$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa File: 6db6e667-efd2-4f80-8d79-37abec4f3e43.roa (raw, json) Hash identifier: EGtwqdDegiJfD9uzsN7AgOlQI1w6WRRu0//lUs2Lcbg= Subject key identifier: 7E:7B:49:FF:09:77:F5:B7:81:EC:42:C2:AB:AB:86:6C:8A:D3:98:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68B7C34FE376E17E32F24163C413D2BD31566D20 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa Signing time: Mon 20 Apr 2026 00:00:04 +0000 ROA not before: Mon 20 Apr 2026 00:00:04 +0000 ROA not after: Sun 19 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8a10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b7:c3:4f:e3:76:e1:7e:32:f2:41:63:c4:13:d2:bd:31:56:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 20 00:00:04 2026 GMT Not After : Jul 19 23:59:59 2026 GMT Subject: serialNumber=7a33f05dc4488049420e052ace1456faabd58a55fee11b3db26656736d8101ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f9:90:f6:29:55:a7:4b:c3:05:a2:b0:9b:8f: 54:fa:3b:1b:73:cd:ae:d8:81:c5:88:8f:b9:3b:3c: 4f:d3:e8:dd:54:87:34:11:d6:fa:e4:58:6b:8a:dd: 68:8a:7c:5b:63:35:9c:8c:e0:5d:90:26:e2:e6:14: 77:6b:64:7a:5f:0e:1e:90:d7:37:79:3f:fa:f9:69: d3:a9:66:85:7e:01:f7:6e:89:bd:36:6f:d9:2f:1e: e7:9e:53:38:64:10:c3:0d:09:7c:8a:a4:11:c0:3c: ca:6c:2b:6f:6f:e5:14:75:9c:bf:de:6c:42:f5:49: 36:b3:83:38:7e:a5:30:5d:63:7d:5d:80:61:88:45: ca:a4:35:55:0d:c2:36:80:24:bf:fb:ec:cf:7c:63: 71:28:e4:92:b4:b5:0c:99:9b:a9:f0:1b:a9:0c:b8: a5:ff:e4:88:29:a6:e6:83:23:36:0e:99:02:df:68: b3:cb:49:0d:82:95:77:5d:b1:7a:34:7f:1b:de:ff: 60:79:2a:ec:1d:ac:23:c0:7a:67:f1:79:5a:93:d1: b9:e4:52:b8:de:7d:8c:75:37:42:8e:a0:32:d0:62: 82:29:ac:1a:2c:4e:1f:b8:1c:98:76:32:20:7d:35: 5a:2e:86:c1:a9:ef:1d:63:43:ba:03:13:ad:8e:7b: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7B:49:FF:09:77:F5:B7:81:EC:42:C2:AB:AB:86:6C:8A:D3:98:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6db6e667-efd2-4f80-8d79-37abec4f3e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a10::/48 Signature Algorithm: sha256WithRSAEncryption 53:1c:6e:1d:8a:e0:1e:5b:8d:29:31:6a:c6:61:6e:a9:d2:77: 49:fe:26:d4:f3:92:ba:b4:9a:54:26:b2:09:aa:db:d1:a6:50: f1:30:f8:8d:74:ca:44:af:2c:eb:97:0e:74:e0:39:de:f9:ba: ed:32:41:59:4c:8e:b3:08:1c:35:87:23:6e:f5:2d:bb:2d:5c: ff:07:c7:7a:15:97:36:22:5c:6c:fa:b5:92:f3:76:bb:45:6b: 1f:d6:a4:f2:b1:40:bd:03:19:2f:28:9c:02:b2:09:12:08:92: c6:58:17:20:5d:85:aa:6a:56:82:bf:96:ac:8f:6f:23:71:27: b9:8e:c0:a5:ec:c5:13:ce:60:59:03:5b:40:3c:ec:e8:af:f0: 19:be:a1:56:28:ba:ca:6e:d6:4d:ff:12:d9:8a:91:9a:62:2e: bb:ff:1b:68:19:56:81:9f:69:7e:b3:87:00:88:86:2e:45:3e: 5b:e5:3a:3e:02:ec:2d:67:64:e4:39:00:4a:0e:df:fa:9c:8f: 02:5f:d8:70:c1:45:17:b4:9d:8e:8c:54:e9:46:e0:04:a6:13: 3f:36:3e:cd:0b:b3:60:0e:05:15:8e:1f:f4:5d:26:66:72:79: 67:44:74:84:5e:6a:2a:dd:5b:29:d7:c1:e9:1c:45:af:ad:61: 06:8d:16:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaLfDT+N24X4y8kFjxBPSvTFWbSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDIwMDAwMDA0WhcNMjYwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTMzZjA1ZGM0NDg4MDQ5NDIwZTA1MmFjZTE0NTZmYWFi ZDU4YTU1ZmVlMTFiM2RiMjY2NTY3MzZkODEwMWVlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv+ZD2KVWnS8MForCbj1T6Oxtzza7YgcWIj7k7PE/T6N1U hzQR1vrkWGuK3WiKfFtjNZyM4F2QJuLmFHdrZHpfDh6Q1zd5P/r5adOpZoV+Afdu ib02b9kvHueeUzhkEMMNCXyKpBHAPMpsK29v5RR1nL/ebEL1STazgzh+pTBdY31d gGGIRcqkNVUNwjaAJL/77M98Y3Eo5JK0tQyZm6nwG6kMuKX/5IgppuaDIzYOmQLf aLPLSQ2ClXddsXo0fxve/2B5KuwdrCPAemfxeVqT0bnkUrjefYx1N0KOoDLQYoIp rBosTh+4HJh2MiB9NVouhsGp7x1jQ7oDE62Oe9tDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfntJ/wl39beB7ELCq6uGbIrTmPcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkYjZlNjY3LWVmZDItNGY4MC04ZDc5LTM3YWJlYzRmM2U0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxihAwDQYJKoZIhvcNAQELBQADggEBAFMcbh2K4B5bjSkxasZhbqnS d0n+JtTzkrq0mlQmsgmq29GmUPEw+I10ykSvLOuXDnTgOd75uu0yQVlMjrMIHDWH I271LbstXP8Hx3oVlzYiXGz6tZLzdrtFax/WpPKxQL0DGS8onAKyCRIIksZYFyBd hapqVoK/lqyPbyNxJ7mOwKXsxRPOYFkDW0A87Oiv8Bm+oVYouspu1k3/EtmKkZpi Lrv/G2gZVoGfaX6zhwCIhi5FPlvlOj4C7C1nZOQ5AEoO3/qcjwJf2HDBRRe0nY6M VOlG4ASmEz82Ps0Ls2AOBRWOH/RdJmZyeWdEdIReairdWynXwekcRa+tYQaNFpA= -----END CERTIFICATE-----Generated at Sun May 10 11:27:12 2026 by rpki-client