$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa File: d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa (raw, json) Hash identifier: lek5I/OYKl9U6M2pQpbbD+N0lX+6kMFBhDsfwSb1D60= Subject key identifier: 70:6C:38:B6:60:BF:63:AA:37:19:2F:36:1B:2D:99:AC:CB:E9:E1:E3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52A1E87FDF05ED1D922AC201FC4D5B0006FFCA19 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa Signing time: Mon 04 May 2026 15:00:06 +0000 ROA not before: Mon 04 May 2026 15:00:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a1:e8:7f:df:05:ed:1d:92:2a:c2:01:fc:4d:5b:00:06:ff:ca:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:00:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=ad879ca3350c3e867f73906ebf66a488a6095bec816ca52ddd1cc31fe315c99f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:73:3a:9e:4a:22:84:24:2a:0d:e5:2f:36: 29:e0:34:a2:15:e3:3e:19:70:ef:e8:7e:f0:30:1d: 71:45:3e:11:3a:b2:1c:8f:ac:fc:92:f3:4e:ad:aa: df:23:6f:5a:e2:0b:95:8f:73:8c:b3:5b:85:08:03: 6c:25:89:e8:da:87:65:98:da:bc:33:e2:05:11:e1: 77:7e:90:1d:c7:93:0a:18:b5:38:2a:ea:53:bf:d5: cc:29:99:2c:5e:3a:31:b1:65:2d:9f:c5:0d:ed:c7: 3f:a4:98:81:19:b5:a0:13:7d:b1:a5:5b:e5:b9:b5: 6f:c3:94:fe:66:dc:b3:f7:42:37:ae:01:17:4c:ba: 2e:5b:4d:5d:62:b2:d2:af:34:59:b3:51:c3:ef:49: 4a:25:b3:6f:b5:3c:f4:fb:9e:56:76:0e:f9:21:12: 4a:ad:d6:b5:19:6e:74:b7:57:30:21:1b:d0:dc:a7: 40:8f:7b:5e:56:b5:fd:24:b3:3c:47:72:e7:a4:14: 3c:30:e5:ee:f3:cc:9b:dd:4d:19:47:86:d6:5f:ab: 27:dd:7f:6a:d4:b2:91:5b:1c:fb:e3:a9:18:ce:41: 13:5b:a8:5e:ce:e8:a2:3f:97:92:8c:9d:a8:cf:e1: 6d:bc:8f:be:95:8f:2f:3c:7c:5a:c1:48:cd:f1:33: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:38:B6:60:BF:63:AA:37:19:2F:36:1B:2D:99:AC:CB:E9:E1:E3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 40:fe:7b:8d:48:76:d4:1f:b9:96:01:2b:c5:7c:31:ce:7f:5b: 5c:35:1f:63:85:a8:87:c5:ae:ab:09:9b:47:41:89:2e:7d:50: 96:27:fe:b9:6e:c2:5f:b3:1d:91:88:68:63:02:e1:f4:fc:de: 5a:14:9a:83:16:e7:86:00:98:72:36:0e:ce:47:37:a0:04:62: bc:a0:b7:ef:94:89:52:6c:98:cc:a3:67:fb:73:29:f4:e2:5d: f2:35:3c:19:bd:d1:bf:0a:a1:61:8d:21:c8:cb:d8:0e:be:10: 7e:d5:cc:9a:d7:86:5e:44:a2:cd:17:a6:a5:a5:1f:eb:60:a0: 7a:51:d0:c3:d0:b4:98:73:0a:f2:d5:4d:85:d5:21:36:4d:03: 2e:7b:1c:b6:59:30:cb:31:f7:3c:61:61:14:07:b3:8f:16:b7: 90:12:27:3d:c7:fc:f2:3d:3a:97:53:ca:52:b1:27:e6:e1:c4: ba:62:e3:41:92:bd:d7:14:da:16:01:a0:83:c9:06:84:7f:cb: db:c3:8e:db:fd:f5:e0:63:5b:bf:f3:fc:ab:f9:b7:1f:49:8e: 9b:12:2e:97:02:71:8a:ea:95:31:8f:3d:de:3a:1c:bc:69:d1: 7f:8d:2a:39:3b:7a:14:55:18:17:be:12:31:4e:b3:d2:83:d4: 24:cf:c4:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUqHof98F7R2SKsIB/E1bAAb/yhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUwMDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDg3OWNhMzM1MGMzZTg2N2Y3MzkwNmViZjY2YTQ4OGE2 MDk1YmVjODE2Y2E1MmRkZDFjYzMxZmUzMTVjOTlmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHTHM6nkoihCQqDeUvNingNKIV4z4ZcO/ofvAwHXFFPhE6 shyPrPyS806tqt8jb1riC5WPc4yzW4UIA2wliejah2WY2rwz4gUR4Xd+kB3HkwoY tTgq6lO/1cwpmSxeOjGxZS2fxQ3txz+kmIEZtaATfbGlW+W5tW/DlP5m3LP3Qjeu ARdMui5bTV1istKvNFmzUcPvSUols2+1PPT7nlZ2DvkhEkqt1rUZbnS3VzAhG9Dc p0CPe15Wtf0kszxHcuekFDww5e7zzJvdTRlHhtZfqyfdf2rUspFbHPvjqRjOQRNb qF7O6KI/l5KMnajP4W28j76Vjy88fFrBSM3xM4S5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcGw4tmC/Y6o3GS82Gy2ZrMvp4eMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyMWQwMWQyLWU0NzctNDBlMC1hOTUwLTVjMGNjNGM1MWNhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBAED+e41IdtQfuZYBK8V8Mc5/ W1w1H2OFqIfFrqsJm0dBiS59UJYn/rluwl+zHZGIaGMC4fT83loUmoMW54YAmHI2 Ds5HN6AEYrygt++UiVJsmMyjZ/tzKfTiXfI1PBm90b8KoWGNIcjL2A6+EH7VzJrX hl5Eos0XpqWlH+tgoHpR0MPQtJhzCvLVTYXVITZNAy57HLZZMMsx9zxhYRQHs48W t5ASJz3H/PI9OpdTylKxJ+bhxLpi40GSvdcU2hYBoIPJBoR/y9vDjtv99eBjW7/z /Kv5tx9JjpsSLpcCcYrqlTGPPd46HLxp0X+NKjk7ehRVGBe+EjFOs9KD1CTPxDE= -----END CERTIFICATE-----Generated at Wed May 13 01:25:30 2026 by rpki-client