$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa File: 9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa (raw, json) Hash identifier: N5JoH3kV8aavSVbV/qQ6AZCrJWusJ/S4csbnJ+PUqiU= Subject key identifier: C3:24:42:26:E7:AB:A0:10:F9:D3:F9:E8:94:90:FA:9F:79:70:54:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05758D724B91E3196BEC40692CC415946DBC06CC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa Signing time: Tue 28 Apr 2026 20:32:09 +0000 ROA not before: Tue 28 Apr 2026 20:32:09 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:18::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:75:8d:72:4b:91:e3:19:6b:ec:40:69:2c:c4:15:94:6d:bc:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 28 20:32:09 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=2d5f560346ebd233a6625067a67b83a13d299555cae629ec9908f4aaa1ec7bc7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:6a:42:b4:7b:a6:35:88:cc:28:ae:f0:2d: 7e:4e:c0:20:fb:25:48:c6:69:ff:20:1a:2c:45:1d: 59:2c:a5:6e:92:28:39:54:b9:ac:4c:06:f6:e5:34: 7a:03:85:6c:22:99:2b:5b:41:be:47:cf:3b:ce:bb: 0e:19:ef:fb:15:64:99:72:b8:34:eb:dd:e8:bd:6a: 21:7b:9e:4e:fa:d5:18:29:86:91:b6:2a:d4:1c:0b: ba:f0:ae:e4:43:a7:5e:2c:b7:53:34:a6:c8:0d:cd: f2:46:09:df:56:99:cb:b9:cd:9f:31:16:fb:15:b0: d0:cc:cd:7e:8f:be:48:49:8b:8e:5e:63:ff:ec:57: bc:5f:07:90:df:48:ae:b4:09:ff:09:72:b4:da:97: 02:31:7a:59:f7:81:5c:39:cf:46:fd:67:de:e2:26: 2f:0a:cc:05:46:c4:e2:91:b9:e1:01:74:71:20:13: 05:ea:ba:19:f1:a3:48:46:fc:04:c0:31:8b:6f:c8: 93:89:f3:54:a2:6d:2a:10:8f:16:59:b4:47:09:9c: 2b:cf:53:e7:29:e7:76:8c:8a:f8:c2:db:c8:be:b6: 69:54:d7:7e:14:e2:7f:5b:a8:f1:8a:37:31:9d:a9: 03:b7:f6:97:c6:0c:a6:1f:2b:1c:23:e9:ac:c2:c3: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:42:26:E7:AB:A0:10:F9:D3:F9:E8:94:90:FA:9F:79:70:54:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a4cd8c8-9bc0-4fbb-91dc-2a82ba0df864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:18::/46 Signature Algorithm: sha256WithRSAEncryption 52:4b:9c:fc:a9:2a:9b:39:d3:42:88:10:62:8c:6f:c4:18:9b: 06:e3:b4:1a:58:42:94:eb:60:46:43:71:d5:ba:89:05:13:14: 69:dd:e0:05:42:7c:a3:dd:4b:3a:ea:74:56:b1:fe:91:d2:b1: 84:87:aa:c2:8b:97:14:60:b3:71:b0:0c:46:bc:8d:31:1c:52: 7e:a9:8e:91:b3:0a:9f:b2:cc:9f:01:35:2d:71:74:96:d9:89: 0a:2d:37:d0:17:e4:bc:9b:a3:72:f8:f4:e1:70:d2:3e:87:fc: 3a:b7:a1:11:9a:2d:18:97:b4:95:6f:10:c2:f9:93:85:c4:6f: 31:ae:a3:21:c6:de:b9:9f:0e:4d:8a:d3:11:1a:e2:26:2c:76: 68:fd:d4:23:fa:64:3a:1c:77:f0:13:02:6d:8c:eb:9e:50:cf: 3e:3f:68:05:de:80:f3:27:45:da:5c:d0:0b:13:28:ce:c5:db: fb:76:7e:c8:5c:2f:0e:9c:d7:f3:5e:55:22:ab:fb:28:14:13: ae:50:21:a2:4e:8c:9e:05:d7:db:58:6a:cc:5c:aa:ff:88:68: 46:fc:e5:23:0b:f3:ab:ae:41:ce:34:64:14:2e:17:75:4c:13: 75:b6:54:bf:72:c9:49:7c:4c:b5:bb:46:74:b7:eb:6f:11:3b: f1:2c:b3:74 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBXWNckuR4xlr7EBpLMQVlG28BswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDI4MjAzMjA5WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDVmNTYwMzQ2ZWJkMjMzYTY2MjUwNjdhNjdiODNhMTNk Mjk5NTU1Y2FlNjI5ZWM5OTA4ZjRhYWExZWM3YmM3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC15mpCtHumNYjMKK7wLX5OwCD7JUjGaf8gGixFHVkspW6S KDlUuaxMBvblNHoDhWwimStbQb5HzzvOuw4Z7/sVZJlyuDTr3ei9aiF7nk761Rgp hpG2KtQcC7rwruRDp14st1M0psgNzfJGCd9Wmcu5zZ8xFvsVsNDMzX6PvkhJi45e Y//sV7xfB5DfSK60Cf8JcrTalwIxeln3gVw5z0b9Z97iJi8KzAVGxOKRueEBdHEg EwXquhnxo0hG/ATAMYtvyJOJ81SibSoQjxZZtEcJnCvPU+cp53aMivjC28i+tmlU 134U4n9bqPGKNzGdqQO39pfGDKYfKxwj6azCw9nJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwyRCJueroBD50/nolJD6n3lwVAIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlhNGNkOGM4LTliYzAtNGZiYi05MWRjLTJhODJiYTBkZjg2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDxABgwDQYJKoZIhvcNAQELBQADggEBAFJLnPypKps500KIEGKMb8QY mwbjtBpYQpTrYEZDcdW6iQUTFGnd4AVCfKPdSzrqdFax/pHSsYSHqsKLlxRgs3Gw DEa8jTEcUn6pjpGzCp+yzJ8BNS1xdJbZiQotN9AX5Lybo3L49OFw0j6H/Dq3oRGa LRiXtJVvEML5k4XEbzGuoyHG3rmfDk2K0xEa4iYsdmj91CP6ZDocd/ATAm2M655Q zz4/aAXegPMnRdpc0AsTKM7F2/t2fshcLw6c1/NeVSKr+ygUE65QIaJOjJ4F19tY asxcqv+IaEb85SML86uuQc40ZBQuF3VME3W2VL9yyUl8TLW7RnS3628RO/Ess3Q= -----END CERTIFICATE-----Generated at Thu Apr 30 18:29:20 2026 by rpki-client