$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa File: 3253695d-b576-4052-8dca-b631c73a2924.roa (raw, json) Hash identifier: Saq8YCbPpi4TgHg3Wy3C8SqlT24SQDViRwqVtdyopBY= Subject key identifier: B8:98:1D:7C:74:7E:D9:03:63:A9:0E:5A:BD:53:EB:31:24:A8:31:79 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 086A07A3F016B240AE432CE2414E2534CC81B8B0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa Signing time: Sat 06 Jun 2026 00:00:05 +0000 ROA not before: Sat 06 Jun 2026 00:00:05 +0000 ROA not after: Fri 04 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:07:a3:f0:16:b2:40:ae:43:2c:e2:41:4e:25:34:cc:81:b8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 6 00:00:05 2026 GMT Not After : Sep 4 23:59:59 2026 GMT Subject: serialNumber=d33b9dd3ad32fa5cef6ad9b43ff4b3a3aa322ca4e6a2dbd047dcf10594c36f1a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:96:88:ae:74:e0:d5:b7:a9:d0:ba:54:68: ee:ef:d2:80:c6:de:09:fc:12:87:6e:d4:5a:bc:f7: 00:b3:74:a4:7f:3c:de:b2:0b:7b:42:e7:50:a5:2f: 5f:8e:6c:ac:cf:fb:a1:c1:87:4b:d4:8f:be:79:d9: 0c:1d:56:3e:6c:9a:93:23:31:ff:31:74:f0:1d:ab: 49:a4:4a:cb:4a:27:93:be:da:03:0e:3f:b8:1b:ed: b3:7e:05:ba:6d:1e:72:9d:86:b0:ad:41:15:dd:4f: 41:e0:6b:c0:a4:cb:bf:c6:f2:09:ed:1f:26:fb:f9: 8b:47:ae:e0:ea:0c:b6:9f:e7:39:b5:5d:cc:c9:a7: 94:87:e4:81:ee:52:25:cf:6c:48:8a:6c:68:a9:b2: 1c:69:79:d9:01:71:d8:32:05:5a:e5:0f:88:a7:dc: 5c:e1:87:5e:3d:f1:37:ff:97:24:0b:e0:6a:6b:4e: 25:25:15:22:2a:69:84:05:a3:86:b4:82:50:57:29: 1e:bd:b1:8f:67:99:61:24:32:77:1d:3c:a6:ec:95: 4a:ee:e1:e2:be:e0:d8:ac:ee:83:ab:19:f7:d4:46: fa:a7:52:81:c8:94:3e:7d:ff:4f:3e:b2:1d:c5:64: 95:06:6f:9e:c8:4c:dc:d1:ff:7e:b4:a0:74:3e:14: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:1D:7C:74:7E:D9:03:63:A9:0E:5A:BD:53:EB:31:24:A8:31:79 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:10::/44 Signature Algorithm: sha256WithRSAEncryption 82:71:57:2e:6c:f7:01:48:43:5b:33:d5:3c:ed:44:1f:f0:ac: 05:8a:9e:93:39:f1:30:ec:e0:14:23:e2:b5:8e:d1:4a:f1:22: 38:27:1d:84:34:99:07:7c:76:2c:6c:19:13:f3:27:98:af:12: 6e:4c:89:4d:c2:51:c4:9e:ed:d8:b5:6f:7f:cb:56:d0:51:e0: c5:2f:75:e8:6a:cc:40:23:0d:de:d2:93:bc:64:2a:e0:69:26: 94:2b:e3:3c:ba:67:fb:a6:2e:08:1a:50:e1:be:99:7e:c9:5a: 5c:a0:5a:5c:e5:f9:2e:39:40:b6:1e:30:55:52:35:0f:0a:43: 17:f7:a4:82:1a:06:b4:8e:b7:38:ce:eb:c0:85:bc:1f:89:5b: 66:d8:e9:fa:2f:16:09:6a:f3:e5:e9:d2:7f:c6:08:3b:07:f0: b4:a8:38:51:a8:cc:32:a2:7b:21:ca:f0:6a:1f:51:d5:d4:da: 6c:60:f8:cb:59:3f:20:e9:96:71:28:5c:9c:e8:6f:ae:9b:60: 92:e3:87:11:ac:59:24:fe:79:a5:64:91:b0:07:4f:de:4b:1e: 8f:59:f1:9f:b8:b0:69:62:59:55:d6:83:b5:71:55:51:9e:92: 8d:df:35:12:2f:b2:94:3b:ea:8b:59:a0:87:d9:69:ce:99:d7: c0:51:9a:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCGoHo/AWskCuQyziQU4lNMyBuLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjA2MDAwMDA1WhcNMjYwOTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzNiOWRkM2FkMzJmYTVjZWY2YWQ5YjQzZmY0YjNhM2Fh MzIyY2E0ZTZhMmRiZDA0N2RjZjEwNTk0YzM2ZjFhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSzJaIrnTg1bep0LpUaO7v0oDG3gn8Eodu1Fq89wCzdKR/ PN6yC3tC51ClL1+ObKzP+6HBh0vUj7552QwdVj5smpMjMf8xdPAdq0mkSstKJ5O+ 2gMOP7gb7bN+BbptHnKdhrCtQRXdT0Hga8Cky7/G8gntHyb7+YtHruDqDLaf5zm1 XczJp5SH5IHuUiXPbEiKbGipshxpedkBcdgyBVrlD4in3Fzhh1498Tf/lyQL4Gpr TiUlFSIqaYQFo4a0glBXKR69sY9nmWEkMncdPKbslUru4eK+4Nis7oOrGffURvqn UoHIlD59/08+sh3FZJUGb57ITNzR/360oHQ+FOujAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuJgdfHR+2QNjqQ5avVPrMSSoMXkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyNTM2OTVkLWI1NzYtNDA1Mi04ZGNhLWI2MzFjNzNhMjkyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxABAwDQYJKoZIhvcNAQELBQADggEBAIJxVy5s9wFIQ1sz1TztRB/w rAWKnpM58TDs4BQj4rWO0UrxIjgnHYQ0mQd8dixsGRPzJ5ivEm5MiU3CUcSe7di1 b3/LVtBR4MUvdehqzEAjDd7Sk7xkKuBpJpQr4zy6Z/umLggaUOG+mX7JWlygWlzl +S45QLYeMFVSNQ8KQxf3pIIaBrSOtzjO68CFvB+JW2bY6fovFglq8+Xp0n/GCDsH 8LSoOFGozDKieyHK8GofUdXU2mxg+MtZPyDplnEoXJzob66bYJLjhxGsWST+eaVk kbAHT95LHo9Z8Z+4sGliWVXWg7VxVVGeko3fNRIvspQ76otZoIfZac6Z18BRmr4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:18:49 2026 by rpki-client