$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa File: 8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa (raw, json) Hash identifier: hhfIq9KJp52iVOQXri7Mg1xJCjmWXmfCpI6RrLF3wUo= Subject key identifier: DB:0D:C1:42:B0:B0:B5:6A:95:69:F5:D4:2C:25:EA:16:26:A9:55:DE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2BD749552AFCEB82235D8566AF76D3E745F33614 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa Signing time: Tue 19 May 2026 04:30:17 +0000 ROA not before: Tue 19 May 2026 04:30:17 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d7:49:55:2a:fc:eb:82:23:5d:85:66:af:76:d3:e7:45:f3:36:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:30:17 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=2cfae9adc9b45a66a6d2ebd5c94c8bda7443821467c638be8a3057eab299bab6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:3b:72:70:71:72:d4:19:77:79:67:6b:47: 3f:d7:ea:9e:4e:80:4b:d5:19:8c:11:78:96:0d:44: de:43:d1:a3:97:5b:38:ea:f4:58:3f:dc:51:6c:23: f0:2c:26:02:9b:48:a1:8a:b4:5b:c2:47:f3:44:54: 98:b5:0e:48:67:dc:7b:af:9c:0a:cb:84:72:fb:cd: f2:92:a7:5d:a4:d3:64:3b:a2:52:33:d5:ca:f2:e1: 10:c3:ec:61:2b:8d:94:fa:cd:af:19:5e:0f:87:92: b0:a7:ab:5d:33:c5:b2:db:3c:6a:e7:0a:83:73:3c: 44:47:c3:19:23:38:86:05:ae:ad:05:48:53:96:40: 39:67:e2:f9:e6:bb:c9:ab:26:ae:0d:00:20:bc:c5: b5:e5:68:5d:5c:4d:76:ae:19:d0:ef:0f:c6:f5:7b: c2:76:2e:8e:9e:eb:67:70:dc:e6:47:85:95:67:d5: ce:22:d9:ae:09:88:63:68:e9:ce:2a:21:96:47:0b: 0e:33:b9:53:74:d9:6d:86:4d:c7:7c:a6:17:44:1e: d0:f3:ee:8b:b4:de:b1:82:c8:8c:53:a4:a8:df:2d: b6:ae:73:dd:ac:5a:f3:09:60:85:75:d4:3f:a6:c8: 1f:09:34:10:c0:14:f8:dc:e9:f8:f2:cd:c3:79:67: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:C1:42:B0:B0:B5:6A:95:69:F5:D4:2C:25:EA:16:26:A9:55:DE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption 93:41:e7:ef:ca:23:7e:99:57:ef:ad:34:e1:59:73:1a:9d:c0: 68:56:43:81:88:6e:e1:d3:05:69:d0:ca:ef:6e:dd:13:52:f1: 10:60:ea:66:13:07:eb:89:6a:5a:f4:3f:f0:cb:bf:d0:24:98: 56:b4:b1:c1:4f:f8:4f:f0:e8:80:24:f1:f9:bf:1b:52:4f:dc: 4c:d7:92:52:0d:d8:ac:16:a2:dc:0b:f6:ea:ce:46:8e:46:16: e1:ae:2b:03:d8:e5:b2:d0:5f:e0:2a:3a:7d:e4:51:62:14:31: da:a2:e7:9d:eb:05:71:c2:5e:aa:53:2a:18:3a:8d:ac:d2:6b: bd:18:8c:da:ac:21:64:33:25:3c:93:18:ea:fd:08:30:c6:b2: ae:a0:00:6c:e4:8c:0a:a6:ef:42:ab:64:db:93:22:70:5c:93: c4:a8:e6:1e:4d:dd:d9:93:0d:4e:3f:10:d1:fb:c4:76:7a:73: 0c:ae:f7:38:47:9c:2f:d3:de:fe:7b:5b:3f:14:03:21:3e:99: 71:8c:ee:76:be:41:09:08:4e:8c:8f:56:c7:0a:b3:0c:37:3c: 77:42:4e:71:39:12:a0:16:b1:93:79:ab:b3:35:36:eb:f8:f8: a7:b3:d5:80:c6:d0:03:6a:dc:38:24:9b:b0:ac:78:83:9b:5e: b4:b9:a7:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK9dJVSr864IjXYVmr3bT50XzNhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQzMDE3WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2ZhZTlhZGM5YjQ1YTY2YTZkMmViZDVjOTRjOGJkYTc0 NDM4MjE0NjdjNjM4YmU4YTMwNTdlYWIyOTliYWI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpDjtycHFy1Bl3eWdrRz/X6p5OgEvVGYwReJYNRN5D0aOX Wzjq9Fg/3FFsI/AsJgKbSKGKtFvCR/NEVJi1Dkhn3HuvnArLhHL7zfKSp12k02Q7 olIz1cry4RDD7GErjZT6za8ZXg+HkrCnq10zxbLbPGrnCoNzPERHwxkjOIYFrq0F SFOWQDln4vnmu8mrJq4NACC8xbXlaF1cTXauGdDvD8b1e8J2Lo6e62dw3OZHhZVn 1c4i2a4JiGNo6c4qIZZHCw4zuVN02W2GTcd8phdEHtDz7ou03rGCyIxTpKjfLbau c92sWvMJYIV11D+myB8JNBDAFPjc6fjyzcN5Z4TLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2w3BQrCwtWqVafXULCXqFiapVd4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhmMTM1MzZmLTI1YTMtNGZmMS05MTQxLTliODVkN2U0MGI4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAJNB5+/KI36ZV++tNOFZcxqd wGhWQ4GIbuHTBWnQyu9u3RNS8RBg6mYTB+uJalr0P/DLv9AkmFa0scFP+E/w6IAk 8fm/G1JP3EzXklIN2KwWotwL9urORo5GFuGuKwPY5bLQX+AqOn3kUWIUMdqi553r BXHCXqpTKhg6jazSa70YjNqsIWQzJTyTGOr9CDDGsq6gAGzkjAqm70KrZNuTInBc k8So5h5N3dmTDU4/ENH7xHZ6cwyu9zhHnC/T3v57Wz8UAyE+mXGM7na+QQkIToyP VscKsww3PHdCTnE5EqAWsZN5q7M1Nuv4+Kez1YDG0ANq3Dgkm7CseIObXrS5pwo= -----END CERTIFICATE-----Generated at Wed May 27 18:31:35 2026 by rpki-client