$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa File: c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa (raw, json) Hash identifier: gZ1Ntz0EteWJhmK1vsWX9I0aubxr2/3RjXesaZeBKmo= Subject key identifier: 3E:69:8C:32:6F:D4:33:F8:84:DF:32:D9:CF:8B:E4:49:B4:AC:9C:29 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C79A19231748E10E46EE7F85493C70489258CE7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa Signing time: Tue 19 May 2026 04:20:10 +0000 ROA not before: Tue 19 May 2026 04:20:10 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:79:a1:92:31:74:8e:10:e4:6e:e7:f8:54:93:c7:04:89:25:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:20:10 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=333d0a952e3c1f4bab98909a57d0b17400ac1a3cf7fc7f2c184ba69e44dd6001, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:80:4c:77:c4:16:78:3e:f8:6a:dd:62:5b: bd:1c:d7:18:92:0c:ea:2a:d6:1e:e3:7e:ed:24:06: dc:76:da:fb:1e:fc:b8:08:86:48:06:d0:05:b9:2d: 25:a0:d0:e6:6e:40:07:74:48:c8:69:59:ac:9e:78: 8b:3f:d8:1c:9f:fe:2e:b4:b0:d1:fb:a9:da:66:cd: 38:e7:e9:ff:a8:eb:30:a2:20:22:30:d4:1b:0c:a9: 66:a7:13:ab:89:e6:46:9b:3e:d9:28:ac:4d:96:0a: 5b:65:04:de:b6:2f:16:90:da:fb:7d:62:84:69:9e: 12:dd:de:a8:f7:5c:e7:f5:7d:0f:ed:6e:40:88:61: 27:01:1f:a2:00:87:08:4f:7e:6c:9b:3d:a9:af:0e: 6f:64:d9:d4:27:13:e5:63:e3:8a:29:2e:22:17:59: c0:d9:9e:3d:6d:51:b3:90:e9:05:3c:03:49:ce:63: 18:5b:56:1f:d3:c5:a7:33:b2:be:f6:a9:76:26:1e: 63:3e:55:4e:2f:c1:5b:30:db:c5:2d:c5:5b:fd:e6: 47:c5:bd:84:9e:57:c6:3a:64:8e:aa:0b:3f:ee:a1: 3a:eb:08:a6:4d:e6:23:c8:45:a1:d5:11:13:be:ca: 46:67:89:f1:71:75:a3:97:10:5f:46:fc:04:f7:de: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:8C:32:6F:D4:33:F8:84:DF:32:D9:CF:8B:E4:49:B4:AC:9C:29 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:300::/44 Signature Algorithm: sha256WithRSAEncryption 24:4b:4f:5a:88:15:c5:fd:98:15:e4:a5:98:66:de:2b:d9:b0: c1:07:e4:c6:8d:6b:26:56:2c:12:bb:be:50:45:00:25:c0:9c: 32:8d:99:1b:4a:13:6a:be:4d:f1:b3:60:70:71:96:59:6c:f2: 03:a8:dc:27:2e:ab:90:1f:cf:4a:ca:b3:e3:e4:cc:82:ae:4d: 92:45:48:f2:9c:39:58:40:8c:fe:05:88:9c:61:13:9d:16:5b: 8d:90:0d:06:36:77:db:b0:ea:a8:eb:b8:bf:6c:a3:15:05:cb: 5c:0f:3c:46:5f:04:25:95:17:6b:8c:73:3e:98:2f:6f:49:8f: f8:cd:3d:1b:e9:04:b1:85:ed:d9:26:7b:4f:82:b9:3c:e9:7b: da:ae:e0:d7:b5:fd:b5:95:c6:90:e5:4d:2b:82:a5:39:6b:57: b1:4e:8b:25:85:03:cb:b4:42:af:8a:2c:8d:39:3f:60:42:46: db:89:5a:2f:49:fd:f7:83:d7:f0:68:73:82:48:e8:32:a8:a2: 2b:91:3a:8d:2d:60:49:34:89:8a:eb:e9:17:23:35:02:9d:be: 33:41:74:8f:06:6b:84:51:21:bd:8a:db:79:77:55:e6:75:08: 6f:0d:cc:1d:b1:0a:c0:9c:e5:fd:23:82:90:93:19:ce:ed:ae: 35:70:42:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfHmhkjF0jhDkbuf4VJPHBIkljOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQyMDEwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzNkMGE5NTJlM2MxZjRiYWI5ODkwOWE1N2QwYjE3NDAw YWMxYTNjZjdmYzdmMmMxODRiYTY5ZTQ0ZGQ2MDAxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKCoBMd8QWeD74at1iW70c1xiSDOoq1h7jfu0kBtx22vse /LgIhkgG0AW5LSWg0OZuQAd0SMhpWayeeIs/2Byf/i60sNH7qdpmzTjn6f+o6zCi ICIw1BsMqWanE6uJ5kabPtkorE2WCltlBN62LxaQ2vt9YoRpnhLd3qj3XOf1fQ/t bkCIYScBH6IAhwhPfmybPamvDm9k2dQnE+Vj44opLiIXWcDZnj1tUbOQ6QU8A0nO YxhbVh/Txaczsr72qXYmHmM+VU4vwVsw28UtxVv95kfFvYSeV8Y6ZI6qCz/uoTrr CKZN5iPIRaHVERO+ykZnifFxdaOXEF9G/AT33tshAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPmmMMm/UM/iE3zLZz4vkSbSsnCkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5YTdiZDIwLTQ4YmQtNGYwYS05MzdlLTJjY2M3MzAwOGY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAwAwDQYJKoZIhvcNAQELBQADggEBACRLT1qIFcX9mBXkpZhm3ivZ sMEH5MaNayZWLBK7vlBFACXAnDKNmRtKE2q+TfGzYHBxllls8gOo3Ccuq5Afz0rK s+PkzIKuTZJFSPKcOVhAjP4FiJxhE50WW42QDQY2d9uw6qjruL9soxUFy1wPPEZf BCWVF2uMcz6YL29Jj/jNPRvpBLGF7dkme0+CuTzpe9qu4Ne1/bWVxpDlTSuCpTlr V7FOiyWFA8u0Qq+KLI05P2BCRtuJWi9J/feD1/Boc4JI6DKooiuROo0tYEk0iYrr 6RcjNQKdvjNBdI8Ga4RRIb2K23l3VeZ1CG8NzB2xCsCc5f0jgpCTGc7trjVwQiQ= -----END CERTIFICATE-----Generated at Fri Jun 12 05:50:34 2026 by rpki-client