$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa File: a243183f-74f0-4016-b61d-47b029a3c4e1.roa (raw, json) Hash identifier: ltYBRPYhrIvG1Ht9xwDKmR9NkzsBHe3wOv18bk8MGEk= Subject key identifier: 49:FA:84:70:69:A3:C4:52:45:F1:78:AC:F9:71:CA:01:66:0F:EE:4E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2F8B8CCC8A05E9AEC72659B032E0871ED75E00CC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa Signing time: Tue 19 May 2026 04:30:19 +0000 ROA not before: Tue 19 May 2026 04:30:19 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8b:8c:cc:8a:05:e9:ae:c7:26:59:b0:32:e0:87:1e:d7:5e:00:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:30:19 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=d4201b8f9df430b760f0230258de08e543d4152374321a9331adc1420fc6cb2c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:3b:60:e4:44:12:df:c2:1e:0c:00:2a:1f: ce:57:fa:ef:be:d5:2a:d5:6a:f9:78:4c:52:14:a0: e9:d8:49:61:0e:35:07:91:ae:7c:6c:df:41:f7:0d: 95:9d:07:0f:10:cf:4b:00:f6:2e:34:37:ea:ce:58: a4:2f:de:e5:f1:6b:8a:9b:f6:3a:c2:ee:7f:92:c2: 44:37:66:85:8d:34:ba:45:8f:13:41:7d:7a:e4:f2: de:93:94:3e:40:cf:e3:60:17:e2:40:f4:13:8c:2a: 61:95:80:14:e3:73:06:46:03:0d:e1:b2:f7:d6:0a: c0:5b:77:0c:61:08:2d:f7:8d:6c:06:39:8b:e2:b4: d3:a8:d2:6c:2e:a2:85:25:a2:32:a7:c3:98:84:1d: 50:d0:bf:71:ab:23:99:b9:87:b0:5f:dd:f3:2b:46: 9c:77:9c:e3:3a:f3:a7:da:8a:88:95:fd:c4:fe:b7: ed:b7:c3:27:a3:a3:de:f9:bd:4a:a6:87:76:d2:39: 0e:6d:85:74:9d:bc:ea:b6:57:05:2b:de:93:a9:a7: ea:f9:b1:83:f8:8f:05:a0:a5:a6:b5:3c:44:aa:7d: 39:e2:89:3e:46:64:8c:2a:84:12:7e:ed:53:3c:c6: c6:2e:31:c0:7d:56:a6:56:53:ef:8e:8e:d7:a3:b3: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FA:84:70:69:A3:C4:52:45:F1:78:AC:F9:71:CA:01:66:0F:EE:4E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/42 Signature Algorithm: sha256WithRSAEncryption 88:90:23:22:bc:5a:71:5b:d2:05:ba:a7:d7:c2:a5:ed:e1:3b: 4a:66:41:22:04:6e:f9:1c:f2:c3:70:a9:d7:4a:49:66:e2:e9: fb:7a:03:38:37:7c:d5:54:0d:8d:ff:ed:01:3a:95:c1:93:c4: 6c:4a:eb:de:02:51:cc:a9:47:c3:f0:54:a8:03:b1:90:01:3d: 8e:5d:e8:82:7a:d2:b0:46:67:5d:88:bf:85:8c:e0:a4:5a:13: 23:57:a8:0a:93:32:ad:a8:ce:8d:93:42:64:09:59:53:7c:d2: b4:15:09:77:99:dc:77:f6:1a:14:6a:bf:7d:b1:4e:51:fb:f3: cc:eb:46:a3:3e:0e:7b:67:6e:7e:11:c0:ba:16:a6:c0:e0:93: 4e:1e:04:1a:23:51:b0:2c:4e:37:73:76:62:64:ff:99:2c:e4: 79:21:ba:06:62:d9:ff:88:01:77:95:8c:3f:a0:bd:46:fe:71: 32:57:2e:2e:ab:d6:7f:68:e1:be:e2:15:5f:1e:f1:e1:1f:b2: 33:19:23:ee:ff:ee:e3:96:cf:cf:5e:08:86:29:ae:be:22:b3: aa:fd:03:1d:c8:9c:be:47:31:fc:b2:9c:ce:50:15:0e:ab:6c: 59:2a:72:ba:3f:3a:db:be:c4:11:9a:ac:af:65:43:05:94:de: d1:41:78:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL4uMzIoF6a7HJlmwMuCHHtdeAMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQzMDE5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDIwMWI4ZjlkZjQzMGI3NjBmMDIzMDI1OGRlMDhlNTQz ZDQxNTIzNzQzMjFhOTMzMWFkYzE0MjBmYzZjYjJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDssTtg5EQS38IeDAAqH85X+u++1SrVavl4TFIUoOnYSWEO NQeRrnxs30H3DZWdBw8Qz0sA9i40N+rOWKQv3uXxa4qb9jrC7n+SwkQ3ZoWNNLpF jxNBfXrk8t6TlD5Az+NgF+JA9BOMKmGVgBTjcwZGAw3hsvfWCsBbdwxhCC33jWwG OYvitNOo0mwuooUlojKnw5iEHVDQv3GrI5m5h7Bf3fMrRpx3nOM686faioiV/cT+ t+23wyejo975vUqmh3bSOQ5thXSdvOq2VwUr3pOpp+r5sYP4jwWgpaa1PESqfTni iT5GZIwqhBJ+7VM8xsYuMcB9VqZWU++Ojtejs84dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSfqEcGmjxFJF8Xis+XHKAWYP7k4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EyNDMxODNmLTc0ZjAtNDAxNi1iNjFkLTQ3YjAyOWEzYzRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74QAwDQYJKoZIhvcNAQELBQADggEBAIiQIyK8WnFb0gW6p9fCpe3h O0pmQSIEbvkc8sNwqddKSWbi6ft6Azg3fNVUDY3/7QE6lcGTxGxK694CUcypR8Pw VKgDsZABPY5d6IJ60rBGZ12Iv4WM4KRaEyNXqAqTMq2ozo2TQmQJWVN80rQVCXeZ 3Hf2GhRqv32xTlH788zrRqM+Dntnbn4RwLoWpsDgk04eBBojUbAsTjdzdmJk/5ks 5HkhugZi2f+IAXeVjD+gvUb+cTJXLi6r1n9o4b7iFV8e8eEfsjMZI+7/7uOWz89e CIYprr4is6r9Ax3InL5HMfyynM5QFQ6rbFkqcro/Otu+xBGarK9lQwWU3tFBeAk= -----END CERTIFICATE-----Generated at Fri Jun 12 05:52:36 2026 by rpki-client