$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa File: 5aab2439-03d3-439a-885f-e2f641886f3d.roa (raw, json) Hash identifier: O0fy5ggQjnHm7lULExrvp5+Mvrq8RuxMinIY6WBiDzM= Subject key identifier: EC:47:3D:90:4B:77:49:59:3B:07:EE:3D:A3:FE:08:7A:C6:C8:F0:17 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 071794CDC9AD30712C7226874BC1FE9D5187624E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa Signing time: Mon 04 May 2026 15:10:44 +0000 ROA not before: Mon 04 May 2026 15:10:44 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:17:94:cd:c9:ad:30:71:2c:72:26:87:4b:c1:fe:9d:51:87:62:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:44 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=19cc00e8717264f26b7b0254576e4e9e3b88e53312be3903537d5286c8ae6d34, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:61:f3:0c:6f:77:21:2c:e2:2c:b2:f7:b7: 37:0c:a2:4d:69:db:ea:b0:17:1a:d0:5c:68:16:1e: 6d:08:23:7a:1a:d6:d7:03:98:4e:75:91:e6:53:6a: e8:e4:b9:c6:7c:ba:a2:5c:80:d3:7b:07:07:71:28: c4:09:56:ba:40:14:79:1a:ea:df:ea:2d:e4:ff:22: 39:71:68:21:f9:03:ec:a6:4a:6f:ad:d6:04:c7:5e: eb:23:db:dd:5e:34:7f:74:43:3f:7b:ad:78:63:f4: 9c:1a:66:2e:f2:06:9d:4a:8e:70:2b:e8:56:c9:1c: bb:94:64:15:d2:6f:0e:30:55:19:c5:04:b3:13:3a: 8e:99:d5:b3:9c:2e:ed:1a:cc:0f:85:e9:a8:6a:73: cd:0e:7b:6c:9b:a5:7a:aa:0f:10:be:1f:ed:44:d2: 5f:f2:15:a4:f3:79:88:8e:91:82:83:19:38:76:7d: bd:78:94:13:73:58:ce:b8:ce:ca:92:78:e6:4d:0a: 4a:fa:9d:5c:73:23:01:a1:78:b7:4e:ec:c8:49:5f: 4e:19:69:3d:9f:34:6d:50:41:89:cc:d2:89:ee:02: d1:9f:a6:02:66:e7:b4:c6:28:20:79:8c:4c:07:a7: 67:8b:65:39:03:d0:d5:e2:20:1e:e4:32:d0:76:a2: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:47:3D:90:4B:77:49:59:3B:07:EE:3D:A3:FE:08:7A:C6:C8:F0:17 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f020::/44 Signature Algorithm: sha256WithRSAEncryption 47:e3:25:1f:e7:4b:cd:b5:3e:7a:24:05:1a:64:84:b9:4d:a0: ce:c3:21:37:ca:c9:b7:c9:af:80:36:d4:13:e2:f7:58:be:56: a0:b3:57:73:32:fb:fb:db:8d:98:fd:8f:a5:5b:f2:b1:15:02: f7:98:5d:82:c1:85:bc:8a:54:12:f8:7f:c1:b2:fe:17:09:ce: 65:09:95:cb:85:7b:a4:55:99:8b:de:53:9d:c5:ac:e4:bc:7e: f1:3d:d7:71:27:1d:33:f4:6b:54:66:0c:c1:a8:46:fc:d3:95: 55:d5:b9:c7:fb:eb:bd:1e:de:2a:07:a5:10:bd:03:71:80:0d: dd:9f:21:e4:a5:69:b1:ed:f5:8f:b1:96:f9:16:2b:c2:aa:40: c0:77:50:4d:df:a0:66:d8:c1:2b:f4:95:fc:85:3b:e2:36:e5: bb:83:3b:05:6a:78:a5:80:f4:40:f6:38:8f:9d:14:43:51:9f: 01:06:58:61:c5:0b:46:f3:c3:a7:fb:0e:64:a2:f6:40:95:d6: 1d:b4:eb:1c:b7:c5:b9:06:4c:bd:a8:65:d5:a6:7f:cd:01:52: 46:e3:83:a5:93:bb:fa:da:76:3c:9a:47:f4:29:5e:4d:9b:c4: 1f:8e:c7:6f:14:16:bc:b0:a1:e7:f3:27:9c:6d:a1:8b:80:36: 52:da:e7:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBxeUzcmtMHEsciaHS8H+nVGHYk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDQ0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWNjMDBlODcxNzI2NGYyNmI3YjAyNTQ1NzZlNGU5ZTNi ODhlNTMzMTJiZTM5MDM1MzdkNTI4NmM4YWU2ZDM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgImHzDG93ISziLLL3tzcMok1p2+qwFxrQXGgWHm0II3oa 1tcDmE51keZTaujkucZ8uqJcgNN7BwdxKMQJVrpAFHka6t/qLeT/IjlxaCH5A+ym Sm+t1gTHXusj291eNH90Qz97rXhj9JwaZi7yBp1KjnAr6FbJHLuUZBXSbw4wVRnF BLMTOo6Z1bOcLu0azA+F6ahqc80Oe2ybpXqqDxC+H+1E0l/yFaTzeYiOkYKDGTh2 fb14lBNzWM64zsqSeOZNCkr6nVxzIwGheLdO7MhJX04ZaT2fNG1QQYnM0onuAtGf pgJm57TGKCB5jEwHp2eLZTkD0NXiIB7kMtB2okIxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7Ec9kEt3SVk7B+49o/4IesbI8BcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhYWIyNDM5LTAzZDMtNDM5YS04ODVmLWUyZjY0MTg4NmYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78CAwDQYJKoZIhvcNAQELBQADggEBAEfjJR/nS821PnokBRpkhLlN oM7DITfKybfJr4A21BPi91i+VqCzV3My+/vbjZj9j6Vb8rEVAveYXYLBhbyKVBL4 f8Gy/hcJzmUJlcuFe6RVmYveU53FrOS8fvE913EnHTP0a1RmDMGoRvzTlVXVucf7 670e3ioHpRC9A3GADd2fIeSlabHt9Y+xlvkWK8KqQMB3UE3foGbYwSv0lfyFO+I2 5buDOwVqeKWA9ED2OI+dFENRnwEGWGHFC0bzw6f7DmSi9kCV1h206xy3xbkGTL2o ZdWmf80BUkbjg6WTu/radjyaR/QpXk2bxB+Ox28UFrywoefzJ5xtoYuANlLa54M= -----END CERTIFICATE-----Generated at Sun May 10 11:27:46 2026 by rpki-client