$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa File: ae4da4aa-7827-46be-943a-4052021707f2.roa (raw, json) Hash identifier: RkbddZflSOPsknaoq+iUwKZ+CI46Q2TRhsEsOJy76do= Subject key identifier: 18:BE:9F:69:4F:CA:B4:22:E7:0C:18:07:8C:A5:ED:EA:A8:3E:35:09 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1A5C478B39B2F2FF135FE8C2B262BC0A194573CA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa Signing time: Wed 24 Jun 2026 21:47:15 +0000 ROA not before: Wed 24 Jun 2026 21:47:15 +0000 ROA not after: Tue 22 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5c:47:8b:39:b2:f2:ff:13:5f:e8:c2:b2:62:bc:0a:19:45:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 24 21:47:15 2026 GMT Not After : Sep 22 23:59:59 2026 GMT Subject: serialNumber=5fc2f2c1f556183501a1305e584324ac2067a267c5112cba00d91e09704445b7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:cf:b2:d8:75:e2:a6:1c:5a:64:7b:74:b6: 63:0f:dd:aa:55:57:fa:63:14:01:76:c6:ef:c0:99: d7:dc:8b:d6:df:88:3e:84:f5:f4:65:32:0c:3b:ac: 51:29:62:6d:8a:c1:17:4a:cd:99:17:f6:ed:31:9e: bf:74:4e:66:36:93:fe:17:57:65:d2:21:18:a1:3b: e0:b5:9b:1c:60:a2:7e:d6:ca:1d:d7:94:5a:ac:96: f3:d5:b5:8e:41:28:a5:29:e9:ea:a8:7a:f9:89:99: 5b:70:56:78:c6:c8:4c:93:f7:86:d7:94:40:b6:eb: f6:3e:85:b3:53:02:1e:4b:80:70:20:d5:00:02:5f: a8:08:11:57:01:96:47:63:f3:c0:3b:e9:b5:16:53: 62:36:f2:bb:03:9d:3b:2f:fa:7e:4d:b4:6e:ef:ff: 6e:34:ab:63:46:c8:a1:c8:24:dd:dc:1b:fb:c6:30: 89:91:ea:51:c4:0b:d1:25:25:63:b0:26:36:fd:a2: 6b:23:01:bf:04:6c:38:86:90:e7:ca:a6:25:47:cd: 5d:7f:dd:8c:e9:39:17:7d:44:26:0c:c4:5d:cf:73: 9c:01:4c:73:34:1a:f3:94:22:bb:e6:18:ee:44:b7: 51:b2:d2:50:09:ef:42:8b:1b:9a:34:7f:4c:8b:d9: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BE:9F:69:4F:CA:B4:22:E7:0C:18:07:8C:A5:ED:EA:A8:3E:35:09 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae4da4aa-7827-46be-943a-4052021707f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:7::/48 Signature Algorithm: sha256WithRSAEncryption 32:b6:5b:62:5b:ee:2a:5d:c2:73:cf:1f:17:60:2d:1a:78:ba: 55:0b:1e:d4:c9:9b:a2:9d:f4:5f:40:82:a3:86:28:2c:7f:e6: 64:86:ea:87:e7:60:c1:ae:4c:ad:d4:d1:d5:a9:4e:ae:d1:7e: 3f:0c:d6:ed:0c:51:f0:3d:36:c8:dc:38:34:0b:71:9b:0a:12: 47:99:e1:fb:72:30:51:e8:75:9a:b9:dd:cc:74:80:4a:85:08: 94:d4:07:f1:c9:6f:ff:36:7e:b8:71:1a:37:04:6b:86:28:bb: ed:0d:d1:02:ba:7d:92:78:c0:5b:ca:6b:d3:39:a9:d6:f9:c8: b5:95:5a:f0:8e:b6:f0:24:d0:d6:9a:cf:60:a8:77:74:33:80: ec:87:c9:94:91:7f:84:1e:96:1a:fe:0b:8a:70:53:1b:cc:2a: 4d:e0:37:d6:bc:17:bc:dc:9a:a8:8d:6d:fa:df:65:23:77:ad: 57:29:fe:91:47:8d:20:44:19:45:4b:72:01:7f:12:3e:6f:fb: 31:5a:67:2f:bb:f8:27:bb:4b:9d:27:f4:58:05:af:2d:30:34: 33:87:66:73:89:a5:51:f8:83:f9:7d:53:c0:0a:e2:68:01:6c: 58:33:48:94:60:94:d6:8a:fc:fb:07:9a:e6:ae:06:07:7a:e7: e7:bb:36:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGlxHizmy8v8TX+jCsmK8ChlFc8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjI0MjE0NzE1WhcNMjYwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmMyZjJjMWY1NTYxODM1MDFhMTMwNWU1ODQzMjRhYzIw NjdhMjY3YzUxMTJjYmEwMGQ5MWUwOTcwNDQ0NWI3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZH8+y2HXiphxaZHt0tmMP3apVV/pjFAF2xu/Amdfci9bf iD6E9fRlMgw7rFEpYm2KwRdKzZkX9u0xnr90TmY2k/4XV2XSIRihO+C1mxxgon7W yh3XlFqslvPVtY5BKKUp6eqoevmJmVtwVnjGyEyT94bXlEC26/Y+hbNTAh5LgHAg 1QACX6gIEVcBlkdj88A76bUWU2I28rsDnTsv+n5NtG7v/240q2NGyKHIJN3cG/vG MImR6lHEC9ElJWOwJjb9omsjAb8EbDiGkOfKpiVHzV1/3YzpORd9RCYMxF3Pc5wB THM0GvOUIrvmGO5Et1Gy0lAJ70KLG5o0f0yL2foHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGL6faU/KtCLnDBgHjKXt6qg+NQkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FlNGRhNGFhLTc4MjctNDZiZS05NDNhLTQwNTIwMjE3MDdmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAcwDQYJKoZIhvcNAQELBQADggEBADK2W2Jb7ipdwnPPHxdgLRp4 ulULHtTJm6Kd9F9AgqOGKCx/5mSG6ofnYMGuTK3U0dWpTq7Rfj8M1u0MUfA9Nsjc ODQLcZsKEkeZ4ftyMFHodZq53cx0gEqFCJTUB/HJb/82frhxGjcEa4You+0N0QK6 fZJ4wFvKa9M5qdb5yLWVWvCOtvAk0Naaz2Cod3QzgOyHyZSRf4Qelhr+C4pwUxvM Kk3gN9a8F7zcmqiNbfrfZSN3rVcp/pFHjSBEGUVLcgF/Ej5v+zFaZy+7+Ce7S50n 9FgFry0wNDOHZnOJpVH4g/l9U8AK4mgBbFgzSJRglNaK/PsHmuauBgd65+e7Nkw= -----END CERTIFICATE-----Generated at Sat Jun 27 14:05:07 2026 by rpki-client