$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa File: a05fd272-e896-4327-ba78-a6cbca5483ef.roa (raw, json) Hash identifier: MZxU3rr/dud2TFct2bDpbWmq0rBUX9rjlmDl0RaI7H4= Subject key identifier: 73:80:C6:BF:72:9D:54:F6:AA:65:D2:AB:64:E9:E1:9E:5F:A8:FB:94 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2F49A734B59D6DE21487748F545EC3FB5C8C6E5D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa Signing time: Wed 20 May 2026 00:40:10 +0000 ROA not before: Wed 20 May 2026 00:40:10 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:a7:34:b5:9d:6d:e2:14:87:74:8f:54:5e:c3:fb:5c:8c:6e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:10 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=699834e45164aceeb34501b4fc4360c4224a8d162dc8e507903c8af7f0f261dc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:50:f7:90:88:83:c4:35:e8:6f:47:94:54: 0c:46:3f:d3:53:25:d0:6f:96:42:b5:56:b1:d2:b3: d2:fb:56:a3:fb:03:bd:97:53:a3:59:06:3d:07:91: 92:3b:52:8e:61:1f:5a:7e:e8:93:91:0f:f5:05:8c: 57:3e:73:2e:34:bd:23:ff:c0:ba:8f:aa:16:8f:c5: 53:9c:f3:26:c6:e9:d0:ec:f2:2c:88:0d:22:6d:45: e5:80:fd:75:81:0c:8e:66:a6:5a:44:59:eb:7b:20: 8a:e4:88:7b:3d:35:07:bf:49:24:dc:20:85:4e:45: 1d:0c:fc:24:9b:b5:28:73:be:d8:c0:4f:d3:2d:4d: 37:75:39:ff:4d:af:18:22:6e:8e:13:8c:aa:ca:84: 17:2d:2b:6c:e1:6a:cd:c9:11:4d:1a:61:ec:48:65: 9c:3c:6d:c1:a3:0a:89:2b:9f:80:67:1c:9e:18:12: b3:04:cb:2c:d6:f1:6c:8b:49:02:ea:d3:37:53:f8: 2a:e9:ef:95:8d:93:6b:b3:3c:2a:27:8b:e9:c9:28: 00:94:bd:01:08:1a:85:72:c4:81:4e:35:f8:e3:37: ec:34:45:dd:e8:b8:71:c6:d1:2e:60:e5:d1:5c:52: 7d:c7:ca:d7:7f:52:96:85:7b:a3:0c:a2:6c:f1:15: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:C6:BF:72:9D:54:F6:AA:65:D2:AB:64:E9:E1:9E:5F:A8:FB:94 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f109::/48 Signature Algorithm: sha256WithRSAEncryption 82:23:9a:59:05:22:78:34:2e:ef:fb:fe:ac:3c:a2:c5:48:73: 3c:af:9e:b1:89:80:26:ae:11:c8:dd:e4:43:aa:65:e8:a6:9c: 2c:06:38:e9:c8:bb:92:a1:4a:e3:f0:65:85:b3:c4:b2:90:e4: 07:63:b1:d6:16:e6:91:81:43:f3:a8:45:60:e8:9e:27:c5:e9: c0:db:cd:df:89:de:8f:e8:72:58:07:7e:6b:80:be:23:01:60: e1:4f:ca:18:66:25:93:54:e4:69:e0:d0:36:99:cc:3d:fd:e5: 32:4a:73:58:32:36:71:a4:2d:c1:7c:4b:10:81:b2:1f:62:2e: f9:13:33:55:da:e5:6f:c4:f0:41:44:63:81:2b:c3:65:da:36: d1:a5:5f:51:f4:18:38:62:b6:58:f6:c3:40:c4:39:d2:e9:1a: c3:94:b5:fb:1a:f3:85:d4:4d:ea:6c:77:d0:33:0d:4d:fc:a1: c7:52:44:93:bc:a5:3d:f9:97:6d:ed:38:9f:d3:4e:9d:f3:b8: 5f:d1:61:0f:e1:97:e4:54:62:bb:c4:0f:52:f7:6d:3e:62:c7: 61:26:db:cd:dd:37:04:c8:7e:e8:fc:cd:c2:e9:5b:3e:c2:b0: 2e:96:55:a9:5c:fe:60:93:cf:87:cb:01:6b:c4:05:ab:ce:bb: 92:0b:94:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL0mnNLWdbeIUh3SPVF7D+1yMbl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDEwWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTk4MzRlNDUxNjRhY2VlYjM0NTAxYjRmYzQzNjBjNDIy NGE4ZDE2MmRjOGU1MDc5MDNjOGFmN2YwZjI2MWRjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiiFD3kIiDxDXob0eUVAxGP9NTJdBvlkK1VrHSs9L7VqP7 A72XU6NZBj0HkZI7Uo5hH1p+6JORD/UFjFc+cy40vSP/wLqPqhaPxVOc8ybG6dDs 8iyIDSJtReWA/XWBDI5mplpEWet7IIrkiHs9NQe/SSTcIIVORR0M/CSbtShzvtjA T9MtTTd1Of9Nrxgibo4TjKrKhBctK2zhas3JEU0aYexIZZw8bcGjCokrn4BnHJ4Y ErMEyyzW8WyLSQLq0zdT+Crp75WNk2uzPConi+nJKACUvQEIGoVyxIFONfjjN+w0 Rd3ouHHG0S5g5dFcUn3Hytd/UpaFe6MMomzxFeptAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc4DGv3KdVPaqZdKrZOnhnl+o+5QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwNWZkMjcyLWU4OTYtNDMyNy1iYTc4LWE2Y2JjYTU0ODNlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QkwDQYJKoZIhvcNAQELBQADggEBAIIjmlkFIng0Lu/7/qw8osVI czyvnrGJgCauEcjd5EOqZeimnCwGOOnIu5KhSuPwZYWzxLKQ5AdjsdYW5pGBQ/Oo RWDonifF6cDbzd+J3o/oclgHfmuAviMBYOFPyhhmJZNU5Gng0DaZzD395TJKc1gy NnGkLcF8SxCBsh9iLvkTM1Xa5W/E8EFEY4Erw2XaNtGlX1H0GDhitlj2w0DEOdLp GsOUtfsa84XUTepsd9AzDU38ocdSRJO8pT35l23tOJ/TTp3zuF/RYQ/hl+RUYrvE D1L3bT5ix2Em283dNwTIfuj8zcLpWz7CsC6WValc/mCTz4fLAWvEBavOu5ILlEI= -----END CERTIFICATE-----Generated at Wed Jun 17 08:39:34 2026 by rpki-client