$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa File: 7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa (raw, json) Hash identifier: ApfqocgdFW9UFBjPWWdLJgUzJdntUvXRDE3gwBeW+FE= Subject key identifier: DA:AD:9E:0C:42:E3:18:A0:C1:6A:7F:24:B9:DD:B1:0B:C4:8B:06:10 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4BCC4268DA950D2C833A78D3602D7A6E548D94A1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa Signing time: Sat 11 Apr 2026 00:00:04 +0000 ROA not before: Sat 11 Apr 2026 00:00:04 +0000 ROA not after: Fri 10 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cc:42:68:da:95:0d:2c:83:3a:78:d3:60:2d:7a:6e:54:8d:94:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 11 00:00:04 2026 GMT Not After : Jul 10 23:59:59 2026 GMT Subject: serialNumber=b10f902ac7e7a22e75bcace13acc987fe27e4a2b7bad3c2de5297d4d6822f831, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:95:64:50:8c:92:f4:fa:3d:99:c7:82:f2:37: 2f:3a:d6:7a:0d:be:98:60:0c:33:28:91:cd:c9:bc: 34:cd:fc:30:18:0c:72:34:f5:7f:02:72:67:d2:eb: f6:78:b7:79:a2:d2:d2:d8:de:d7:f8:a6:c3:51:c9: fe:2b:54:b0:f1:ca:65:0a:52:36:8a:8e:a2:00:47: 00:3a:9e:8e:ae:c1:10:dc:0c:71:bf:53:dd:ad:bb: 6d:8f:fa:cb:f5:dd:e4:4b:da:b5:fb:a7:f7:2b:79: 3b:53:9e:e0:18:92:cf:1f:e1:8d:44:9e:d4:21:b2: b8:32:1c:82:9c:23:54:49:8c:93:48:8f:c8:b3:aa: 5f:6b:3a:3c:b5:59:57:c7:29:c4:46:d8:4d:67:33: ae:2d:a3:35:1f:c3:90:e2:b0:1d:dd:5f:06:95:08: a5:9a:eb:bc:46:d2:47:f2:6c:8a:e1:41:79:4e:0e: 73:e1:99:c1:b3:04:19:1a:aa:e3:9f:b4:a8:3b:fa: d0:ed:ac:1f:1e:1f:4f:c5:4c:88:29:a8:88:75:9b: 8a:81:e4:04:c2:33:37:e5:11:ae:4b:02:60:c4:bc: 16:58:0e:3d:3f:fc:34:37:4f:bb:81:91:15:6b:3a: 2e:a7:19:06:b4:48:ad:d0:3d:0f:59:8c:b2:c3:71: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:9E:0C:42:E3:18:A0:C1:6A:7F:24:B9:DD:B1:0B:C4:8B:06:10 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7028::/48 Signature Algorithm: sha256WithRSAEncryption 93:49:ab:fd:7b:9c:24:5d:ea:8a:a7:e9:47:97:d4:95:70:fd: 14:45:18:91:ba:31:db:08:e2:97:e3:f2:1b:51:4f:42:b4:52: 97:cc:06:de:13:cf:59:da:f1:4a:be:a2:d3:fb:82:55:76:25: cb:f2:00:2b:8b:28:dc:0b:50:a6:5a:82:5b:51:05:b9:e9:f7: 34:c2:af:04:36:4a:fe:ad:53:5d:c4:c4:5e:e6:fe:e2:bb:72: 15:ba:57:5d:92:cb:3c:c2:cd:f5:eb:75:6b:e7:69:cf:da:6d: bf:39:65:62:ed:a3:4e:ed:6a:c3:81:f3:97:5a:cc:7c:72:83: 00:3a:fa:4c:da:6a:f4:1b:8e:48:f6:f3:6c:38:33:15:ab:d4: 31:ef:6b:90:ca:b5:07:9d:42:fb:9c:48:5e:2d:c0:95:26:2f: 6d:66:74:ff:36:36:a3:5a:c7:89:c7:2b:08:64:d6:48:69:a3: 05:db:ab:b2:ae:bb:3c:2d:61:67:cd:f0:7a:03:dc:8b:36:1d: a2:4f:87:88:e5:24:6d:b3:31:c0:be:f9:95:09:73:6f:06:be: 9f:80:0f:1f:c4:f6:0a:a1:1f:6c:0b:24:f4:98:c5:fc:6c:cc: c5:2c:1d:6f:0b:ff:3e:ff:2e:35:02:37:53:ae:5e:2e:7b:fd: df:56:e1:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS8xCaNqVDSyDOnjTYC16blSNlKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDExMDAwMDA0WhcNMjYwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTBmOTAyYWM3ZTdhMjJlNzViY2FjZTEzYWNjOTg3ZmUy N2U0YTJiN2JhZDNjMmRlNTI5N2Q0ZDY4MjJmODMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQlWRQjJL0+j2Zx4LyNy861noNvphgDDMokc3JvDTN/DAY DHI09X8CcmfS6/Z4t3mi0tLY3tf4psNRyf4rVLDxymUKUjaKjqIARwA6no6uwRDc DHG/U92tu22P+sv13eRL2rX7p/creTtTnuAYks8f4Y1EntQhsrgyHIKcI1RJjJNI j8izql9rOjy1WVfHKcRG2E1nM64tozUfw5DisB3dXwaVCKWa67xG0kfybIrhQXlO DnPhmcGzBBkaquOftKg7+tDtrB8eH0/FTIgpqIh1m4qB5ATCMzflEa5LAmDEvBZY Dj0//DQ3T7uBkRVrOi6nGQa0SK3QPQ9ZjLLDcbFVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2q2eDELjGKDBan8kud2xC8SLBhAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdhZDlhMWQ5LTlkZTgtNDQxOC04YTk3LWZkN2NmN2E1ZmU3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycCgwDQYJKoZIhvcNAQELBQADggEBAJNJq/17nCRd6oqn6UeX1JVw /RRFGJG6MdsI4pfj8htRT0K0UpfMBt4Tz1na8Uq+otP7glV2JcvyACuLKNwLUKZa gltRBbnp9zTCrwQ2Sv6tU13ExF7m/uK7chW6V12SyzzCzfXrdWvnac/abb85ZWLt o07tasOB85dazHxygwA6+kzaavQbjkj282w4MxWr1DHva5DKtQedQvucSF4twJUm L21mdP82NqNax4nHKwhk1khpowXbq7KuuzwtYWfN8HoD3Is2HaJPh4jlJG2zMcC+ +ZUJc28Gvp+ADx/E9gqhH2wLJPSYxfxszMUsHW8L/z7/LjUCN1OuXi57/d9W4dE= -----END CERTIFICATE-----Generated at Fri Apr 17 07:40:34 2026 by rpki-client