$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa File: ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa (raw, json) Hash identifier: bmTsw0LbYIhufaKhV1XXxGdP75yKUMiBGUP/TkV1AtI= Subject key identifier: E3:52:34:42:AA:E5:EB:2C:80:2C:87:63:1D:6F:C9:2D:30:55:D0:95 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 50B2BC19091F5EC65FE85ED34EE6963F78B9F870 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa Signing time: Sat 09 May 2026 00:10:07 +0000 ROA not before: Sat 09 May 2026 00:10:07 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f3:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b2:bc:19:09:1f:5e:c6:5f:e8:5e:d3:4e:e6:96:3f:78:b9:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 9 00:10:07 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=cd8e4391d7bf24609c6f19cece32b467344c1dec4b63e28eb029927025f7c4c2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:c7:eb:60:0e:64:48:9b:61:9e:a1:62:a5: 72:79:37:70:0c:75:7b:85:e9:d5:7c:7a:96:27:b5: 67:3e:df:f2:09:f4:e8:f3:82:76:de:0f:f3:61:7b: 57:3b:cc:d2:b0:f9:fe:c9:99:94:2b:4d:e1:94:3b: 40:4e:9f:c3:50:2b:84:56:02:73:cd:bd:95:4f:b4: e9:17:e7:f6:62:df:09:29:43:20:7a:d8:3e:dc:a1: eb:31:9e:6b:19:1a:eb:6a:2c:81:b3:1f:b9:96:a6: da:09:c5:44:27:8b:a6:63:3e:30:ae:09:60:fe:d5: e1:4f:00:68:b0:d6:5f:a1:2f:38:de:6a:09:e3:15: 5f:c2:88:d4:ff:81:f6:c4:85:7d:45:71:49:1b:88: 2b:09:43:b8:71:ae:b0:63:27:38:53:da:15:9f:df: 81:15:60:f7:2a:4f:42:b9:da:81:4e:6e:e4:dd:eb: 08:8d:26:50:d4:d0:ee:87:62:0c:47:12:a0:a9:3e: ba:c8:57:24:84:27:fa:60:4f:ef:9f:56:dc:fb:fc: 6b:7a:7b:f0:d0:5e:83:21:a5:06:6c:a2:f0:15:77: 44:91:b5:b4:9f:54:ef:ff:ff:3d:34:ee:1b:4c:90: 81:f2:37:4a:a7:94:07:14:96:81:0d:20:ac:a7:a0: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:34:42:AA:E5:EB:2C:80:2C:87:63:1D:6F:C9:2D:30:55:D0:95 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac963f1a-57fa-46af-b9f0-aa760ded3f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 3c:64:33:e7:80:d0:72:8b:1a:d2:a1:6d:5b:fe:4e:a3:47:a4: 22:e4:51:c7:9f:67:31:6d:88:4a:35:ab:81:05:2e:f8:3a:59: 3c:47:b7:09:35:da:1e:dc:0a:04:f1:e6:27:15:4a:a1:50:23: a9:ae:f5:33:ea:b1:c2:1a:be:4a:34:c0:8a:c9:fa:15:4d:df: a3:63:87:4e:dd:a2:af:66:b3:05:0b:70:54:a2:fb:d8:5e:5b: c5:10:08:41:35:73:67:45:f1:3d:dc:07:df:42:1d:c6:5a:d6: 40:0f:6f:e4:72:7e:58:ff:19:56:b0:9d:b3:56:21:94:d4:2e: 7a:4d:f7:1a:98:da:33:ee:52:17:49:ba:3e:31:99:c0:f4:b1: 5c:dd:37:eb:6a:56:8e:a6:24:91:27:3d:24:f9:5d:9e:21:60: b6:90:0d:f1:aa:3f:46:ef:f6:21:c8:4c:d4:60:1b:a6:0f:e2: 3d:8d:67:e2:5f:13:d8:01:32:9d:8d:05:da:7d:a6:e5:67:b7: 6a:06:eb:8b:77:2c:5b:54:0e:7f:b8:8a:66:c1:1f:2a:ef:e7: 80:03:c8:ef:35:5f:57:c1:65:47:16:35:7b:0d:65:72:05:6c: 80:8e:13:85:a5:00:c5:c0:19:e3:71:57:ae:24:e7:22:45:02: 49:b8:cd:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUULK8GQkfXsZf6F7TTuaWP3i5+HAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA5MDAxMDA3WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDhlNDM5MWQ3YmYyNDYwOWM2ZjE5Y2VjZTMyYjQ2NzM0 NGMxZGVjNGI2M2UyOGViMDI5OTI3MDI1ZjdjNGMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC75cfrYA5kSJthnqFipXJ5N3AMdXuF6dV8epYntWc+3/IJ 9OjzgnbeD/Nhe1c7zNKw+f7JmZQrTeGUO0BOn8NQK4RWAnPNvZVPtOkX5/Zi3wkp QyB62D7coesxnmsZGutqLIGzH7mWptoJxUQni6ZjPjCuCWD+1eFPAGiw1l+hLzje agnjFV/CiNT/gfbEhX1FcUkbiCsJQ7hxrrBjJzhT2hWf34EVYPcqT0K52oFObuTd 6wiNJlDU0O6HYgxHEqCpPrrIVySEJ/pgT++fVtz7/Gt6e/DQXoMhpQZsovAVd0SR tbSfVO///z007htMkIHyN0qnlAcUloENIKynoPtNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU41I0Qqrl6yyALIdjHW/JLTBV0JUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FjOTYzZjFhLTU3ZmEtNDZhZi1iOWYwLWFhNzYwZGVkM2Y3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBADxkM+eA0HKLGtKhbVv+TqNH pCLkUcefZzFtiEo1q4EFLvg6WTxHtwk12h7cCgTx5icVSqFQI6mu9TPqscIavko0 wIrJ+hVN36Njh07doq9mswULcFSi+9heW8UQCEE1c2dF8T3cB99CHcZa1kAPb+Ry flj/GVawnbNWIZTULnpN9xqY2jPuUhdJuj4xmcD0sVzdN+tqVo6mJJEnPST5XZ4h YLaQDfGqP0bv9iHITNRgG6YP4j2NZ+JfE9gBMp2NBdp9puVnt2oG64t3LFtUDn+4 imbBHyrv54ADyO81X1fBZUcWNXsNZXIFbICOE4WlAMXAGeNxV64k5yJFAkm4zb4= -----END CERTIFICATE-----Generated at Tue May 12 22:17:31 2026 by rpki-client