$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: 6vKPIjxOIzv7kihlNo+HfZLZXMPwr75qHUqQeaColSQ= Subject key identifier: 1D:08:D6:76:77:45:2C:69:31:59:89:AA:A5:6E:80:A0:69:43:29:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 15637E4ACDB7B82B0371F56FBB2B30EBC48D7E58 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Tue 19 May 2026 04:20:40 +0000 ROA not before: Tue 19 May 2026 04:20:40 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:63:7e:4a:cd:b7:b8:2b:03:71:f5:6f:bb:2b:30:eb:c4:8d:7e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:20:40 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=6b42c16ea3e5af6c5e23fccc9785ae4b9e90627f13ff16c8c4a1fef5ce6d4667, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:e0:7c:3d:01:96:17:0e:17:ff:8b:e0:b8: fa:8d:17:ac:84:c6:d6:c2:df:1b:85:19:54:95:67: 38:bf:db:18:ff:6b:96:0c:e1:43:30:c9:7a:cf:93: 54:ba:e9:48:8a:70:5a:60:65:72:83:8c:f2:22:72: cd:cf:4c:fb:76:af:d8:94:bc:ca:19:7a:85:34:64: 11:6f:90:67:97:91:0e:53:9c:33:c1:0a:0e:f1:dd: f9:f2:d0:f2:f9:a7:0a:c7:f9:4d:f9:6f:f6:6c:0e: ca:fd:f0:e5:11:b9:24:a7:93:6f:23:f2:b6:1a:9f: 6b:e3:85:67:4e:b6:26:06:6b:ae:eb:79:f9:f0:1e: 71:9a:b9:8c:0e:9d:57:cb:42:1c:d8:45:c1:15:3c: 71:25:ad:b1:1d:48:ab:d3:b9:10:b7:aa:cf:7d:dd: ff:de:4d:a8:dc:2d:9b:25:83:6b:2b:48:26:a6:d1: 41:2f:60:cc:39:1b:99:b6:ea:2d:62:10:01:e2:91: 64:f1:58:40:1d:59:39:bc:4f:10:94:61:b9:89:b1: 07:d5:85:06:ef:82:2d:9d:7e:57:45:c6:dd:fc:db: 3b:7d:98:48:4d:b6:4b:96:75:39:d9:6d:65:d7:5d: 38:ce:a8:b0:27:7b:08:dc:52:90:e0:16:ce:f6:e6: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:D6:76:77:45:2C:69:31:59:89:AA:A5:6E:80:A0:69:43:29:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 3d:9c:75:13:48:64:90:ed:8d:27:f4:93:f4:1a:a7:79:4a:9a: 0c:f1:53:34:d1:1d:6c:ab:79:96:b1:9e:ac:76:3e:62:51:4b: 3e:9d:6e:5d:f5:b4:c5:96:54:9a:08:53:7d:bb:cb:16:45:da: fd:79:57:5b:9d:62:0d:0b:c8:51:07:94:9e:c4:e9:74:3c:c6: fb:ad:64:c8:da:69:65:3c:95:29:f3:c0:41:b8:a2:91:48:7b: 06:96:b9:8c:66:08:7e:d8:01:df:9a:55:b1:83:21:88:dc:2c: 84:32:0a:f1:bf:69:96:d2:d6:e7:c5:d1:4a:83:a6:ae:98:10: 2c:a0:a4:f3:7b:ea:da:3a:a4:a9:d7:4f:1e:c7:47:c0:fa:69: af:7b:72:bd:51:07:99:d7:0a:be:2f:d5:11:e3:6d:c7:cd:3b: 6f:ae:5f:9e:7e:8b:0a:b2:ec:fc:70:55:36:a8:4e:f9:e0:21: cf:c8:10:55:11:6c:40:c9:56:d2:70:ea:35:f7:5b:40:f6:be: 77:f0:91:56:03:7e:c1:a1:6e:e3:88:85:b3:63:08:61:d9:c7: de:e9:b3:00:51:fa:2a:83:e2:d7:a6:dc:4c:da:48:31:1c:56: e8:24:1b:9b:fa:a9:54:94:73:dc:d6:95:72:a9:c4:b7:67:7f: fc:f3:4e:2c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFWN+Ss23uCsDcfVvuysw68SNflgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQyMDQwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjQyYzE2ZWEzZTVhZjZjNWUyM2ZjY2M5Nzg1YWU0Yjll OTA2MjdmMTNmZjE2YzhjNGExZmVmNWNlNmQ0NjY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2J+B8PQGWFw4X/4vguPqNF6yExtbC3xuFGVSVZzi/2xj/ a5YM4UMwyXrPk1S66UiKcFpgZXKDjPIics3PTPt2r9iUvMoZeoU0ZBFvkGeXkQ5T nDPBCg7x3fny0PL5pwrH+U35b/ZsDsr98OURuSSnk28j8rYan2vjhWdOtiYGa67r efnwHnGauYwOnVfLQhzYRcEVPHElrbEdSKvTuRC3qs993f/eTajcLZslg2srSCam 0UEvYMw5G5m26i1iEAHikWTxWEAdWTm8TxCUYbmJsQfVhQbvgi2dfldFxt382zt9 mEhNtkuWdTnZbWXXXTjOqLAnewjcUpDgFs725nS1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHQjWdndFLGkxWYmqpW6AoGlDKcEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAPZx1E0hkkO2NJ/ST9BqneUqa DPFTNNEdbKt5lrGerHY+YlFLPp1uXfW0xZZUmghTfbvLFkXa/XlXW51iDQvIUQeU nsTpdDzG+61kyNppZTyVKfPAQbiikUh7Bpa5jGYIftgB35pVsYMhiNwshDIK8b9p ltLW58XRSoOmrpgQLKCk83vq2jqkqddPHsdHwPppr3tyvVEHmdcKvi/VEeNtx807 b65fnn6LCrLs/HBVNqhO+eAhz8gQVRFsQMlW0nDqNfdbQPa+d/CRVgN+waFu44iF s2MIYdnH3umzAFH6KoPi16bcTNpIMRxW6CQbm/qpVJRz3NaVcqnEt2d//PNOLA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:50 2026 by rpki-client