$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d0e03305-a95a-42af-821e-9dd45f0427c6.roa File: d0e03305-a95a-42af-821e-9dd45f0427c6.roa (raw, json) Hash identifier: TGEGZbmcGCdmWT/hrchiKcz46qEeBUs2UzLYb0ZXCiw= Subject key identifier: B1:C7:25:C0:B3:5C:58:AA:B7:E9:D9:83:55:15:97:CC:CC:7C:55:16 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 40535B5009BB4F451A6C79005AED19F323557B31 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d0e03305-a95a-42af-821e-9dd45f0427c6.roa Signing time: Wed 18 Mar 2026 21:06:57 +0000 ROA not before: Wed 18 Mar 2026 21:06:57 +0000 ROA not after: Tue 16 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:cff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:53:5b:50:09:bb:4f:45:1a:6c:79:00:5a:ed:19:f3:23:55:7b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 18 21:06:57 2026 GMT Not After : Jun 16 23:59:59 2026 GMT Subject: serialNumber=689263471674d42044dc7b8ae06538d3dfb61b44b5b02e9a2b4345ee077b80d5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:2d:d1:30:ba:64:22:cc:a4:0b:ee:7d:bf: cd:1e:a7:e0:d7:8e:21:1b:ee:ad:e2:b7:1f:22:3a: 11:95:29:63:f1:51:46:3b:22:21:68:e0:ff:44:12: c6:c1:6f:8e:0e:a3:45:f8:55:fe:1c:55:dd:ae:9d: 5f:bd:23:d5:72:c2:46:5e:23:81:33:d7:96:07:a0: 39:40:1b:10:23:ff:09:92:18:f2:f8:95:95:83:99: 39:59:55:45:ea:43:84:64:08:5a:a4:1f:26:cd:de: 15:8f:29:e6:e1:59:63:ad:2a:c1:68:f9:ce:2c:29: 2f:d7:dc:40:c6:a2:90:2b:b8:76:67:a8:67:7d:12: 68:e6:3b:9b:88:90:44:52:cd:10:a1:e6:9c:65:ec: 32:f5:5f:c5:23:9d:89:e9:7e:0c:ce:f9:1e:c7:b2: 3d:b1:50:14:0f:ad:17:08:7b:e0:af:ba:9f:a4:45: 92:59:ec:f4:de:87:84:d4:26:d6:e2:fc:0f:45:b5: ff:2e:68:d9:a0:3e:d3:b2:d1:ff:2f:cd:2c:45:28: 07:13:63:31:b2:31:13:9c:0a:a5:15:6e:97:9c:6c: ee:2c:7b:51:03:4a:81:42:59:ef:1e:2d:f6:50:33: 25:53:1a:a8:35:69:a8:37:fe:a8:8f:e6:5f:78:0a: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:25:C0:B3:5C:58:AA:B7:E9:D9:83:55:15:97:CC:CC:7C:55:16 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d0e03305-a95a-42af-821e-9dd45f0427c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:cff::/48 Signature Algorithm: sha256WithRSAEncryption 50:46:0c:da:9d:b1:5c:fd:69:bc:f5:4b:2d:7f:5e:36:72:cb: 1d:67:ce:d4:7b:43:4e:a2:15:67:13:e7:a0:9e:39:a7:e0:06: 05:72:3c:c4:22:f4:2f:57:66:05:9f:3b:35:ac:f3:b1:c1:d2: 1d:aa:16:29:ca:e4:2a:dd:08:ad:8c:7b:8e:ea:0a:ec:bf:a4: 37:72:5f:b1:70:b9:69:3f:de:e8:df:78:3a:4d:d1:c5:bf:b5: 43:67:7a:1e:5a:27:b0:bc:d3:df:f5:4b:c2:17:86:f8:09:b6: 25:65:5e:62:98:1a:b8:18:61:9d:24:f9:e5:3b:ee:33:aa:b1: 4b:9d:9c:94:8a:a8:a5:7c:c0:ba:7d:89:b5:89:c2:fa:3f:66: 4f:13:fe:ab:6b:04:b7:5d:da:f9:c0:8b:d9:6b:11:36:cf:7d: f1:12:b0:39:9e:3d:e1:d4:f5:1e:d6:44:53:89:c0:a7:2c:2b: 94:17:c5:31:9b:12:40:ba:e1:ca:7e:d9:51:11:05:0b:4e:6a: 74:62:01:d3:80:d9:a4:ea:1c:81:21:42:b6:42:cf:f3:51:ff: 54:a6:e9:58:27:72:b7:8a:16:1f:e9:cc:be:67:c4:7b:ba:13: 7e:b1:9c:03:3b:8d:c4:a0:f6:45:09:cc:44:86:32:15:58:94: a4:78:24:f2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQFNbUAm7T0UabHkAWu0Z8yNVezEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzE4MjEwNjU3WhcNMjYwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODkyNjM0NzE2NzRkNDIwNDRkYzdiOGFlMDY1MzhkM2Rm YjYxYjQ0YjViMDJlOWEyYjQzNDVlZTA3N2I4MGQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpSS3RMLpkIsykC+59v80ep+DXjiEb7q3itx8iOhGVKWPx UUY7IiFo4P9EEsbBb44Oo0X4Vf4cVd2unV+9I9VywkZeI4Ez15YHoDlAGxAj/wmS GPL4lZWDmTlZVUXqQ4RkCFqkHybN3hWPKebhWWOtKsFo+c4sKS/X3EDGopAruHZn qGd9EmjmO5uIkERSzRCh5pxl7DL1X8UjnYnpfgzO+R7Hsj2xUBQPrRcIe+Cvup+k RZJZ7PTeh4TUJtbi/A9Ftf8uaNmgPtOy0f8vzSxFKAcTYzGyMROcCqUVbpecbO4s e1EDSoFCWe8eLfZQMyVTGqg1aag3/qiP5l94ClV/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUscclwLNcWKq36dmDVRWXzMx8VRYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QwZTAzMzA1LWE5NWEtNDJhZi04MjFlLTlkZDQ1ZjA0MjdjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwDP8wDQYJKoZIhvcNAQELBQADggEBAFBGDNqdsVz9abz1Sy1/XjZy yx1nztR7Q06iFWcT56CeOafgBgVyPMQi9C9XZgWfOzWs87HB0h2qFinK5CrdCK2M e47qCuy/pDdyX7FwuWk/3ujfeDpN0cW/tUNneh5aJ7C809/1S8IXhvgJtiVlXmKY GrgYYZ0k+eU77jOqsUudnJSKqKV8wLp9ibWJwvo/Zk8T/qtrBLdd2vnAi9lrETbP ffESsDmePeHU9R7WRFOJwKcsK5QXxTGbEkC64cp+2VERBQtOanRiAdOA2aTqHIEh QrZCz/NR/1Sm6VgncreKFh/pzL5nxHu6E36xnAM7jcSg9kUJzESGMhVYlKR4JPI= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:20 2026 by rpki-client