$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa File: a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa (raw, json) Hash identifier: toPScL73IVHTL4PmVAMVAzcwFodzFRxT3r1LLwGS8gA= Subject key identifier: D9:B5:8A:4C:6E:2B:8E:E3:F8:D9:F4:46:92:9D:C1:64:DC:8A:F8:C2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 42A81F1615D9F954099A42D067835090A01ABA3B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa Signing time: Wed 20 May 2026 00:50:05 +0000 ROA not before: Wed 20 May 2026 00:50:05 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a8:1f:16:15:d9:f9:54:09:9a:42:d0:67:83:50:90:a0:1a:ba:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:50:05 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=e16a2f93b5116ea795f473af262eda50abc13f75c6628c843d1bd8006221baf4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:0f:bd:c4:6b:19:54:65:dd:95:4d:6c:fa: ba:d0:9c:37:d8:05:ba:e1:bc:99:51:99:d0:bf:07: 47:95:ab:4e:77:e9:e7:10:47:07:97:72:1d:a5:15: ed:ca:b6:47:2a:9a:5e:0c:d0:d8:11:df:2a:dd:c8: 28:be:b4:50:9d:98:51:41:a8:20:d2:72:8f:d1:ba: cd:4b:ad:90:e9:b2:03:a5:5d:3a:33:4c:a9:4f:96: 58:17:00:57:b3:d4:b5:98:78:99:ec:22:35:28:5c: 2a:0d:24:ad:37:c9:63:d3:4e:af:ff:bd:7f:ad:f9: 56:28:0f:44:f7:42:7c:27:bf:1f:67:c5:62:8d:19: 1a:46:05:98:86:f0:81:d9:c9:9a:45:f4:f2:f9:8f: 7e:40:9e:64:ca:0c:b1:9c:7d:fb:c4:93:b2:c4:cd: bc:02:d7:95:07:b1:ad:be:f2:48:b5:c2:e0:f0:8c: 23:cd:6b:6f:20:d0:da:01:51:91:9a:a1:78:9b:34: 84:76:72:2c:fc:ce:88:dc:79:1b:d0:f3:8c:b9:45: b8:fe:0d:3e:23:7b:ff:0b:aa:98:e5:f3:53:f5:27: a8:58:98:35:b8:c9:a8:57:e6:30:19:2c:f0:2a:bd: 3b:29:2f:ab:df:b6:51:b7:2f:e5:bd:e7:a1:ab:f5: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:8A:4C:6E:2B:8E:E3:F8:D9:F4:46:92:9D:C1:64:DC:8A:F8:C2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10b::/48 Signature Algorithm: sha256WithRSAEncryption 36:af:6c:6f:f6:c5:62:9a:d3:a8:25:44:48:28:aa:e2:58:2e: 4c:2c:aa:5d:a4:9f:52:4f:89:65:57:69:34:60:1e:3d:00:17: c6:25:a9:05:66:95:5c:b8:4e:25:67:fa:8a:26:b0:6d:17:ab: b6:57:0a:00:41:92:0f:cc:0e:d1:e5:11:51:a3:31:65:3e:24: 79:24:da:f4:04:aa:bb:fa:2a:9d:c8:cd:e3:21:b4:33:a1:73: 4a:b7:4d:7a:14:16:0d:70:63:9d:a9:1c:87:e4:4d:81:11:12: 21:84:00:08:39:1c:23:88:83:41:07:4c:59:db:39:c7:99:25: b6:56:38:b2:6c:f3:24:33:bb:f6:f1:d0:98:1f:f8:64:22:03: 5f:37:35:94:bb:1c:03:47:01:6d:50:c1:cf:b2:f3:43:71:fc: 13:df:e9:2c:9b:6a:7e:dc:6e:d5:d9:87:61:16:cc:0e:81:c2: 51:cd:22:46:f7:3b:c5:b7:a4:4c:b6:33:a2:fc:e3:64:42:0a: 3b:9d:b5:98:4d:f6:e9:48:db:54:79:bb:d4:be:09:cb:88:cd: 79:59:12:93:31:13:e2:65:64:17:30:4d:27:b7:79:6f:29:dc: 68:b1:fb:45:93:ea:f8:b6:85:aa:7b:c3:ed:7f:40:c3:c2:ae: 0d:81:32:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQqgfFhXZ+VQJmkLQZ4NQkKAaujswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA1MDA1WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTZhMmY5M2I1MTE2ZWE3OTVmNDczYWYyNjJlZGE1MGFi YzEzZjc1YzY2MjhjODQzZDFiZDgwMDYyMjFiYWY0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2VA+9xGsZVGXdlU1s+rrQnDfYBbrhvJlRmdC/B0eVq053 6ecQRweXch2lFe3Ktkcqml4M0NgR3yrdyCi+tFCdmFFBqCDSco/Rus1LrZDpsgOl XTozTKlPllgXAFez1LWYeJnsIjUoXCoNJK03yWPTTq//vX+t+VYoD0T3Qnwnvx9n xWKNGRpGBZiG8IHZyZpF9PL5j35AnmTKDLGcffvEk7LEzbwC15UHsa2+8ki1wuDw jCPNa28g0NoBUZGaoXibNIR2ciz8zojceRvQ84y5Rbj+DT4je/8Lqpjl81P1J6hY mDW4yahX5jAZLPAqvTspL6vftlG3L+W956Gr9R8bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2bWKTG4rjuP42fRGkp3BZNyK+MIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzZTEwYjQwLWNhM2ItNDYzMS05YzM5LWUzZGVlNmEzMWQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QswDQYJKoZIhvcNAQELBQADggEBADavbG/2xWKa06glREgoquJY Lkwsql2kn1JPiWVXaTRgHj0AF8YlqQVmlVy4TiVn+oomsG0Xq7ZXCgBBkg/MDtHl EVGjMWU+JHkk2vQEqrv6Kp3IzeMhtDOhc0q3TXoUFg1wY52pHIfkTYEREiGEAAg5 HCOIg0EHTFnbOceZJbZWOLJs8yQzu/bx0Jgf+GQiA183NZS7HANHAW1Qwc+y80Nx /BPf6Syban7cbtXZh2EWzA6BwlHNIkb3O8W3pEy2M6L842RCCjudtZhN9ulI21R5 u9S+CcuIzXlZEpMxE+JlZBcwTSe3eW8p3Gix+0WT6vi2hap7w+1/QMPCrg2BMoY= -----END CERTIFICATE-----Generated at Sat Jun 13 06:46:32 2026 by rpki-client