$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa File: 3002932a-a936-4cfa-b08c-a80730fbf002.roa (raw, json) Hash identifier: 2mXYtX6K6q/yu8k8OPowa1LdmZLdeUk7KunRFGPSy8k= Subject key identifier: 24:5E:99:6A:89:4C:B4:D3:FE:37:AB:E8:4B:BA:F6:21:CE:46:4B:6D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E2DEA0DF2A8EF2959B22C81F801E2D4333985DD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa Signing time: Fri 20 Mar 2026 19:51:47 +0000 ROA not before: Fri 20 Mar 2026 19:51:47 +0000 ROA not after: Thu 18 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2d:ea:0d:f2:a8:ef:29:59:b2:2c:81:f8:01:e2:d4:33:39:85:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 20 19:51:47 2026 GMT Not After : Jun 18 23:59:59 2026 GMT Subject: serialNumber=1ccfdac34bc5eaf35696022da0fa334c3de79a5d96f5da55cf5edca04600bee9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:59:5f:bd:81:71:1e:85:cc:12:0c:37:ce:6c: 86:bc:72:43:23:82:d0:85:e8:48:d5:e9:fb:fc:7f: f9:7c:49:a9:4d:54:e4:07:0c:3a:77:cb:0d:5c:51: e3:b3:1e:d4:1d:8c:3d:df:7f:bd:21:f7:38:b6:25: ab:27:cf:4e:b2:c6:f9:db:c5:f8:e5:3a:ab:92:5d: e6:6c:55:74:b1:5c:72:ef:a0:95:45:db:f6:fd:e2: 18:cf:9f:39:e0:7a:31:49:81:06:58:66:e6:fb:66: c6:97:8b:19:23:9e:50:51:64:91:12:88:5a:51:92: 62:64:b3:07:96:e7:29:d7:69:87:fa:99:6f:e8:e8: 35:da:8c:45:aa:1b:97:98:0a:3a:45:49:0a:b3:a6: 36:cd:c6:04:1c:a4:a7:9b:c6:dd:f1:c8:70:1f:de: 4a:2e:fa:d6:f1:13:c4:e4:be:b6:84:38:03:63:6b: 8e:1a:d8:48:70:0f:dd:3b:4d:79:75:27:e4:dc:40: 9e:b4:77:4d:8b:e1:d3:dd:5e:2a:cd:61:46:d4:61: fb:7b:ef:d7:b6:60:75:cb:8b:0a:6d:05:b3:6d:f2: e0:8d:83:b5:9b:8a:b6:5e:a7:32:de:c4:86:9b:af: 54:42:80:1f:e0:5e:eb:ed:7a:bb:aa:f2:58:0a:41: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:99:6A:89:4C:B4:D3:FE:37:AB:E8:4B:BA:F6:21:CE:46:4B:6D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3002932a-a936-4cfa-b08c-a80730fbf002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:13::/48 Signature Algorithm: sha256WithRSAEncryption 4f:55:a6:91:43:c0:93:dc:a3:4f:10:41:aa:55:49:5a:b3:79: 07:75:b3:34:16:93:97:d1:5e:98:55:7d:47:af:f7:c6:04:9d: 2c:3b:8b:65:41:ff:71:4e:21:2c:ac:fd:dd:ca:71:20:d3:c2: d5:8d:43:7c:4b:55:31:68:a6:98:ad:fa:d3:46:c8:41:b3:86: d5:1d:6d:07:f1:13:85:62:20:35:3c:59:7e:05:9b:47:c0:c4: c3:50:2d:ec:b9:c2:b8:8e:2f:40:6f:13:b0:e3:e3:fd:ee:ac: 9c:95:9b:31:57:11:bc:2c:4b:17:53:35:b8:e2:0d:39:45:5b: 4f:82:45:a6:a8:23:2a:fe:39:6a:52:92:e6:e0:a7:1b:75:38: 8e:89:7f:7e:7a:ec:29:0f:00:c3:52:a0:9b:eb:0f:38:98:70: c0:3e:d9:c6:8d:23:c3:8a:d5:51:32:e5:1d:82:11:bb:e4:2d: fc:09:db:6f:d7:67:4b:e4:6f:18:f6:a2:5d:4c:6b:f0:5e:67: b7:49:de:33:1f:97:66:44:1c:2c:39:ed:cd:e8:66:08:8f:56: 93:8b:4d:c7:a8:e0:b4:03:fd:b1:84:4a:2d:7e:f3:23:44:04: 33:a6:ce:18:4c:2c:3d:17:db:04:59:8f:16:d4:34:8d:92:5f: f0:b6:ba:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPi3qDfKo7ylZsiyB+AHi1DM5hd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzIwMTk1MTQ3WhcNMjYwNjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2NmZGFjMzRiYzVlYWYzNTY5NjAyMmRhMGZhMzM0YzNk ZTc5YTVkOTZmNWRhNTVjZjVlZGNhMDQ2MDBiZWU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVWV+9gXEehcwSDDfObIa8ckMjgtCF6EjV6fv8f/l8SalN VOQHDDp3yw1cUeOzHtQdjD3ff70h9zi2Jasnz06yxvnbxfjlOquSXeZsVXSxXHLv oJVF2/b94hjPnzngejFJgQZYZub7ZsaXixkjnlBRZJESiFpRkmJksweW5ynXaYf6 mW/o6DXajEWqG5eYCjpFSQqzpjbNxgQcpKebxt3xyHAf3kou+tbxE8TkvraEOANj a44a2EhwD907TXl1J+TcQJ60d02L4dPdXirNYUbUYft779e2YHXLiwptBbNt8uCN g7WbirZepzLexIabr1RCgB/gXuvteruq8lgKQUS/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJF6ZaolMtNP+N6voS7r2Ic5GS20wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMDI5MzJhLWE5MzYtNGNmYS1iMDhjLWE4MDczMGZiZjAwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxABMwDQYJKoZIhvcNAQELBQADggEBAE9VppFDwJPco08QQapVSVqz eQd1szQWk5fRXphVfUev98YEnSw7i2VB/3FOISys/d3KcSDTwtWNQ3xLVTFoppit +tNGyEGzhtUdbQfxE4ViIDU8WX4Fm0fAxMNQLey5wriOL0BvE7Dj4/3urJyVmzFX EbwsSxdTNbjiDTlFW0+CRaaoIyr+OWpSkubgpxt1OI6Jf3567CkPAMNSoJvrDziY cMA+2caNI8OK1VEy5R2CEbvkLfwJ22/XZ0vkbxj2ol1Ma/BeZ7dJ3jMfl2ZEHCw5 7c3oZgiPVpOLTceo4LQD/bGESi1+8yNEBDOmzhhMLD0X2wRZjxbUNI2SX/C2ulo= -----END CERTIFICATE-----Generated at Mon Mar 23 16:01:47 2026 by rpki-client