$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa File: 71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json) Hash identifier: MZ/uOJ57GW1M2Vm8FzzFndjg9PeOlVu0brsFSCXAOGE= Subject key identifier: 99:C4:E0:03:DC:A9:7D:22:C0:40:4A:79:44:72:18:09:4E:15:0D:2D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1477A81C6A53895E3C35AA16CFB5AF46C59596E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa Signing time: Tue 19 May 2026 04:30:24 +0000 ROA not before: Tue 19 May 2026 04:30:24 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:77:a8:1c:6a:53:89:5e:3c:35:aa:16:cf:b5:af:46:c5:95:96:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:30:24 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=3780541b67abb8034a37b1b0e52da40b71ed9c9d0ee334a399503c0bf490a098, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:4e:0b:1c:c6:c1:38:7f:7f:35:5d:e2:7d: d1:5a:13:65:3d:2f:8e:26:b9:8b:42:fe:ff:9b:c4: 6c:48:95:43:df:3a:c3:86:6e:2e:10:46:d9:ee:ae: b3:56:ef:95:79:cf:ac:85:d4:6f:9c:79:e5:a8:7a: af:37:40:f0:cd:1b:6c:fe:bf:f0:ea:33:cd:03:e6: dc:aa:58:87:08:c4:f1:4f:44:47:8f:56:fc:c2:b3: 15:df:29:a9:da:7b:94:7c:db:ac:79:0e:3a:5e:29: 0c:9f:c6:fc:4a:ba:f9:cf:d8:4f:cc:8f:92:88:df: 07:5f:36:78:62:03:9d:4d:b3:15:06:1e:d6:60:b2: 8c:34:25:76:dc:ee:85:0e:9c:54:d5:bf:3a:e0:dd: 50:51:fe:15:f0:bf:36:db:48:0c:f2:3d:99:db:1d: 16:5f:cc:43:16:ec:6b:fd:77:78:cc:b8:dc:1f:06: fc:85:62:4f:9c:64:01:2e:75:b5:0c:7e:30:84:90: 2b:00:2c:a0:3b:40:1e:be:25:45:ca:ac:47:f9:d5: 12:f6:e2:f4:0e:81:29:91:8a:04:38:5a:37:c4:de: 32:4b:6b:f2:79:b9:de:05:71:f4:9b:8c:a4:ee:8f: a0:25:a9:79:55:84:d7:1d:3f:d5:f6:31:d1:27:ef: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:E0:03:DC:A9:7D:22:C0:40:4A:79:44:72:18:09:4E:15:0D:2D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5510::/44 Signature Algorithm: sha256WithRSAEncryption a4:0d:8e:86:07:9f:c1:36:9d:90:61:7a:f9:ef:f9:12:3c:07: 59:56:48:e1:4f:47:3f:72:9a:e9:c0:87:21:35:47:fb:fc:02: fe:a9:26:ec:a3:ed:15:6e:23:52:93:db:bc:b5:b0:4a:2a:7e: f8:00:4d:e1:88:10:5d:98:95:45:4a:8c:ca:82:59:8e:5b:d8: 97:d6:37:43:9b:e5:af:29:f5:6f:69:21:d3:59:cb:54:fb:70: 10:28:2d:a1:f7:45:1d:7d:e9:6c:db:2d:04:06:08:ce:35:a3: 7d:b3:ac:d4:0b:5b:19:33:86:e2:49:a5:bb:01:14:cd:f3:c4: f5:5b:f8:f1:43:d8:42:fc:8c:64:90:2c:2e:7c:ca:f3:03:43: 20:04:44:f1:49:f8:f8:10:70:e9:f1:d3:ed:43:de:70:af:74: 29:89:f7:11:ee:fb:34:c6:55:6b:76:e2:ed:55:d2:c0:f1:00: d4:9f:f0:f7:03:56:a2:9d:10:ea:53:a3:78:82:87:18:40:cc: bc:0a:e5:47:a5:a0:ef:b0:f5:70:a6:9e:9c:59:a3:4b:d8:88: 26:9b:f9:6c:1c:41:d9:9a:fe:61:06:17:44:e9:42:8a:21:0e: 21:ca:08:9a:3d:d1:5e:51:f8:72:68:cd:1f:36:87:59:5d:a5: 04:9e:6b:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFHeoHGpTiV48NaoWz7WvRsWVluQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQzMDI0WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzgwNTQxYjY3YWJiODAzNGEzN2IxYjBlNTJkYTQwYjcx ZWQ5YzlkMGVlMzM0YTM5OTUwM2MwYmY0OTBhMDk4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVB04LHMbBOH9/NV3ifdFaE2U9L44muYtC/v+bxGxIlUPf OsOGbi4QRtnurrNW75V5z6yF1G+ceeWoeq83QPDNG2z+v/DqM80D5tyqWIcIxPFP REePVvzCsxXfKanae5R826x5DjpeKQyfxvxKuvnP2E/Mj5KI3wdfNnhiA51NsxUG HtZgsow0JXbc7oUOnFTVvzrg3VBR/hXwvzbbSAzyPZnbHRZfzEMW7Gv9d3jMuNwf BvyFYk+cZAEudbUMfjCEkCsALKA7QB6+JUXKrEf51RL24vQOgSmRigQ4WjfE3jJL a/J5ud4FcfSbjKTuj6AlqXlVhNcdP9X2MdEn7wERAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmcTgA9ypfSLAQEp5RHIYCU4VDS0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxYTJhMmMwLWI4ZGItNDg0Ny1hNzU2LWI3NTE1YWE0MmIwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVRAwDQYJKoZIhvcNAQELBQADggEBAKQNjoYHn8E2nZBhevnv+RI8 B1lWSOFPRz9ymunAhyE1R/v8Av6pJuyj7RVuI1KT27y1sEoqfvgATeGIEF2YlUVK jMqCWY5b2JfWN0Ob5a8p9W9pIdNZy1T7cBAoLaH3RR196WzbLQQGCM41o32zrNQL WxkzhuJJpbsBFM3zxPVb+PFD2EL8jGSQLC58yvMDQyAERPFJ+PgQcOnx0+1D3nCv dCmJ9xHu+zTGVWt24u1V0sDxANSf8PcDVqKdEOpTo3iChxhAzLwK5UeloO+w9XCm npxZo0vYiCab+WwcQdma/mEGF0TpQoohDiHKCJo90V5R+HJozR82h1ldpQSeawo= -----END CERTIFICATE-----Generated at Fri Jun 12 05:51:12 2026 by rpki-client