$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa File: 3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa (raw, json) Hash identifier: hbmSKhiSoK8RhXxD/kT1oE8mCJr6aNx4SPOHKnZjix4= Subject key identifier: A6:D1:ED:2B:2F:FE:31:09:11:A9:77:7C:9A:44:C2:CE:FC:C1:91:A6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6849669D4C11B03FEABF60FE28929847BC91B9A9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa Signing time: Wed 24 Jun 2026 16:47:21 +0000 ROA not before: Wed 24 Jun 2026 16:47:21 +0000 ROA not after: Tue 22 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c11d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:49:66:9d:4c:11:b0:3f:ea:bf:60:fe:28:92:98:47:bc:91:b9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 24 16:47:21 2026 GMT Not After : Sep 22 23:59:59 2026 GMT Subject: serialNumber=b2f96ccf63b2551322698d55f65e1d21f87286c3950710534cd4e4fa0095bf7c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:ad:0f:01:78:ea:61:e6:64:2a:42:3f:05: 79:da:bf:86:cd:e0:f7:e4:07:4e:0e:52:5c:a5:33: 4a:c8:66:ce:83:4a:8f:f0:87:a3:06:10:66:6d:1f: 3b:f8:23:71:bf:4a:d9:0c:56:27:17:7b:66:11:7a: 87:39:84:35:fa:87:c0:25:ec:64:27:af:f0:55:06: d8:73:67:e6:8c:d1:cf:b5:88:1f:0f:a8:b9:18:9c: 25:2d:43:55:ce:ab:5e:6a:9f:9a:70:7c:df:3e:0e: 60:33:5c:50:85:51:fe:f6:62:59:a1:38:db:9d:29: 4b:3c:5c:a5:e7:fb:1d:c2:59:21:cc:30:bd:60:a7: ef:b5:09:fd:67:60:a9:90:60:f2:95:73:5f:ce:11: b9:12:c7:90:7d:86:b7:c3:6f:94:62:6b:15:29:03: 93:0c:f8:80:c9:b1:54:3e:b3:88:d1:73:a5:7b:ba: 3d:75:ae:92:d3:ad:48:7a:71:2f:3f:40:1a:ce:f2: 11:29:48:cf:dd:de:7d:3f:cd:2d:9b:17:43:be:66: 80:8c:86:93:14:89:46:e7:19:12:73:1b:c7:6e:48: 7d:48:de:3f:53:b6:f1:ed:f1:65:46:5c:ce:c0:43: c2:3f:3a:07:c0:9a:6c:06:7e:6c:32:db:3c:8a:a4: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:ED:2B:2F:FE:31:09:11:A9:77:7C:9A:44:C2:CE:FC:C1:91:A6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3977fa59-3a70-4ac3-87cf-a8f21ccb7f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c11d::/48 Signature Algorithm: sha256WithRSAEncryption 25:44:b3:5c:5a:a4:c3:17:44:7c:69:bb:f6:6e:60:f1:ef:44: fe:46:01:58:10:fc:fe:c7:8b:f1:fe:6a:d7:d3:90:2b:a6:7e: 09:23:d7:75:49:60:f4:7e:3e:c3:41:ef:72:ce:2f:ad:0c:f1: 5c:0f:2b:d0:07:5e:4f:32:fc:e8:13:c1:9e:81:f5:d2:2a:cc: 20:dc:bb:84:7c:0e:2f:bb:0e:27:00:8e:92:a4:4d:3a:e3:0a: 32:ca:cd:63:bd:f8:47:a6:06:06:6b:15:01:cd:b0:92:e0:42: 23:e0:78:ce:04:ac:bc:4d:44:6d:e7:58:e7:07:df:d3:c6:4a: 4e:54:1c:5f:87:01:83:e0:81:c6:c6:41:6d:5f:f2:5b:3d:85: 5d:b8:24:1b:b7:a8:4b:0b:27:ce:6d:b0:bd:9c:b5:87:09:70: 14:49:d5:c2:f8:81:bd:c7:75:a4:c3:79:00:cc:95:7a:7c:4b: 0d:3d:67:9a:52:31:66:25:46:df:be:bf:3f:fd:7e:06:f1:f3: 45:65:50:15:19:47:3a:ed:d2:30:ad:c7:25:a0:67:a2:f3:ce: 6d:ab:dc:08:73:62:ca:a5:f7:cb:1a:d6:3a:80:c0:77:22:b7: 3a:8e:7a:08:64:1d:0f:07:ea:5e:67:47:62:b9:ae:82:e7:2c: fa:be:81:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaElmnUwRsD/qv2D+KJKYR7yRuakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjI0MTY0NzIxWhcNMjYwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmY5NmNjZjYzYjI1NTEzMjI2OThkNTVmNjVlMWQyMWY4 NzI4NmMzOTUwNzEwNTM0Y2Q0ZTRmYTAwOTViZjdjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSWa0PAXjqYeZkKkI/BXnav4bN4PfkB04OUlylM0rIZs6D So/wh6MGEGZtHzv4I3G/StkMVicXe2YReoc5hDX6h8Al7GQnr/BVBthzZ+aM0c+1 iB8PqLkYnCUtQ1XOq15qn5pwfN8+DmAzXFCFUf72YlmhONudKUs8XKXn+x3CWSHM ML1gp++1Cf1nYKmQYPKVc1/OEbkSx5B9hrfDb5RiaxUpA5MM+IDJsVQ+s4jRc6V7 uj11rpLTrUh6cS8/QBrO8hEpSM/d3n0/zS2bF0O+ZoCMhpMUiUbnGRJzG8duSH1I 3j9TtvHt8WVGXM7AQ8I/OgfAmmwGfmwy2zyKpPwNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUptHtKy/+MQkRqXd8mkTCzvzBkaYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5NzdmYTU5LTNhNzAtNGFjMy04N2NmLWE4ZjIxY2NiN2Y5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwwR0wDQYJKoZIhvcNAQELBQADggEBACVEs1xapMMXRHxpu/ZuYPHv RP5GAVgQ/P7Hi/H+atfTkCumfgkj13VJYPR+PsNB73LOL60M8VwPK9AHXk8y/OgT wZ6B9dIqzCDcu4R8Di+7DicAjpKkTTrjCjLKzWO9+EemBgZrFQHNsJLgQiPgeM4E rLxNRG3nWOcH39PGSk5UHF+HAYPggcbGQW1f8ls9hV24JBu3qEsLJ85tsL2ctYcJ cBRJ1cL4gb3HdaTDeQDMlXp8Sw09Z5pSMWYlRt++vz/9fgbx80VlUBUZRzrt0jCt xyWgZ6Lzzm2r3AhzYsql98sa1jqAwHcitzqOeghkHQ8H6l5nR2K5roLnLPq+gTU= -----END CERTIFICATE-----Generated at Sat Jun 27 14:05:10 2026 by rpki-client