$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa File: a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa (raw, json) Hash identifier: 0IyAd7zUaM2WWej+Jyav5zV4T19Gagrfv0mYG06WP6g= Subject key identifier: 6E:98:74:63:89:F9:20:DB:8C:AE:33:A1:CA:E4:6E:F9:90:A7:B0:C3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0F812793FA5516B165C0C3E3C951D2BBC32D2D75 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa Signing time: Wed 20 May 2026 00:40:06 +0000 ROA not before: Wed 20 May 2026 00:40:06 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:81:27:93:fa:55:16:b1:65:c0:c3:e3:c9:51:d2:bb:c3:2d:2d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:06 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=ff135910d5db98a3577ba8a3eefac878af56a2482e82b068d5deccabced5f038, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:97:f6:13:55:21:dd:28:d6:38:bc:7e:e9: 19:8e:70:3f:22:41:20:6e:65:ed:b9:9d:e8:e1:bd: e7:33:d5:c5:df:16:96:11:44:1a:36:14:b1:24:00: f4:82:72:ee:c8:28:e4:d6:90:48:46:f3:57:81:4e: 54:d2:95:c8:d7:1e:0a:fc:3b:6d:97:bc:07:e6:d3: 3a:a5:f5:5c:17:f0:f8:a0:b4:4d:18:dc:a0:67:f5: d7:e2:56:0e:ca:49:5b:0d:d9:3d:3f:c8:57:32:32: 17:eb:f6:e9:91:73:69:55:95:0f:1c:3a:26:04:35: 47:8e:42:3d:44:d1:98:59:76:85:40:68:d1:a1:4e: b0:51:f9:2b:ce:f7:ac:a3:5d:45:9b:c3:40:2f:7b: cd:ec:1d:50:34:dd:05:15:b1:42:fb:62:df:85:94: ba:7f:4a:1b:41:6a:5d:fe:f2:a0:6f:b8:11:85:f5: 51:5e:48:d7:da:33:0c:7d:25:24:29:06:78:09:63: 40:6a:e1:7c:33:00:e7:97:89:95:cb:89:b7:91:38: 76:5c:d3:71:29:6e:52:cd:b7:7f:3f:3c:ab:8e:71: 57:54:dd:61:31:51:a4:41:c5:2a:0d:2f:e4:13:e9: 17:4f:02:fb:78:4e:b5:2c:74:48:9a:58:a5:36:4f: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:98:74:63:89:F9:20:DB:8C:AE:33:A1:CA:E4:6E:F9:90:A7:B0:C3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f104::/48 Signature Algorithm: sha256WithRSAEncryption 3e:4a:b6:17:92:1b:ea:72:e9:95:54:a2:73:c4:bc:25:71:72: 7a:71:5b:fa:f8:e5:70:b9:c1:a5:54:ab:b8:f9:d7:9c:04:31: 37:0e:e6:eb:64:fd:e9:d8:3f:bb:8a:11:c9:56:81:0e:f0:98: 2a:b2:93:8d:82:fc:11:79:2e:93:7b:9b:a8:9c:c2:d5:83:00: 6d:51:9b:fe:b8:79:48:d1:33:c0:af:d5:2e:c0:57:2b:b9:f8: 0a:67:bb:5b:20:46:1e:5e:43:cb:ce:63:1c:11:f2:d4:f8:a5: a7:44:90:de:2f:31:5f:2a:38:7f:58:34:08:42:55:85:8f:7c: 21:0e:a9:c8:6a:09:a3:83:e0:bb:96:01:29:fe:d3:20:51:0f: cd:96:58:01:50:94:3a:b5:33:62:e7:78:8b:e1:10:6b:ad:3f: cb:2d:e6:12:8a:0a:69:fc:ed:ff:ad:97:04:8e:aa:c3:f8:1f: 42:28:84:4b:ff:4f:e0:a8:5f:2a:28:96:14:ff:52:4f:5f:24: 6e:b8:d6:f8:ff:87:c6:49:0c:3a:f5:64:0c:d8:0d:6c:4b:ad: 15:d1:7c:4f:95:fe:42:1a:f3:85:e5:13:1a:e0:64:48:1a:2b: 42:37:9c:b7:1f:b6:8b:19:52:98:c7:89:bb:fe:98:c8:43:aa: d3:53:4e:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD4Enk/pVFrFlwMPjyVHSu8MtLXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDA2WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjEzNTkxMGQ1ZGI5OGEzNTc3YmE4YTNlZWZhYzg3OGFm NTZhMjQ4MmU4MmIwNjhkNWRlY2NhYmNlZDVmMDM4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJvZf2E1Uh3SjWOLx+6RmOcD8iQSBuZe25nejhvecz1cXf FpYRRBo2FLEkAPSCcu7IKOTWkEhG81eBTlTSlcjXHgr8O22XvAfm0zql9VwX8Pig tE0Y3KBn9dfiVg7KSVsN2T0/yFcyMhfr9umRc2lVlQ8cOiYENUeOQj1E0ZhZdoVA aNGhTrBR+SvO96yjXUWbw0Ave83sHVA03QUVsUL7Yt+FlLp/ShtBal3+8qBvuBGF 9VFeSNfaMwx9JSQpBngJY0Bq4XwzAOeXiZXLibeROHZc03EpblLNt38/PKuOcVdU 3WExUaRBxSoNL+QT6RdPAvt4TrUsdEiaWKU2T72jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbph0Y4n5INuMrjOhyuRu+ZCnsMMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E5OGE5NmYyLWZiODQtNDRhZS1hNTlkLWViZWI2MDU5MTk0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QQwDQYJKoZIhvcNAQELBQADggEBAD5KtheSG+py6ZVUonPEvCVx cnpxW/r45XC5waVUq7j515wEMTcO5utk/enYP7uKEclWgQ7wmCqyk42C/BF5LpN7 m6icwtWDAG1Rm/64eUjRM8Cv1S7AVyu5+Apnu1sgRh5eQ8vOYxwR8tT4padEkN4v MV8qOH9YNAhCVYWPfCEOqchqCaOD4LuWASn+0yBRD82WWAFQlDq1M2LneIvhEGut P8st5hKKCmn87f+tlwSOqsP4H0IohEv/T+CoXyoolhT/Uk9fJG641vj/h8ZJDDr1 ZAzYDWxLrRXRfE+V/kIa84XlExrgZEgaK0I3nLcftosZUpjHibv+mMhDqtNTTr0= -----END CERTIFICATE-----Generated at Wed Jun 17 08:34:52 2026 by rpki-client