$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa File: 98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa (raw, json) Hash identifier: nHVYMsjx/pTRlV6lLCWaDLzvck7G5vfcEKmNOl3dGZs= Subject key identifier: 7C:6C:CE:57:8A:4C:BF:B3:D6:6B:95:C4:44:5D:6E:69:C5:A5:7C:70 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 41BA86B63F8598E8E5EB1B0EF196A5EE7E92FFE9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa Signing time: Fri 22 May 2026 00:00:07 +0000 ROA not before: Fri 22 May 2026 00:00:07 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:602::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:86:b6:3f:85:98:e8:e5:eb:1b:0e:f1:96:a5:ee:7e:92:ff:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 22 00:00:07 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=96b75d322a42ced9eeb5dfb0366f8f14a9c2508dc87ade06cd885922653b8e58, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:e3:de:ce:65:bc:de:05:fc:1c:5d:94:7c: b4:e2:cb:65:a3:97:22:ff:89:9c:e4:76:7d:05:c9: af:70:73:74:bb:be:e2:88:7b:84:4f:1c:1f:cd:86: 25:99:9f:19:ec:6b:68:86:9c:b9:78:9e:f9:a0:95: 44:85:97:8d:b3:62:86:6a:b4:1b:e7:e9:89:35:01: 7a:5d:4a:d4:aa:41:83:b5:e0:20:af:6c:7b:68:78: 29:ba:7d:7d:bf:75:20:40:07:b2:0b:2a:6a:70:b9: 02:3e:c3:69:fe:fb:9d:3f:4f:f1:9e:cb:79:17:21: 53:ff:0d:ee:14:96:8b:34:28:61:d0:7b:8d:d2:5e: 4a:c3:8f:0f:44:6b:47:68:58:c5:0c:1b:d0:26:ab: a7:13:96:af:64:ed:dc:9e:f9:19:1e:32:13:8c:f5: c2:14:01:09:91:9a:ae:63:b4:60:dd:06:e5:1d:5a: 17:e2:50:ec:9c:81:4a:1f:c5:47:c4:c1:0c:55:5d: 98:cf:99:8e:b6:b5:fe:2e:1a:0f:72:ec:e0:62:26: 02:32:1e:85:99:62:62:80:a8:8d:fe:84:a4:ce:2f: 0f:d6:14:53:d4:0e:62:b2:9a:f5:82:a9:c9:cd:e1: bd:55:15:9a:5e:23:52:16:a9:e6:57:35:4e:ee:26: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6C:CE:57:8A:4C:BF:B3:D6:6B:95:C4:44:5D:6E:69:C5:A5:7C:70 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:602::/48 Signature Algorithm: sha256WithRSAEncryption 5f:0d:4e:b1:01:86:f9:78:de:8c:14:63:ad:9b:cf:7b:19:25: f5:90:6a:52:76:43:e6:54:dc:6d:95:28:69:e1:fd:8e:09:aa: 35:68:98:26:62:93:02:aa:ca:a1:73:d8:46:a4:8e:89:d9:91: cc:4a:03:4d:eb:9e:88:78:89:f4:b6:eb:85:f8:ff:19:69:d3: 4d:b3:99:2e:6d:29:33:e1:db:65:fa:c6:8d:8b:a7:93:d9:6b: 88:48:df:72:b9:0d:5a:22:65:f8:8a:d4:d7:6b:93:d3:f1:28: ab:43:70:5c:1c:ce:42:5b:80:85:64:12:47:a4:17:c0:3d:74: 75:94:52:aa:b0:5d:0c:b6:0a:94:4d:46:b5:7c:f8:3b:86:f9: 96:c3:26:9b:23:0e:24:30:48:ab:fb:8f:da:c0:f0:93:95:1c: 3c:fa:a7:ee:a8:1f:59:43:c7:fb:70:55:9a:ae:a0:be:68:e4: 23:96:e1:5c:83:0b:69:10:8c:42:c7:0a:75:0c:46:78:89:a0: f2:e4:86:d0:df:6c:07:c0:24:fb:3f:d9:c3:f6:dd:6a:e4:45: a2:08:8f:cb:88:11:b7:5e:e4:39:67:5d:72:d5:4e:d3:03:b0: 84:13:c7:87:ed:59:02:76:39:8c:5f:7b:b7:8a:6f:24:10:94: 1b:79:c4:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQbqGtj+FmOjl6xsO8Zal7n6S/+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIyMDAwMDA3WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmI3NWQzMjJhNDJjZWQ5ZWViNWRmYjAzNjZmOGYxNGE5 YzI1MDhkYzg3YWRlMDZjZDg4NTkyMjY1M2I4ZTU4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1k+PezmW83gX8HF2UfLTiy2WjlyL/iZzkdn0Fya9wc3S7 vuKIe4RPHB/NhiWZnxnsa2iGnLl4nvmglUSFl42zYoZqtBvn6Yk1AXpdStSqQYO1 4CCvbHtoeCm6fX2/dSBAB7ILKmpwuQI+w2n++50/T/Gey3kXIVP/De4Ulos0KGHQ e43SXkrDjw9Ea0doWMUMG9Amq6cTlq9k7dye+RkeMhOM9cIUAQmRmq5jtGDdBuUd WhfiUOycgUofxUfEwQxVXZjPmY62tf4uGg9y7OBiJgIyHoWZYmKAqI3+hKTOLw/W FFPUDmKymvWCqcnN4b1VFZpeI1IWqeZXNU7uJh2bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfGzOV4pMv7PWa5XERF1uacWlfHAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk4ZThjYTdhLTZiMzktNDkzMS05YmJjLTg2OTk4ZDRjNTc5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgIwDQYJKoZIhvcNAQELBQADggEBAF8NTrEBhvl43owUY62bz3sZ JfWQalJ2Q+ZU3G2VKGnh/Y4JqjVomCZikwKqyqFz2EakjonZkcxKA03rnoh4ifS2 64X4/xlp002zmS5tKTPh22X6xo2Lp5PZa4hI33K5DVoiZfiK1Ndrk9PxKKtDcFwc zkJbgIVkEkekF8A9dHWUUqqwXQy2CpRNRrV8+DuG+ZbDJpsjDiQwSKv7j9rA8JOV HDz6p+6oH1lDx/twVZquoL5o5COW4VyDC2kQjELHCnUMRniJoPLkhtDfbAfAJPs/ 2cP23WrkRaIIj8uIEbde5DlnXXLVTtMDsIQTx4ftWQJ2OYxfe7eKbyQQlBt5xOg= -----END CERTIFICATE-----Generated at Fri Jun 12 05:51:09 2026 by rpki-client