$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: rfpyOKvXRCxFR/m15vMcF7EnjLFLJjggqYD2DyqTZEc= Subject key identifier: 84:26:44:37:9C:94:3A:EF:2E:5B:8A:0E:41:78:B2:9A:DC:10:7E:34 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 45DDCE2C2CD0676B5756EF97D584814A6B6596B4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Tue 19 May 2026 04:20:10 +0000 ROA not before: Tue 19 May 2026 04:20:10 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dd:ce:2c:2c:d0:67:6b:57:56:ef:97:d5:84:81:4a:6b:65:96:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:20:10 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=1e64ef7ef5f5f547dfedfad60f0459dd8b2aeee8aafa5e4b8d9ac2bcc7b7dee4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:3a:3b:20:5e:60:ab:5d:d1:68:9c:b2:02: c1:f0:88:17:bf:78:61:07:00:69:14:06:c6:b2:d8: 50:71:e0:24:1a:7e:79:bc:b4:39:d7:c4:f9:bf:7d: 3a:d7:45:ba:7b:c7:fe:cb:3a:54:53:dc:3d:43:35: 66:0a:8a:87:00:19:0a:e0:c6:5d:23:cc:0d:72:62: 20:7b:23:0d:0e:14:a1:36:fb:6a:c2:9b:19:2f:86: 24:f9:ce:53:5e:17:77:f2:10:ca:ec:b4:54:87:4e: f2:c0:c2:7a:ea:ce:d3:1c:43:13:b8:1b:6c:f0:4f: 0b:83:60:5e:69:ee:4c:cb:d9:41:39:7b:b7:e6:35: c6:54:82:00:1b:c0:e1:5a:4b:40:f2:86:e1:9e:5a: a4:79:d4:e9:e5:bc:20:c3:78:6d:18:ad:b5:fa:04: 39:00:b7:a7:6a:d9:04:8d:5e:b8:da:6d:5f:5d:d8: 76:b3:cf:ba:c4:e4:dc:fb:40:ba:2c:a9:ca:56:e7: 39:68:cb:08:bc:6d:89:41:6c:01:73:c7:e5:cc:1a: 1a:dd:0c:fa:79:32:a5:b2:7c:b5:83:f2:27:45:f2: 84:f8:10:3c:c2:0d:ce:67:65:bd:0d:a9:cb:26:dd: 7f:a1:81:33:e2:dd:c1:1f:9b:6a:f1:cd:42:8c:05: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:26:44:37:9C:94:3A:EF:2E:5B:8A:0E:41:78:B2:9A:DC:10:7E:34 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 77:a5:6d:f3:c3:a7:f4:10:ce:9f:63:2a:b7:ed:c9:e6:e0:4f: 91:a1:3a:bc:f0:76:df:87:8a:1b:68:6e:95:18:6f:cf:a8:28: a9:3e:87:4d:69:a7:f4:6d:fe:41:07:99:58:b7:f3:71:b5:da: 2d:14:b0:72:5f:64:44:a2:a6:06:94:a9:06:c6:0c:1f:05:f7: a6:a0:7b:50:b1:45:3b:79:8c:95:75:54:f5:0c:a0:2b:80:a2: 25:5b:be:11:38:93:77:ec:da:55:1d:f9:0c:c4:ba:f8:a9:8a: c2:0c:06:3c:a7:c4:3e:a2:6e:2a:46:3d:4f:32:b3:d2:ee:68: 98:6d:55:5b:24:7b:11:b0:4f:70:d3:86:e1:98:0e:64:ce:0e: c9:4b:1f:6a:86:92:b5:ad:13:8d:f6:6a:18:9b:41:05:cc:ba: a6:d5:b0:04:8b:6c:79:1e:0d:20:16:63:00:16:16:be:8e:41: 5d:fd:c8:01:4d:08:c5:f7:49:9e:b6:40:c5:f0:98:9b:80:f1: da:7d:2f:8f:cd:79:d8:12:d2:18:e0:4d:6a:0f:2b:99:ed:c0: 28:2e:35:34:a0:41:61:c2:8e:02:db:a1:72:4c:3c:38:57:33: fb:86:18:1c:0c:34:b1:e7:fb:db:34:31:4c:be:f7:20:fe:b6: 8e:5d:f6:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURd3OLCzQZ2tXVu+X1YSBSmtllrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQyMDEwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTY0ZWY3ZWY1ZjVmNTQ3ZGZlZGZhZDYwZjA0NTlkZDhi MmFlZWU4YWFmYTVlNGI4ZDlhYzJiY2M3YjdkZWU0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYYzo7IF5gq13RaJyyAsHwiBe/eGEHAGkUBsay2FBx4CQa fnm8tDnXxPm/fTrXRbp7x/7LOlRT3D1DNWYKiocAGQrgxl0jzA1yYiB7Iw0OFKE2 +2rCmxkvhiT5zlNeF3fyEMrstFSHTvLAwnrqztMcQxO4G2zwTwuDYF5p7kzL2UE5 e7fmNcZUggAbwOFaS0DyhuGeWqR51OnlvCDDeG0YrbX6BDkAt6dq2QSNXrjabV9d 2Hazz7rE5Nz7QLosqcpW5zloywi8bYlBbAFzx+XMGhrdDPp5MqWyfLWD8idF8oT4 EDzCDc5nZb0Nqcsm3X+hgTPi3cEfm2rxzUKMBUQFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhCZEN5yUOu8uW4oOQXiymtwQfjQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAHelbfPDp/QQzp9jKrftyebg T5GhOrzwdt+HihtobpUYb8+oKKk+h01pp/Rt/kEHmVi383G12i0UsHJfZESipgaU qQbGDB8F96age1CxRTt5jJV1VPUMoCuAoiVbvhE4k3fs2lUd+QzEuvipisIMBjyn xD6ibipGPU8ys9LuaJhtVVskexGwT3DThuGYDmTODslLH2qGkrWtE432ahibQQXM uqbVsASLbHkeDSAWYwAWFr6OQV39yAFNCMX3SZ62QMXwmJuA8dp9L4/NedgS0hjg TWoPK5ntwCguNTSgQWHCjgLboXJMPDhXM/uGGBwMNLHn+9s0MUy+9yD+to5d9gA= -----END CERTIFICATE-----Generated at Fri Jun 12 05:52:45 2026 by rpki-client