$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0428b04-c153-47cc-9c38-b2f40ac345a0.roa File: c0428b04-c153-47cc-9c38-b2f40ac345a0.roa (raw, json) Hash identifier: xSLm3yugbUzI61zwwhbIoRRcBSglMibbJZokhsFpcLQ= Subject key identifier: C6:59:C6:29:DF:65:8F:E9:09:F2:D7:69:CE:D8:D3:A9:F7:4B:AB:53 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7565A74CCA8A535937C4B773B35EE7CA17984C73 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0428b04-c153-47cc-9c38-b2f40ac345a0.roa Signing time: Tue 19 May 2026 04:10:09 +0000 ROA not before: Tue 19 May 2026 04:10:09 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:65:a7:4c:ca:8a:53:59:37:c4:b7:73:b3:5e:e7:ca:17:98:4c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:10:09 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=075fe37ddfd999ec5ea6e2a1a72656fca93e0d661546ad8eac4f1f2fa4134fed, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:c5:3a:c0:f8:5a:8c:45:92:08:33:4e:79: 94:fe:d9:02:cf:df:ad:30:ee:96:83:93:64:52:e4: a3:29:e9:9b:43:fe:03:1d:a8:5c:94:66:22:62:41: bf:08:9b:a3:19:15:3e:43:aa:30:a5:c5:28:22:94: 26:40:49:6e:41:53:65:ae:13:e8:39:22:b0:99:b6: 4e:eb:ae:7b:db:ba:a7:d7:93:5a:a7:45:c0:c6:f9: f7:85:0e:19:46:fd:c9:26:1d:5d:96:03:4d:60:9b: 5a:f0:82:05:08:78:12:10:dd:db:0e:9e:fa:5c:b6: 5f:0b:43:41:51:96:22:f5:15:af:c3:46:92:b5:b1: b6:6f:22:d9:00:b4:ec:73:d1:7c:7f:36:32:14:78: 87:a1:95:bc:b6:3a:eb:d1:53:b9:94:e2:3b:e9:c8: db:70:79:82:b6:71:15:5d:c8:f5:2d:3c:31:70:48: cf:e7:61:08:16:ea:f4:9e:d8:b8:5a:bf:7b:dd:23: cf:1f:76:3a:48:9b:34:a6:ae:0d:03:53:1f:cf:8e: f4:e6:ba:dd:80:db:15:d4:92:19:e3:59:f4:de:d3: b3:72:1f:56:20:85:07:41:6b:e7:0e:ba:f1:9c:06: 50:5f:cf:ae:05:07:93:b5:18:77:75:ea:93:50:56: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:C6:29:DF:65:8F:E9:09:F2:D7:69:CE:D8:D3:A9:F7:4B:AB:53 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0428b04-c153-47cc-9c38-b2f40ac345a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:4000::/34 Signature Algorithm: sha256WithRSAEncryption 04:14:42:e4:bb:c8:e9:14:a6:4e:67:4e:26:b4:87:9c:60:de: 33:d0:e2:2f:6f:bf:da:44:fb:41:95:1d:9b:82:41:15:27:53: b2:d5:d5:c4:08:72:41:d9:69:a6:31:29:cd:b8:79:cf:17:05: 67:51:23:87:57:be:91:76:c4:75:a5:00:90:8d:df:5e:7f:ed: 50:a8:7e:cb:74:b4:2d:fb:bd:8d:9d:46:3d:56:03:7b:ad:f6: ee:b1:eb:7f:f2:23:4a:4b:ee:8d:70:01:8d:3f:a7:91:ab:96: 51:01:59:3f:78:e3:c7:dd:24:79:36:f1:e7:ba:ed:d0:3d:0f: 8e:22:49:fe:8f:57:3f:6b:13:50:0a:2d:e3:09:d0:c9:bf:11: 3b:bf:bc:53:5e:0a:f7:c8:13:6a:52:03:f6:7f:44:05:0f:ef: f9:74:a0:4e:0d:17:a2:56:63:1f:e9:62:4c:70:e9:c4:ea:ad: 13:b6:a5:34:0b:25:39:a9:d5:fa:c7:16:25:dd:6b:01:c7:c3: df:e1:8a:47:fc:9e:24:2b:5b:35:73:af:75:27:b5:00:20:94: cb:c9:8a:13:66:19:25:18:b3:46:fb:b3:1c:9a:a0:05:b3:39: c7:17:84:de:5f:3a:e0:87:31:d7:31:5a:57:06:3a:32:9d:2f: b8:dd:a7:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdWWnTMqKU1k3xLdzs17nyheYTHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQxMDA5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzVmZTM3ZGRmZDk5OWVjNWVhNmUyYTFhNzI2NTZmY2E5 M2UwZDY2MTU0NmFkOGVhYzRmMWYyZmE0MTM0ZmVkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvGMU6wPhajEWSCDNOeZT+2QLP360w7paDk2RS5KMp6ZtD /gMdqFyUZiJiQb8Im6MZFT5DqjClxSgilCZASW5BU2WuE+g5IrCZtk7rrnvbuqfX k1qnRcDG+feFDhlG/ckmHV2WA01gm1rwggUIeBIQ3dsOnvpctl8LQ0FRliL1Fa/D RpK1sbZvItkAtOxz0Xx/NjIUeIehlby2OuvRU7mU4jvpyNtweYK2cRVdyPUtPDFw SM/nYQgW6vSe2Lhav3vdI88fdjpImzSmrg0DUx/PjvTmut2A2xXUkhnjWfTe07Ny H1YghQdBa+cOuvGcBlBfz64FB5O1GHd16pNQVtjLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxlnGKd9lj+kJ8tdpztjTqfdLq1MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MwNDI4YjA0LWMxNTMtNDdjYy05YzM4LWIyZjQwYWMzNDVhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPDxQDANBgkqhkiG9w0BAQsFAAOCAQEABBRC5LvI6RSmTmdOJrSHnGDe M9DiL2+/2kT7QZUdm4JBFSdTstXVxAhyQdlppjEpzbh5zxcFZ1Ejh1e+kXbEdaUA kI3fXn/tUKh+y3S0Lfu9jZ1GPVYDe6327rHrf/IjSkvujXABjT+nkauWUQFZP3jj x90keTbx57rt0D0PjiJJ/o9XP2sTUAot4wnQyb8RO7+8U14K98gTalID9n9EBQ/v +XSgTg0XolZjH+liTHDpxOqtE7alNAslOanV+scWJd1rAcfD3+GKR/yeJCtbNXOv dSe1ACCUy8mKE2YZJRizRvuzHJqgBbM5xxeE3l864Icx1zFaVwY6Mp0vuN2nsw== -----END CERTIFICATE-----Generated at Wed May 27 18:32:21 2026 by rpki-client