$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa File: f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa (raw, json) Hash identifier: Ic6oycOR1aOBoUfIXwABS93D9ZaUrgDPIB6bNJcDtlc= Subject key identifier: 13:F5:D5:F2:83:FD:63:96:7B:8E:D0:C0:7D:C1:E0:90:CE:28:48:3A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2F5CB65C8E837065CEE2097E1B2B80648247F7D1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa Signing time: Sun 10 May 2026 00:00:06 +0000 ROA not before: Sun 10 May 2026 00:00:06 +0000 ROA not after: Sat 08 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5c:b6:5c:8e:83:70:65:ce:e2:09:7e:1b:2b:80:64:82:47:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 10 00:00:06 2026 GMT Not After : Aug 8 23:59:59 2026 GMT Subject: serialNumber=29996fb416f5d9cb87a668062d880a14f6eb84b98ae1fe2c68b4b95ce357ef6e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:00:f9:a9:2d:b0:20:13:e1:62:21:46:47: a9:1d:a5:88:8d:da:4c:cf:c8:30:d0:60:fa:1b:c4: 58:a0:19:13:6c:5d:a5:81:aa:51:58:d4:80:a1:63: 7f:ff:bd:d4:d3:8a:78:02:ad:08:2b:0e:49:02:1d: af:55:a5:4b:eb:99:e7:66:45:d0:18:26:73:74:74: 87:90:92:88:c1:a8:aa:75:69:0e:90:d6:58:3d:00: 6a:aa:02:22:2b:37:3f:2f:37:a0:f2:7d:ee:3e:66: e8:36:6a:5b:ae:74:45:03:d2:d5:64:3e:a3:e8:84: ce:90:a3:aa:23:20:87:ba:e9:ef:97:52:d9:b4:f6: c0:e5:ce:2e:5d:44:14:1c:3d:20:32:ae:06:10:7c: 55:22:84:f1:97:64:46:15:b2:6c:61:a1:54:7a:69: 27:2e:db:d2:e5:ac:6d:ed:47:b2:b6:64:39:c8:56: 81:c3:83:41:7a:79:cd:b1:1a:41:16:07:dd:6f:56: 54:ec:76:da:aa:4c:69:f9:db:88:f9:53:d2:06:36: bf:08:4c:8a:6c:8b:3e:ee:47:0a:50:80:90:01:8f: 0c:66:04:db:8b:79:a9:e3:68:e1:fc:a4:e8:26:aa: 8b:82:bf:b2:7f:a2:59:67:68:d4:44:be:f6:be:20: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:D5:F2:83:FD:63:96:7B:8E:D0:C0:7D:C1:E0:90:CE:28:48:3A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/47 Signature Algorithm: sha256WithRSAEncryption 76:73:f7:48:88:18:02:a9:54:e2:df:c1:92:30:62:f7:8f:65: ce:c7:28:b4:33:ae:d5:a9:94:22:19:5a:4f:1d:1d:a0:37:89: 64:77:00:0d:84:07:f8:cc:4c:b1:a9:fa:64:b3:5f:bd:25:91: 92:11:51:a1:60:9a:62:45:dd:ee:48:cd:7b:12:97:61:60:21: 2f:fd:6b:65:8c:30:56:f9:89:76:17:83:93:ac:b4:4b:d4:9c: 11:28:ea:a4:50:15:66:1f:fa:91:76:da:2e:88:98:08:90:51: 3a:e1:6f:dd:50:95:1d:85:82:ee:a6:5e:fe:50:ec:4f:ac:56: 07:50:88:aa:45:77:a0:d0:48:90:70:8c:82:63:77:a6:a9:f7: 24:4a:da:21:3d:61:97:89:c9:5b:92:41:ef:c1:03:48:de:c8: ef:ee:67:8a:ea:87:2d:43:f5:90:b1:48:de:98:c0:71:99:c4: dc:10:63:ca:b5:8e:98:f2:06:c1:2d:ef:e7:87:90:70:21:88: 62:a5:06:1d:5c:79:38:8b:e3:0e:65:ee:a4:d0:0f:92:ff:96: 8b:51:86:45:d2:de:00:b3:8a:af:44:e8:b5:bb:b0:ef:a8:4e: 44:14:03:10:c7:46:6b:aa:5a:cd:10:19:ba:35:48:9a:ec:27: de:eb:eb:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL1y2XI6DcGXO4gl+GyuAZIJH99EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTEwMDAwMDA2WhcNMjYwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTk5NmZiNDE2ZjVkOWNiODdhNjY4MDYyZDg4MGExNGY2 ZWI4NGI5OGFlMWZlMmM2OGI0Yjk1Y2UzNTdlZjZlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyXwD5qS2wIBPhYiFGR6kdpYiN2kzPyDDQYPobxFigGRNs XaWBqlFY1IChY3//vdTTingCrQgrDkkCHa9VpUvrmedmRdAYJnN0dIeQkojBqKp1 aQ6Q1lg9AGqqAiIrNz8vN6Dyfe4+Zug2aluudEUD0tVkPqPohM6Qo6ojIIe66e+X Utm09sDlzi5dRBQcPSAyrgYQfFUihPGXZEYVsmxhoVR6aScu29LlrG3tR7K2ZDnI VoHDg0F6ec2xGkEWB91vVlTsdtqqTGn524j5U9IGNr8ITIpsiz7uRwpQgJABjwxm BNuLeanjaOH8pOgmqouCv7J/ollnaNREvva+IMkPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUE/XV8oP9Y5Z7jtDAfcHgkM4oSDowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4MzcxNTI5LTVhNTItNGI5Yi1hZThiLWUwMGJhZTMwMzdhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAHZz90iIGAKpVOLfwZIwYveP Zc7HKLQzrtWplCIZWk8dHaA3iWR3AA2EB/jMTLGp+mSzX70lkZIRUaFgmmJF3e5I zXsSl2FgIS/9a2WMMFb5iXYXg5OstEvUnBEo6qRQFWYf+pF22i6ImAiQUTrhb91Q lR2Fgu6mXv5Q7E+sVgdQiKpFd6DQSJBwjIJjd6ap9yRK2iE9YZeJyVuSQe/BA0je yO/uZ4rqhy1D9ZCxSN6YwHGZxNwQY8q1jpjyBsEt7+eHkHAhiGKlBh1ceTiL4w5l 7qTQD5L/lotRhkXS3gCziq9E6LW7sO+oTkQUAxDHRmuqWs0QGbo1SJrsJ97r6+Y= -----END CERTIFICATE-----Generated at Wed May 13 01:25:19 2026 by rpki-client