$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa File: da785247-8a0c-4cca-ab5c-6c352637b4af.roa (raw, json) Hash identifier: pDKi19iMaH7/VhQ04B5RNcczjJnRNTs3cyKUCy0jeik= Subject key identifier: B9:42:47:73:F6:2D:29:83:D2:F7:26:E5:9E:06:83:8A:1A:FB:0F:D3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 42188C68407856EE96B30C9C2DD179FA843CD416 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa Signing time: Thu 14 May 2026 01:40:07 +0000 ROA not before: Thu 14 May 2026 01:40:07 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:18:8c:68:40:78:56:ee:96:b3:0c:9c:2d:d1:79:fa:84:3c:d4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 14 01:40:07 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=dec462d5bbbdfdc8e611a82445bb277fb88e43e6bbc008b00e1acb9f84701f91, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:69:8a:84:57:c1:c1:e1:5b:7e:9f:e7:06: c6:9b:83:d7:74:26:98:7a:18:6d:e6:4e:fd:bb:61: 35:13:5b:d0:46:57:f8:4b:3b:8a:e4:99:71:17:2a: c6:d6:0e:41:1e:8f:6a:42:34:63:de:1a:af:1c:28: 6d:f0:4c:d7:44:95:39:38:6e:13:16:e2:47:56:ba: 14:01:20:a9:60:42:9f:b1:73:01:93:f4:58:8a:7e: 0a:45:09:12:13:80:59:99:c6:aa:1b:0b:a2:aa:a0: 7b:f3:9f:91:91:58:b0:70:1b:8d:19:56:2a:1b:34: 17:35:fe:c0:25:fc:1b:82:d0:ee:38:3c:5b:48:dd: 34:b6:10:7e:ec:dc:42:3b:75:7a:ab:f9:d0:70:6a: a9:45:da:35:b8:3f:ff:85:c6:82:1e:3b:9f:34:7a: de:82:1a:b3:77:fa:95:67:a2:84:bb:0d:a8:0a:54: 77:9e:4c:b8:b4:6f:c0:ff:09:20:98:6a:20:8e:22: b2:73:96:93:26:cb:b0:51:dd:d3:e2:1f:51:90:2b: a7:81:2b:7f:51:5d:20:cc:27:1c:09:ab:81:72:2e: fc:3b:8c:f2:49:f3:45:c5:1d:97:3a:22:d9:aa:f2: b7:8f:55:ae:16:f6:e4:35:03:2f:13:52:fc:05:2b: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:42:47:73:F6:2D:29:83:D2:F7:26:E5:9E:06:83:8A:1A:FB:0F:D3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5505::/48 Signature Algorithm: sha256WithRSAEncryption 5b:82:c4:6e:41:26:38:97:bf:9a:6e:1a:5e:c2:2c:3b:48:80: ab:e8:b5:0e:ca:42:35:52:60:48:aa:ac:0b:c3:71:72:ef:f3: ef:61:34:27:80:47:44:c0:da:18:64:db:6a:cb:22:ea:a5:03: 0e:2e:21:7e:11:d6:ae:38:ce:94:10:d7:54:91:53:f2:e3:4d: 3d:31:13:59:25:fa:28:de:21:e8:2b:96:1a:09:97:f7:b5:c5: c8:9c:cd:7c:e5:10:8e:25:6d:77:93:70:bc:4d:24:b2:f7:c5: 7e:de:c0:2d:eb:29:9a:06:c5:33:f3:2a:af:af:91:d7:26:89: 4d:ae:b1:f5:5c:88:e0:bd:18:09:19:32:91:ea:0a:04:bd:01: 14:0d:dd:76:2e:6a:78:e9:49:2e:63:91:81:a8:23:67:52:0d: a6:94:94:3b:47:2d:f6:7a:20:88:c5:ac:9f:0c:8e:75:04:6b: aa:da:4e:c3:93:49:5c:97:10:c4:8d:6c:55:a8:d5:2c:0e:17: 7f:39:2b:5f:4e:bd:1d:81:e4:d1:35:45:91:49:8c:68:af:ef: 10:11:ce:d0:a7:d8:f2:29:45:2b:ef:e9:28:10:6b:64:0d:bb: bc:04:03:0b:fb:79:e4:ac:b3:6a:f4:1b:8b:83:b2:1e:c8:c1: ec:5d:1c:4a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQhiMaEB4Vu6WswycLdF5+oQ81BYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE0MDE0MDA3WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWM0NjJkNWJiYmRmZGM4ZTYxMWE4MjQ0NWJiMjc3ZmI4 OGU0M2U2YmJjMDA4YjAwZTFhY2I5Zjg0NzAxZjkxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwBGmKhFfBweFbfp/nBsabg9d0Jph6GG3mTv27YTUTW9BG V/hLO4rkmXEXKsbWDkEej2pCNGPeGq8cKG3wTNdElTk4bhMW4kdWuhQBIKlgQp+x cwGT9FiKfgpFCRITgFmZxqobC6KqoHvzn5GRWLBwG40ZViobNBc1/sAl/BuC0O44 PFtI3TS2EH7s3EI7dXqr+dBwaqlF2jW4P/+FxoIeO580et6CGrN3+pVnooS7DagK VHeeTLi0b8D/CSCYaiCOIrJzlpMmy7BR3dPiH1GQK6eBK39RXSDMJxwJq4FyLvw7 jPJJ80XFHZc6Itmq8rePVa4W9uQ1Ay8TUvwFKyALAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuUJHc/YtKYPS9yblngaDihr7D9MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhNzg1MjQ3LThhMGMtNGNjYS1hYjVjLTZjMzUyNjM3YjRhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQUwDQYJKoZIhvcNAQELBQADggEBAFuCxG5BJjiXv5puGl7CLDtI gKvotQ7KQjVSYEiqrAvDcXLv8+9hNCeAR0TA2hhk22rLIuqlAw4uIX4R1q44zpQQ 11SRU/LjTT0xE1kl+ijeIegrlhoJl/e1xciczXzlEI4lbXeTcLxNJLL3xX7ewC3r KZoGxTPzKq+vkdcmiU2usfVciOC9GAkZMpHqCgS9ARQN3XYuanjpSS5jkYGoI2dS DaaUlDtHLfZ6IIjFrJ8MjnUEa6raTsOTSVyXEMSNbFWo1SwOF385K19OvR2B5NE1 RZFJjGiv7xARztCn2PIpRSvv6SgQa2QNu7wEAwv7eeSss2r0G4uDsh7IwexdHEo= -----END CERTIFICATE-----Generated at Fri Jun 12 05:51:10 2026 by rpki-client