$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/76129cb5-d6ba-4b82-b358-be40f13bc1b0.roa File: 76129cb5-d6ba-4b82-b358-be40f13bc1b0.roa (raw, json) Hash identifier: 7Fd0eWsAgfo7qp3Qmv0WxtG2Ngec2+jPE218dgnRLl8= Subject key identifier: 85:07:2C:0B:92:46:7A:33:47:F0:69:BE:A4:5D:A2:9C:C3:24:B5:79 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 747A666CB15D3046571EF2642FA96DB905F333D8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/76129cb5-d6ba-4b82-b358-be40f13bc1b0.roa Signing time: Mon 13 Apr 2026 20:21:53 +0000 ROA not before: Mon 13 Apr 2026 20:21:53 +0000 ROA not after: Sun 12 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7a:66:6c:b1:5d:30:46:57:1e:f2:64:2f:a9:6d:b9:05:f3:33:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 13 20:21:53 2026 GMT Not After : Jul 12 23:59:59 2026 GMT Subject: serialNumber=29ac09805ecd3b01e16e9b7b0401c0fc276f821c3b7ca52961d79e06a03a7d1b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:02:ca:33:e6:78:51:29:43:17:fa:71:a2: 83:63:03:f0:3b:d5:22:29:05:78:81:a9:2c:ac:87: 17:14:b8:09:24:00:b3:c2:21:2c:b7:a2:9f:cd:3c: 0d:7d:aa:3c:ec:b2:87:53:1f:1d:87:1f:7d:5f:da: fc:c6:10:88:24:3b:d7:b1:41:20:93:bf:d2:73:f2: 2f:0e:b0:86:46:c9:07:2b:12:72:7b:4e:0a:a1:fc: 7c:e7:30:64:c0:a3:23:01:fa:db:b5:54:b2:21:65: 50:d2:3c:58:90:37:08:46:23:77:c6:2b:0d:ba:1e: 14:6e:b6:73:e9:f5:1c:ad:f7:c7:15:b4:71:08:bc: 3e:1f:be:0d:46:33:0b:13:16:da:fc:fb:22:99:37: 1c:f8:f2:0e:e8:e2:36:a1:8d:b1:8e:2d:c2:f0:a6: 64:c6:dc:f5:1b:85:8a:ab:a6:cd:fa:ea:30:c9:59: 7f:d0:de:cb:a0:49:55:d5:54:f9:08:87:91:48:76: c1:83:37:84:ab:c6:05:b3:11:89:5e:0f:70:3f:3f: c8:ff:0a:15:28:95:3d:8d:4e:3b:6f:1a:2c:47:ae: 42:1d:84:33:7f:5b:c0:72:41:2c:fc:9a:3b:60:30: e0:77:39:07:a1:01:f8:5d:6d:ce:72:20:0e:84:c9: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:07:2C:0B:92:46:7A:33:47:F0:69:BE:A4:5D:A2:9C:C3:24:B5:79 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/76129cb5-d6ba-4b82-b358-be40f13bc1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6024::/48 Signature Algorithm: sha256WithRSAEncryption a5:07:c0:f6:57:eb:a8:e0:c0:90:b8:29:a5:1b:2f:35:07:24: 06:b3:f2:36:aa:14:d5:6e:93:4f:54:5a:93:6a:3a:c8:81:da: fc:6b:c4:54:9b:e0:2d:c5:3d:2f:70:20:a0:44:0f:96:b0:4e: 59:b7:31:86:8d:95:73:f6:5e:5b:27:ab:0c:d4:e6:15:1b:08: 3f:50:e5:67:a7:bf:f9:f8:44:c4:37:1d:6c:7f:b4:0b:98:1d: 5b:94:9a:7a:15:d7:89:77:54:ef:6b:76:2c:60:59:b8:62:9e: 1a:e0:6a:9a:09:79:fb:2c:14:44:74:00:a7:6e:25:4c:c2:3c: 75:dc:dc:d8:fe:01:0a:ac:39:1f:c1:e4:3f:b6:50:ed:b8:a8: ce:2c:85:bf:21:61:a6:a1:c5:41:27:e3:7d:e1:c7:9e:78:db: 50:e1:a7:64:89:b8:2a:54:49:fc:23:53:c8:ed:c4:87:36:63: e6:de:3f:36:70:dd:1c:cb:d7:a3:cd:47:1e:79:df:89:1a:99: db:41:30:7c:b9:a8:e6:e3:6e:e3:fd:df:df:f8:b2:07:ec:0e: c9:21:47:c1:e4:01:14:ed:c2:76:82:bf:60:3c:e8:d4:01:b2: 89:cd:f3:21:bf:59:dd:15:45:11:e1:65:3a:f0:7a:41:ec:9c: 15:a4:05:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdHpmbLFdMEZXHvJkL6ltuQXzM9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDEzMjAyMTUzWhcNMjYwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWFjMDk4MDVlY2QzYjAxZTE2ZTliN2IwNDAxYzBmYzI3 NmY4MjFjM2I3Y2E1Mjk2MWQ3OWUwNmEwM2E3ZDFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCijQLKM+Z4USlDF/pxooNjA/A71SIpBXiBqSyshxcUuAkk ALPCISy3op/NPA19qjzssodTHx2HH31f2vzGEIgkO9exQSCTv9Jz8i8OsIZGyQcr EnJ7Tgqh/HznMGTAoyMB+tu1VLIhZVDSPFiQNwhGI3fGKw26HhRutnPp9Ryt98cV tHEIvD4fvg1GMwsTFtr8+yKZNxz48g7o4jahjbGOLcLwpmTG3PUbhYqrps366jDJ WX/Q3sugSVXVVPkIh5FIdsGDN4SrxgWzEYleD3A/P8j/ChUolT2NTjtvGixHrkId hDN/W8ByQSz8mjtgMOB3OQehAfhdbc5yIA6EyULDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhQcsC5JGejNH8Gm+pF2inMMktXkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc2MTI5Y2I1LWQ2YmEtNGI4Mi1iMzU4LWJlNDBmMTNiYzFiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYCQwDQYJKoZIhvcNAQELBQADggEBAKUHwPZX66jgwJC4KaUbLzUH JAaz8jaqFNVuk09UWpNqOsiB2vxrxFSb4C3FPS9wIKBED5awTlm3MYaNlXP2Xlsn qwzU5hUbCD9Q5Wenv/n4RMQ3HWx/tAuYHVuUmnoV14l3VO9rdixgWbhinhrgapoJ efssFER0AKduJUzCPHXc3Nj+AQqsOR/B5D+2UO24qM4shb8hYaahxUEn433hx554 21Dhp2SJuCpUSfwjU8jtxIc2Y+bePzZw3RzL16PNRx5534kamdtBMHy5qObjbuP9 39/4sgfsDskhR8HkARTtwnaCv2A86NQBsonN8yG/Wd0VRRHhZTrwekHsnBWkBeY= -----END CERTIFICATE-----Generated at Tue Apr 14 13:07:20 2026 by rpki-client