$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa File: dc372e7b-796d-474f-9081-c4d593d48cd3.roa (raw, json) Hash identifier: fAWb/PvOLuEICn+YiXqDLyieSHDhjIfvLpd7LccklaU= Subject key identifier: 04:43:40:82:36:13:E7:5E:56:82:48:DF:E6:C8:C4:86:D4:2D:E5:49 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 73500EFE733BAAF47974CE0C7BA3F1977A599697 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa Signing time: Mon 02 Mar 2026 00:00:44 +0000 ROA not before: Mon 02 Mar 2026 00:00:44 +0000 ROA not after: Sun 31 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:50:0e:fe:73:3b:aa:f4:79:74:ce:0c:7b:a3:f1:97:7a:59:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 2 00:00:44 2026 GMT Not After : May 31 23:59:59 2026 GMT Subject: serialNumber=13d0611d88b92600bdd5a8bbcf48c1407edfc7b180f214832941c30d9e9fcfdf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:bc:4f:56:47:82:20:c3:94:7c:9e:88:d8: 42:0e:37:49:f8:0d:78:35:79:e6:bc:2e:82:a8:09: f2:df:07:0e:f6:c7:36:17:a3:ea:92:d9:16:99:3c: 00:de:ea:5f:63:a5:6b:8a:15:24:9d:3a:ce:f0:30: e6:3b:ea:f6:77:01:c3:9d:e0:3e:d3:f2:6c:55:71: 38:ab:8e:04:7c:dd:ec:52:7c:2f:30:7f:8f:c3:21: 1b:41:df:e8:73:c8:98:6f:9f:45:b6:6a:57:55:79: 7b:55:32:e6:2b:bf:b9:7c:ec:f0:97:6b:b0:2d:fc: c5:48:81:48:7c:79:d0:c8:e8:d1:57:c5:6e:7e:98: 93:92:ee:53:a1:d3:53:95:fb:77:09:f9:c8:fe:3a: 13:34:bd:a2:4f:cf:22:a8:b2:24:45:13:eb:b9:cd: 5e:8e:40:f1:3c:69:2a:b9:90:ea:5c:97:3b:f5:06: b1:bd:fa:3e:77:b9:17:39:3d:cd:9a:6d:8e:bc:2d: 3b:34:19:cf:74:f0:3b:0f:2b:ab:d0:79:a0:73:13: 83:41:54:a7:b8:86:29:7d:2e:58:33:35:91:be:72: 6f:cd:64:5c:0c:4c:25:be:ff:b8:f4:81:a0:1b:91: 05:4c:6a:d6:79:53:58:a7:37:ce:8e:ba:9b:36:9c: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:40:82:36:13:E7:5E:56:82:48:DF:E6:C8:C4:86:D4:2D:E5:49 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8100::/40 Signature Algorithm: sha256WithRSAEncryption 5d:cd:0a:03:8b:77:ac:2d:32:f5:15:80:96:72:00:04:ae:82: 3b:5c:8d:b4:ec:c0:38:70:97:6a:21:58:d0:40:10:f2:a7:5b: 64:6d:ce:b9:40:96:00:a1:98:61:5c:13:49:08:08:35:26:4b: e6:af:e8:73:44:1d:c0:69:32:7f:1a:f5:e1:76:90:6c:cf:f5: bf:55:d6:22:c7:35:a1:f0:c8:50:13:2d:ab:5d:60:0b:64:1e: 9b:06:a2:c8:0e:78:7e:a2:a2:f2:a7:1c:12:1d:7d:2b:49:9f: 36:a5:f5:89:b1:34:a2:72:be:e6:f9:23:e9:68:e4:70:d2:21: c1:3f:a0:80:05:c9:d4:dc:e5:fc:64:4e:5a:2c:af:74:d7:be: 07:49:5e:9b:a8:46:64:08:62:d0:c9:84:c9:db:08:a1:e3:75: e2:3f:4e:98:69:6c:29:24:4e:de:d4:7e:c3:2b:6a:9e:2f:74: 52:32:44:9a:65:63:35:40:f0:c9:5f:26:a5:8d:44:36:ce:0c: c2:e8:ce:2f:bb:11:24:07:e9:b7:54:1a:9b:c7:b7:d6:08:e8: c1:45:c8:a0:78:3e:d7:50:d6:07:94:99:d9:d2:d2:f0:0b:a4: 6d:06:c2:6c:1c:a7:fe:75:f8:46:2d:14:03:1f:c2:44:eb:03: 00:dd:33:a8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUc1AO/nM7qvR5dM4Me6Pxl3pZlpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAyMDAwMDQ0WhcNMjYwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2QwNjExZDg4YjkyNjAwYmRkNWE4YmJjZjQ4YzE0MDdl ZGZjN2IxODBmMjE0ODMyOTQxYzMwZDllOWZjZmRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwDbxPVkeCIMOUfJ6I2EION0n4DXg1eea8LoKoCfLfBw72 xzYXo+qS2RaZPADe6l9jpWuKFSSdOs7wMOY76vZ3AcOd4D7T8mxVcTirjgR83exS fC8wf4/DIRtB3+hzyJhvn0W2aldVeXtVMuYrv7l87PCXa7At/MVIgUh8edDI6NFX xW5+mJOS7lOh01OV+3cJ+cj+OhM0vaJPzyKosiRFE+u5zV6OQPE8aSq5kOpclzv1 BrG9+j53uRc5Pc2abY68LTs0Gc908DsPK6vQeaBzE4NBVKe4hil9LlgzNZG+cm/N ZFwMTCW+/7j0gaAbkQVMatZ5U1inN86Oups2nOeRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBENAgjYT515Wgkjf5sjEhtQt5UkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RjMzcyZTdiLTc5NmQtNDc0Zi05MDgxLWM0ZDU5M2Q0OGNkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgTANBgkqhkiG9w0BAQsFAAOCAQEAXc0KA4t3rC0y9RWAlnIABK6C O1yNtOzAOHCXaiFY0EAQ8qdbZG3OuUCWAKGYYVwTSQgINSZL5q/oc0QdwGkyfxr1 4XaQbM/1v1XWIsc1ofDIUBMtq11gC2QemwaiyA54fqKi8qccEh19K0mfNqX1ibE0 onK+5vkj6WjkcNIhwT+ggAXJ1Nzl/GROWiyvdNe+B0lem6hGZAhi0MmEydsIoeN1 4j9OmGlsKSRO3tR+wytqni90UjJEmmVjNUDwyV8mpY1ENs4MwujOL7sRJAfpt1Qa m8e31gjowUXIoHg+11DWB5SZ2dLS8AukbQbCbByn/nX4Ri0UAx/CROsDAN0zqA== -----END CERTIFICATE-----Generated at Mon Mar 23 16:04:11 2026 by rpki-client