$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa File: c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa (raw, json) Hash identifier: CDr/W+raZl9QneBApuV9G4qy4yYShhpWA0Q4D4v+6aM= Subject key identifier: E7:86:DB:00:38:2C:6F:8B:9E:C8:61:82:0C:AD:F2:77:89:A6:59:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 67ABC6740B6C07A97BB0B9B495D5E062720D39CA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa Signing time: Mon 04 May 2026 15:10:03 +0000 ROA not before: Mon 04 May 2026 15:10:03 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ab:c6:74:0b:6c:07:a9:7b:b0:b9:b4:95:d5:e0:62:72:0d:39:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:03 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=8c0ab79c8a07d8baaac858910bfa60accd8189379334da594f59c0601488385f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:62:62:76:98:5d:2e:99:3b:0c:96:39:d4: 2f:1a:35:32:3a:2c:f5:56:db:8c:44:bc:c3:98:f1: 70:91:e8:82:cc:6b:5c:30:ea:79:43:07:9f:f8:5f: 4a:f6:b0:f6:b0:f5:16:73:a0:99:0d:b1:3f:69:7b: 99:f1:f1:b0:d3:98:94:0b:b6:ed:c5:53:60:ea:6a: 56:4c:17:4c:07:e9:c1:15:96:4c:f6:ed:9f:0c:3a: 16:92:c2:49:59:e5:51:ba:9d:57:18:3b:09:2d:bc: 78:77:7c:80:4f:31:7a:5d:6b:bc:20:da:ab:23:6d: 28:28:12:d7:c6:51:7a:16:0b:6e:e4:01:68:87:1b: 97:41:cc:5c:9d:d5:35:01:9f:e4:0b:36:23:f7:ea: 95:01:15:38:20:22:82:e0:71:c8:42:80:cd:d4:ed: bc:54:36:e6:e6:bb:e7:67:18:c2:ff:88:c4:1f:4c: c5:be:af:ea:58:49:63:ee:6c:c0:33:56:d1:c6:ec: 54:08:8e:ea:60:49:2b:bc:ba:91:19:cd:07:bb:ee: 8b:3b:9c:31:1d:3d:9b:19:70:3d:89:67:96:cf:e8: bb:bd:15:ae:df:d8:15:6a:9a:5d:f6:5c:80:a9:a5: 84:8a:fe:1e:b0:a2:b4:a6:cb:aa:1a:7c:92:76:66: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:DB:00:38:2C:6F:8B:9E:C8:61:82:0C:AD:F2:77:89:A6:59:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610a::/48 Signature Algorithm: sha256WithRSAEncryption 0b:9e:d3:c5:c2:d7:97:31:ce:14:4e:aa:d5:78:fe:92:c6:16: 28:0c:41:2b:7d:b1:e1:7b:e5:03:a6:8c:0e:28:42:a2:cd:89: a2:66:c8:ec:19:0c:8b:1c:c1:9d:ba:c1:84:8d:31:5e:77:19: 46:45:03:86:20:49:e8:ff:7d:4c:d4:6f:0d:c7:e2:b0:a9:90: 3a:a8:98:03:69:61:53:52:94:1b:ea:af:61:9f:84:9b:59:1a: 81:5f:e5:58:51:b2:35:01:9b:a4:4b:0b:2a:6b:d2:b6:3c:f4: 5b:f7:fa:d4:0c:74:eb:7c:8c:c8:22:39:46:fa:3e:9c:66:fd: 7e:7d:cd:ff:1c:fe:b0:c3:58:df:f3:12:ba:d2:38:f6:9d:c5: e8:6a:c4:36:4d:b8:73:01:26:2e:f0:af:06:a8:43:b4:4d:35: dc:69:00:a1:ac:50:87:54:ad:66:81:8d:bc:23:b5:80:e7:4e: 18:d7:72:85:aa:02:91:bf:1f:d9:d9:54:e2:94:4b:b0:ae:b1: 2a:0b:ea:70:d1:42:2d:48:90:08:27:a8:9c:af:87:50:1d:bc: dd:11:22:1d:04:0b:4f:97:a1:27:6f:97:61:2e:8f:48:34:5a: 03:0c:be:d0:ad:29:e3:68:99:f2:b3:13:9f:05:0e:50:40:db: e5:35:f2:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ6vGdAtsB6l7sLm0ldXgYnINOcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDAzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzBhYjc5YzhhMDdkOGJhYWFjODU4OTEwYmZhNjBhY2Nk ODE4OTM3OTMzNGRhNTk0ZjU5YzA2MDE0ODgzODVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC13mJidphdLpk7DJY51C8aNTI6LPVW24xEvMOY8XCR6ILM a1ww6nlDB5/4X0r2sPaw9RZzoJkNsT9pe5nx8bDTmJQLtu3FU2DqalZMF0wH6cEV lkz27Z8MOhaSwklZ5VG6nVcYOwktvHh3fIBPMXpda7wg2qsjbSgoEtfGUXoWC27k AWiHG5dBzFyd1TUBn+QLNiP36pUBFTggIoLgcchCgM3U7bxUNubmu+dnGML/iMQf TMW+r+pYSWPubMAzVtHG7FQIjupgSSu8upEZzQe77os7nDEdPZsZcD2JZ5bP6Lu9 Fa7f2BVqml32XICppYSK/h6worSmy6oafJJ2ZiI9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU54bbADgsb4ueyGGCDK3yd4mmWQIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MxNGM0NGI2LTBjMjgtNDA5My1hZTVjLTdiNWJlODg2NTNhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQowDQYJKoZIhvcNAQELBQADggEBAAue08XC15cxzhROqtV4/pLG FigMQSt9seF75QOmjA4oQqLNiaJmyOwZDIscwZ26wYSNMV53GUZFA4YgSej/fUzU bw3H4rCpkDqomANpYVNSlBvqr2GfhJtZGoFf5VhRsjUBm6RLCypr0rY89Fv3+tQM dOt8jMgiOUb6Ppxm/X59zf8c/rDDWN/zErrSOPadxehqxDZNuHMBJi7wrwaoQ7RN NdxpAKGsUIdUrWaBjbwjtYDnThjXcoWqApG/H9nZVOKUS7CusSoL6nDRQi1IkAgn qJyvh1AdvN0RIh0EC0+XoSdvl2Euj0g0WgMMvtCtKeNomfKzE58FDlBA2+U18kg= -----END CERTIFICATE-----Generated at Wed May 13 01:45:40 2026 by rpki-client