$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa File: e40236b0-984f-43cb-abc3-52e70df4a8c8.roa (raw, json) Hash identifier: EoI7jObzmjo95CL9MEDetdkN4tKj1QbcGAB8xAz9bnU= Subject key identifier: 7B:E8:98:5B:36:49:51:F7:8C:B9:C5:FE:D9:15:D2:CF:67:26:5E:22 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3C2BC1BEA735FCB6FB255141B98E10775218BAE0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa Signing time: Mon 04 May 2026 15:10:38 +0000 ROA not before: Mon 04 May 2026 15:10:38 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2b:c1:be:a7:35:fc:b6:fb:25:51:41:b9:8e:10:77:52:18:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:38 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=c88059352c66ce2895cfbbbc6933774b11bfe1242ce169cbd3b340a45db7f857, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:1d:19:82:f7:3b:23:9c:8f:f9:52:64:1f: 28:0d:a0:f4:8e:d5:8e:5e:9e:82:99:8d:38:4a:98: ac:2e:b3:9a:9e:60:52:d2:c9:32:b7:46:f7:cd:27: 4e:2c:b6:3e:9f:e7:de:ed:97:57:bb:1f:22:6b:ef: 9c:c2:fb:06:95:69:71:08:42:dc:a5:51:a2:66:0f: ae:be:c8:58:fb:85:46:b7:61:9b:f5:8e:21:e7:4c: f9:a2:93:44:c6:3c:f8:3a:b3:32:8a:ac:26:bc:3b: 20:aa:5d:bb:bc:77:ba:f8:84:4c:12:ec:15:65:3c: 79:8e:97:31:6f:bc:7f:7d:fd:d3:dc:71:e3:64:a4: 9e:8d:b7:87:28:3e:d6:19:dd:7d:5f:f1:52:ce:5f: a6:23:0e:82:16:d7:67:97:3e:7a:d5:cd:cb:ad:69: 78:ef:64:ba:93:5e:af:49:bb:0c:34:4d:cb:76:b7: 99:07:d8:ed:24:f5:3e:9a:72:4a:d3:08:eb:ab:af: a3:54:8a:13:11:86:33:63:16:f1:97:ab:71:ee:01: 0e:36:1d:0a:9f:07:f9:62:e2:c4:d2:37:cb:1d:af: 27:f0:fa:df:6c:df:88:22:ca:1c:37:56:dd:5f:66: 24:d7:97:af:bc:17:82:3d:f8:aa:a2:74:8d:dc:d3: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E8:98:5B:36:49:51:F7:8C:B9:C5:FE:D9:15:D2:CF:67:26:5E:22 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610c::/48 Signature Algorithm: sha256WithRSAEncryption 41:83:a3:4e:0e:75:18:8a:35:08:6b:6a:75:c8:0e:68:46:ea: 70:99:ec:64:9d:e3:e3:64:17:5f:fe:ed:d4:38:42:8a:e5:f2: 22:e3:03:da:68:e9:ff:84:a0:4d:09:23:6f:f1:f5:c4:89:66: 62:62:06:62:48:1e:1f:0c:31:ef:70:17:5d:f3:36:37:12:79: 27:65:58:d5:06:29:c7:d3:29:4e:94:01:09:21:aa:92:9a:29: be:80:e7:a9:1a:ed:93:f2:8c:6e:f0:91:98:a0:49:6d:0b:f0: d8:22:9b:a1:2b:74:85:2f:7d:10:16:63:ed:93:a2:da:6e:5a: 8b:08:98:f4:ba:0d:b5:fb:83:77:1b:b5:5d:5f:f9:ec:bc:69: 14:7e:b6:f8:81:b7:f2:20:f1:c7:3f:8a:d2:a3:a2:50:e9:0e: 3f:b2:0c:fb:bc:90:13:53:1a:ce:ca:60:a0:05:e5:54:df:38: 81:93:d9:3c:76:8e:ea:df:b5:7d:89:c7:aa:41:71:9c:6d:e8: 86:11:57:5b:12:1d:9c:80:76:6c:53:f3:2a:6f:79:19:64:c7: ba:80:35:d1:50:f0:84:e6:c7:60:c6:41:5d:71:85:f5:0c:ac: 5b:0d:98:c8:fc:e5:c3:eb:56:8f:17:bf:e6:b6:c6:07:64:9c: d2:0b:a6:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPCvBvqc1/Lb7JVFBuY4Qd1IYuuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDM4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODgwNTkzNTJjNjZjZTI4OTVjZmJiYmM2OTMzNzc0YjEx YmZlMTI0MmNlMTY5Y2JkM2IzNDBhNDVkYjdmODU3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGbx0Zgvc7I5yP+VJkHygNoPSO1Y5enoKZjThKmKwus5qe YFLSyTK3RvfNJ04stj6f597tl1e7HyJr75zC+waVaXEIQtylUaJmD66+yFj7hUa3 YZv1jiHnTPmik0TGPPg6szKKrCa8OyCqXbu8d7r4hEwS7BVlPHmOlzFvvH99/dPc ceNkpJ6Nt4coPtYZ3X1f8VLOX6YjDoIW12eXPnrVzcutaXjvZLqTXq9Juww0Tct2 t5kH2O0k9T6ackrTCOurr6NUihMRhjNjFvGXq3HuAQ42HQqfB/li4sTSN8sdryfw +t9s34giyhw3Vt1fZiTXl6+8F4I9+KqidI3c0zH1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe+iYWzZJUfeMucX+2RXSz2cmXiIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U0MDIzNmIwLTk4NGYtNDNjYi1hYmMzLTUyZTcwZGY0YThjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQwwDQYJKoZIhvcNAQELBQADggEBAEGDo04OdRiKNQhranXIDmhG 6nCZ7GSd4+NkF1/+7dQ4Qorl8iLjA9po6f+EoE0JI2/x9cSJZmJiBmJIHh8MMe9w F13zNjcSeSdlWNUGKcfTKU6UAQkhqpKaKb6A56ka7ZPyjG7wkZigSW0L8Ngim6Er dIUvfRAWY+2TotpuWosImPS6DbX7g3cbtV1f+ey8aRR+tviBt/Ig8cc/itKjolDp Dj+yDPu8kBNTGs7KYKAF5VTfOIGT2Tx2jurftX2Jx6pBcZxt6IYRV1sSHZyAdmxT 8ypveRlkx7qANdFQ8ITmx2DGQV1xhfUMrFsNmMj85cPrVo8Xv+a2xgdknNILpvE= -----END CERTIFICATE-----Generated at Wed May 13 01:25:24 2026 by rpki-client