$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa File: 942359be-660a-411d-a2eb-7723143d6fd3.roa (raw, json) Hash identifier: ncjnxVbWotU1hUhKcAy8E1j/eWxIn8Jjf01rEtZd2R0= Subject key identifier: FB:A4:EB:42:75:AC:E4:C4:CC:E8:A0:CD:75:CF:86:CF:55:B6:F7:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 526AC6C176176C64A4CEEC8C6D2EE2BCD49497E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa Signing time: Mon 04 May 2026 15:10:06 +0000 ROA not before: Mon 04 May 2026 15:10:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6a:c6:c1:76:17:6c:64:a4:ce:ec:8c:6d:2e:e2:bc:d4:94:97:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=3f4ea0fc63558b15b4bc753103bfdb74dccbedadb4f2a1f1c33f9daa587a18f5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:08:62:eb:08:65:33:79:2d:92:f0:b4:c1: f8:6c:fc:1f:3f:81:f8:65:93:89:fc:d4:34:c1:58: aa:28:26:61:af:cc:76:60:c1:83:0b:48:ed:69:2b: 1c:a5:50:06:41:ec:64:76:b7:03:e7:cc:2a:67:6e: 71:5b:84:4d:6b:f6:46:19:95:49:34:46:2b:ea:81: 32:11:b3:62:b1:85:b3:a0:1b:53:16:dd:8e:ba:4a: 62:7e:c3:6d:93:96:b2:75:f0:4f:2b:dc:75:be:6a: a2:9e:2d:37:28:f3:ef:2e:df:35:2d:d4:1f:bd:16: 20:a9:b9:97:eb:6d:cf:9d:c5:4a:b8:bb:41:c9:ef: 9f:0f:2d:2d:c2:7a:35:aa:da:7d:94:55:52:3b:34: 8a:be:78:0e:57:ed:03:b7:d2:32:d5:b7:73:8f:1f: 2e:a8:23:b4:9e:7f:6e:2a:4f:fe:9c:33:6b:28:28: 07:b4:07:af:5c:c8:df:0c:ed:26:cf:63:99:8a:42: 1f:13:38:8c:2a:35:4a:6b:d1:3c:03:9b:68:e7:6a: 9b:1c:39:3e:0d:cb:cd:e0:13:13:41:c9:42:72:ce: ee:a2:68:77:9c:f4:b8:d8:0a:1f:c8:75:58:49:b2: 52:dc:65:b3:e7:ef:82:0b:38:a1:1d:92:04:82:52: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A4:EB:42:75:AC:E4:C4:CC:E8:A0:CD:75:CF:86:CF:55:B6:F7:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 38:f2:17:ab:7c:44:20:bb:8a:9f:85:a6:65:92:50:23:ce:41: ee:8a:ad:a3:c4:01:57:f7:a1:0e:b6:a3:d4:b4:b5:20:79:4f: 3e:ab:25:0e:d3:87:3f:f7:32:25:5e:02:ce:2c:c6:6e:c8:cb: 18:c0:22:82:8a:60:b1:72:f3:75:7e:02:58:81:a5:0f:8d:90: ad:cb:bc:86:2e:a2:e4:27:99:5f:fd:9f:41:8a:e9:ea:0e:2e: 18:d3:64:5f:6c:9b:31:7c:b2:86:a9:18:7c:7e:52:0c:71:3c: 3c:a8:3b:93:9e:81:50:ff:3b:d1:93:9d:29:02:de:c9:da:a4: 52:da:0e:e3:35:cc:6f:c0:cf:bb:fd:a5:d6:52:9a:b9:d2:d8: 32:7a:fe:0b:0e:25:fa:5a:13:bf:2e:99:fc:f7:c5:31:45:c8: 5e:ea:a9:7b:22:3b:a4:3a:34:b6:4f:33:f7:15:3c:96:da:78: 0a:10:34:9f:85:20:e9:cd:ec:dc:0f:87:e1:97:d9:bb:54:be: 52:ab:7a:da:a8:bc:a6:a8:4f:73:28:13:cc:89:84:53:ee:92: 40:bb:2d:99:f6:95:75:cc:ed:ef:6b:3f:8d:df:a6:65:c6:ee: b2:ed:8f:8a:43:c4:05:8d:f4:3c:da:91:34:79:7c:99:80:11: ff:af:7b:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUmrGwXYXbGSkzuyMbS7ivNSUl+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjRlYTBmYzYzNTU4YjE1YjRiYzc1MzEwM2JmZGI3NGRj Y2JlZGFkYjRmMmExZjFjMzNmOWRhYTU4N2ExOGY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi0ghi6whlM3ktkvC0wfhs/B8/gfhlk4n81DTBWKooJmGv zHZgwYMLSO1pKxylUAZB7GR2twPnzCpnbnFbhE1r9kYZlUk0RivqgTIRs2KxhbOg G1MW3Y66SmJ+w22TlrJ18E8r3HW+aqKeLTco8+8u3zUt1B+9FiCpuZfrbc+dxUq4 u0HJ758PLS3CejWq2n2UVVI7NIq+eA5X7QO30jLVt3OPHy6oI7Sef24qT/6cM2so KAe0B69cyN8M7SbPY5mKQh8TOIwqNUpr0TwDm2jnapscOT4Ny83gExNByUJyzu6i aHec9LjYCh/IdVhJslLcZbPn74ILOKEdkgSCUoS5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+6TrQnWs5MTM6KDNdc+Gz1W294UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk0MjM1OWJlLTY2MGEtNDExZC1hMmViLTc3MjMxNDNkNmZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBADjyF6t8RCC7ip+FpmWSUCPO Qe6KraPEAVf3oQ62o9S0tSB5Tz6rJQ7Thz/3MiVeAs4sxm7IyxjAIoKKYLFy83V+ AliBpQ+NkK3LvIYuouQnmV/9n0GK6eoOLhjTZF9smzF8soapGHx+UgxxPDyoO5Oe gVD/O9GTnSkC3snapFLaDuM1zG/Az7v9pdZSmrnS2DJ6/gsOJfpaE78umfz3xTFF yF7qqXsiO6Q6NLZPM/cVPJbaeAoQNJ+FIOnN7NwPh+GX2btUvlKretqovKaoT3Mo E8yJhFPukkC7LZn2lXXM7e9rP43fpmXG7rLtj4pDxAWN9DzakTR5fJmAEf+ve7c= -----END CERTIFICATE-----Generated at Wed May 13 01:31:59 2026 by rpki-client