$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa File: e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa (raw, json) Hash identifier: nYILMiiEuIyvRwRioFMbqnNabj1Wl3/TObP7O0qV24I= Subject key identifier: EC:18:13:33:69:6F:67:99:B3:42:52:16:63:80:10:9C:94:FD:A3:18 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 721E447C8FE9CEB7C48BE8DEA49F41B5E8130498 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa Signing time: Wed 20 May 2026 00:40:30 +0000 ROA not before: Wed 20 May 2026 00:40:30 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1e:44:7c:8f:e9:ce:b7:c4:8b:e8:de:a4:9f:41:b5:e8:13:04:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:30 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=5998cf33bc5e4b0d300ee30760b534cf73cf506ae1810c6e32e6123e3ff8b8b6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:5a:4b:bf:0c:0d:a3:97:51:8f:91:6e:1e: 63:c3:8a:0a:74:bf:ba:dc:21:41:29:17:0e:12:0e: a1:00:7a:e1:38:65:ce:c7:a9:54:0f:a5:c1:9a:e2: 53:43:95:2c:93:74:11:e6:63:7f:e5:16:7c:c9:66: 37:07:02:58:e6:c9:bf:7c:f1:f2:da:be:25:a4:f8: 59:4d:0d:d5:96:83:de:b1:d9:cb:5a:5d:52:4f:b4: 53:77:bf:a2:c1:21:d3:6a:1f:01:e6:b0:22:c2:b7: 2a:5c:d0:99:8a:c1:6b:cb:43:a3:d9:fe:11:8d:74: 0c:00:43:8b:22:d4:54:9e:4b:ea:8b:11:dc:ec:0b: dc:f0:a9:f1:06:fe:2a:9d:4e:22:7c:8f:7f:e1:fc: 8e:27:1e:44:63:42:6a:38:e5:58:93:4b:b6:5c:69: 9c:3f:e7:c6:c6:70:27:8e:31:da:e0:58:bd:e5:43: cb:91:34:55:b8:69:28:e7:bc:b8:4d:91:cd:ad:2e: e7:83:e9:7e:60:05:39:0a:35:67:3d:35:65:29:53: 8a:59:14:91:af:6f:bb:96:66:fa:c2:f1:99:d2:85: 86:36:c7:b1:75:20:22:40:7b:5e:ff:33:1c:68:e5: a3:b4:4a:c2:b6:e3:3d:89:23:fc:34:36:0c:ac:08: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:18:13:33:69:6F:67:99:B3:42:52:16:63:80:10:9C:94:FD:A3:18 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f106::/48 Signature Algorithm: sha256WithRSAEncryption a1:d0:4a:b8:c4:82:f8:af:fc:ff:e1:bf:8e:2a:ee:f4:7c:a0: 99:0c:ab:e2:ed:8d:fa:cf:bd:a8:68:ad:61:b5:92:9f:18:6a: 8d:49:66:6a:2a:a7:93:a2:e2:3b:64:90:a7:79:6c:bb:70:01: fe:e6:75:82:82:fd:91:bc:f5:6d:30:7a:38:5f:66:c0:24:6d: 30:b8:f3:01:8c:b0:c0:75:76:d7:d8:c4:4c:7d:9e:6f:5b:f1: ca:3d:a1:ea:8d:56:f5:7c:5d:72:2e:61:80:a7:db:9e:90:06: df:d7:23:40:2d:e6:e9:60:bf:8d:a1:f6:1d:2e:fe:e8:31:55: d4:c9:90:d3:6b:99:d2:a4:ed:2a:08:4d:9e:b5:00:9f:9a:04: 00:97:6d:77:a4:06:fb:b2:4e:47:99:e7:3f:86:0c:da:df:26: fe:75:90:37:9c:98:f0:86:de:df:cf:47:48:75:85:16:47:19: b5:5d:ff:70:90:c6:e3:51:68:68:54:0b:35:8d:51:a0:cf:d6: 6e:d3:0a:4e:cd:2b:b7:26:ac:54:67:7f:3a:6b:49:62:29:a3: c4:f4:04:b1:17:01:c0:1c:09:50:18:77:9d:5b:7e:68:23:94: 0c:68:03:01:eb:9f:9c:c2:7b:3a:d5:a8:a7:e4:3e:66:49:9c: fb:33:91:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUch5EfI/pzrfEi+jepJ9BtegTBJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDMwWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTk4Y2YzM2JjNWU0YjBkMzAwZWUzMDc2MGI1MzRjZjcz Y2Y1MDZhZTE4MTBjNmUzMmU2MTIzZTNmZjhiOGI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKj1pLvwwNo5dRj5FuHmPDigp0v7rcIUEpFw4SDqEAeuE4 Zc7HqVQPpcGa4lNDlSyTdBHmY3/lFnzJZjcHAljmyb988fLaviWk+FlNDdWWg96x 2ctaXVJPtFN3v6LBIdNqHwHmsCLCtypc0JmKwWvLQ6PZ/hGNdAwAQ4si1FSeS+qL EdzsC9zwqfEG/iqdTiJ8j3/h/I4nHkRjQmo45ViTS7ZcaZw/58bGcCeOMdrgWL3l Q8uRNFW4aSjnvLhNkc2tLueD6X5gBTkKNWc9NWUpU4pZFJGvb7uWZvrC8ZnShYY2 x7F1ICJAe17/Mxxo5aO0SsK24z2JI/w0NgysCG4pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7BgTM2lvZ5mzQlIWY4AQnJT9oxgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U5ZTlmYTI5LWIyOTAtNGVhMi05YzNhLWI2YjBlNzkyZTc3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QYwDQYJKoZIhvcNAQELBQADggEBAKHQSrjEgviv/P/hv44q7vR8 oJkMq+LtjfrPvahorWG1kp8Yao1JZmoqp5Oi4jtkkKd5bLtwAf7mdYKC/ZG89W0w ejhfZsAkbTC48wGMsMB1dtfYxEx9nm9b8co9oeqNVvV8XXIuYYCn256QBt/XI0At 5ulgv42h9h0u/ugxVdTJkNNrmdKk7SoITZ61AJ+aBACXbXekBvuyTkeZ5z+GDNrf Jv51kDecmPCG3t/PR0h1hRZHGbVd/3CQxuNRaGhUCzWNUaDP1m7TCk7NK7cmrFRn fzprSWIpo8T0BLEXAcAcCVAYd51bfmgjlAxoAwHrn5zCezrVqKfkPmZJnPszkSM= -----END CERTIFICATE-----Generated at Wed Jun 17 08:39:34 2026 by rpki-client