$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a10db55f-612c-49e9-872e-5609d7fd5391.roa File: a10db55f-612c-49e9-872e-5609d7fd5391.roa (raw, json) Hash identifier: ug6u3JGlNJ3KhHUAFAJRu+OvUKUCZKfvpBFRx3Qu8+w= Subject key identifier: 99:5F:81:CD:65:4A:C6:F2:27:41:14:4A:EB:C7:63:40:C5:C7:49:8E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 70E12DBA698099C293D4BAC921CAC6CE4E667CAD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a10db55f-612c-49e9-872e-5609d7fd5391.roa Signing time: Fri 03 Apr 2026 02:30:10 +0000 ROA not before: Fri 03 Apr 2026 02:30:10 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:e0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e1:2d:ba:69:80:99:c2:93:d4:ba:c9:21:ca:c6:ce:4e:66:7c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 3 02:30:10 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=030e59cc09611a709e88dd6fedcd297e4e2a9d82bdfbf761caa7da7fbeaa6f30, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:63:e1:1e:bc:39:ad:b3:c2:d7:44:d3:b9: 4f:b4:e6:89:9c:87:05:2d:26:61:08:f5:8c:ff:79: a8:41:47:5f:4b:54:44:de:b4:51:8f:41:76:2f:01: 41:9b:2e:94:e9:3b:66:0a:e3:85:4d:43:0a:38:6f: 5d:d1:70:92:ec:69:87:b2:76:10:05:c2:d2:cb:f4: 61:3b:1b:5d:ce:11:3a:71:61:04:55:7e:07:1e:dc: 33:1f:f8:00:4a:d2:e5:7a:92:b3:c6:a2:70:c0:bc: 34:2d:c7:2b:9e:38:a0:1b:e4:d8:29:17:c0:20:2b: 5f:37:09:de:ae:05:29:96:9c:2f:d3:c6:b7:6a:d5: a1:db:9c:af:63:9e:b9:3c:fc:c6:db:af:ab:97:d8: 26:9f:7e:67:42:cc:af:a1:f7:3c:2a:11:72:9b:40: dd:8e:fa:da:c1:b7:9c:c0:80:aa:f8:64:1c:d1:8b: be:a0:98:92:5b:96:f6:2e:cf:45:e1:f5:8a:92:6b: 58:41:12:e9:b6:d2:23:8e:08:d4:4c:1d:52:b0:a0: 7e:e4:16:85:ec:f3:29:79:3f:bd:99:1b:00:ca:62: 1e:02:a6:a3:97:49:e7:13:f6:88:03:41:e9:d7:4c: 9d:18:1c:49:e7:8d:81:a3:15:5a:f3:ea:8d:9b:01: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:81:CD:65:4A:C6:F2:27:41:14:4A:EB:C7:63:40:C5:C7:49:8E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a10db55f-612c-49e9-872e-5609d7fd5391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:e0f::/48 Signature Algorithm: sha256WithRSAEncryption 18:90:51:d1:7a:1d:cc:aa:4b:27:e1:9e:e1:35:b8:b5:a3:11: 70:2f:13:b8:8a:ef:bf:b0:dc:69:72:9a:c1:ba:5a:30:77:26: a5:6b:ed:c6:cf:25:0d:a6:91:4a:d9:ed:63:9e:10:98:85:9b: 95:dc:29:18:cf:1a:4f:65:01:90:0c:c7:e6:23:d8:da:5b:a1: 88:ea:bc:95:03:59:07:db:e5:f0:f1:9a:60:d1:51:48:35:d5: 49:eb:be:69:5c:80:42:a0:6b:28:5d:71:7e:16:92:cb:0f:86: dd:74:f6:3a:9d:c6:a7:e2:86:bb:c8:8a:6f:58:61:13:84:47: 48:33:55:d7:65:ea:48:de:8f:91:ff:47:1b:df:73:5b:ef:25: 50:87:c3:5c:22:35:c9:6b:1e:74:06:b3:a4:d9:71:fe:1b:50: 9f:39:04:c5:e3:38:be:18:d2:fb:71:d7:51:3a:a5:19:0b:ba: 65:81:a8:8e:b8:8b:49:ec:4b:c3:ab:70:ff:1a:7f:3c:ed:33: 19:80:04:24:25:20:4a:c4:b6:99:8f:92:11:b3:98:6d:73:b4: 57:51:9b:55:73:be:0b:8f:68:d1:37:66:cd:8f:4d:b3:64:0d: d4:aa:f0:30:4c:d8:7d:15:01:06:26:16:45:15:e0:fd:19:c1: 5d:25:d6:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcOEtummAmcKT1LrJIcrGzk5mfK0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDAzMDIzMDEwWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzBlNTljYzA5NjExYTcwOWU4OGRkNmZlZGNkMjk3ZTRl MmE5ZDgyYmRmYmY3NjFjYWE3ZGE3ZmJlYWE2ZjMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdbGPhHrw5rbPC10TTuU+05omchwUtJmEI9Yz/eahBR19L VETetFGPQXYvAUGbLpTpO2YK44VNQwo4b13RcJLsaYeydhAFwtLL9GE7G13OETpx YQRVfgce3DMf+ABK0uV6krPGonDAvDQtxyueOKAb5NgpF8AgK183Cd6uBSmWnC/T xrdq1aHbnK9jnrk8/Mbbr6uX2CaffmdCzK+h9zwqEXKbQN2O+trBt5zAgKr4ZBzR i76gmJJblvYuz0Xh9YqSa1hBEum20iOOCNRMHVKwoH7kFoXs8yl5P72ZGwDKYh4C pqOXSecT9ogDQenXTJ0YHEnnjYGjFVrz6o2bAaqtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmV+BzWVKxvInQRRK68djQMXHSY4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExMGRiNTVmLTYxMmMtNDllOS04NzJlLTU2MDlkN2ZkNTM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwDg8wDQYJKoZIhvcNAQELBQADggEBABiQUdF6HcyqSyfhnuE1uLWj EXAvE7iK77+w3GlymsG6WjB3JqVr7cbPJQ2mkUrZ7WOeEJiFm5XcKRjPGk9lAZAM x+Yj2NpboYjqvJUDWQfb5fDxmmDRUUg11UnrvmlcgEKgayhdcX4WkssPht109jqd xqfihrvIim9YYROER0gzVddl6kjej5H/Rxvfc1vvJVCHw1wiNclrHnQGs6TZcf4b UJ85BMXjOL4Y0vtx11E6pRkLumWBqI64i0nsS8OrcP8afzztMxmABCQlIErEtpmP khGzmG1ztFdRm1VzvguPaNE3Zs2PTbNkDdSq8DBM2H0VAQYmFkUV4P0ZwV0l1nc= -----END CERTIFICATE-----Generated at Fri Apr 17 06:32:50 2026 by rpki-client