$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa File: a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa (raw, json) Hash identifier: bK360RHyhHbQlqSgcmVnkmRuwEdIqenE3q1teY4ddbM= Subject key identifier: 7A:4E:61:0F:07:FE:A2:3C:F9:18:2F:54:4F:7D:8E:9A:7E:E7:55:92 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D38FAF8E1468240674D3907FC5BA901631C89B0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa Signing time: Wed 20 May 2026 00:40:07 +0000 ROA not before: Wed 20 May 2026 00:40:07 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:38:fa:f8:e1:46:82:40:67:4d:39:07:fc:5b:a9:01:63:1c:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:07 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=50e95389ad7fd672b8c1f2a47e74aa220a900ea33f95c6736b690bbd0b94c119, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:b7:62:e3:ce:a3:35:18:61:f3:33:d0:45: 8a:ae:95:0d:8f:34:2e:89:4f:d2:f3:4c:6f:2f:d8: b9:42:ac:f2:58:a0:fe:bb:67:9e:ad:ca:0f:6c:1c: 48:ff:33:0f:40:bd:5a:9a:f9:c4:53:1a:1a:70:04: ae:03:65:8d:b0:a4:6a:3d:2a:04:1b:08:48:58:09: bb:0b:fb:8e:dc:ce:78:53:98:85:89:ac:94:9e:be: 4c:39:4f:bd:dc:2c:60:eb:66:46:4a:62:fb:77:01: 1d:f1:49:fc:b4:03:75:e5:1c:29:de:c0:4f:72:9b: 39:65:57:dc:39:5d:d1:f9:83:e1:04:9b:b7:ab:9b: d2:7f:e1:55:1e:12:64:41:3e:7f:73:ab:4d:ed:9c: 8f:94:98:b5:30:ee:6a:da:35:e7:8a:c9:e4:b3:f2: af:ff:1b:f3:77:1f:7c:ca:bd:5f:c8:50:3f:01:f2: 4d:05:db:ad:69:c4:4e:66:29:84:3a:37:48:42:e1: 92:e7:02:63:44:5e:f1:ed:f8:1d:e5:9f:64:18:1d: 48:9f:b7:c3:4f:ce:e0:c5:7f:2a:6d:98:62:48:38: 23:43:d5:4d:f4:14:5a:08:79:f4:b9:db:08:6e:d5: c5:cb:8f:35:36:8e:33:fc:c3:df:28:d6:06:17:1d: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4E:61:0F:07:FE:A2:3C:F9:18:2F:54:4F:7D:8E:9A:7E:E7:55:92 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4f9065c-8922-4d3f-b9ac-82a6edd499c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 01:9a:d6:a1:57:83:6e:4f:68:33:74:65:18:67:50:fb:cb:f7: e6:b4:ab:eb:39:7d:c9:65:18:49:08:70:93:d5:a5:cb:83:8f: bf:15:8c:fe:35:e5:7f:cd:25:74:34:c5:1f:a9:6b:c9:3b:65: ae:22:53:f6:ac:08:d2:c2:31:79:78:c6:ba:2d:9c:51:6d:10: cb:57:93:ee:5a:1b:af:46:30:e7:0e:7d:0d:9c:da:66:c2:f0: 47:2f:d1:26:fe:4f:ef:6c:95:24:5c:01:55:ae:c8:40:f7:5c: 2a:a7:75:4f:1b:9c:40:38:c6:e2:2e:65:35:71:20:b5:e8:37: e0:5f:7e:b5:e3:46:70:95:42:9c:b3:ad:01:25:15:3e:3a:3a: a1:be:06:6e:00:5d:91:de:7b:22:1f:de:77:22:94:c5:b8:3c: 72:13:96:1a:58:9e:34:5a:63:4e:2e:68:75:70:ba:a3:54:b5: 23:1b:8d:aa:4f:8d:71:b8:80:d9:87:33:96:90:b0:30:9a:35: 32:45:df:5e:04:f9:0c:c3:78:6a:5d:38:94:b7:d8:4f:97:a4: b1:be:5e:8e:90:67:71:a6:15:5c:17:00:7d:c3:e2:95:c5:88: 69:9b:d9:88:5e:93:74:8b:f8:5d:15:84:3b:a7:b1:14:2b:37: 44:5b:c9:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTj6+OFGgkBnTTkH/FupAWMcibAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDA3WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGU5NTM4OWFkN2ZkNjcyYjhjMWYyYTQ3ZTc0YWEyMjBh OTAwZWEzM2Y5NWM2NzM2YjY5MGJiZDBiOTRjMTE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb6Ldi486jNRhh8zPQRYqulQ2PNC6JT9LzTG8v2LlCrPJY oP67Z56tyg9sHEj/Mw9AvVqa+cRTGhpwBK4DZY2wpGo9KgQbCEhYCbsL+47cznhT mIWJrJSevkw5T73cLGDrZkZKYvt3AR3xSfy0A3XlHCnewE9ymzllV9w5XdH5g+EE m7erm9J/4VUeEmRBPn9zq03tnI+UmLUw7mraNeeKyeSz8q//G/N3H3zKvV/IUD8B 8k0F261pxE5mKYQ6N0hC4ZLnAmNEXvHt+B3ln2QYHUift8NPzuDFfyptmGJIOCND 1U30FFoIefS52whu1cXLjzU2jjP8w98o1gYXHRGDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUek5hDwf+ojz5GC9UT32Omn7nVZIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0ZjkwNjVjLTg5MjItNGQzZi1iOWFjLTgyYTZlZGQ0OTljOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAAGa1qFXg25PaDN0ZRhnUPvL 9+a0q+s5fcllGEkIcJPVpcuDj78VjP415X/NJXQ0xR+pa8k7Za4iU/asCNLCMXl4 xrotnFFtEMtXk+5aG69GMOcOfQ2c2mbC8Ecv0Sb+T+9slSRcAVWuyED3XCqndU8b nEA4xuIuZTVxILXoN+BffrXjRnCVQpyzrQElFT46OqG+Bm4AXZHeeyIf3ncilMW4 PHITlhpYnjRaY04uaHVwuqNUtSMbjapPjXG4gNmHM5aQsDCaNTJF314E+QzDeGpd OJS32E+XpLG+Xo6QZ3GmFVwXAH3D4pXFiGmb2Yhek3SL+F0VhDunsRQrN0RbyZQ= -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:38 2026 by rpki-client