$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa File: 3253695d-b576-4052-8dca-b631c73a2924.roa (raw, json) Hash identifier: ghV0SBNeVPJ2m06TvEKB5i0num/7tosUoTk1Ugl4Bhs= Subject key identifier: A8:07:81:23:EC:68:F9:25:8B:59:B2:81:14:B9:D7:EF:07:F8:8D:A5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02FEEE4B11DBBA3859DAF5D3C64F7B0B8A7A0CDD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa Signing time: Wed 18 Mar 2026 23:06:36 +0000 ROA not before: Wed 18 Mar 2026 23:06:36 +0000 ROA not after: Tue 16 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fe:ee:4b:11:db:ba:38:59:da:f5:d3:c6:4f:7b:0b:8a:7a:0c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 18 23:06:36 2026 GMT Not After : Jun 16 23:59:59 2026 GMT Subject: serialNumber=1a296ff757e17c1d4a0e371abeb74018c062667920d1a175294f589a851c88a3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:58:47:38:35:eb:92:96:14:aa:b9:c9:0b: ea:22:dd:a4:83:1c:84:e6:35:0d:1a:a3:28:1a:51: da:8a:91:01:ca:54:23:96:ee:02:2a:e4:e3:35:59: 27:a4:e1:4e:f1:39:1d:b9:90:f1:2e:48:8f:8f:f4: f6:d9:32:b4:e6:78:c0:5f:b4:f0:7d:50:69:56:c5: 42:8e:5d:da:88:22:fe:36:c8:55:86:bd:25:93:90: 49:3a:0b:02:fe:f4:60:2c:42:25:0b:12:f3:b0:44: af:6a:35:b4:a4:40:8f:a4:74:35:0f:b6:10:d4:04: 06:94:6f:9f:f5:e6:87:7f:5d:57:2b:6d:90:bc:ae: c6:f7:e1:e0:a2:e3:3d:c5:78:ed:52:39:d7:14:a5: 5c:12:da:6c:92:27:33:fa:9d:99:dd:b5:65:7d:e4: 0c:76:d7:14:4a:fa:30:e0:c4:40:08:04:89:30:27: 56:34:e4:7d:38:6f:ff:6e:79:40:ab:9e:bd:ff:cf: 40:24:04:25:0c:37:df:0e:03:14:59:43:32:e7:e7: 85:01:e7:08:ea:ef:63:5e:f3:5f:66:b2:cf:1e:76: 58:cc:8b:e1:eb:42:d3:fc:dd:cb:84:1b:91:71:5d: 95:fb:11:77:cc:56:12:3c:a1:ef:8c:fc:64:2c:2a: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:81:23:EC:68:F9:25:8B:59:B2:81:14:B9:D7:EF:07:F8:8D:A5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3253695d-b576-4052-8dca-b631c73a2924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:10::/44 Signature Algorithm: sha256WithRSAEncryption 17:af:6f:45:c7:89:77:58:97:09:87:4a:ad:12:34:5a:a7:9f: d0:25:1a:79:c6:af:d7:ff:79:a3:6e:55:01:79:d7:6f:43:9a: e1:cc:7f:92:f9:2c:ca:05:dc:d8:e8:9e:dd:37:b0:83:85:3e: 6e:fe:1d:9e:dc:a2:3c:3d:f8:43:a1:94:02:05:d9:ac:84:56: 8a:31:c1:68:ce:eb:76:79:78:d5:d3:d8:58:ef:8d:d1:aa:be: 10:73:4a:bb:13:d7:69:6b:5c:b2:a2:77:8f:80:86:ab:bf:5d: 91:5a:96:20:6b:27:c4:07:2f:19:d6:27:2e:37:57:6e:b3:7e: 49:8a:de:41:52:7a:40:30:e3:07:99:02:cb:f1:02:75:37:7b: e2:f9:fa:b0:fc:4e:7d:92:5b:fa:bb:af:d1:29:69:e8:b2:ae: ed:ef:9f:f0:68:2a:05:b9:ee:ad:c4:3c:6e:01:a6:80:2a:a9: 33:90:eb:47:33:95:1c:74:53:99:b4:d0:3b:ee:83:0d:11:af: ea:9b:e1:85:9d:b0:76:4d:33:2f:b6:fb:74:fb:64:5a:28:65: 0f:e5:fe:7a:dc:b4:d7:03:4c:2b:a7:c8:f5:da:35:51:37:96: 3b:a6:6b:fc:12:7d:59:f3:1f:75:0c:1b:20:05:37:c2:3c:77: 62:c1:6b:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAv7uSxHbujhZ2vXTxk97C4p6DN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzE4MjMwNjM2WhcNMjYwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTI5NmZmNzU3ZTE3YzFkNGEwZTM3MWFiZWI3NDAxOGMw NjI2Njc5MjBkMWExNzUyOTRmNTg5YTg1MWM4OGEzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChoVhHODXrkpYUqrnJC+oi3aSDHITmNQ0aoygaUdqKkQHK VCOW7gIq5OM1WSek4U7xOR25kPEuSI+P9PbZMrTmeMBftPB9UGlWxUKOXdqIIv42 yFWGvSWTkEk6CwL+9GAsQiULEvOwRK9qNbSkQI+kdDUPthDUBAaUb5/15od/XVcr bZC8rsb34eCi4z3FeO1SOdcUpVwS2mySJzP6nZndtWV95Ax21xRK+jDgxEAIBIkw J1Y05H04b/9ueUCrnr3/z0AkBCUMN98OAxRZQzLn54UB5wjq72Ne819mss8edljM i+HrQtP83cuEG5FxXZX7EXfMVhI8oe+M/GQsKnwNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqAeBI+xo+SWLWbKBFLnX7wf4jaUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyNTM2OTVkLWI1NzYtNDA1Mi04ZGNhLWI2MzFjNzNhMjkyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxABAwDQYJKoZIhvcNAQELBQADggEBABevb0XHiXdYlwmHSq0SNFqn n9AlGnnGr9f/eaNuVQF5129DmuHMf5L5LMoF3Njont03sIOFPm7+HZ7cojw9+EOh lAIF2ayEVooxwWjO63Z5eNXT2FjvjdGqvhBzSrsT12lrXLKid4+Ahqu/XZFaliBr J8QHLxnWJy43V26zfkmK3kFSekAw4weZAsvxAnU3e+L5+rD8Tn2SW/q7r9Epaeiy ru3vn/BoKgW57q3EPG4BpoAqqTOQ60czlRx0U5m00Dvugw0Rr+qb4YWdsHZNMy+2 +3T7ZFooZQ/l/nrctNcDTCunyPXaNVE3ljuma/wSfVnzH3UMGyAFN8I8d2LBa7s= -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:52 2026 by rpki-client