$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa File: 23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa (raw, json) Hash identifier: V2xkP45BUdEsWLMiqpM3UKDuHlccHNzPH7oSMkUS9tg= Subject key identifier: 66:BC:47:06:B2:25:AB:B0:89:49:CD:DB:7E:00:EF:CE:1B:6A:F3:D5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 57F1D9DCF89794AF413973700EE71C44DC5E6BD9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa Signing time: Wed 20 May 2026 00:40:29 +0000 ROA not before: Wed 20 May 2026 00:40:29 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f1:d9:dc:f8:97:94:af:41:39:73:70:0e:e7:1c:44:dc:5e:6b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:29 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=66ec2ea5643cf3b0957e0f664035fa13e209003acc45c9041555532fc14a93c7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:72:fa:51:8b:2a:d7:5a:58:98:1f:a9:77: c8:1b:79:6a:42:f1:a2:98:1d:c8:4d:6e:6b:bb:78: e1:13:2b:7c:f2:0f:6f:4a:96:34:1d:c0:03:29:94: a1:31:f3:3d:d6:ac:ae:78:d9:df:26:b0:97:76:ba: 4c:ea:a6:1a:23:0f:b5:3a:1e:16:7c:5a:65:5e:1d: f6:52:77:91:c4:ea:85:d3:e0:c4:8d:e0:78:01:22: 6e:6c:84:bc:2c:d9:be:79:82:fa:77:0d:10:02:e4: 30:7a:83:5b:e9:0c:e0:59:58:9d:0f:65:c0:c8:ee: 7f:2f:87:6a:92:20:40:0f:e7:de:77:50:2c:8b:67: df:d0:6f:95:83:dc:0e:c1:a6:fb:1e:35:60:a2:46: 6f:23:99:ad:4a:78:2a:51:ad:8e:1c:1f:cb:fe:96: 0e:07:3f:26:56:f1:71:fd:d5:1b:f0:76:11:cd:53: f2:80:88:54:4a:c1:df:84:15:8f:ae:8b:84:b0:aa: 29:1a:fa:1c:9d:4b:8c:5b:45:6a:f6:e1:55:03:0c: 2b:8a:94:74:e5:8f:a7:ac:5e:1c:ee:3e:d2:27:90: cb:75:e7:7b:76:0f:31:9d:b2:ca:47:95:9b:d8:f6: 1d:f2:d1:ec:84:bc:66:4d:01:c2:de:8d:15:a1:b9: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BC:47:06:B2:25:AB:B0:89:49:CD:DB:7E:00:EF:CE:1B:6A:F3:D5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f107::/48 Signature Algorithm: sha256WithRSAEncryption 93:83:77:4e:f1:fd:fe:4f:c6:5b:d2:ed:ad:a0:72:2c:8b:57: 23:dc:3b:58:39:60:14:41:1a:31:86:04:30:55:ce:29:96:e9: 55:f0:e8:a0:13:30:33:a0:9f:66:64:d5:7d:e2:df:49:39:70: aa:14:33:32:87:21:ac:51:2f:23:b8:3e:36:b2:2c:59:ed:31: cb:ef:68:a1:85:01:15:f4:3c:21:5c:96:74:3d:3a:43:e5:da: cc:58:df:c0:c7:94:de:e7:97:6b:80:fd:3a:0a:2f:c5:f7:19: c7:10:cd:6a:6d:f6:b7:95:26:2a:ef:3b:df:85:64:5c:3b:b0: de:81:e5:a1:fb:77:c2:79:6e:ee:c6:1e:56:24:77:ac:5e:12: 3d:04:9f:a2:6d:d6:36:c9:96:a3:ec:c6:ea:d4:06:7a:c9:71: 89:04:10:9c:6f:13:66:59:5f:20:0e:c2:f6:94:c7:69:d6:e0: 1b:ba:f6:2f:dc:5f:1a:19:54:38:3b:44:5c:f3:e2:24:6e:19: 2b:a1:07:e3:39:ce:ad:aa:e8:2a:95:95:cb:95:06:ef:12:0c: 2a:ba:6d:65:28:61:73:64:8c:91:7b:08:a6:95:c3:61:8f:fe: 21:04:69:e4:de:1d:19:df:db:3d:e5:ab:0e:a5:15:17:80:23: 08:21:99:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV/HZ3PiXlK9BOXNwDuccRNxea9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDI5WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmVjMmVhNTY0M2NmM2IwOTU3ZTBmNjY0MDM1ZmExM2Uy MDkwMDNhY2M0NWM5MDQxNTU1NTMyZmMxNGE5M2M3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA8HL6UYsq11pYmB+pd8gbeWpC8aKYHchNbmu7eOETK3zy D29KljQdwAMplKEx8z3WrK542d8msJd2ukzqphojD7U6HhZ8WmVeHfZSd5HE6oXT 4MSN4HgBIm5shLws2b55gvp3DRAC5DB6g1vpDOBZWJ0PZcDI7n8vh2qSIEAP5953 UCyLZ9/Qb5WD3A7BpvseNWCiRm8jma1KeCpRrY4cH8v+lg4HPyZW8XH91RvwdhHN U/KAiFRKwd+EFY+ui4Swqika+hydS4xbRWr24VUDDCuKlHTlj6esXhzuPtInkMt1 53t2DzGdsspHlZvY9h3y0eyEvGZNAcLejRWhuegZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZrxHBrIlq7CJSc3bfgDvzhtq89UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIzYjhlMDg5LTE5NzktNDJmMS05ZDRlLWVkNzQyOGEyNWYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QcwDQYJKoZIhvcNAQELBQADggEBAJODd07x/f5PxlvS7a2gciyL VyPcO1g5YBRBGjGGBDBVzimW6VXw6KATMDOgn2Zk1X3i30k5cKoUMzKHIaxRLyO4 PjayLFntMcvvaKGFARX0PCFclnQ9OkPl2sxY38DHlN7nl2uA/ToKL8X3GccQzWpt 9reVJirvO9+FZFw7sN6B5aH7d8J5bu7GHlYkd6xeEj0En6Jt1jbJlqPsxurUBnrJ cYkEEJxvE2ZZXyAOwvaUx2nW4Bu69i/cXxoZVDg7RFzz4iRuGSuhB+M5zq2q6CqV lcuVBu8SDCq6bWUoYXNkjJF7CKaVw2GP/iEEaeTeHRnf2z3lqw6lFReAIwghmYU= -----END CERTIFICATE-----Generated at Wed Jun 17 08:42:01 2026 by rpki-client