$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc42b39-895a-4ef3-bf8a-4a7f0ce7d1b6.roa File: 5cc42b39-895a-4ef3-bf8a-4a7f0ce7d1b6.roa (raw, json) Hash identifier: J1HJVXn5b0QR0hsQLUpg+Bc7gGcefdKgUzBeom87upI= Subject key identifier: CF:E8:9E:82:E4:AA:3E:9D:82:7A:62:C1:BB:78:C9:60:FF:2A:AA:70 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 374C45BB4EC2A0B542B4DB4D2AA4A87782F3AE60 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc42b39-895a-4ef3-bf8a-4a7f0ce7d1b6.roa Signing time: Tue 05 May 2026 22:19:01 +0000 ROA not before: Tue 05 May 2026 22:19:01 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4c:45:bb:4e:c2:a0:b5:42:b4:db:4d:2a:a4:a8:77:82:f3:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 5 22:19:01 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=654714d012942e8a1b7073f533166d6376db77410d0222a827a4e24587fe0436, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:78:9f:32:95:d3:45:c0:bd:53:02:f6:49: 76:5c:ea:f3:15:be:32:2c:62:f3:8e:fd:1a:00:70: 11:3b:aa:fe:94:0d:f4:f8:90:e9:4b:c3:17:61:ea: f1:8e:48:8f:8a:18:3e:49:9d:d6:07:a6:26:93:3b: eb:04:04:38:cd:56:f9:3a:72:f5:1b:69:65:27:a8: 17:0b:8b:11:7e:45:31:0c:d8:aa:eb:31:2f:c7:dc: d3:74:6e:7f:1c:04:db:0c:d8:e0:cd:99:81:7d:57: 45:73:88:03:e6:a1:80:60:17:a1:a0:86:47:ba:76: e8:04:2c:43:1a:71:a4:a6:ce:61:0c:e8:64:ba:4f: 77:09:5b:cc:2d:0f:3c:9f:47:20:e9:20:5b:74:e9: 53:0f:b7:9a:2f:40:72:a6:07:4f:f6:93:7c:8f:ac: d1:06:d9:1d:34:43:48:1a:b2:e2:68:c3:01:24:6a: 9e:28:a4:fb:d8:a6:39:52:a8:7b:94:8d:7d:6c:d6: 30:b4:51:c2:77:0c:5d:fc:51:43:fb:b4:76:c7:c9: 91:18:8e:90:ae:9d:75:e8:ee:11:06:99:44:16:3a: 68:7b:1d:dd:f9:29:32:1f:4f:62:56:06:04:78:4c: 01:a8:91:85:70:a8:11:e1:24:05:60:74:eb:f9:53: 4c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:9E:82:E4:AA:3E:9D:82:7A:62:C1:BB:78:C9:60:FF:2A:AA:70 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc42b39-895a-4ef3-bf8a-4a7f0ce7d1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:702::/48 Signature Algorithm: sha256WithRSAEncryption 96:14:9c:8b:5a:06:8e:1a:4a:dd:c8:2b:1c:2c:27:61:88:17: 71:d8:ba:d7:fc:c3:b4:f4:6e:ad:b6:55:7b:6a:06:95:ab:ec: b9:e8:a4:4f:94:7f:94:45:f2:c3:bf:82:5e:9c:a9:ae:0f:7a: c6:e4:39:bc:02:44:60:3a:84:ba:5c:48:c5:a2:21:74:7f:d4: 97:11:60:37:bc:5f:2a:66:22:2f:18:5c:95:ae:3d:49:ef:79: 3c:78:a3:9d:01:d5:64:5d:f7:f6:c7:af:25:16:41:23:f3:d4: bc:b2:8b:a4:d2:fa:40:5a:93:e4:24:2b:23:1e:92:d2:8e:b5: 04:fe:5e:2b:1c:49:73:fe:fd:72:7f:be:64:7b:d0:10:72:96: a6:0c:27:a6:57:93:92:60:92:73:89:58:5e:46:8e:42:a2:83: 0b:84:c2:7c:a2:44:60:12:96:12:d2:ea:d8:b9:aa:9e:bb:05: 52:42:9d:38:2d:a6:7e:fe:41:4f:06:57:ce:67:71:2c:8a:1d: 9b:cc:bf:59:30:75:87:ac:22:b4:52:4b:48:01:cf:18:b7:5b: b7:31:db:17:5f:96:08:9b:33:4a:bf:0d:c9:d2:2f:9f:54:7c: 10:7c:f4:5d:21:85:d6:65:09:69:96:db:b2:f9:23:a4:d3:60: 68:03:13:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN0xFu07CoLVCtNtNKqSod4LzrmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA1MjIxOTAxWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTQ3MTRkMDEyOTQyZThhMWI3MDczZjUzMzE2NmQ2Mzc2 ZGI3NzQxMGQwMjIyYTgyN2E0ZTI0NTg3ZmUwNDM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDn9nifMpXTRcC9UwL2SXZc6vMVvjIsYvOO/RoAcBE7qv6U DfT4kOlLwxdh6vGOSI+KGD5JndYHpiaTO+sEBDjNVvk6cvUbaWUnqBcLixF+RTEM 2KrrMS/H3NN0bn8cBNsM2ODNmYF9V0VziAPmoYBgF6Gghke6dugELEMacaSmzmEM 6GS6T3cJW8wtDzyfRyDpIFt06VMPt5ovQHKmB0/2k3yPrNEG2R00Q0gasuJowwEk ap4opPvYpjlSqHuUjX1s1jC0UcJ3DF38UUP7tHbHyZEYjpCunXXo7hEGmUQWOmh7 Hd35KTIfT2JWBgR4TAGokYVwqBHhJAVgdOv5U0wpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz+ieguSqPp2CemLBu3jJYP8qqnAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVjYzQyYjM5LTg5NWEtNGVmMy1iZjhhLTRhN2YwY2U3ZDFiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBwIwDQYJKoZIhvcNAQELBQADggEBAJYUnItaBo4aSt3IKxwsJ2GI F3HYutf8w7T0bq22VXtqBpWr7LnopE+Uf5RF8sO/gl6cqa4PesbkObwCRGA6hLpc SMWiIXR/1JcRYDe8XypmIi8YXJWuPUnveTx4o50B1WRd9/bHryUWQSPz1Lyyi6TS +kBak+QkKyMektKOtQT+XiscSXP+/XJ/vmR70BBylqYMJ6ZXk5JgknOJWF5GjkKi gwuEwnyiRGASlhLS6ti5qp67BVJCnTgtpn7+QU8GV85ncSyKHZvMv1kwdYesIrRS S0gBzxi3W7cx2xdflgibM0q/DcnSL59UfBB89F0hhdZlCWmW27L5I6TTYGgDE3o= -----END CERTIFICATE-----Generated at Wed May 6 10:56:09 2026 by rpki-client