$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa File: 14cb127f-8fa4-40c0-b06e-cd65866872dd.roa (raw, json) Hash identifier: o2R1KalsYO0w1aq3ipZBDJgop4moji8+v78mrRY0J7I= Subject key identifier: 26:E8:F2:E9:C3:95:C9:22:86:A4:F4:1C:42:BA:42:F0:38:26:F9:61 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5E2A94D1691DE0D8040D9639412AF924D5C50C5A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa Signing time: Fri 08 May 2026 16:47:17 +0000 ROA not before: Fri 08 May 2026 16:47:17 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2a:94:d1:69:1d:e0:d8:04:0d:96:39:41:2a:f9:24:d5:c5:0c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 8 16:47:17 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=bc4e55224c0646bc8b3542d1590b57a4110a1f844917745d396798e194121b86, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:86:d8:39:7c:a6:b9:28:18:78:e9:58:d6: af:91:41:28:b5:f2:42:eb:0e:93:01:9a:74:dd:18: e6:f5:72:d7:a8:c0:71:d8:24:6f:27:f1:1e:5e:76: ab:e2:69:1c:ca:9e:2b:f4:b6:f3:6b:32:9b:ad:19: 44:b6:a4:0d:88:95:f6:55:43:13:69:76:fe:9a:83: 08:24:72:51:c9:fc:85:3f:f8:7d:f5:89:7d:70:c8: d9:e7:28:e5:9e:75:13:ec:59:7f:b8:16:81:c5:1d: e3:d5:75:93:af:ed:9a:75:20:24:6c:5a:83:89:a7: db:bd:ad:e9:ad:75:0a:c4:95:bf:3f:c8:1b:43:2d: fb:67:63:ec:ea:1c:60:9f:3b:9e:56:ad:55:d3:a8: aa:4a:a0:62:9e:87:a4:17:59:39:80:3f:7f:38:e2: 8f:2f:5e:04:db:d7:3b:93:ef:4a:4a:2c:e3:17:01: 55:aa:ec:fb:0f:ad:90:c2:fa:cf:83:fe:ad:ec:72: 8a:1b:99:bc:2a:00:86:08:c6:e3:68:7b:61:f6:42: 82:22:c1:07:b6:81:8f:aa:e1:35:18:51:ba:46:ed: 20:eb:09:66:59:f8:32:81:55:a7:1d:55:35:f5:e0: dd:ec:96:d3:68:cf:be:50:95:9b:aa:66:05:51:72: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:F2:E9:C3:95:C9:22:86:A4:F4:1C:42:BA:42:F0:38:26:F9:61 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 6e:1e:bb:b5:8a:98:7e:6b:95:a4:02:2b:02:39:83:36:23:78: 5a:da:ea:12:49:f6:63:e6:61:9e:bb:94:d2:99:aa:1d:62:e9: e7:55:b2:c1:05:62:9d:27:7c:dc:15:7c:8c:ef:0a:c9:f1:c1: b6:da:c6:16:47:57:9b:1d:b9:80:57:36:b6:d4:f2:b7:cf:58: b2:08:df:54:d9:ae:0e:56:87:a6:36:e9:98:07:a1:67:e9:18: cf:01:83:5b:1f:63:78:3f:c4:0a:8f:a0:59:05:eb:a2:37:7a: 6c:fb:b2:55:0c:3b:74:29:a5:6f:4e:36:69:5c:66:13:93:09: 11:54:35:0f:16:4b:4b:24:4e:b0:6d:e2:de:93:3c:7c:24:b2: 83:4c:14:cb:54:c8:e1:62:e7:e3:28:77:2a:92:81:27:2d:a5: 61:13:cd:1f:fe:43:90:ea:27:0a:ba:66:1a:54:75:2d:90:2e: 83:8e:c6:92:f9:04:9f:aa:6d:3e:17:68:9f:58:54:f2:8c:99: 6a:4b:0d:e4:96:9b:63:1c:85:20:8e:ed:0e:93:91:c4:fd:a9: 5a:61:7c:04:be:8b:b9:90:46:0b:41:2c:ff:05:23:af:8e:4f: 70:52:8a:97:51:09:cd:7f:e6:bd:2e:5a:21:12:54:93:98:87: ea:e4:ae:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXiqU0Wkd4NgEDZY5QSr5JNXFDFowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA4MTY0NzE3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzRlNTUyMjRjMDY0NmJjOGIzNTQyZDE1OTBiNTdhNDEx MGExZjg0NDkxNzc0NWQzOTY3OThlMTk0MTIxYjg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC60IbYOXymuSgYeOlY1q+RQSi18kLrDpMBmnTdGOb1cteo wHHYJG8n8R5edqviaRzKniv0tvNrMputGUS2pA2IlfZVQxNpdv6agwgkclHJ/IU/ +H31iX1wyNnnKOWedRPsWX+4FoHFHePVdZOv7Zp1ICRsWoOJp9u9remtdQrElb8/ yBtDLftnY+zqHGCfO55WrVXTqKpKoGKeh6QXWTmAP3844o8vXgTb1zuT70pKLOMX AVWq7PsPrZDC+s+D/q3scoobmbwqAIYIxuNoe2H2QoIiwQe2gY+q4TUYUbpG7SDr CWZZ+DKBVacdVTX14N3sltNoz75QlZuqZgVRcrozAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJujy6cOVySKGpPQcQrpC8Dgm+WEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0Y2IxMjdmLThmYTQtNDBjMC1iMDZlLWNkNjU4NjY4NzJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEAbh67tYqYfmuVpAIrAjmDNiN4 WtrqEkn2Y+ZhnruU0pmqHWLp51WywQVinSd83BV8jO8KyfHBttrGFkdXmx25gFc2 ttTyt89YsgjfVNmuDlaHpjbpmAehZ+kYzwGDWx9jeD/ECo+gWQXrojd6bPuyVQw7 dCmlb042aVxmE5MJEVQ1DxZLSyROsG3i3pM8fCSyg0wUy1TI4WLn4yh3KpKBJy2l YRPNH/5DkOonCrpmGlR1LZAug47GkvkEn6ptPhdon1hU8oyZaksN5JabYxyFII7t DpORxP2pWmF8BL6LuZBGC0Es/wUjr45PcFKKl1EJzX/mvS5aIRJUk5iH6uSuTg== -----END CERTIFICATE-----Generated at Sun May 10 11:26:34 2026 by rpki-client