$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa File: 644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa (raw, json) Hash identifier: KepucJxha3bOk5BtphMuOgZFrcn8k5IJ9wVhVaD+zUM= Subject key identifier: F0:C6:27:75:32:5D:6A:1B:7D:1F:57:44:0D:C9:9C:D4:DD:AF:12:41 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6B641530C1E76E51FAE7B17450A54C0212294D03 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa Signing time: Wed 20 May 2026 00:40:12 +0000 ROA not before: Wed 20 May 2026 00:40:12 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:64:15:30:c1:e7:6e:51:fa:e7:b1:74:50:a5:4c:02:12:29:4d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:12 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=6be58bccd27b554e4cbb99882e9e4f0e86abf46cb5c4571d8b26d8fb88ac7ba6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:5a:3b:77:57:cb:3a:1d:e8:a9:7d:d2:89: f8:dc:a6:ae:29:85:22:4d:0d:bd:f0:a0:49:b5:0a: 86:09:89:a3:a8:c9:7d:bb:38:a7:d9:63:31:20:14: ea:d5:54:f4:e2:f4:e6:60:8c:e6:4d:99:2b:9f:53: 66:c7:ad:a6:6e:d1:0f:5b:26:b6:f6:b4:94:24:9f: 7f:22:5d:12:68:9c:56:41:16:37:c2:8c:52:70:d7: 81:ef:4f:0c:41:98:5c:02:b8:a7:bb:be:8b:24:14: 4d:aa:40:9c:28:c8:e1:87:11:bd:09:4b:26:06:3f: c3:a3:05:78:e4:6c:fa:cc:e4:07:90:58:45:6c:9a: fb:f2:60:da:a0:5f:ea:c2:63:c3:72:54:5c:1c:01: 4f:16:89:14:7d:72:5e:d4:6c:56:60:db:9f:15:60: 85:b3:71:dc:f1:81:0a:f8:b9:ee:32:48:c6:3f:81: 57:9b:26:3b:88:11:c5:87:f2:88:2d:40:e4:39:5e: b9:c0:65:62:96:2b:8b:1c:ec:9f:c0:16:86:5e:a7: 49:1f:63:09:7c:0c:a5:cf:da:0d:b8:73:0c:d8:33: 93:3c:66:06:e3:a1:8f:f2:d6:40:d8:5f:2b:3f:35: 6b:ac:70:d2:f4:63:ec:d3:63:4c:b5:9f:87:b7:d8: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:27:75:32:5D:6A:1B:7D:1F:57:44:0D:C9:9C:D4:DD:AF:12:41 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption 7a:37:e8:2d:b8:ef:a2:48:d9:a8:7f:71:84:21:43:6b:ae:43: f1:03:db:6d:9f:f2:c0:be:c2:11:08:29:44:76:ac:c6:fc:d3: 5a:80:02:aa:e9:88:35:8a:64:fb:53:a9:f0:ff:35:ed:c8:e7: c2:c9:3e:a5:d0:02:1d:4c:60:b4:ad:e2:d8:d9:83:fa:38:f9: 4a:d4:78:77:42:6f:39:06:67:ff:67:73:0a:00:0d:7c:e5:5b: 4d:6f:43:c8:d9:5f:be:0e:71:12:1f:a5:b0:1d:33:dd:77:78: 30:0b:2b:64:0b:f8:ad:35:7e:c0:a2:88:ae:cb:dc:99:ab:11: 4f:71:50:9e:fe:3f:c3:fe:7d:c1:05:00:d0:c8:aa:ff:e4:30: ff:0d:35:92:33:18:99:f3:5d:b3:f4:c1:5c:2b:63:33:92:7b: f3:e1:b1:7b:99:f2:ba:48:f8:e2:5c:b0:ac:b8:4b:65:94:01: 09:ee:74:97:34:15:27:77:64:a4:f5:77:15:84:9a:98:88:55: ba:31:7f:03:37:bd:d5:c3:d4:c2:f3:d4:b1:dc:ae:df:a8:6b: 1e:80:39:16:06:87:cb:b8:40:97:53:41:f3:4f:56:75:eb:8e: 5a:83:df:59:5d:8f:5d:1b:8c:c9:61:d0:8d:58:27:c4:62:8e: b7:5c:65:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa2QVMMHnblH657F0UKVMAhIpTQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDEyWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmU1OGJjY2QyN2I1NTRlNGNiYjk5ODgyZTllNGYwZTg2 YWJmNDZjYjVjNDU3MWQ4YjI2ZDhmYjg4YWM3YmE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8zFo7d1fLOh3oqX3Sifjcpq4phSJNDb3woEm1CoYJiaOo yX27OKfZYzEgFOrVVPTi9OZgjOZNmSufU2bHraZu0Q9bJrb2tJQkn38iXRJonFZB FjfCjFJw14HvTwxBmFwCuKe7voskFE2qQJwoyOGHEb0JSyYGP8OjBXjkbPrM5AeQ WEVsmvvyYNqgX+rCY8NyVFwcAU8WiRR9cl7UbFZg258VYIWzcdzxgQr4ue4ySMY/ gVebJjuIEcWH8ogtQOQ5XrnAZWKWK4sc7J/AFoZep0kfYwl8DKXP2g24cwzYM5M8 ZgbjoY/y1kDYXys/NWuscNL0Y+zTY0y1n4e32CgTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8MYndTJdaht9H1dEDcmc1N2vEkEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGMxMjQ5LWU2NTEtNDBmMy1hZTZjLTVhN2I2ZDhhMzc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAHo36C2476JI2ah/cYQhQ2uu Q/ED222f8sC+whEIKUR2rMb801qAAqrpiDWKZPtTqfD/Ne3I58LJPqXQAh1MYLSt 4tjZg/o4+UrUeHdCbzkGZ/9ncwoADXzlW01vQ8jZX74OcRIfpbAdM913eDALK2QL +K01fsCiiK7L3JmrEU9xUJ7+P8P+fcEFANDIqv/kMP8NNZIzGJnzXbP0wVwrYzOS e/PhsXuZ8rpI+OJcsKy4S2WUAQnudJc0FSd3ZKT1dxWEmpiIVboxfwM3vdXD1MLz 1LHcrt+oax6AORYGh8u4QJdTQfNPVnXrjlqD31ldj10bjMlh0I1YJ8RijrdcZX0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:13:35 2026 by rpki-client