$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa File: b2d641cc-0376-4d82-897a-3d5596d61679.roa (raw, json) Hash identifier: 4GniO3k/Y/kDJtMLab8UKnp3pFo7bqdfTJ/yVQ2rgGk= Subject key identifier: 17:78:7C:03:43:65:E8:A7:34:48:87:02:7B:48:BC:E1:6F:F1:76:8C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 175F76046242A4194B0962F2523653023F1E94D4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa Signing time: Fri 01 May 2026 00:00:38 +0000 ROA not before: Fri 01 May 2026 00:00:38 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5f:76:04:62:42:a4:19:4b:09:62:f2:52:36:53:02:3f:1e:94:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 1 00:00:38 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=9f447bfa06f7cb809fb1a331c5d2f1b94f0756a831ec124dca57ba08af71525c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:5b:5f:ca:1e:7a:07:70:63:79:3e:8f:57: 47:30:ed:a5:51:3e:a9:6b:77:7d:3c:2d:a0:17:90: 70:9a:29:b3:1b:a4:e7:e2:56:d6:9b:d6:5a:39:22: 52:7b:0c:57:a5:a4:f5:da:3b:0b:c1:66:05:5d:80: e7:7f:20:42:d3:76:e5:ca:79:28:6e:84:29:fb:26: e1:0c:a9:de:93:ff:41:e9:3f:aa:d3:60:70:16:19: 4a:9f:e9:75:a9:37:c0:e3:13:82:40:f9:5b:8c:6e: 7a:3a:e9:70:f6:bd:df:02:3b:7d:a2:51:7c:a8:c2: 73:ed:7c:46:65:17:da:4a:53:95:a6:90:6c:89:67: b5:c6:94:9e:90:8f:94:51:10:7e:14:95:75:2e:5b: ec:87:e6:31:97:5c:d4:89:64:b6:ec:2b:cb:de:af: 30:81:fa:25:d7:61:63:41:68:3b:45:3e:a8:30:fe: 31:ba:3c:fe:d3:0b:3a:b2:f9:8a:07:07:64:dc:f7: 37:c1:67:82:59:2e:8c:23:fb:e5:23:ef:7b:e0:ae: 71:29:98:03:78:f9:b2:93:f2:ed:36:a9:a6:bc:77: 02:cd:23:17:fe:0d:f9:60:23:de:b5:0a:5d:ca:76: b4:cd:ef:63:58:c5:a8:02:2c:69:42:64:ab:14:d0: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:7C:03:43:65:E8:A7:34:48:87:02:7B:48:BC:E1:6F:F1:76:8C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2d641cc-0376-4d82-897a-3d5596d61679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7101::/48 Signature Algorithm: sha256WithRSAEncryption 93:fc:d8:05:88:89:03:96:7f:c2:85:a0:18:69:c7:f3:85:74: 65:7b:de:b4:73:ae:42:2d:0d:b0:2a:1f:d5:ee:97:17:6a:ec: f3:12:cc:6e:40:94:dc:cd:a3:41:77:66:07:dc:1d:59:7f:03: 95:df:72:a5:0e:49:11:2b:47:2e:61:7d:81:dd:2b:65:29:0f: 58:e0:40:09:8c:20:8e:a3:3d:80:d6:f6:26:3d:cb:e1:c2:62: 2e:9b:7c:da:41:34:c6:c7:26:05:0f:9f:7e:1c:9c:7a:a2:de: 19:94:80:da:72:dd:55:de:75:5d:34:6e:8a:26:ac:23:73:df: 4d:47:e6:24:a6:ef:e7:66:b8:b3:2c:b4:22:66:9e:ba:30:b8: 3f:2b:26:b4:7a:53:d8:46:77:40:a3:59:0a:ef:8e:70:13:69: a1:8f:25:ff:17:2d:5b:0a:c0:d7:24:03:63:a3:ff:9d:aa:39: e6:6c:70:d1:f4:dd:22:c8:1e:45:dc:d0:f8:cc:a8:cc:2d:ab: aa:06:97:c7:ca:e5:08:24:f1:46:74:7b:11:86:46:34:cd:31: 14:bd:be:35:6b:7b:eb:8e:ab:26:94:2c:e0:63:f1:ce:c7:30: f0:9b:24:53:29:27:dc:ee:85:b8:1c:18:f3:28:db:96:44:d8: 35:e1:8f:4a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF192BGJCpBlLCWLyUjZTAj8elNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTAxMDAwMDM4WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjQ0N2JmYTA2ZjdjYjgwOWZiMWEzMzFjNWQyZjFiOTRm MDc1NmE4MzFlYzEyNGRjYTU3YmEwOGFmNzE1MjVjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3vltfyh56B3BjeT6PV0cw7aVRPqlrd308LaAXkHCaKbMb pOfiVtab1lo5IlJ7DFelpPXaOwvBZgVdgOd/IELTduXKeShuhCn7JuEMqd6T/0Hp P6rTYHAWGUqf6XWpN8DjE4JA+VuMbno66XD2vd8CO32iUXyownPtfEZlF9pKU5Wm kGyJZ7XGlJ6Qj5RREH4UlXUuW+yH5jGXXNSJZLbsK8verzCB+iXXYWNBaDtFPqgw /jG6PP7TCzqy+YoHB2Tc9zfBZ4JZLowj++Uj73vgrnEpmAN4+bKT8u02qaa8dwLN Ixf+DflgI961Cl3KdrTN72NYxagCLGlCZKsU0IMRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF3h8A0Nl6Kc0SIcCe0i84W/xdowwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IyZDY0MWNjLTAzNzYtNGQ4Mi04OTdhLTNkNTU5NmQ2MTY3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycQEwDQYJKoZIhvcNAQELBQADggEBAJP82AWIiQOWf8KFoBhpx/OF dGV73rRzrkItDbAqH9Xulxdq7PMSzG5AlNzNo0F3ZgfcHVl/A5XfcqUOSRErRy5h fYHdK2UpD1jgQAmMII6jPYDW9iY9y+HCYi6bfNpBNMbHJgUPn34cnHqi3hmUgNpy 3VXedV00boomrCNz301H5iSm7+dmuLMstCJmnrowuD8rJrR6U9hGd0CjWQrvjnAT aaGPJf8XLVsKwNckA2Oj/52qOeZscNH03SLIHkXc0PjMqMwtq6oGl8fK5Qgk8UZ0 exGGRjTNMRS9vjVre+uOqyaULOBj8c7HMPCbJFMpJ9zuhbgcGPMo25ZE2DXhj0o= -----END CERTIFICATE-----Generated at Wed May 13 01:24:50 2026 by rpki-client