$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa File: 14940c51-4f09-4f8f-b749-976965c7a655.roa (raw, json) Hash identifier: haYQoDIwowxj1gJMZOTg91ogwl5s5wE+ywCQl+JWzSo= Subject key identifier: 95:D0:08:3C:99:AF:25:43:F2:F1:60:3D:D2:2D:01:3A:58:F0:53:BB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4D37358E36EB1617514DBEC9AA57936CAD69FB90 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa Signing time: Wed 20 May 2026 00:40:31 +0000 ROA not before: Wed 20 May 2026 00:40:31 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:37:35:8e:36:eb:16:17:51:4d:be:c9:aa:57:93:6c:ad:69:fb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:31 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=4b57fe98250b950704314320984c8c0cf0d30475e423a96ab0ad975e91b53a9f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:35:77:e6:07:45:c1:f6:61:31:fd:65:36: b2:1a:14:94:05:9a:e3:64:02:8e:88:45:4e:ae:e1: e8:8a:a0:d5:8a:54:a7:0b:78:f8:ed:b8:ee:a5:1c: 56:01:35:dc:bf:40:65:cb:8a:98:d4:bf:ad:b8:ff: 95:7d:15:f8:90:9f:c0:51:29:14:9c:00:1d:f1:98: 9b:3d:79:31:aa:a2:9b:e9:4c:af:d4:3b:c7:24:39: 0c:93:ad:31:53:25:24:c0:89:9c:31:97:84:07:6f: 31:ac:92:e4:c0:2f:ef:ab:74:2b:4d:1d:ac:e3:5b: 79:9c:aa:a3:36:67:4c:7d:3d:9f:00:37:20:09:b5: 57:b5:72:4f:76:dd:bb:62:45:22:6c:54:7b:9a:0f: e3:9d:b2:79:ea:d4:04:14:36:56:9d:8d:5c:82:18: 42:df:c9:1b:7b:b6:51:5f:d6:c2:18:90:fa:44:26: 18:23:05:ef:8b:ff:1f:f8:be:52:87:af:30:67:b8: 78:ed:6a:9a:99:e2:fb:e5:8d:2e:f7:64:db:2d:5e: b5:e4:42:58:5a:6b:ff:c6:25:96:8d:f3:0d:3c:91: 35:f7:df:5c:82:8c:c5:ac:f3:d0:b6:83:7b:d3:00: ff:e0:7f:a8:88:15:9f:89:b7:48:74:b3:f2:9d:83: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D0:08:3C:99:AF:25:43:F2:F1:60:3D:D2:2D:01:3A:58:F0:53:BB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6124::/48 Signature Algorithm: sha256WithRSAEncryption 20:c6:b3:ca:62:2a:9e:2a:fc:60:69:60:a0:65:09:3b:f7:0f: 3a:a0:ca:e3:2f:5d:3b:16:41:04:c4:a5:b5:a3:e2:2c:c0:3c: e3:05:4e:a4:be:cc:92:be:d5:0d:50:3e:d5:b7:a6:c2:6f:13: bc:16:92:ef:66:be:ec:a5:ee:0f:91:56:4d:f5:aa:9a:df:03: 24:80:5a:86:ff:da:1e:41:8c:1f:ef:88:a8:26:67:9f:d6:76: d8:3f:7a:eb:8b:6f:1b:1a:17:82:9f:cb:ff:a2:1d:5d:40:7d: 01:3a:05:7d:5e:bf:2d:53:55:09:9f:69:81:e8:b7:f0:96:05: f4:26:1e:70:a4:5c:99:65:9f:73:12:29:11:65:be:18:d6:50: 16:d9:2e:6e:16:96:16:16:c2:cb:1a:db:91:76:06:bd:4f:30: 5b:a3:a7:0d:53:94:46:af:86:a9:83:7b:3e:27:f6:9b:76:7e: 46:31:d4:f9:a4:4e:f5:84:34:61:1a:c9:6f:5d:41:fc:2a:47: 4a:3f:56:f0:db:b9:4b:9d:d7:d3:f2:0f:d8:b6:c9:ba:61:33: 0d:cd:d7:cb:97:b0:14:9d:cf:53:94:58:23:92:69:cc:f2:63: 63:ce:c4:84:11:c2:1b:db:69:11:e4:50:6e:01:b8:a4:51:67: 02:aa:3f:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTTc1jjbrFhdRTb7JqleTbK1p+5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDMxWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjU3ZmU5ODI1MGI5NTA3MDQzMTQzMjA5ODRjOGMwY2Yw ZDMwNDc1ZTQyM2E5NmFiMGFkOTc1ZTkxYjUzYTlmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxvjV35gdFwfZhMf1lNrIaFJQFmuNkAo6IRU6u4eiKoNWK VKcLePjtuO6lHFYBNdy/QGXLipjUv624/5V9FfiQn8BRKRScAB3xmJs9eTGqopvp TK/UO8ckOQyTrTFTJSTAiZwxl4QHbzGskuTAL++rdCtNHazjW3mcqqM2Z0x9PZ8A NyAJtVe1ck923btiRSJsVHuaD+Odsnnq1AQUNladjVyCGELfyRt7tlFf1sIYkPpE JhgjBe+L/x/4vlKHrzBnuHjtapqZ4vvljS73ZNstXrXkQlhaa//GJZaN8w08kTX3 31yCjMWs89C2g3vTAP/gf6iIFZ+Jt0h0s/Kdg3GhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUldAIPJmvJUPy8WA90i0BOljwU7swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0OTQwYzUxLTRmMDktNGY4Zi1iNzQ5LTk3Njk2NWM3YTY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSQwDQYJKoZIhvcNAQELBQADggEBACDGs8piKp4q/GBpYKBlCTv3 DzqgyuMvXTsWQQTEpbWj4izAPOMFTqS+zJK+1Q1QPtW3psJvE7wWku9mvuyl7g+R Vk31qprfAySAWob/2h5BjB/viKgmZ5/Wdtg/euuLbxsaF4Kfy/+iHV1AfQE6BX1e vy1TVQmfaYHot/CWBfQmHnCkXJlln3MSKRFlvhjWUBbZLm4WlhYWwssa25F2Br1P MFujpw1TlEavhqmDez4n9pt2fkYx1PmkTvWENGEayW9dQfwqR0o/VvDbuUud19Py D9i2ybphMw3N18uXsBSdz1OUWCOSaczyY2POxIQRwhvbaRHkUG4BuKRRZwKqP5o= -----END CERTIFICATE-----Generated at Wed Jun 17 10:09:44 2026 by rpki-client