$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa File: 5457865c-05cc-496e-9344-9ec7d5266e2c.roa (raw, json) Hash identifier: UMnlgmEuERTou5qAmYroGVcPh33mHIdRUWFfLzdJY8Y= Subject key identifier: A0:9D:66:E3:A6:38:B5:90:AA:1A:99:A4:FB:2A:37:85:7F:17:56:C6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 72A8671FC43C08650917CDE5A941E633442F18B7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa Signing time: Wed 20 May 2026 00:40:28 +0000 ROA not before: Wed 20 May 2026 00:40:28 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a8:67:1f:c4:3c:08:65:09:17:cd:e5:a9:41:e6:33:44:2f:18:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:28 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=0db0a6005851d127cee204c5dbfd012fbde86ce591faf3fe9dab0e386ec20b23, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:4c:5c:4e:ca:f2:b2:68:98:c0:d0:6d:aa: 29:a3:bb:30:ff:c8:7b:62:75:e8:0e:1f:41:07:0c: 1b:e1:d1:af:38:a5:32:5b:43:2e:60:7e:30:cd:e2: 9a:52:9d:a2:96:ca:1d:c8:9d:b1:d1:21:f0:e0:dc: 03:f7:3d:3a:06:51:7b:da:82:9a:e3:5e:e6:55:10: e9:ad:b4:12:7b:01:b2:87:6a:64:7c:a4:23:71:b1: 0e:cc:4c:d8:5e:0f:79:ab:f1:4d:74:a5:75:f2:2e: 7b:55:13:d2:33:18:ad:4e:72:9e:c9:21:15:96:08: bc:61:9e:cd:45:68:87:4b:67:60:c3:36:13:8f:3f: 6b:e9:25:98:01:41:bb:70:c2:04:87:7a:d9:a6:50: 8e:cb:3c:16:0d:82:c3:a7:14:12:b9:2f:60:50:e6: 77:d6:c7:0e:25:91:9f:c4:f9:0e:c7:84:ea:3d:9b: 54:d5:12:7d:bd:8e:a0:ef:f6:3a:84:5f:3a:ab:6d: 89:c8:c5:cb:ce:04:b3:27:3a:eb:a1:f6:41:d6:52: 3e:cd:f1:e8:c5:e6:2d:34:a6:bf:05:7b:28:f0:61: 8e:f7:dd:62:e9:37:bd:9a:47:31:60:03:54:35:c0: 3d:9a:f6:05:3f:34:31:6b:fb:71:1e:aa:9c:43:4f: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:66:E3:A6:38:B5:90:AA:1A:99:A4:FB:2A:37:85:7F:17:56:C6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/48 Signature Algorithm: sha256WithRSAEncryption 1f:aa:9d:a0:f3:bf:6c:8a:fe:d1:36:6e:18:7b:79:47:e9:5f: 07:55:0c:9c:42:ac:63:63:46:99:a9:4c:b7:2c:c8:40:a6:55: 5e:ff:8c:fb:f1:d8:2e:84:59:4d:34:2d:60:3d:50:d0:3f:10: 4a:99:9b:8e:2a:dd:9b:cd:7c:30:e2:52:35:79:95:2e:cc:65: ec:22:7f:fe:c5:77:4c:c2:81:2e:b0:45:58:41:17:87:c6:ff: d2:0b:7c:3f:3e:6b:a4:a9:dd:4c:b1:7c:99:0d:f1:ee:64:4b: 9f:bc:21:fd:ca:36:c2:01:4b:fc:c8:a5:84:68:04:36:70:be: 97:2e:b5:d1:d9:86:08:83:df:5f:3d:f3:aa:d5:9e:95:5a:34: 3b:62:d3:78:21:dc:25:e0:de:40:11:6c:ee:e9:ab:b3:ac:b6: 2f:bc:17:73:38:ba:29:46:bd:3d:50:17:f0:08:c0:14:70:78: 8b:1b:c2:84:65:78:5a:51:6a:34:dd:97:24:70:00:f9:76:73: 22:75:ed:3f:5b:48:2d:f5:32:a8:c6:43:02:2f:26:1e:46:eb: cd:9b:16:59:93:fc:ed:dc:31:fe:4b:54:9d:09:4e:04:9a:a2: 03:c2:5c:76:d9:49:f3:57:63:98:04:05:d2:7b:f7:7c:db:6d: 25:34:cf:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcqhnH8Q8CGUJF83lqUHmM0QvGLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDI4WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGIwYTYwMDU4NTFkMTI3Y2VlMjA0YzVkYmZkMDEyZmJk ZTg2Y2U1OTFmYWYzZmU5ZGFiMGUzODZlYzIwYjIzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdpUxcTsrysmiYwNBtqimjuzD/yHtidegOH0EHDBvh0a84 pTJbQy5gfjDN4ppSnaKWyh3InbHRIfDg3AP3PToGUXvagprjXuZVEOmttBJ7AbKH amR8pCNxsQ7MTNheD3mr8U10pXXyLntVE9IzGK1Ocp7JIRWWCLxhns1FaIdLZ2DD NhOPP2vpJZgBQbtwwgSHetmmUI7LPBYNgsOnFBK5L2BQ5nfWxw4lkZ/E+Q7HhOo9 m1TVEn29jqDv9jqEXzqrbYnIxcvOBLMnOuuh9kHWUj7N8ejF5i00pr8FeyjwYY73 3WLpN72aRzFgA1Q1wD2a9gU/NDFr+3EeqpxDT5P/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoJ1m46Y4tZCqGpmk+yo3hX8XVsYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU0NTc4NjVjLTA1Y2MtNDk2ZS05MzQ0LTllYzdkNTI2NmUyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QAwDQYJKoZIhvcNAQELBQADggEBAB+qnaDzv2yK/tE2bhh7eUfp XwdVDJxCrGNjRpmpTLcsyECmVV7/jPvx2C6EWU00LWA9UNA/EEqZm44q3ZvNfDDi UjV5lS7MZewif/7Fd0zCgS6wRVhBF4fG/9ILfD8+a6Sp3UyxfJkN8e5kS5+8If3K NsIBS/zIpYRoBDZwvpcutdHZhgiD318986rVnpVaNDti03gh3CXg3kARbO7pq7Os ti+8F3M4uilGvT1QF/AIwBRweIsbwoRleFpRajTdlyRwAPl2cyJ17T9bSC31MqjG QwIvJh5G682bFlmT/O3cMf5LVJ0JTgSaogPCXHbZSfNXY5gEBdJ793zbbSU0z/Y= -----END CERTIFICATE-----Generated at Wed Jun 17 09:04:43 2026 by rpki-client