$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa File: 453c474f-8fec-4be3-b48b-6e0047148c82.roa (raw, json) Hash identifier: dY+gPhK1lMLJQUDo9AfV04h9+7GCWf968wbleJdp4+g= Subject key identifier: F8:C7:45:EE:DA:A6:3F:CD:00:11:FA:37:05:9D:CE:B3:35:BE:FC:49 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 09CC07326F57050F3BF4187F0EEAF599A2C7D43C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa Signing time: Mon 13 Apr 2026 20:21:55 +0000 ROA not before: Mon 13 Apr 2026 20:21:55 +0000 ROA not after: Sun 12 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6027::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:07:32:6f:57:05:0f:3b:f4:18:7f:0e:ea:f5:99:a2:c7:d4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 13 20:21:55 2026 GMT Not After : Jul 12 23:59:59 2026 GMT Subject: serialNumber=75287d01658d3e7017b7676fc4437ac5d3c9ae9c9afba10e7b01c40a171ec175, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:2a:e0:9c:4e:87:08:d2:e7:b2:22:21:da: ac:3a:8b:5c:bc:67:d6:6d:e9:ce:88:fa:33:ef:89: 41:15:e1:fd:b5:82:80:a1:a7:41:d2:f5:8a:97:93: 5c:e4:9c:26:d9:c9:8a:34:28:8b:e8:3f:55:f2:24: 68:d8:70:9e:8d:99:4a:d9:4c:63:6f:11:97:7b:b9: 6d:69:29:04:5c:f7:d8:b6:15:eb:8e:23:e6:7a:42: f8:a8:74:fd:d1:6d:4f:e7:3e:24:b4:cc:bb:25:1d: b7:90:62:7c:9a:db:ff:f5:42:df:43:fd:35:7b:b8: f7:c9:6e:3a:e9:2e:25:90:92:73:c6:c7:f1:e3:be: 49:e4:19:4a:a3:38:c5:74:bd:46:50:9f:b1:b9:30: 4b:61:e6:75:80:82:22:bd:5b:51:8b:0a:b1:ee:48: cf:db:6b:28:45:82:43:a5:7d:f3:0c:0b:db:91:da: e5:26:1f:70:c0:38:a3:cf:1c:41:86:42:3d:e3:00: 26:ba:c3:b0:55:c5:9f:a7:bf:2d:19:de:cc:d7:be: 1b:d1:c5:ae:b7:55:33:7c:40:be:de:9c:85:d2:bd: e3:3a:81:0d:a5:8d:0e:09:ff:96:ca:0e:24:fc:3a: 48:64:29:8c:3c:96:71:d6:a6:c7:11:51:ce:ab:14: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:45:EE:DA:A6:3F:CD:00:11:FA:37:05:9D:CE:B3:35:BE:FC:49 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/453c474f-8fec-4be3-b48b-6e0047148c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6027::/48 Signature Algorithm: sha256WithRSAEncryption 92:7c:41:7a:74:c3:de:49:9a:04:68:2c:db:3b:ae:ab:77:27: 0c:97:5a:3b:31:ac:4b:b4:a0:fc:fd:57:5e:31:eb:be:ac:21: 1f:d3:65:39:e4:be:2d:ac:26:7c:e0:d1:34:c3:cb:45:f1:71: f1:b9:71:7c:fd:a8:bd:10:27:26:c4:a0:cc:9f:98:1c:4c:66: 0d:b1:9d:53:46:40:0f:16:3d:d5:30:e9:29:04:23:1a:3f:73: 44:21:53:c1:4f:9f:b4:49:3a:db:7a:83:b0:74:d6:f4:2a:f8: 42:6f:98:1c:62:2e:33:60:24:6a:ab:f9:98:8d:e3:ce:6e:72: cd:71:7c:e9:80:91:07:79:f9:5a:3c:69:98:95:a4:ef:fb:c1: 60:53:54:98:72:ef:40:e2:38:30:0d:74:18:15:e5:d6:c5:c1: ef:15:e2:cc:a2:1e:fb:78:1a:48:92:c5:d4:a5:b8:a2:0b:20: 7e:39:a6:f5:be:a8:b3:26:4d:47:3f:4a:b0:f5:ba:d3:09:c7: c8:5c:21:01:44:ce:24:65:ce:05:29:01:ad:a3:5e:aa:e2:fb: 8b:1e:52:50:14:2a:e1:b0:11:d2:5e:b6:42:c5:b4:3b:70:8f: 77:ac:79:26:71:9d:88:a3:30:70:b2:13:4a:51:37:30:d0:a9: ab:f9:0a:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCcwHMm9XBQ879Bh/Dur1maLH1DwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDEzMjAyMTU1WhcNMjYwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTI4N2QwMTY1OGQzZTcwMTdiNzY3NmZjNDQzN2FjNWQz YzlhZTljOWFmYmExMGU3YjAxYzQwYTE3MWVjMTc1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRpyrgnE6HCNLnsiIh2qw6i1y8Z9Zt6c6I+jPviUEV4f21 goChp0HS9YqXk1zknCbZyYo0KIvoP1XyJGjYcJ6NmUrZTGNvEZd7uW1pKQRc99i2 FeuOI+Z6QviodP3RbU/nPiS0zLslHbeQYnya2//1Qt9D/TV7uPfJbjrpLiWQknPG x/HjvknkGUqjOMV0vUZQn7G5MEth5nWAgiK9W1GLCrHuSM/bayhFgkOlffMMC9uR 2uUmH3DAOKPPHEGGQj3jACa6w7BVxZ+nvy0Z3szXvhvRxa63VTN8QL7enIXSveM6 gQ2ljQ4J/5bKDiT8OkhkKYw8lnHWpscRUc6rFEDdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+MdF7tqmP80AEfo3BZ3OszW+/EkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1M2M0NzRmLThmZWMtNGJlMy1iNDhiLTZlMDA0NzE0OGM4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCcwDQYJKoZIhvcNAQELBQADggEBAJJ8QXp0w95JmgRoLNs7rqt3 JwyXWjsxrEu0oPz9V14x676sIR/TZTnkvi2sJnzg0TTDy0XxcfG5cXz9qL0QJybE oMyfmBxMZg2xnVNGQA8WPdUw6SkEIxo/c0QhU8FPn7RJOtt6g7B01vQq+EJvmBxi LjNgJGqr+ZiN485ucs1xfOmAkQd5+Vo8aZiVpO/7wWBTVJhy70DiODANdBgV5dbF we8V4syiHvt4GkiSxdSluKILIH45pvW+qLMmTUc/SrD1utMJx8hcIQFEziRlzgUp Aa2jXqri+4seUlAUKuGwEdJetkLFtDtwj3eseSZxnYijMHCyE0pRNzDQqav5CvY= -----END CERTIFICATE-----Generated at Tue Apr 14 13:10:21 2026 by rpki-client