$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa File: 3c688a84-5bab-44fa-a324-bd3905146d46.roa (raw, json) Hash identifier: LLxMtPxImonm+j/9JAdynllOcUmpQVWPObE6btPO7so= Subject key identifier: 4F:5C:66:C4:CC:13:64:B9:70:26:83:52:7B:C0:DF:48:7E:18:12:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 215EB22A154F41827F196D9CE65D17CB89AE317F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa Signing time: Wed 15 Apr 2026 21:51:50 +0000 ROA not before: Wed 15 Apr 2026 21:51:50 +0000 ROA not after: Tue 14 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5e:b2:2a:15:4f:41:82:7f:19:6d:9c:e6:5d:17:cb:89:ae:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 15 21:51:50 2026 GMT Not After : Jul 14 23:59:59 2026 GMT Subject: serialNumber=3e511e1f94959d703be09321578a1b365ce10548c1b3fc9335f1c22873f2ab2c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:16:9b:c5:41:52:b2:72:8a:82:81:e5:77: da:52:fc:1f:59:9d:7a:a5:25:63:46:82:e1:66:a3: 74:69:83:c3:5c:75:13:54:4e:27:75:99:ab:3b:7a: d0:ce:48:42:8c:05:a5:39:a3:12:8a:ce:cc:6a:c5: e4:8f:66:eb:3d:c4:43:42:d5:33:8c:36:f9:cb:9e: 54:bf:b5:c7:13:f4:e7:df:11:e8:c8:00:f8:ef:eb: 01:aa:9e:81:4b:00:9d:8a:32:bc:57:fe:f9:35:1a: 14:98:ec:83:35:d2:51:d4:c9:96:52:c1:58:ef:75: ac:d8:5c:74:3c:1c:b0:5b:2d:e0:4e:3a:98:43:4a: a8:59:c0:e8:56:3b:6a:51:2c:53:47:33:44:87:df: 0b:b4:60:db:a3:3e:c7:ba:81:97:64:5a:3f:7b:78: 70:ab:de:9b:87:f0:8f:73:af:7d:73:a3:44:cb:22: 3c:e1:35:e7:2e:e6:d2:6f:7c:71:e4:38:d2:f8:01: 11:20:8c:b1:40:67:cc:d0:b2:1f:1e:a5:38:82:4f: 9d:15:67:70:b6:c0:92:ea:22:f3:2d:ba:38:ae:9b: bd:d7:6e:47:7f:3a:33:44:4e:ae:51:d8:08:1b:62: 57:d2:b4:37:df:74:ec:92:d8:31:30:ca:58:2b:45: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5C:66:C4:CC:13:64:B9:70:26:83:52:7B:C0:DF:48:7E:18:12:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3c688a84-5bab-44fa-a324-bd3905146d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:c000::/36 Signature Algorithm: sha256WithRSAEncryption 06:8e:f8:e9:bc:f7:33:49:da:7a:57:ea:1f:7e:9d:91:94:ee: 0e:bb:07:4d:ef:1b:83:53:0f:61:28:eb:d9:9d:ae:5e:d2:f5: 1c:3c:ea:fe:9b:ab:cb:67:33:8f:c7:8a:46:32:cd:11:43:ce: d4:b6:7f:43:db:5c:55:79:cd:64:93:14:20:d6:66:4e:20:b9: f0:da:c9:d4:fb:f4:87:27:ca:fd:e9:1a:19:58:cf:c5:28:6d: e4:ea:60:9d:45:0a:6f:e5:67:25:01:b1:f5:4f:78:30:d9:63: 0d:77:a8:2e:63:81:6e:5f:77:86:fc:f9:ed:2c:1a:97:2e:8c: 30:e3:64:2c:2f:fb:b0:45:6f:03:dd:0e:71:ed:18:c7:3d:e0: 0d:ca:d5:9e:41:c3:68:11:2f:c1:1f:fa:b4:34:4e:39:e8:43: 4c:29:0a:50:8e:a1:4f:01:b7:c3:e2:ca:84:8c:af:29:91:19: ce:60:72:df:a0:47:02:ef:38:2b:d1:54:bb:8c:e1:aa:c8:14: 47:fa:ab:bf:69:8f:f8:0c:5e:06:70:fa:f0:d3:79:5c:f0:3e: 6f:44:e9:c8:eb:88:03:9f:c0:f7:24:98:98:5f:70:17:3b:98: 4a:f9:3c:3d:72:d0:41:b8:36:55:66:d4:88:4e:8c:f6:1d:b2: a8:66:be:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIV6yKhVPQYJ/GW2c5l0Xy4muMX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDE1MjE1MTUwWhcNMjYwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTUxMWUxZjk0OTU5ZDcwM2JlMDkzMjE1NzhhMWIzNjVj ZTEwNTQ4YzFiM2ZjOTMzNWYxYzIyODczZjJhYjJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzyBabxUFSsnKKgoHld9pS/B9ZnXqlJWNGguFmo3Rpg8Nc dRNUTid1mas7etDOSEKMBaU5oxKKzsxqxeSPZus9xENC1TOMNvnLnlS/tccT9Off EejIAPjv6wGqnoFLAJ2KMrxX/vk1GhSY7IM10lHUyZZSwVjvdazYXHQ8HLBbLeBO OphDSqhZwOhWO2pRLFNHM0SH3wu0YNujPse6gZdkWj97eHCr3puH8I9zr31zo0TL IjzhNecu5tJvfHHkONL4AREgjLFAZ8zQsh8epTiCT50VZ3C2wJLqIvMtujium73X bkd/OjNETq5R2AgbYlfStDffdOyS2DEwylgrRSm9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUT1xmxMwTZLlwJoNSe8DfSH4YEs0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNjNjg4YTg0LTViYWItNDRmYS1hMzI0LWJkMzkwNTE0NmQ0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD7wDANBgkqhkiG9w0BAQsFAAOCAQEABo746bz3M0naelfqH36dkZTu DrsHTe8bg1MPYSjr2Z2uXtL1HDzq/pury2czj8eKRjLNEUPO1LZ/Q9tcVXnNZJMU INZmTiC58NrJ1Pv0hyfK/ekaGVjPxSht5OpgnUUKb+VnJQGx9U94MNljDXeoLmOB bl93hvz57Swaly6MMONkLC/7sEVvA90Oce0Yxz3gDcrVnkHDaBEvwR/6tDROOehD TCkKUI6hTwG3w+LKhIyvKZEZzmBy36BHAu84K9FUu4zhqsgUR/qrv2mP+AxeBnD6 8NN5XPA+b0TpyOuIA5/A9ySYmF9wFzuYSvk8PXLQQbg2VWbUiE6M9h2yqGa++g== -----END CERTIFICATE-----Generated at Fri Apr 17 05:57:59 2026 by rpki-client