$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa File: d00edb39-49a5-44cb-9037-ad814c177b6a.roa (raw, json) Hash identifier: VQNR3AO95cLKYoU6Y6wk6FWgfMtYO7xiyF4+soTbggg= Subject key identifier: 10:83:8C:B9:7C:F6:2D:8F:CF:64:FE:53:35:65:C2:E6:C6:C7:A6:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 55866BC7DCE5C28B34990706F439D45C56B5D50B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa Signing time: Wed 20 May 2026 00:40:29 +0000 ROA not before: Wed 20 May 2026 00:40:29 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:86:6b:c7:dc:e5:c2:8b:34:99:07:06:f4:39:d4:5c:56:b5:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 00:40:29 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=90606e455a9d26f01ca46530732b4711c27e318d98880ee1626bef3d009b0692, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:92:ff:bb:c4:52:4b:83:06:63:72:21:4c: 7f:18:c4:64:2f:8c:73:64:f4:df:04:bf:45:62:a8: a2:74:c9:4e:2a:87:a3:9b:2e:b7:bb:5d:d5:f8:40: 60:7b:39:29:9b:57:65:f3:32:5e:91:62:bc:72:e5: a6:51:e9:31:4b:fa:01:20:43:f1:7b:81:e4:07:d1: bb:ed:ee:00:b8:ab:53:b5:48:b5:ed:90:b8:2b:e0: fc:f8:d0:ce:2a:db:d1:0e:b6:60:c6:e7:20:23:ed: ce:a7:84:c3:70:65:3e:b0:45:57:73:64:f6:42:10: 7d:d7:e9:3b:04:ff:bf:db:58:aa:a8:a4:be:23:25: e8:e1:4b:a5:f4:ea:85:82:ec:86:47:f3:13:8c:b5: 54:f8:a9:cb:44:14:63:5d:a7:0e:98:0a:d5:57:d8: af:44:f9:a9:ad:56:1a:47:a4:6d:0f:be:c9:7a:b9: a1:ff:9f:a3:fd:2e:3b:52:d7:d1:8b:c0:3f:2d:18: 89:60:55:bf:bb:db:6b:c8:a0:cd:63:55:cf:18:59: b6:e3:35:14:89:68:52:e6:7b:34:f2:b3:cf:a0:48: 91:fb:87:92:14:71:02:34:4e:75:88:bb:58:cf:29: 3c:df:46:0a:ab:d9:98:e1:aa:c2:5a:fa:14:17:1f: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:8C:B9:7C:F6:2D:8F:CF:64:FE:53:35:65:C2:E6:C6:C7:A6:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 8b:91:39:41:b8:33:59:b9:f0:1c:da:15:3a:5f:35:78:e0:59: b2:09:ff:b9:7c:9a:a3:28:25:ec:13:2c:aa:fc:57:9b:61:2e: d0:8c:28:0d:42:6f:ec:57:1b:68:6b:7f:3f:15:6c:8e:dd:44: 91:fc:13:27:4f:30:44:68:78:53:20:59:55:87:f1:8d:ee:2f: 88:ec:8f:c1:38:f8:6d:14:0b:1b:34:b9:95:f1:a6:ad:48:99: 3f:96:a7:8f:d7:5e:51:55:c7:7c:38:29:84:37:9f:c0:ce:14: 84:81:f9:33:ea:ea:fb:70:c3:2d:a4:bf:30:47:72:c5:2f:b0: 7d:cc:fe:07:e7:2b:cc:c5:28:47:39:a1:d3:2f:8d:4a:bd:b5: 49:53:54:1e:e7:92:a1:e1:e0:6b:1a:52:78:e6:ce:63:81:1a: af:90:2c:6a:eb:52:4b:05:ec:a1:2a:f2:22:55:cb:ef:c4:ce: a3:85:9c:ef:61:87:0e:f5:43:7b:c9:8a:c8:b0:9c:c8:c2:4d: 8c:31:ad:09:aa:02:ea:e9:38:b3:af:16:fc:51:d8:63:d4:c8: 86:41:1d:d5:1f:77:5c:10:f4:6e:7a:d0:37:66:38:08:da:12: a6:77:eb:9d:3b:e0:a3:b3:76:d3:24:81:17:3e:45:37:aa:3e: 7a:c6:06:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVYZrx9zlwos0mQcG9DnUXFa11QswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA0MDI5WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDYwNmU0NTVhOWQyNmYwMWNhNDY1MzA3MzJiNDcxMWMy N2UzMThkOTg4ODBlZTE2MjZiZWYzZDAwOWIwNjkyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE8pL/u8RSS4MGY3IhTH8YxGQvjHNk9N8Ev0ViqKJ0yU4q h6ObLre7XdX4QGB7OSmbV2XzMl6RYrxy5aZR6TFL+gEgQ/F7geQH0bvt7gC4q1O1 SLXtkLgr4Pz40M4q29EOtmDG5yAj7c6nhMNwZT6wRVdzZPZCEH3X6TsE/7/bWKqo pL4jJejhS6X06oWC7IZH8xOMtVT4qctEFGNdpw6YCtVX2K9E+amtVhpHpG0Pvsl6 uaH/n6P9LjtS19GLwD8tGIlgVb+722vIoM1jVc8YWbbjNRSJaFLmezTys8+gSJH7 h5IUcQI0TnWIu1jPKTzfRgqr2ZjhqsJa+hQXH3uZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEIOMuXz2LY/PZP5TNWXC5sbHppAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QwMGVkYjM5LTQ5YTUtNDRjYi05MDM3LWFkODE0YzE3N2I2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBAIuROUG4M1m58BzaFTpfNXjg WbIJ/7l8mqMoJewTLKr8V5thLtCMKA1Cb+xXG2hrfz8VbI7dRJH8EydPMERoeFMg WVWH8Y3uL4jsj8E4+G0UCxs0uZXxpq1ImT+Wp4/XXlFVx3w4KYQ3n8DOFISB+TPq 6vtwwy2kvzBHcsUvsH3M/gfnK8zFKEc5odMvjUq9tUlTVB7nkqHh4GsaUnjmzmOB Gq+QLGrrUksF7KEq8iJVy+/EzqOFnO9hhw71Q3vJisiwnMjCTYwxrQmqAurpOLOv FvxR2GPUyIZBHdUfd1wQ9G560DdmOAjaEqZ365074KOzdtMkgRc+RTeqPnrGBjA= -----END CERTIFICATE-----Generated at Sat Jun 13 07:06:13 2026 by rpki-client