$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa File: 0a8e3ca0-1721-4f46-a119-be0938dc5867.roa (raw, json) Hash identifier: A3Mirof0051J2w6gFr+BDysPi8c+pgH+TX5K2EQvPrE= Subject key identifier: 4A:2A:9E:7D:A6:0E:71:2B:E3:F5:B7:1D:93:73:B6:54:CE:94:94:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3F9E91456F3EE8E7874AD0CF82C43DB72AF30628 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa Signing time: Mon 08 Jun 2026 00:00:06 +0000 ROA not before: Mon 08 Jun 2026 00:00:06 +0000 ROA not after: Sun 06 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9e:91:45:6f:3e:e8:e7:87:4a:d0:cf:82:c4:3d:b7:2a:f3:06:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 8 00:00:06 2026 GMT Not After : Sep 6 23:59:59 2026 GMT Subject: serialNumber=ad5b81e722640f0ab89b0a19174c4d5cb084c32c9251cb6f11b77d8ec1b945c6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:de:6b:22:7d:bf:5d:83:03:32:30:94:fa: 01:ae:b3:5c:e9:b5:21:e7:9c:9f:da:ed:fd:3f:b9: e8:17:31:52:37:ab:cf:bd:cc:1c:0c:46:4c:c3:81: a5:9d:ed:ca:e7:81:ba:eb:cb:79:cc:71:3c:c4:59: 26:06:a9:0f:8e:0b:79:a7:d5:ba:d8:6b:45:ed:e9: 56:19:60:3c:58:0b:27:24:7c:b7:34:35:a0:ab:8c: 81:5b:12:e4:1b:fe:25:27:4e:a9:c3:e2:ae:07:c4: 4e:d0:6c:cc:4a:a9:d5:43:8f:e4:2c:69:5b:6b:31: 69:04:33:0e:fe:7b:85:68:0b:e2:01:7f:ec:4e:cf: 96:d9:10:eb:ea:e7:42:ee:41:42:b9:7f:3d:1c:f6: 41:26:dc:55:14:07:75:89:b0:cb:bd:12:af:ce:41: 61:11:85:5b:75:85:5a:65:dc:02:3e:96:d6:28:a0: fa:8c:3c:6c:6b:ca:2b:d0:20:1c:38:8b:04:94:37: 4e:99:8e:16:cb:67:6e:ed:a3:bd:31:46:64:a8:1e: 13:75:10:a4:5f:83:bf:69:24:0f:55:ec:8d:99:a4: 66:b0:69:60:5d:13:da:45:48:48:19:c0:b2:33:97: 12:a0:c3:e5:08:06:7f:80:3e:4c:f1:45:58:43:0b: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:9E:7D:A6:0E:71:2B:E3:F5:B7:1D:93:73:B6:54:CE:94:94:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a8e3ca0-1721-4f46-a119-be0938dc5867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:12::/48 Signature Algorithm: sha256WithRSAEncryption 3b:ae:9a:12:35:42:bd:79:94:d4:94:4d:7f:20:28:6e:81:00: d3:32:b1:92:f9:63:9d:6a:0e:f4:40:93:5f:6b:8c:92:ae:02: a5:fc:f0:b3:3c:e1:64:76:f3:d1:28:4a:6f:c1:4f:d3:f0:43: 22:53:06:1e:0f:57:d0:da:18:a1:1a:c8:b4:9b:e9:0e:8d:19: 29:2c:81:0d:e9:3a:c5:4c:f8:e4:3d:34:6f:58:4e:de:26:0c: 52:11:4e:c5:32:b1:12:7e:46:1d:eb:32:b8:32:e3:02:59:47: c2:c8:85:fc:cb:a3:9c:8f:30:4b:5c:45:f5:e2:d9:23:ae:d4: 5e:ef:8f:69:ca:88:54:36:df:11:65:c2:66:ba:b3:de:a9:52: 78:53:62:64:39:04:e7:e2:9c:44:96:ed:8f:7d:0d:cb:f9:73: 3e:97:b0:6f:3b:b6:26:7f:69:cb:80:b9:8d:5f:8f:9f:c5:71: 04:47:31:a9:50:80:42:7f:09:f5:42:d9:99:c5:74:25:7d:ec: dd:b1:35:a9:3e:73:6a:d6:00:69:6b:8b:f3:f4:2a:dc:1d:b4: d4:2c:b7:c7:26:b9:b3:e2:66:d0:ed:35:53:a0:be:65:d2:76: bf:e7:73:c5:b5:00:2d:7f:9c:de:03:bb:98:24:4d:a8:ec:e7: e4:72:01:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP56RRW8+6OeHStDPgsQ9tyrzBigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjA4MDAwMDA2WhcNMjYwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDViODFlNzIyNjQwZjBhYjg5YjBhMTkxNzRjNGQ1Y2Iw ODRjMzJjOTI1MWNiNmYxMWI3N2Q4ZWMxYjk0NWM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQCd5rIn2/XYMDMjCU+gGus1zptSHnnJ/a7f0/uegXMVI3 q8+9zBwMRkzDgaWd7crngbrry3nMcTzEWSYGqQ+OC3mn1brYa0Xt6VYZYDxYCyck fLc0NaCrjIFbEuQb/iUnTqnD4q4HxE7QbMxKqdVDj+QsaVtrMWkEMw7+e4VoC+IB f+xOz5bZEOvq50LuQUK5fz0c9kEm3FUUB3WJsMu9Eq/OQWERhVt1hVpl3AI+ltYo oPqMPGxryivQIBw4iwSUN06ZjhbLZ27to70xRmSoHhN1EKRfg79pJA9V7I2ZpGaw aWBdE9pFSEgZwLIzlxKgw+UIBn+APkzxRVhDC8G1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSiqefaYOcSvj9bcdk3O2VM6UlDgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBhOGUzY2EwLTE3MjEtNGY0Ni1hMTE5LWJlMDkzOGRjNTg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxABIwDQYJKoZIhvcNAQELBQADggEBADuumhI1Qr15lNSUTX8gKG6B ANMysZL5Y51qDvRAk19rjJKuAqX88LM84WR289EoSm/BT9PwQyJTBh4PV9DaGKEa yLSb6Q6NGSksgQ3pOsVM+OQ9NG9YTt4mDFIRTsUysRJ+Rh3rMrgy4wJZR8LIhfzL o5yPMEtcRfXi2SOu1F7vj2nKiFQ23xFlwma6s96pUnhTYmQ5BOfinESW7Y99Dcv5 cz6XsG87tiZ/acuAuY1fj5/FcQRHMalQgEJ/CfVC2ZnFdCV97N2xNak+c2rWAGlr i/P0KtwdtNQst8cmubPiZtDtNVOgvmXSdr/nc8W1AC1/nN4Du5gkTajs5+RyAUI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:14:18 2026 by rpki-client