$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b47c1d12-946e-42f2-be7a-f87f9a1303a5.roa File: b47c1d12-946e-42f2-be7a-f87f9a1303a5.roa (raw, json) Hash identifier: i7aqaw/b4HVo8M0AFbh3tKeiZijNRW/xfeS2JadVg38= Subject key identifier: 07:07:75:F1:F1:2D:DA:0F:38:31:30:92:F1:C7:7B:20:A9:08:E9:11 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 653F7D9561545F4B1D355CC03938C0C116EEB3BB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b47c1d12-946e-42f2-be7a-f87f9a1303a5.roa Signing time: Thu 19 Mar 2026 21:08:08 +0000 ROA not before: Thu 19 Mar 2026 21:08:08 +0000 ROA not after: Wed 17 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3f:7d:95:61:54:5f:4b:1d:35:5c:c0:39:38:c0:c1:16:ee:b3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 19 21:08:08 2026 GMT Not After : Jun 17 23:59:59 2026 GMT Subject: serialNumber=8df643a045e1941090b2534eade299a3eb671f1a47a11c1734018d9b275620a5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bb:4d:ba:82:4c:00:66:4e:72:fc:16:19:9b: 0c:f4:f2:1d:16:03:5e:c9:b3:b9:9f:88:3a:5e:ce: 80:2f:c5:64:93:86:e1:b5:f8:8b:c2:17:f4:c4:e2: 46:1c:bb:59:4b:5f:02:d9:aa:13:4e:02:56:1a:dc: 1b:f4:e6:57:cd:91:81:f9:9f:93:f3:ad:80:1b:8c: dd:f6:8f:c8:12:d1:fa:00:31:dc:8f:2f:c9:95:08: 7c:1d:ad:5d:f8:06:59:4c:62:f8:69:8a:88:ae:5e: 95:93:f7:cd:50:f6:20:cb:e3:81:c8:a3:99:74:2c: 10:9e:ed:3d:23:e5:20:2d:1c:bd:67:7f:be:ae:81: c3:83:a9:29:f1:58:29:b4:20:b9:fe:8c:c7:d1:ac: f2:b2:58:76:c6:fe:f1:4a:54:3c:6e:6e:83:a1:c0: ae:af:fc:7e:81:2f:65:c3:7c:d1:74:04:f1:7a:8a: 4b:4d:ad:93:f3:86:b8:f6:a0:a0:33:8d:16:e3:c7: 10:36:d1:cb:00:72:ff:68:d7:2c:e1:d9:6b:46:75: b9:a6:0b:31:b5:56:14:86:8e:3f:b3:08:5e:b3:b1: 74:bd:f4:d5:b8:6c:6a:f6:27:92:5e:bc:0a:a2:bb: 23:e5:71:a6:fa:5b:81:df:9a:be:be:65:5e:06:c2: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:07:75:F1:F1:2D:DA:0F:38:31:30:92:F1:C7:7B:20:A9:08:E9:11 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b47c1d12-946e-42f2-be7a-f87f9a1303a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c00::/40 Signature Algorithm: sha256WithRSAEncryption 59:73:7a:23:18:8c:8c:98:66:42:01:1e:92:81:f3:a0:19:08: 7e:0a:26:01:ed:25:51:dc:17:7c:09:9a:12:50:a0:9c:fb:10: b4:22:2f:34:17:74:ef:8e:8b:34:fa:5b:c1:39:21:49:5e:43: 93:19:c3:ee:2f:9b:b2:2d:69:94:57:c8:2d:43:90:7e:43:ae: 5d:59:64:be:e9:43:e4:7b:d8:e9:23:c7:a1:11:c6:83:9d:01: 99:d4:e6:36:f2:ae:4a:d1:48:78:45:b3:bf:b3:5f:a8:a2:05: bb:25:8f:d6:d9:e2:f1:29:38:81:04:1e:ac:12:02:68:30:3e: 71:1f:59:c7:9e:36:c2:7e:31:93:4c:20:f1:f6:b7:8a:15:cb: 3b:47:41:e2:9c:b5:f8:47:e3:2f:96:65:56:fa:31:76:be:6f: 41:f3:06:4d:75:30:ad:c4:e3:35:e1:ca:ee:d5:b2:8a:dd:5e: cc:7c:08:3a:93:52:9f:6f:c0:53:db:e2:10:c4:f1:e6:55:84: 0f:cf:d3:6e:7e:2e:00:6b:26:78:a6:f8:11:4c:88:cf:15:66: d0:bc:dc:41:37:24:1e:b6:9c:00:f5:e1:b4:89:55:1f:b7:04: 3c:10:c8:58:f2:ed:3c:50:1f:32:35:42:10:60:c7:1f:98:5d: be:d2:d6:97 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZT99lWFUX0sdNVzAOTjAwRbus7swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzE5MjEwODA4WhcNMjYwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGY2NDNhMDQ1ZTE5NDEwOTBiMjUzNGVhZGUyOTlhM2Vi NjcxZjFhNDdhMTFjMTczNDAxOGQ5YjI3NTYyMGE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0u026gkwAZk5y/BYZmwz08h0WA17Js7mfiDpezoAvxWST huG1+IvCF/TE4kYcu1lLXwLZqhNOAlYa3Bv05lfNkYH5n5PzrYAbjN32j8gS0foA MdyPL8mVCHwdrV34BllMYvhpioiuXpWT981Q9iDL44HIo5l0LBCe7T0j5SAtHL1n f76ugcODqSnxWCm0ILn+jMfRrPKyWHbG/vFKVDxuboOhwK6v/H6BL2XDfNF0BPF6 iktNrZPzhrj2oKAzjRbjxxA20csAcv9o1yzh2WtGdbmmCzG1VhSGjj+zCF6zsXS9 9NW4bGr2J5JevAqiuyPlcab6W4Hfmr6+ZV4GwnBxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBwd18fEt2g84MTCS8cd7IKkI6REwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I0N2MxZDEyLTk0NmUtNDJmMi1iZTdhLWY4N2Y5YTEzMDNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDDANBgkqhkiG9w0BAQsFAAOCAQEAWXN6IxiMjJhmQgEekoHzoBkI fgomAe0lUdwXfAmaElCgnPsQtCIvNBd0746LNPpbwTkhSV5DkxnD7i+bsi1plFfI LUOQfkOuXVlkvulD5HvY6SPHoRHGg50BmdTmNvKuStFIeEWzv7NfqKIFuyWP1tni 8Sk4gQQerBICaDA+cR9Zx542wn4xk0wg8fa3ihXLO0dB4py1+EfjL5ZlVvoxdr5v QfMGTXUwrcTjNeHK7tWyit1ezHwIOpNSn2/AU9viEMTx5lWED8/Tbn4uAGsmeKb4 EUyIzxVm0LzcQTckHracAPXhtIlVH7cEPBDIWPLtPFAfMjVCEGDHH5hdvtLWlw== -----END CERTIFICATE-----Generated at Mon Mar 23 16:02:43 2026 by rpki-client