$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa File: eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa (raw, json) Hash identifier: CU8ns0wFHW+sT41tEcyNfVZh1bu09aNw3kqj2GNAC+4= Subject key identifier: 28:79:18:EC:18:59:CB:E0:92:38:47:C6:B4:29:91:43:77:B0:1C:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 56DF90EB67E42B460CA6E540BB8686A04164ECAB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa Signing time: Fri 20 Mar 2026 19:51:48 +0000 ROA not before: Fri 20 Mar 2026 19:51:48 +0000 ROA not after: Thu 18 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:12::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:df:90:eb:67:e4:2b:46:0c:a6:e5:40:bb:86:86:a0:41:64:ec:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 20 19:51:48 2026 GMT Not After : Jun 18 23:59:59 2026 GMT Subject: serialNumber=0d75c31c9d907c57c25120e4b68c078fc5a44cb6563b370950393173d35f338c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:33:30:78:d6:7c:9a:ef:64:85:4a:d0:71: f7:52:1a:58:ab:1d:e2:bc:82:5d:59:2a:6a:45:19: 94:0c:d3:dc:58:c7:44:fa:04:3a:9d:1b:f1:17:d5: 33:e7:b0:cc:4f:8a:ca:68:9c:0d:12:42:14:48:c9: eb:36:5d:51:b0:b2:29:96:d7:05:71:2e:6b:f3:f2: 28:4a:d9:c5:bc:5d:c4:28:e4:6c:b3:b6:80:f9:56: bb:b3:c8:f6:df:17:7c:3e:fd:7e:35:d5:ca:2b:e9: e5:1b:ca:73:dc:e1:fe:2e:a0:4f:f5:1a:47:aa:9d: df:58:86:3a:14:7c:d4:fa:89:f8:d4:97:c1:81:df: 99:e2:41:ff:9d:2a:1a:7f:0b:d9:09:a5:23:77:c3: 7f:ec:be:84:06:c7:e2:b1:13:9b:06:61:5f:82:12: de:05:f6:8c:0c:0b:2b:11:bb:55:07:2e:cd:f1:35: 45:95:16:84:ab:97:d0:36:5f:a6:db:c6:c9:a9:7d: 99:5f:d3:53:53:63:75:72:9e:a8:2a:75:eb:26:88: 80:35:f4:d7:9f:25:02:45:0c:04:f8:f9:cb:fc:db: a8:d3:54:08:1d:2c:f7:9c:cc:3b:53:cb:1c:d4:dc: fd:1e:4a:a4:67:3b:b1:8e:f7:33:78:99:b7:ba:86: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:18:EC:18:59:CB:E0:92:38:47:C6:B4:29:91:43:77:B0:1C:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:12::/47 Signature Algorithm: sha256WithRSAEncryption 51:a1:61:09:bb:f8:7c:be:56:d8:a2:16:09:bb:76:a3:b6:7a: 02:21:97:9d:cb:fa:ab:dc:f9:b3:ca:ff:87:d8:62:eb:19:6c: 58:90:e3:45:b0:c3:86:cb:e8:b0:a0:a8:be:f3:bc:74:f1:47: 82:53:21:f4:79:50:74:7f:d5:50:38:c7:05:00:b6:40:1b:0a: 43:2c:69:2b:16:31:77:e3:d4:99:55:e7:9e:d6:00:4a:ee:da: 55:71:3d:71:1a:cc:ad:bd:c5:c5:c5:65:8e:0e:f5:ae:08:88: ee:cf:e0:9a:93:e7:36:c0:c0:f9:e4:d9:6c:f7:1a:7a:44:78: 01:32:e3:0f:52:81:e3:16:c6:15:18:e6:ba:a4:34:0f:01:8e: ea:ef:9d:56:f4:14:2b:49:22:d4:0e:ff:c8:fa:4c:6e:3f:dc: af:d8:1c:dd:21:d1:f7:37:65:f4:14:6e:c3:d2:e8:3b:6b:1b: 1c:4d:fd:04:48:c0:81:3e:07:0d:7e:c2:ca:c8:2c:21:13:17: 32:af:f9:d9:2d:6b:54:2e:37:e4:7a:b3:73:60:99:f3:ce:03: fe:35:2b:4b:5f:e5:88:0d:e2:ca:d0:9e:a0:37:2d:bf:ba:40: bf:c2:bb:8d:08:ea:aa:8e:36:d3:a1:33:76:6e:11:df:36:8d: 7e:fa:be:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVt+Q62fkK0YMpuVAu4aGoEFk7KswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzIwMTk1MTQ4WhcNMjYwNjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDc1YzMxYzlkOTA3YzU3YzI1MTIwZTRiNjhjMDc4ZmM1 YTQ0Y2I2NTYzYjM3MDk1MDM5MzE3M2QzNWYzMzhjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdDjMweNZ8mu9khUrQcfdSGlirHeK8gl1ZKmpFGZQM09xY x0T6BDqdG/EX1TPnsMxPisponA0SQhRIyes2XVGwsimW1wVxLmvz8ihK2cW8XcQo 5GyztoD5VruzyPbfF3w+/X411cor6eUbynPc4f4uoE/1Gkeqnd9YhjoUfNT6ifjU l8GB35niQf+dKhp/C9kJpSN3w3/svoQGx+KxE5sGYV+CEt4F9owMCysRu1UHLs3x NUWVFoSrl9A2X6bbxsmpfZlf01NTY3VynqgqdesmiIA19NefJQJFDAT4+cv826jT VAgdLPeczDtTyxzU3P0eSqRnO7GO9zN4mbe6hgF3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKHkY7BhZy+CSOEfGtCmRQ3ewHDgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ViMjIzMjNmLWVkOWQtNGNjMS04YmIxLWI5ZGQ5N2JiMTJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDxABIwDQYJKoZIhvcNAQELBQADggEBAFGhYQm7+Hy+VtiiFgm7dqO2 egIhl53L+qvc+bPK/4fYYusZbFiQ40Www4bL6LCgqL7zvHTxR4JTIfR5UHR/1VA4 xwUAtkAbCkMsaSsWMXfj1JlV557WAEru2lVxPXEazK29xcXFZY4O9a4IiO7P4JqT 5zbAwPnk2Wz3GnpEeAEy4w9SgeMWxhUY5rqkNA8BjurvnVb0FCtJItQO/8j6TG4/ 3K/YHN0h0fc3ZfQUbsPS6DtrGxxN/QRIwIE+Bw1+wsrILCETFzKv+dkta1QuN+R6 s3NgmfPOA/41K0tf5YgN4srQnqA3Lb+6QL/Cu40I6qqONtOhM3ZuEd82jX76vgY= -----END CERTIFICATE-----Generated at Mon Mar 23 16:01:47 2026 by rpki-client