$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa File: a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa (raw, json) Hash identifier: iDe0dwMVire8DnSkWPNih0ivKVKS2FSNd2nebd07j1w= Subject key identifier: D7:0A:14:C0:F2:C0:39:87:8E:CC:A6:09:09:AF:0D:44:A8:AC:F3:B5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7E5F4582562E542E8470ED9649CEFC25C43507AA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa Signing time: Mon 25 May 2026 00:00:28 +0000 ROA not before: Mon 25 May 2026 00:00:28 +0000 ROA not after: Sun 23 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:45:82:56:2e:54:2e:84:70:ed:96:49:ce:fc:25:c4:35:07:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 25 00:00:28 2026 GMT Not After : Aug 23 23:59:59 2026 GMT Subject: serialNumber=be4f802f7e474d4b6dad7b47b4b66ce861673f6e7e9bbfab9ce9c1d5883f4f81, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:a4:35:d5:b0:1c:9d:95:9b:9c:e7:f3:6f: 88:b8:49:a4:7b:68:a6:83:fe:78:7e:05:66:a5:9a: 46:12:23:ab:3f:4e:51:b3:2a:02:83:40:75:8e:07: 91:ca:17:c0:90:d8:c3:f5:b3:56:9a:2a:16:0b:ca: 3a:61:22:4c:1a:c4:88:3d:ea:cd:3b:0e:f0:c6:ea: cd:06:f3:31:8d:eb:48:ec:8e:c8:b5:99:aa:87:21: 74:77:ce:08:0a:47:13:bc:c4:cb:58:f1:00:f9:f2: ec:e8:9e:32:7f:cc:a0:b8:f0:2e:ae:67:d8:ca:0f: da:c6:7e:72:38:f6:5a:76:2d:bc:1a:8e:e5:24:68: dd:e0:f7:44:95:09:11:23:51:1d:11:73:75:f2:2c: 8d:f6:e5:bd:2a:ea:fb:de:52:65:c6:b7:50:97:65: 3f:12:ff:b8:11:ac:7c:e0:f4:f9:f6:cf:f9:c7:be: 5c:93:39:52:d2:ac:21:18:ed:9e:53:5c:1b:04:78: 51:d1:f0:bd:a8:52:cf:b9:45:c5:9f:55:5b:3b:03: f4:37:aa:68:f3:f5:5e:6c:bf:fc:d2:77:97:d0:01: 28:e6:98:3c:59:96:e8:24:7c:d0:d0:31:d2:a6:7f: 17:c5:db:4c:8a:07:60:2c:21:2e:89:88:cf:83:d2: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:14:C0:F2:C0:39:87:8E:CC:A6:09:09:AF:0D:44:A8:AC:F3:B5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7030::/44 Signature Algorithm: sha256WithRSAEncryption 37:45:2c:be:67:11:cf:0d:4a:f4:40:ba:3b:68:22:76:f7:7e: 94:1d:1f:7a:c2:af:59:50:14:02:f1:fc:d1:9c:17:9a:42:e7: ce:11:5b:bf:ad:0b:e3:19:6d:d3:0e:27:5c:b8:f7:5e:06:37: 9f:ce:8d:ed:a7:f1:2c:4e:7a:3f:e6:e6:88:0c:eb:de:46:d9: 55:70:2f:69:5b:4e:6c:82:b3:db:a1:00:00:63:b5:c1:d5:e4: 4a:59:5e:07:89:a4:47:96:3d:10:75:15:5c:6b:f2:08:b1:34: 0d:59:c9:d3:9b:83:b3:93:6a:42:53:c8:6a:cf:c9:8e:3b:14: 6b:23:75:91:b3:1e:f7:c2:41:54:5d:55:c2:2e:ca:a6:bd:f8: 64:e8:87:d9:d4:93:cf:2b:8b:77:b8:3c:40:94:74:9b:83:2a: a1:77:7f:e9:9d:2a:34:a3:82:62:7e:fa:5c:8a:d3:1d:84:b5: 9e:20:2b:04:df:8c:6b:d1:8f:99:9f:e6:af:0a:9a:db:37:70: ca:db:55:c0:ca:20:8b:c6:1d:fb:92:03:99:b7:f5:c6:72:c0: 7b:f3:d9:5e:a4:e5:44:0d:f3:5e:2a:c0:1d:ef:fd:dd:1a:02: 02:98:c8:07:78:18:6c:11:f8:56:52:52:03:f1:53:32:94:8b: 4b:f1:94:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfl9FglYuVC6EcO2WSc78JcQ1B6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTI1MDAwMDI4WhcNMjYwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTRmODAyZjdlNDc0ZDRiNmRhZDdiNDdiNGI2NmNlODYx NjczZjZlN2U5YmJmYWI5Y2U5YzFkNTg4M2Y0ZjgxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxcKQ11bAcnZWbnOfzb4i4SaR7aKaD/nh+BWalmkYSI6s/ TlGzKgKDQHWOB5HKF8CQ2MP1s1aaKhYLyjphIkwaxIg96s07DvDG6s0G8zGN60js jsi1maqHIXR3zggKRxO8xMtY8QD58uzonjJ/zKC48C6uZ9jKD9rGfnI49lp2Lbwa juUkaN3g90SVCREjUR0Rc3XyLI325b0q6vveUmXGt1CXZT8S/7gRrHzg9Pn2z/nH vlyTOVLSrCEY7Z5TXBsEeFHR8L2oUs+5RcWfVVs7A/Q3qmjz9V5sv/zSd5fQASjm mDxZlugkfNDQMdKmfxfF20yKB2AsIS6JiM+D0ss9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1woUwPLAOYeOzKYJCa8NRKis87UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExYzUxMmMzLWVjYzktNDUzYS05YTAwLWIyOTcyZTVjZGVmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycDAwDQYJKoZIhvcNAQELBQADggEBADdFLL5nEc8NSvRAujtoInb3 fpQdH3rCr1lQFALx/NGcF5pC584RW7+tC+MZbdMOJ1y4914GN5/Oje2n8SxOej/m 5ogM695G2VVwL2lbTmyCs9uhAABjtcHV5EpZXgeJpEeWPRB1FVxr8gixNA1ZydOb g7OTakJTyGrPyY47FGsjdZGzHvfCQVRdVcIuyqa9+GToh9nUk88ri3e4PECUdJuD KqF3f+mdKjSjgmJ++lyK0x2EtZ4gKwTfjGvRj5mf5q8Kmts3cMrbVcDKIIvGHfuS A5m39cZywHvz2V6k5UQN814qwB3v/d0aAgKYyAd4GGwR+FZSUgPxUzKUi0vxlJw= -----END CERTIFICATE-----Generated at Wed Jun 17 08:39:33 2026 by rpki-client