$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa File: 06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json) Hash identifier: VE+SVWKMy/rkTOvvQ32o9Q32SaK2E2SBhjUWGlnziY4= Subject key identifier: 12:5A:49:71:C6:8C:A0:B8:28:E1:5D:9F:A9:01:2E:3E:F9:04:00:5F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 53B99C2F306A05F1CA839B19C1D0599AB40EF86C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa Signing time: Wed 20 May 2026 00:50:07 +0000 ROA not before: Wed 20 May 2026 00:50:07 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b9:9c:2f:30:6a:05:f1:ca:83:9b:19:c1:d0:59:9a:b4:0e:f8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:50:07 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=2baf3d65edafb70759405380ccd207ca317bf5a18c0955cd063e776631e19e2e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:11:55:8a:66:b8:14:f9:ab:2d:07:6e:d8: f2:0b:3d:12:7a:1c:29:f0:73:23:77:bd:6e:69:b1: df:28:12:d2:a4:ad:44:58:11:34:9d:fb:04:b9:08: 92:9d:31:11:cc:2e:36:e1:55:02:76:2e:c6:38:12: f9:1a:37:f3:91:00:a3:ae:3f:31:8e:88:54:5c:31: 14:6c:93:0c:08:94:87:c0:d6:6e:9d:4f:28:5c:9f: e1:72:b5:6e:a9:7d:eb:de:07:47:a6:b8:a0:1d:f6: 7d:d5:8c:0a:96:d3:b5:6e:bf:45:a1:8c:02:b3:b4: f3:48:65:f2:9c:34:86:cd:66:34:04:96:63:4f:29: 49:71:1d:5f:85:64:35:9c:e9:2d:e8:53:60:d2:ba: 53:86:0a:9c:5d:49:f3:35:79:ab:57:da:05:4f:17: 05:a0:ff:91:5c:f4:8d:25:d3:af:eb:4d:a6:a9:e1: 12:12:95:28:47:4a:bb:85:15:10:82:d7:6b:17:2f: fd:c0:2a:f8:63:c7:53:27:49:59:86:c5:d4:72:b8: 14:de:ee:41:e6:d5:67:8f:cc:92:5f:ed:eb:9a:22: cd:c1:43:8f:3d:f1:a0:1c:f3:8f:05:e0:5a:78:aa: 7a:01:0c:20:6f:1b:43:98:88:37:18:88:95:1c:8a: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5A:49:71:C6:8C:A0:B8:28:E1:5D:9F:A9:01:2E:3E:F9:04:00:5F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption a3:7c:c2:61:56:f5:03:ba:4e:ca:e0:74:83:10:94:35:3d:cd: 77:b3:aa:cc:ec:19:f2:ec:84:a6:48:3a:5d:4a:00:fb:88:4a: a9:f5:df:7f:48:b6:97:b4:ff:65:ec:bb:d6:9c:bf:0d:8a:37: b5:be:42:af:27:bd:1b:79:c9:fd:80:84:48:fe:fe:a5:17:da: 21:ad:f6:05:c8:ba:44:e9:48:ed:02:fd:23:c4:20:b6:45:45: 81:ca:f9:56:11:a7:f3:6b:ef:36:71:f1:31:ff:4b:c4:28:7e: b3:2f:c6:a9:32:92:12:e6:f3:c7:e5:b3:11:17:e5:b1:41:bc: 5c:35:a3:ad:93:47:0d:3b:0f:7c:4c:05:a1:ba:17:ae:fa:79: d4:b2:cb:0a:b8:df:fa:95:32:0c:0b:6d:fc:30:65:69:55:d6: ee:82:9c:bf:8a:83:4c:33:74:1e:c7:0f:79:df:b5:fe:12:7b: fd:c2:27:29:be:3f:58:ed:db:1d:b0:91:92:24:00:37:a9:fa: 6d:dd:15:c8:3f:fc:c3:af:2e:2b:86:02:88:26:12:89:23:33: 7a:c3:a9:3b:f5:18:de:2c:9a:9d:35:e5:89:1a:ac:4d:12:3d: e2:f2:37:bd:64:4f:16:99:55:d7:34:60:f6:d4:6b:d8:55:f0: 34:55:00:ad -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU7mcLzBqBfHKg5sZwdBZmrQO+GwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA1MDA3WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmFmM2Q2NWVkYWZiNzA3NTk0MDUzODBjY2QyMDdjYTMx N2JmNWExOGMwOTU1Y2QwNjNlNzc2NjMxZTE5ZTJlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIQBFVima4FPmrLQdu2PILPRJ6HCnwcyN3vW5psd8oEtKk rURYETSd+wS5CJKdMRHMLjbhVQJ2LsY4EvkaN/ORAKOuPzGOiFRcMRRskwwIlIfA 1m6dTyhcn+FytW6pfeveB0emuKAd9n3VjAqW07Vuv0WhjAKztPNIZfKcNIbNZjQE lmNPKUlxHV+FZDWc6S3oU2DSulOGCpxdSfM1eatX2gVPFwWg/5Fc9I0l06/rTaap 4RISlShHSruFFRCC12sXL/3AKvhjx1MnSVmGxdRyuBTe7kHm1WePzJJf7euaIs3B Q4898aAc848F4Fp4qnoBDCBvG0OYiDcYiJUcigWNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUElpJccaMoLgo4V2fqQEuPvkEAF8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2ZTBhOTdlLWI1MDAtNDM0Yy05NGI0LTNlYWRkMzRlNWQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAKN8wmFW9QO6TsrgdIMQlDU9 zXezqszsGfLshKZIOl1KAPuISqn1339Itpe0/2Xsu9acvw2KN7W+Qq8nvRt5yf2A hEj+/qUX2iGt9gXIukTpSO0C/SPEILZFRYHK+VYRp/Nr7zZx8TH/S8QofrMvxqky khLm88flsxEX5bFBvFw1o62TRw07D3xMBaG6F676edSyywq43/qVMgwLbfwwZWlV 1u6CnL+Kg0wzdB7HD3nftf4Se/3CJym+P1jt2x2wkZIkADep+m3dFcg//MOvLiuG AogmEokjM3rDqTv1GN4smp015YkarE0SPeLyN71kTxaZVdc0YPbUa9hV8DRVAK0= -----END CERTIFICATE-----Generated at Sat Jun 13 07:04:08 2026 by rpki-client