$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa File: dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa (raw, json) Hash identifier: flLv9PApGbNGXguQmhusXgOSpdrS+vu5cq4qm/QSgU0= Subject key identifier: 4A:F7:A4:CC:45:C3:98:28:75:90:41:98:2E:44:BC:90:F3:80:CF:DA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6DE7272900C31F4B19CE6F8DB73E721B33A2F78D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa Signing time: Mon 04 May 2026 15:10:22 +0000 ROA not before: Mon 04 May 2026 15:10:22 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e7:27:29:00:c3:1f:4b:19:ce:6f:8d:b7:3e:72:1b:33:a2:f7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:22 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=c266c9b66f59492d52272435fcad9367ed605f3d95adc3d04d0ee5ddf3218968, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:84:58:be:9c:38:d9:7a:42:67:b1:c7:bd: db:b2:a0:f4:12:01:c1:34:78:87:b4:21:a7:93:9f: de:72:73:73:10:92:42:1b:09:86:cd:37:b5:22:35: 2b:b0:b1:94:98:3b:e1:c2:c5:04:d1:44:65:3b:ac: ff:d6:a9:d9:dd:43:e5:2a:ce:da:4c:78:7c:ee:c4: 3d:cf:b4:76:42:f3:28:4b:10:2e:0d:5d:bf:ba:42: db:eb:e8:3f:c9:43:0b:0f:81:fc:77:39:9f:20:7b: d5:37:06:c1:d4:62:89:c9:79:a5:72:24:04:fa:25: d7:f3:fd:30:0b:ed:e2:ce:4b:8b:21:5b:3a:8f:fa: 38:e4:6f:b0:f1:df:ed:ef:08:21:05:b7:37:89:29: 49:19:c1:ee:55:12:c2:45:38:4b:dc:e4:02:04:56: c2:de:17:39:9c:21:13:f9:3d:19:3c:cb:c2:6d:eb: fa:5e:21:3b:4b:14:0c:92:f9:4a:30:65:e0:86:6d: ce:fe:d1:d0:60:25:37:ed:b3:84:f8:17:d3:55:99: d0:c9:14:c2:cb:2e:6b:04:5b:f2:a4:73:32:66:e0: 69:1f:ae:05:bb:c4:a3:e5:4c:9f:11:09:f5:61:38: 1d:dd:d4:b9:36:31:73:f4:95:98:76:4a:29:a0:fd: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:A4:CC:45:C3:98:28:75:90:41:98:2E:44:BC:90:F3:80:CF:DA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6112::/48 Signature Algorithm: sha256WithRSAEncryption 01:0e:35:09:bf:7e:6b:a8:4c:d2:f4:62:d0:64:e7:80:c1:36: 8a:71:7a:a5:3c:39:12:04:48:8a:fc:0d:ef:d1:96:ba:47:d9: db:da:00:86:f1:d1:7e:5d:98:c0:35:a2:a9:db:3b:85:ed:29: 0c:d8:16:61:0e:3d:92:4b:cf:d9:3c:2f:ca:1a:ae:66:4b:20: 13:61:d2:84:7a:4f:14:18:e3:9b:a6:9c:4d:4e:dd:e9:e5:33: c3:80:61:55:fc:d7:bd:ab:72:b1:3a:10:bb:c7:9e:de:4d:40: be:7d:1f:29:b1:44:fa:80:82:ad:62:9b:e8:4e:b2:1b:e4:cc: d8:6f:45:97:bf:43:0c:78:6b:f1:f7:eb:5f:e9:cd:95:34:47: db:4b:2a:77:2c:9a:30:39:7c:af:a1:10:27:00:0d:73:65:6e: 5a:ea:8b:09:d5:c1:9c:ea:32:27:1a:9e:9b:84:20:02:e5:6a: 78:31:44:95:f7:dc:99:8d:de:cf:f5:ed:a1:5a:97:c3:48:b9: ca:5d:d7:3e:52:d8:a6:a0:38:e1:20:9e:6b:9d:ac:4b:f8:0b: c2:cb:e8:a4:1e:66:bf:5d:66:4c:80:fa:27:c1:7b:10:f4:5a: a2:af:03:54:e6:8f:45:08:63:20:e2:60:f4:6c:49:28:6d:ca: 32:7d:8d:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbecnKQDDH0sZzm+Ntz5yGzOi940wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDIyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjY2YzliNjZmNTk0OTJkNTIyNzI0MzVmY2FkOTM2N2Vk NjA1ZjNkOTVhZGMzZDA0ZDBlZTVkZGYzMjE4OTY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCad4RYvpw42XpCZ7HHvduyoPQSAcE0eIe0IaeTn95yc3MQ kkIbCYbNN7UiNSuwsZSYO+HCxQTRRGU7rP/WqdndQ+UqztpMeHzuxD3PtHZC8yhL EC4NXb+6Qtvr6D/JQwsPgfx3OZ8ge9U3BsHUYonJeaVyJAT6Jdfz/TAL7eLOS4sh WzqP+jjkb7Dx3+3vCCEFtzeJKUkZwe5VEsJFOEvc5AIEVsLeFzmcIRP5PRk8y8Jt 6/peITtLFAyS+UowZeCGbc7+0dBgJTfts4T4F9NVmdDJFMLLLmsEW/KkczJm4Gkf rgW7xKPlTJ8RCfVhOB3d1Lk2MXP0lZh2Simg/d6NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSvekzEXDmCh1kEGYLkS8kPOAz9owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhYzZhNWNhLTQ5OTEtNDcwNy05NjQ2LTVlZWVjZTdiMGJjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRIwDQYJKoZIhvcNAQELBQADggEBAAEONQm/fmuoTNL0YtBk54DB NopxeqU8ORIESIr8De/RlrpH2dvaAIbx0X5dmMA1oqnbO4XtKQzYFmEOPZJLz9k8 L8oarmZLIBNh0oR6TxQY45umnE1O3enlM8OAYVX8172rcrE6ELvHnt5NQL59Hymx RPqAgq1im+hOshvkzNhvRZe/Qwx4a/H361/pzZU0R9tLKncsmjA5fK+hECcADXNl blrqiwnVwZzqMicanpuEIALlangxRJX33JmN3s/17aFal8NIucpd1z5S2KagOOEg nmudrEv4C8LL6KQeZr9dZkyA+ifBexD0WqKvA1Tmj0UIYyDiYPRsSShtyjJ9jTE= -----END CERTIFICATE-----Generated at Wed May 13 01:24:51 2026 by rpki-client