$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa File: 7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa (raw, json) Hash identifier: y/T7xzhVRmY4Ztwhu9rJS6071s/h8ilrAm4UtQJopB8= Subject key identifier: 2A:7A:DF:CB:50:A4:7A:69:9D:2D:62:F8:64:FC:D0:D1:72:B8:4E:EB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3D0F26A6DFEC453933065ED4C24085BC10A2E6E9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa Signing time: Wed 18 Mar 2026 23:06:36 +0000 ROA not before: Wed 18 Mar 2026 23:06:36 +0000 ROA not after: Tue 16 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:10::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0f:26:a6:df:ec:45:39:33:06:5e:d4:c2:40:85:bc:10:a2:e6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 18 23:06:36 2026 GMT Not After : Jun 16 23:59:59 2026 GMT Subject: serialNumber=f1d74b4ab6dd0f452f15d9cfca5ca583cd2a24fb88eed0430edfbd4c60f086a2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:cd:0d:13:3d:cf:a7:72:76:02:dc:f9:4e: 43:92:44:2c:c0:33:41:02:cb:0f:c3:e0:a5:c7:85: 7d:83:40:5e:30:e3:75:90:8b:06:82:ec:b1:9d:03: 4e:06:77:68:b2:ed:44:02:43:0e:83:53:0f:71:2c: 86:6e:89:5e:0c:ef:ab:cc:f8:f1:b6:af:96:a9:5b: 7b:ac:0c:23:ba:08:7b:a6:c2:4b:42:92:1f:33:5c: e7:76:3d:9b:2e:4c:11:fb:6f:38:42:e6:04:00:d4: 84:81:94:54:9d:bc:24:d3:26:85:16:ae:ad:b4:e6: d9:54:5e:ab:7f:74:11:50:46:ff:b3:29:8c:81:d5: d0:82:14:de:bf:59:d5:bc:39:b3:13:ac:28:a2:e0: ee:d1:d1:5c:08:18:19:28:9c:8d:bd:50:74:0c:58: 80:d1:df:89:fb:af:e7:3d:3f:d9:a2:0d:3e:a3:65: 39:6c:ac:a4:80:0d:a6:4f:ae:e9:a5:28:0c:2b:69: 6d:e5:96:99:0c:98:dd:dd:73:90:59:53:29:ed:84: 47:15:15:58:c6:09:6e:87:4f:bf:da:84:2e:7c:71: 4a:8e:47:45:4e:34:c8:ca:32:a2:d8:ad:3c:cc:bb: 88:e9:31:d3:2c:a7:b1:94:0d:2e:4c:8c:69:e7:1a: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7A:DF:CB:50:A4:7A:69:9D:2D:62:F8:64:FC:D0:D1:72:B8:4E:EB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7f1ba43a-9bf6-48a1-9d17-c408bfd58c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:10::/47 Signature Algorithm: sha256WithRSAEncryption 1e:d1:8a:5e:06:7c:96:dc:f4:e6:c9:2c:e5:c9:b3:0f:2c:05: c5:7c:9b:f3:3d:9b:42:3b:6f:b2:a4:b8:a3:fb:a8:75:20:3a: 2c:ee:a5:12:d7:c3:30:ca:9a:7e:93:df:a9:a6:d9:af:82:a1: 93:d0:36:4d:38:70:2e:0a:80:c5:6f:4c:1b:a9:08:4c:99:61: 2f:ac:a8:44:cb:55:5a:c4:01:08:f4:80:bc:36:06:87:b4:76: 02:4c:71:b0:c8:29:d2:5f:27:1e:70:07:a7:1a:3b:ac:c7:e2: b0:2f:ae:30:b5:fc:fb:bd:52:8d:74:6d:1a:04:7b:57:cc:99: 1a:26:f6:31:6c:28:8e:40:bc:fc:e5:0c:d3:6c:e8:8f:15:46: e8:a0:bc:d8:2a:74:68:c1:41:c6:b0:43:cb:46:bc:08:0d:f9: 7b:9e:e2:fc:7e:9c:a1:59:2c:a3:ec:69:34:b6:3d:bf:a4:5d: 16:f4:40:5b:ca:66:68:85:e5:73:6e:10:18:fc:44:e6:b1:c6: 52:01:19:81:b3:d5:4e:d6:16:de:00:c9:3b:3b:8a:91:ff:2d: 3b:b7:22:ce:51:47:25:d0:10:34:74:9b:ef:99:f1:cf:b5:f9: 70:3b:62:f4:63:6a:5c:2d:85:bd:a9:38:2b:cb:84:b6:fd:67: 9d:26:06:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPQ8mpt/sRTkzBl7UwkCFvBCi5ukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzE4MjMwNjM2WhcNMjYwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWQ3NGI0YWI2ZGQwZjQ1MmYxNWQ5Y2ZjYTVjYTU4M2Nk MmEyNGZiODhlZWQwNDMwZWRmYmQ0YzYwZjA4NmEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCozM0NEz3Pp3J2Atz5TkOSRCzAM0ECyw/D4KXHhX2DQF4w 43WQiwaC7LGdA04Gd2iy7UQCQw6DUw9xLIZuiV4M76vM+PG2r5apW3usDCO6CHum wktCkh8zXOd2PZsuTBH7bzhC5gQA1ISBlFSdvCTTJoUWrq205tlUXqt/dBFQRv+z KYyB1dCCFN6/WdW8ObMTrCii4O7R0VwIGBkonI29UHQMWIDR34n7r+c9P9miDT6j ZTlsrKSADaZPrumlKAwraW3llpkMmN3dc5BZUynthEcVFVjGCW6HT7/ahC58cUqO R0VONMjKMqLYrTzMu4jpMdMsp7GUDS5MjGnnGqyZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKnrfy1CkemmdLWL4ZPzQ0XK4TuswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdmMWJhNDNhLTliZjYtNDhhMS05ZDE3LWM0MDhiZmQ1OGM2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDxABAwDQYJKoZIhvcNAQELBQADggEBAB7Ril4GfJbc9ObJLOXJsw8s BcV8m/M9m0I7b7KkuKP7qHUgOizupRLXwzDKmn6T36mm2a+CoZPQNk04cC4KgMVv TBupCEyZYS+sqETLVVrEAQj0gLw2Boe0dgJMcbDIKdJfJx5wB6caO6zH4rAvrjC1 /Pu9Uo10bRoEe1fMmRom9jFsKI5AvPzlDNNs6I8VRuigvNgqdGjBQcawQ8tGvAgN +Xue4vx+nKFZLKPsaTS2Pb+kXRb0QFvKZmiF5XNuEBj8ROaxxlIBGYGz1U7WFt4A yTs7ipH/LTu3Is5RRyXQEDR0m++Z8c+1+XA7YvRjalwthb2pOCvLhLb9Z50mBpA= -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:57 2026 by rpki-client