$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa File: 332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa (raw, json) Hash identifier: YOtY7p1rSuVNzMBSTacyzmGbYB8VQv3FCiQyz7f0Yeg= Subject key identifier: 36:D6:D6:BE:F8:5C:A8:FB:75:DA:10:1D:9E:10:E5:EB:AF:F1:C7:2F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 370E5B386A998309023BA254496DF0216583CDCE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa Signing time: Mon 20 Apr 2026 00:00:04 +0000 ROA not before: Mon 20 Apr 2026 00:00:04 +0000 ROA not after: Sun 19 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8a00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0e:5b:38:6a:99:83:09:02:3b:a2:54:49:6d:f0:21:65:83:cd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 20 00:00:04 2026 GMT Not After : Jul 19 23:59:59 2026 GMT Subject: serialNumber=65e7469df2179669102b0adc36bde18410427d0c1608bac3f185097efbb2cb7b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:48:e0:b1:35:1f:8f:5e:b7:11:0d:4a:25: 74:15:44:85:7d:92:0e:f3:0a:a2:78:2c:f7:7a:1c: 61:5f:12:37:12:5e:55:11:a2:b2:6c:db:46:55:f9: 84:84:c8:7e:a1:4f:78:1f:d2:21:bc:67:e5:36:d1: b6:ba:39:1a:53:06:01:c1:57:59:1d:74:7b:67:fe: fb:47:d1:31:c7:3a:8c:75:5d:2b:00:b7:19:63:61: a0:e8:2b:a5:1f:2f:7e:6f:b5:52:12:87:7e:f9:7b: e3:68:68:6b:3d:bd:84:e6:ef:ae:d2:ed:9a:34:78: bb:a4:cb:75:2e:07:d6:c2:49:4f:81:cc:39:e3:52: ae:4e:b5:be:1e:9d:38:ab:79:12:2e:b8:9a:b4:e0: 82:3d:b0:38:b4:59:48:02:6f:fb:30:22:22:2d:92: dc:9f:8b:7e:8c:54:6f:d0:76:37:89:4b:5b:d8:4a: 93:41:64:7f:de:fa:fc:15:38:23:8e:55:78:a0:9d: 59:6e:61:a8:b5:58:f7:5a:32:69:e6:2b:e8:46:ee: e9:db:6b:e4:06:e1:33:22:d5:69:21:32:19:0b:79: 05:c3:d8:40:81:a0:d6:80:88:2c:9e:e1:37:20:89: 57:16:5f:06:7c:9d:1e:30:08:87:3f:30:1b:9a:f7: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D6:D6:BE:F8:5C:A8:FB:75:DA:10:1D:9E:10:E5:EB:AF:F1:C7:2F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a00::/44 Signature Algorithm: sha256WithRSAEncryption a6:c7:4b:16:77:f4:1e:bf:b4:f5:3d:23:22:a3:02:c0:ca:35: f3:b0:c3:69:3d:0d:f0:8e:61:13:f4:eb:22:03:2e:3c:86:07: d8:7a:43:da:f5:4f:98:8b:11:0a:d8:b2:35:27:ec:c0:80:f0: 64:29:fd:d9:9e:63:7f:8b:83:e1:38:96:a6:9c:e0:2b:97:10: 89:a5:e9:ed:52:a6:19:c6:b1:c5:bb:6a:b3:01:81:51:c8:6e: e1:1b:60:90:28:a2:6b:93:f9:30:05:f5:f4:75:b7:e6:72:40: b7:97:e6:08:ba:45:d7:ff:ad:e3:5c:04:f5:63:8d:ac:c6:12: d3:d0:14:7c:13:92:1f:7e:eb:a7:f9:53:b6:aa:c5:0e:b2:5c: fb:c6:a5:61:65:9e:d3:aa:75:60:c1:ca:03:96:64:d1:3e:01: 7d:56:b3:ea:95:82:ef:85:f7:55:47:a7:cf:3e:79:1a:34:87: 70:6b:ea:90:e2:69:6e:a7:9b:80:03:85:a3:a8:43:e4:41:1d: 4e:a5:a8:dc:06:bb:59:ab:2d:74:9d:99:60:6b:27:01:b9:14: 74:cc:50:7b:30:38:2c:a5:7f:e6:4b:d4:d8:03:16:bb:4a:31: 27:e8:ba:0d:45:74:d3:28:a3:64:2a:af:ab:db:c0:c3:62:9b: aa:8b:61:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNw5bOGqZgwkCO6JUSW3wIWWDzc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDIwMDAwMDA0WhcNMjYwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWU3NDY5ZGYyMTc5NjY5MTAyYjBhZGMzNmJkZTE4NDEw NDI3ZDBjMTYwOGJhYzNmMTg1MDk3ZWZiYjJjYjdiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX3kjgsTUfj163EQ1KJXQVRIV9kg7zCqJ4LPd6HGFfEjcS XlURorJs20ZV+YSEyH6hT3gf0iG8Z+U20ba6ORpTBgHBV1kddHtn/vtH0THHOox1 XSsAtxljYaDoK6UfL35vtVISh375e+NoaGs9vYTm767S7Zo0eLuky3UuB9bCSU+B zDnjUq5Otb4enTireRIuuJq04II9sDi0WUgCb/swIiItktyfi36MVG/QdjeJS1vY SpNBZH/e+vwVOCOOVXignVluYai1WPdaMmnmK+hG7unba+QG4TMi1WkhMhkLeQXD 2ECBoNaAiCye4TcgiVcWXwZ8nR4wCIc/MBua99IpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNtbWvvhcqPt12hAdnhDl66/xxy8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMzMmIzMGQ5LWI2Y2QtNDkzMS05NGMyLWI4MjdiYTljN2Q3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxigAwDQYJKoZIhvcNAQELBQADggEBAKbHSxZ39B6/tPU9IyKjAsDK NfOww2k9DfCOYRP06yIDLjyGB9h6Q9r1T5iLEQrYsjUn7MCA8GQp/dmeY3+Lg+E4 lqac4CuXEIml6e1SphnGscW7arMBgVHIbuEbYJAoomuT+TAF9fR1t+ZyQLeX5gi6 Rdf/reNcBPVjjazGEtPQFHwTkh9+66f5U7aqxQ6yXPvGpWFlntOqdWDBygOWZNE+ AX1Ws+qVgu+F91VHp88+eRo0h3Br6pDiaW6nm4ADhaOoQ+RBHU6lqNwGu1mrLXSd mWBrJwG5FHTMUHswOCylf+ZL1NgDFrtKMSfoug1FdNMoo2Qqr6vbwMNim6qLYVI= -----END CERTIFICATE-----Generated at Sun May 10 11:28:48 2026 by rpki-client