$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/667791ab-1fb1-4af2-85b1-dc46f7e3c905.roa File: 667791ab-1fb1-4af2-85b1-dc46f7e3c905.roa (raw, json) Hash identifier: AcrUdZwgkyeUSLiI6fQGjLSfnUowJjmUbtI+Rht7/Cs= Subject key identifier: A5:42:3E:75:98:21:B1:C7:79:E5:EF:D8:9D:2A:B2:38:CC:47:F9:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 105D86E460E0B4B4463A17FCF6DFA34D6ECAB295 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/667791ab-1fb1-4af2-85b1-dc46f7e3c905.roa Signing time: Tue 05 May 2026 21:47:04 +0000 ROA not before: Tue 05 May 2026 21:47:04 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:701::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5d:86:e4:60:e0:b4:b4:46:3a:17:fc:f6:df:a3:4d:6e:ca:b2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 5 21:47:04 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=80e16c192abcce9a35dd051e5cd8f06315f9d3d4cf9e25ecad4470b3f122ff8a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:ae:92:81:db:b4:85:be:df:85:c5:e2:d9: f5:6d:2b:77:3f:8d:97:ce:5f:b5:ae:92:83:ef:97: e4:28:d1:27:23:47:2c:db:54:6a:e5:f1:5b:e2:ac: f4:3b:d2:b5:a0:39:f1:13:e1:8c:e2:2b:4e:75:7e: 69:50:bd:6c:81:a8:e8:3c:50:d2:e2:0a:59:de:79: 71:bf:6a:fe:ca:b3:2e:8b:ba:7b:f8:ee:49:cf:1b: 22:08:71:e5:ce:7d:50:68:f7:9a:10:e3:cd:da:7f: c6:00:6d:dc:0a:af:8a:c0:5a:91:07:e8:83:77:7c: 6c:16:0a:d9:1d:6f:26:b9:c7:43:20:83:ca:2b:93: ea:d4:bf:ea:bb:d0:c6:12:e2:4c:73:e3:28:08:d8: 34:69:e0:6c:62:97:4a:5e:06:b2:81:33:fa:e7:9a: 77:38:13:9b:33:83:29:e6:c1:2e:a9:e9:c8:54:69: 0a:3e:ec:a6:bd:cb:35:4a:a7:d3:8c:81:2f:58:6a: 51:e8:7b:4f:c3:21:8d:ab:3b:76:d8:43:5f:1d:43: d0:d4:b6:e9:18:9d:eb:80:8b:e5:7b:ca:ff:43:74: 0f:8f:a1:17:fb:16:e6:2f:6e:3b:6d:1a:1b:3d:87: e5:e5:dd:99:5d:ed:dd:23:58:91:9c:a6:2b:6e:03: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:3E:75:98:21:B1:C7:79:E5:EF:D8:9D:2A:B2:38:CC:47:F9:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/667791ab-1fb1-4af2-85b1-dc46f7e3c905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:701::/48 Signature Algorithm: sha256WithRSAEncryption 17:a7:d0:12:74:a3:82:2e:f6:ec:e0:a4:e8:d0:2e:ed:b0:79: f0:5c:de:0b:49:f3:c0:ab:7c:0d:23:c9:80:6a:35:ce:f4:6a: ec:32:f8:04:e4:fa:52:51:1f:45:57:4f:43:62:14:cc:e9:0f: 57:bd:1e:d6:57:49:a4:6a:b5:24:9d:33:75:9e:f8:58:00:ac: 34:6b:bf:26:a1:71:72:6b:44:25:01:ee:86:21:78:55:08:0d: e4:73:36:0a:64:49:a2:f8:61:8f:a6:53:c2:45:33:df:bd:ec: 22:3b:cd:f9:71:ad:f7:ec:af:2e:9e:11:9c:5f:ab:49:b3:48: 01:bd:8f:84:cc:4c:29:e6:54:05:68:7c:2a:ba:b9:6b:c5:fa: 32:1d:5a:7f:ad:ed:ea:17:aa:76:3a:fd:08:71:3c:af:50:38: 9c:b4:66:9d:9e:05:a9:9f:a7:12:a7:15:52:b8:82:a9:5a:3a: 91:c7:ac:07:61:df:65:cc:72:b7:52:61:66:05:9b:6c:d2:49: ec:3c:b3:f4:d5:1a:bc:cd:f1:01:57:44:06:b4:88:28:cc:33: a8:22:1b:cf:10:77:42:fc:10:c3:0e:cf:33:0d:88:fa:d4:ef: 75:4c:30:3a:0d:36:e3:61:c5:8f:8c:9c:21:d0:86:39:0e:bd: ca:23:c3:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEF2G5GDgtLRGOhf89t+jTW7KspUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA1MjE0NzA0WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGUxNmMxOTJhYmNjZTlhMzVkZDA1MWU1Y2Q4ZjA2MzE1 ZjlkM2Q0Y2Y5ZTI1ZWNhZDQ0NzBiM2YxMjJmZjhhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjSK6Sgdu0hb7fhcXi2fVtK3c/jZfOX7WukoPvl+Qo0Scj RyzbVGrl8VvirPQ70rWgOfET4YziK051fmlQvWyBqOg8UNLiClneeXG/av7Ksy6L unv47knPGyIIceXOfVBo95oQ483af8YAbdwKr4rAWpEH6IN3fGwWCtkdbya5x0Mg g8ork+rUv+q70MYS4kxz4ygI2DRp4Gxil0peBrKBM/rnmnc4E5szgynmwS6p6chU aQo+7Ka9yzVKp9OMgS9YalHoe0/DIY2rO3bYQ18dQ9DUtukYneuAi+V7yv9DdA+P oRf7FuYvbjttGhs9h+Xl3Zld7d0jWJGcpituA4BxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpUI+dZghscd55e/YnSqyOMxH+ZAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2Nzc5MWFiLTFmYjEtNGFmMi04NWIxLWRjNDZmN2UzYzkwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBwEwDQYJKoZIhvcNAQELBQADggEBABen0BJ0o4Iu9uzgpOjQLu2w efBc3gtJ88CrfA0jyYBqNc70auwy+ATk+lJRH0VXT0NiFMzpD1e9HtZXSaRqtSSd M3We+FgArDRrvyahcXJrRCUB7oYheFUIDeRzNgpkSaL4YY+mU8JFM9+97CI7zflx rffsry6eEZxfq0mzSAG9j4TMTCnmVAVofCq6uWvF+jIdWn+t7eoXqnY6/QhxPK9Q OJy0Zp2eBamfpxKnFVK4gqlaOpHHrAdh32XMcrdSYWYFm2zSSew8s/TVGrzN8QFX RAa0iCjMM6giG88Qd0L8EMMOzzMNiPrU73VMMDoNNuNhxY+MnCHQhjkOvcojw94= -----END CERTIFICATE-----Generated at Wed May 6 10:56:07 2026 by rpki-client