$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa File: 9f647429-dee3-462f-9ab5-be55ce250b9b.roa (raw, json) Hash identifier: TodY0FSeYeAdSFPKBRi+mwo/a0tcMe0rywZudOLcPLY= Subject key identifier: 55:B0:A0:1C:F3:63:DD:55:99:E1:01:32:AE:62:0A:BE:48:20:C7:13 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3FF53362B59FE8B0DD5274044D4E43A8D1227EC6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa Signing time: Fri 03 Apr 2026 02:30:09 +0000 ROA not before: Fri 03 Apr 2026 02:30:09 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f5:33:62:b5:9f:e8:b0:dd:52:74:04:4d:4e:43:a8:d1:22:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 3 02:30:09 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=fad7f80369d51df286f0f2d05d78e280af3ef1c6b2bd221a31c31a2c92145586, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:73:27:bb:ad:fc:43:2c:27:18:e2:0e:5b: 49:c1:67:42:b8:de:0f:cf:7c:f6:2d:8f:0a:ef:22: 59:8a:29:f3:f3:dc:c2:78:73:a0:5c:c8:6d:58:bd: f7:42:82:3c:c0:44:05:7f:42:c9:c8:8d:24:e8:57: 2a:b8:94:bb:2b:2d:1e:68:f4:b0:6c:5d:39:19:d2: 56:3f:0c:b3:14:93:91:bd:cf:fa:79:9d:4a:c7:45: 40:83:79:3f:70:10:8a:0f:75:36:7a:78:4e:f7:6f: 08:d4:d4:af:30:b6:1b:ca:c8:15:87:22:53:d2:67: ed:92:a2:42:80:43:ec:90:51:09:b9:f1:a6:e2:11: cc:2a:7c:59:d2:f0:e6:a9:a1:17:47:f8:c7:d5:55: 1a:b9:fe:39:84:c4:00:2b:49:42:d5:d8:8d:75:ee: 28:a6:c0:cd:07:f3:58:04:c5:8e:59:e0:85:ad:4a: 59:32:60:8f:96:d6:c2:11:7d:bc:38:72:40:bf:22: 81:98:45:cf:2d:3f:24:8f:ed:49:a1:c1:1e:b4:f0: 9f:39:22:08:88:a8:5d:82:55:99:e7:3f:e3:f8:c0: 18:15:25:bf:a7:e5:77:ee:a1:43:9a:e3:83:13:e0: e7:60:0f:78:4b:92:3d:43:a5:c0:f7:c9:99:d9:2b: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:A0:1C:F3:63:DD:55:99:E1:01:32:AE:62:0A:BE:48:20:C7:13 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9f647429-dee3-462f-9ab5-be55ce250b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:70::/44 Signature Algorithm: sha256WithRSAEncryption 8e:2a:32:1d:ad:dc:65:db:8d:e1:e2:b0:79:0e:af:7d:86:46: 97:02:3b:ac:6c:1f:c3:39:5e:18:5a:96:71:d5:e0:8e:2f:3b: e5:47:ed:b3:1c:4a:45:bc:33:04:42:ab:32:b8:2a:a9:fd:1b: 02:74:e8:a3:2e:44:66:aa:ca:4a:71:2f:7a:5c:a4:85:b9:41: a7:bb:48:bb:41:76:8c:3c:24:14:13:6c:20:f5:cb:7e:94:d9: 72:e1:06:25:10:19:11:de:64:0d:47:1e:62:d6:38:53:90:01: 1d:58:03:8b:36:ec:ae:2b:40:0b:6d:23:b6:c5:11:92:b8:61: 74:71:c2:ed:34:0d:9f:57:be:07:77:63:25:7c:df:65:96:d0: 00:e8:66:eb:0e:c0:dc:d8:6b:fc:69:b0:c0:c0:fc:0f:9e:41: 6d:91:4c:40:00:bb:02:55:47:51:c8:af:db:98:cb:3d:7f:0b: dc:f2:67:88:7a:08:63:8e:f1:91:4d:58:f1:f2:ce:d5:cf:ea: 2d:3d:91:72:fe:87:6c:3a:5b:13:3a:e1:14:5b:9b:43:82:3e: df:e9:53:4d:64:eb:60:dc:7b:47:e9:be:ad:6f:9c:e9:41:ff: 84:ec:23:99:56:d0:da:1f:bc:5e:b4:73:ae:1f:9f:48:61:d1: d6:60:78:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP/UzYrWf6LDdUnQETU5DqNEifsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDAzMDIzMDA5WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWQ3ZjgwMzY5ZDUxZGYyODZmMGYyZDA1ZDc4ZTI4MGFm M2VmMWM2YjJiZDIyMWEzMWMzMWEyYzkyMTQ1NTg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmsHMnu638QywnGOIOW0nBZ0K43g/PfPYtjwrvIlmKKfPz 3MJ4c6BcyG1YvfdCgjzARAV/QsnIjSToVyq4lLsrLR5o9LBsXTkZ0lY/DLMUk5G9 z/p5nUrHRUCDeT9wEIoPdTZ6eE73bwjU1K8wthvKyBWHIlPSZ+2SokKAQ+yQUQm5 8abiEcwqfFnS8OapoRdH+MfVVRq5/jmExAArSULV2I117iimwM0H81gExY5Z4IWt SlkyYI+W1sIRfbw4ckC/IoGYRc8tPySP7UmhwR608J85IgiIqF2CVZnnP+P4wBgV Jb+n5XfuoUOa44MT4OdgD3hLkj1DpcD3yZnZK17TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVbCgHPNj3VWZ4QEyrmIKvkggxxMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlmNjQ3NDI5LWRlZTMtNDYyZi05YWI1LWJlNTVjZTI1MGI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAHAwDQYJKoZIhvcNAQELBQADggEBAI4qMh2t3GXbjeHisHkOr32G RpcCO6xsH8M5XhhalnHV4I4vO+VH7bMcSkW8MwRCqzK4Kqn9GwJ06KMuRGaqykpx L3pcpIW5Qae7SLtBdow8JBQTbCD1y36U2XLhBiUQGRHeZA1HHmLWOFOQAR1YA4s2 7K4rQAttI7bFEZK4YXRxwu00DZ9Xvgd3YyV832WW0ADoZusOwNzYa/xpsMDA/A+e QW2RTEAAuwJVR1HIr9uYyz1/C9zyZ4h6CGOO8ZFNWPHyztXP6i09kXL+h2w6WxM6 4RRbm0OCPt/pU01k62Dce0fpvq1vnOlB/4TsI5lW0NofvF60c64fn0hh0dZgeCs= -----END CERTIFICATE-----Generated at Sun Apr 19 09:25:10 2026 by rpki-client