$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da1b2384-258c-45dd-9488-d8d8d664ea28.roa File: da1b2384-258c-45dd-9488-d8d8d664ea28.roa (raw, json) Hash identifier: DDK6f4hj7LSsPdSRUcbNruOHkQmVN7WKBmi5odzTrwo= Subject key identifier: 91:14:09:97:56:CE:84:44:5B:8D:31:D8:DB:C4:1E:45:1B:43:3F:92 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 350CBC72FCFB3FCBE0FF8F153D65927C1D6E2005 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da1b2384-258c-45dd-9488-d8d8d664ea28.roa Signing time: Sat 09 May 2026 00:10:07 +0000 ROA not before: Sat 09 May 2026 00:10:07 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f3:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0c:bc:72:fc:fb:3f:cb:e0:ff:8f:15:3d:65:92:7c:1d:6e:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 9 00:10:07 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=f9e9d7317134740a5d148f43ffb2b1dfa8c247065710008ce6d6a9f7a0f8cce6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:4c:f8:ac:e2:a1:40:e1:2a:8f:f5:41:21: 4d:ef:a6:20:f0:89:2d:6b:0d:60:d6:77:bc:c1:53: 72:dd:15:6c:f8:75:73:80:55:a3:4c:3d:47:51:3d: 60:5b:2f:7f:6e:ec:8f:01:3e:cd:eb:6b:36:2e:32: 71:33:4f:3e:90:da:af:d5:29:19:74:e6:99:f0:b1: 1d:52:49:22:e1:12:54:b5:27:85:6e:17:e6:f3:26: 1e:bf:a4:38:51:a2:30:06:96:28:b1:fc:39:90:4f: dd:29:5f:8c:28:86:61:79:11:25:68:49:61:63:35: 76:46:4d:a6:26:b8:83:b7:46:82:95:df:cc:3b:54: 3f:38:9c:0b:77:2a:92:ea:f5:ae:cb:91:43:98:e0: f9:2a:e8:42:db:e6:1e:cf:75:6c:6f:7b:5e:3b:4a: 74:3c:68:ba:31:ed:9d:ea:7c:b8:a4:47:86:48:88: 9c:6f:38:02:22:16:64:2c:ee:13:75:8d:f3:cf:34: 19:d2:17:6c:b4:25:79:2d:8e:ed:11:39:25:b0:24: f7:ac:62:ed:bb:12:35:30:87:89:2d:17:76:ef:82: c7:7b:20:d7:91:97:17:07:b3:79:d4:7c:68:36:a4: 33:5c:e2:b0:91:d7:85:05:52:e6:73:90:69:dc:79: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:14:09:97:56:CE:84:44:5B:8D:31:D8:DB:C4:1E:45:1B:43:3F:92 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da1b2384-258c-45dd-9488-d8d8d664ea28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 54:98:e3:ba:79:ce:bd:76:0b:a5:e6:e6:e1:25:a4:00:a1:68: 7a:13:8b:a7:80:02:d5:c7:ab:e9:21:dd:0d:7c:a2:8e:f5:0a: 39:7b:ad:be:45:4c:40:f7:e1:cd:9f:e2:b4:e5:f7:a8:42:42: 62:8e:11:ac:4e:4a:dc:1a:b5:9e:92:b3:2f:b2:b3:4d:a4:37: 95:8a:1a:c8:fe:16:f2:dc:3a:ad:0c:4e:18:82:6d:d7:81:a7: c5:ba:7e:1b:9d:ab:6d:dc:86:dc:f8:35:3e:18:90:2e:d3:cd: b8:b5:94:74:a8:81:f0:93:2e:f2:d2:5a:b4:c8:c1:bb:6c:e0: 7a:3c:46:1a:fa:67:54:64:92:22:15:61:77:e6:e2:65:9d:f7: 60:df:f9:bb:1c:b0:02:2a:3c:1d:27:b2:79:ab:99:85:fe:d1: c9:ff:6a:cc:25:b6:f1:6c:5f:e8:cc:b3:60:6d:1d:7c:aa:f9: ef:1b:50:fc:74:e7:0d:d6:d9:e8:8f:73:c6:aa:41:3a:02:2c: c1:71:b7:2c:bd:ab:89:1a:43:98:63:0e:f1:75:1d:56:14:1d: 13:2a:37:a1:d2:6c:d1:76:d1:fd:79:86:b2:98:14:80:db:7e: 4d:dd:7d:ba:54:58:0f:b4:ba:1d:64:e8:b8:f3:4f:9d:ee:eb: 57:8f:f5:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNQy8cvz7P8vg/48VPWWSfB1uIAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA5MDAxMDA3WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWU5ZDczMTcxMzQ3NDBhNWQxNDhmNDNmZmIyYjFkZmE4 YzI0NzA2NTcxMDAwOGNlNmQ2YTlmN2EwZjhjY2U2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCavkz4rOKhQOEqj/VBIU3vpiDwiS1rDWDWd7zBU3LdFWz4 dXOAVaNMPUdRPWBbL39u7I8BPs3razYuMnEzTz6Q2q/VKRl05pnwsR1SSSLhElS1 J4VuF+bzJh6/pDhRojAGliix/DmQT90pX4wohmF5ESVoSWFjNXZGTaYmuIO3RoKV 38w7VD84nAt3KpLq9a7LkUOY4Pkq6ELb5h7PdWxve147SnQ8aLox7Z3qfLikR4ZI iJxvOAIiFmQs7hN1jfPPNBnSF2y0JXktju0ROSWwJPesYu27EjUwh4ktF3bvgsd7 INeRlxcHs3nUfGg2pDNc4rCR14UFUuZzkGnceUXJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkRQJl1bOhERbjTHY28QeRRtDP5IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhMWIyMzg0LTI1OGMtNDVkZC05NDg4LWQ4ZDhkNjY0ZWEyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAFSY47p5zr12C6Xm5uElpACh aHoTi6eAAtXHq+kh3Q18oo71Cjl7rb5FTED34c2f4rTl96hCQmKOEaxOStwatZ6S sy+ys02kN5WKGsj+FvLcOq0MThiCbdeBp8W6fhudq23chtz4NT4YkC7Tzbi1lHSo gfCTLvLSWrTIwbts4Ho8Rhr6Z1RkkiIVYXfm4mWd92Df+bscsAIqPB0nsnmrmYX+ 0cn/aswltvFsX+jMs2BtHXyq+e8bUPx05w3W2eiPc8aqQToCLMFxtyy9q4kaQ5hj DvF1HVYUHRMqN6HSbNF20f15hrKYFIDbfk3dfbpUWA+0uh1k6LjzT53u61eP9c4= -----END CERTIFICATE-----Generated at Tue May 12 23:48:18 2026 by rpki-client