$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa File: c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa (raw, json) Hash identifier: tHWbA259tgulkERiFm4pi3XWu8P1nkGb8PSrtbpCTQM= Subject key identifier: D1:52:89:3B:63:6F:38:62:DC:15:95:46:D2:B9:B6:AF:D8:6F:76:B9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 069A4259A16856320AA02252B0B7A2D0C2B2173A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa Signing time: Fri 01 May 2026 00:00:40 +0000 ROA not before: Fri 01 May 2026 00:00:40 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9a:42:59:a1:68:56:32:0a:a0:22:52:b0:b7:a2:d0:c2:b2:17:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 1 00:00:40 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=a8b9399d184758e6040f0d0e42b9cda0014f174fc2cd7a923536590097fb1e3f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:bb:77:6f:27:13:b0:c4:1e:b1:e0:8f:c3: 0a:bf:38:06:0e:d5:2b:aa:a7:04:7b:fb:50:4b:39: e0:e4:88:6e:ca:8b:af:1b:40:c1:3c:40:9c:5f:71: a9:15:8a:a7:63:ad:b6:e7:11:66:89:91:21:cc:49: ab:21:6f:64:07:44:5b:62:2c:e0:b2:b1:1f:50:48: 64:c8:7d:fb:f8:0e:db:ab:77:87:1f:9d:5f:40:4d: 59:3a:b2:86:a7:62:bc:22:4b:15:67:7b:2c:10:79: 39:3b:b0:b6:f1:08:07:f8:c6:5f:f3:f0:37:8a:b5: e5:ce:7f:20:26:65:ae:d5:f5:97:e6:0e:7c:17:3d: d0:a9:98:1e:51:85:90:22:e3:40:89:62:07:c7:b4: c7:56:a6:1b:db:7d:a7:07:ac:2f:8c:0b:e5:7f:f8: cf:42:61:c4:ac:f5:54:25:f1:47:9f:92:bc:a2:10: e1:2c:44:2f:8e:9f:7d:39:20:5b:14:16:a5:e9:8d: de:4b:57:30:e2:30:b1:28:be:5c:91:c9:9f:f7:56: 9b:89:e5:b3:f0:bf:d3:7b:ce:2a:85:df:e0:1d:18: 73:ff:c1:ab:5e:f2:6a:87:87:47:03:c1:b6:57:83: 5f:f2:41:1b:9b:48:a4:d3:c3:15:6c:1b:b8:a2:6b: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:52:89:3B:63:6F:38:62:DC:15:95:46:D2:B9:B6:AF:D8:6F:76:B9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 5d:65:8f:08:0e:4c:dc:b8:12:f6:4a:c2:7a:14:21:2d:ce:f5: be:2b:90:91:37:7a:57:6c:37:1f:e7:ff:b4:0d:72:ee:1e:c8: 22:6d:a4:04:83:ed:35:a8:93:c1:c3:1a:b8:23:5c:34:6f:8d: be:d1:88:de:8b:6f:96:4b:e4:9c:67:da:dc:7f:d1:00:6c:e5: b3:00:70:b2:85:0a:b9:e3:b6:71:52:f4:5b:df:31:73:20:2d: c0:51:20:bb:9d:0d:96:2f:68:17:33:90:7a:11:e1:a7:3f:dd: df:44:e5:99:18:2e:12:91:40:72:94:d3:8b:f5:d1:82:d5:48: 54:5d:b8:ff:2b:0b:33:65:40:b2:c4:63:cd:ad:69:c8:69:02: af:33:65:d1:6a:5c:98:29:10:1c:e0:0f:02:f7:fa:dd:9b:4e: b1:9b:cf:2c:2f:1d:58:c7:fd:96:01:31:b4:88:1d:20:17:29: e5:dc:3e:81:17:d0:ac:58:95:37:3c:54:cf:f7:5d:2c:64:cd: 7b:c8:32:b8:07:6a:b7:5a:5c:9e:71:df:ba:fa:98:76:d2:83: 32:16:5d:a8:d7:a6:2d:42:17:f1:54:bf:12:51:97:f4:6a:79: bf:45:ae:02:f2:29:07:26:f3:12:c9:0e:36:ff:dc:2a:f2:5e: f9:64:d5:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBppCWaFoVjIKoCJSsLei0MKyFzowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTAxMDAwMDQwWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGI5Mzk5ZDE4NDc1OGU2MDQwZjBkMGU0MmI5Y2RhMDAx NGYxNzRmYzJjZDdhOTIzNTM2NTkwMDk3ZmIxZTNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU+rt3bycTsMQeseCPwwq/OAYO1SuqpwR7+1BLOeDkiG7K i68bQME8QJxfcakViqdjrbbnEWaJkSHMSashb2QHRFtiLOCysR9QSGTIffv4Dtur d4cfnV9ATVk6soanYrwiSxVneywQeTk7sLbxCAf4xl/z8DeKteXOfyAmZa7V9Zfm DnwXPdCpmB5RhZAi40CJYgfHtMdWphvbfacHrC+MC+V/+M9CYcSs9VQl8Uefkryi EOEsRC+On305IFsUFqXpjd5LVzDiMLEovlyRyZ/3VpuJ5bPwv9N7ziqF3+AdGHP/ wate8mqHh0cDwbZXg1/yQRubSKTTwxVsG7iia2tVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0VKJO2NvOGLcFZVG0rm2r9hvdrkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0ZWIzNzE2LThmYTUtNGRkNS05MGQyLWU4ZjVmNmZiZTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQAwDQYJKoZIhvcNAQELBQADggEBAF1ljwgOTNy4EvZKwnoUIS3O 9b4rkJE3eldsNx/n/7QNcu4eyCJtpASD7TWok8HDGrgjXDRvjb7RiN6Lb5ZL5Jxn 2tx/0QBs5bMAcLKFCrnjtnFS9FvfMXMgLcBRILudDZYvaBczkHoR4ac/3d9E5ZkY LhKRQHKU04v10YLVSFRduP8rCzNlQLLEY82tachpAq8zZdFqXJgpEBzgDwL3+t2b TrGbzywvHVjH/ZYBMbSIHSAXKeXcPoEX0KxYlTc8VM/3XSxkzXvIMrgHardaXJ5x 37r6mHbSgzIWXajXpi1CF/FUvxJRl/Rqeb9FrgLyKQcm8xLJDjb/3CryXvlk1SU= -----END CERTIFICATE-----Generated at Tue May 12 22:37:19 2026 by rpki-client