtNDE5Mi1iYjk0LTRiMDkwNDRlNGM1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwARAwDQYJKoZIhvcNAQELBQADggEBACN8gvQnBGTxiE1STQtM1meT tYGuqwkEw8637TkRa7g7aZbdegVF10Q02K7tukIwUY629YTRmd2NSYuuBiUrw3by BF6etCek2L2ArpFe1MVtNtm5nneeIqz6t6TL1vKH8+bWAR1O3TfvtXT/+UzswReC KmfWRFZZNSEdLjU4Nbi4l6x3AsrIVpEQ3+n0k7C1mYoBbCzwoZykfbDL/T4vGbaH LBHoSyRvMHdSJgyud5e7/9i0P0pNnIU8oI2LfEZ9h7BFuTW66FqIph9GWycdEyE7 tfZGPuPQEjoVnCn9mmLVX4eKi27uHTySlDFfNDkQy6MBymnJuv0xWeO9Oicxu9U= -----END CERTIFICATE-----Generated at Wed May 13 00:47:41 2026 by rpki-client