$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa File: f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa (raw, json) Hash identifier: pmdHN7KVKRfHTdTJol9lBel3IuyR62m3Zxl9g0lMQBU= Subject key identifier: 5C:AB:82:04:D1:95:EF:3D:24:90:CB:7D:16:26:1B:C3:3F:90:E1:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38152CDE3E85B39CE5A5B2DB0E241167418F5E2D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa Signing time: Sun 24 May 2026 00:00:02 +0000 ROA not before: Sun 24 May 2026 00:00:02 +0000 ROA not after: Sat 22 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:15:2c:de:3e:85:b3:9c:e5:a5:b2:db:0e:24:11:67:41:8f:5e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 24 00:00:02 2026 GMT Not After : Aug 22 23:59:59 2026 GMT Subject: serialNumber=b0051c9348866dcf93c323ff1c5baf819aca4598b94c5170fc232e51f714c70a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:19:fe:72:7d:2b:83:ee:f3:0f:84:f2:f5:98: b3:42:d4:60:f3:56:e9:f8:75:27:87:f1:66:df:38: b0:fd:45:2e:42:61:0a:f5:85:28:47:53:d8:f2:08: b4:60:0a:d4:fb:5b:fe:de:00:54:5a:a7:6a:43:d6: 86:cc:fa:26:f1:49:b9:65:76:00:d0:0d:f2:a7:2d: 6b:21:41:4d:9c:99:52:22:d2:ec:48:db:a1:3d:49: 3a:5a:32:cf:28:73:05:74:81:e6:d0:a1:2b:3e:22: 38:58:24:8b:a3:b2:ea:e7:47:39:34:42:75:bd:1f: e0:da:7f:b0:40:de:c0:09:0d:20:4a:5b:86:fc:65: d1:85:da:2d:a5:ff:9b:fa:90:75:9f:fb:f2:33:18: dc:2b:1c:56:49:8c:f2:af:60:7a:44:01:d1:be:97: 83:be:89:30:dd:ce:ad:4d:b7:72:aa:df:ba:88:11: 96:0b:0d:a7:dc:37:08:46:d9:fe:11:61:38:38:cf: 63:54:4b:71:aa:2d:a7:c2:38:9e:49:2f:d1:c3:2b: c2:50:20:a4:41:09:74:40:36:ef:f7:1d:65:a1:60: 25:37:ee:17:1f:ef:e8:c2:59:69:1b:c2:d6:92:3c: 73:b9:29:c1:85:50:52:8f:b0:57:dc:de:76:03:2d: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AB:82:04:D1:95:EF:3D:24:90:CB:7D:16:26:1B:C3:3F:90:E1:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f3885ffd-2959-4466-96cb-d6b2d1dcffa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/40 Signature Algorithm: sha256WithRSAEncryption 7e:b5:01:f7:34:9c:7e:e1:04:36:be:9a:fe:03:e4:ff:da:c5: de:25:d7:01:65:2e:40:55:14:ae:da:29:16:ab:85:c1:16:c3: 86:be:6f:1c:5b:d0:43:07:61:40:21:7c:89:01:58:9e:6f:d9: 36:5f:12:21:f0:dd:ff:32:6b:1b:44:ab:47:80:e9:b9:cb:83: 7d:8f:0a:97:53:3b:9a:16:8a:d2:d6:5c:4c:b7:de:17:54:61: 90:91:c2:3b:17:f5:c9:43:56:90:63:91:57:f3:9e:49:2f:92: ae:99:27:0c:d7:d6:d3:4e:fb:91:40:a7:a3:cb:5e:db:68:23: c0:92:53:dc:cd:fa:b0:68:09:da:61:3a:55:28:25:ee:4b:d6: 6f:3c:b3:2a:8a:3b:0e:ae:12:09:d3:45:a0:d9:a1:0f:9c:61: 76:52:cf:80:c9:7a:ed:ba:eb:1f:2c:88:f2:f3:55:e6:b6:aa: 9f:b8:d5:a5:5e:06:1b:6a:f3:b7:ad:bb:3c:cf:bc:16:c4:52: a0:03:82:30:a7:d4:cc:9f:9d:e4:9f:c8:b2:c1:b8:b9:aa:8e: ac:05:70:c5:59:0e:59:1a:b6:a9:9f:67:a8:31:6b:78:5a:e8: 70:aa:a0:68:dd:35:c3:db:d8:a8:ae:4a:36:99:59:b0:10:a0: ad:68:74:d2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOBUs3j6Fs5zlpbLbDiQRZ0GPXi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTI0MDAwMDAyWhcNMjYwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDA1MWM5MzQ4ODY2ZGNmOTNjMzIzZmYxYzViYWY4MTlh Y2E0NTk4Yjk0YzUxNzBmYzIzMmU1MWY3MTRjNzBhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7Gf5yfSuD7vMPhPL1mLNC1GDzVun4dSeH8WbfOLD9RS5C YQr1hShHU9jyCLRgCtT7W/7eAFRap2pD1obM+ibxSblldgDQDfKnLWshQU2cmVIi 0uxI26E9STpaMs8ocwV0gebQoSs+IjhYJIujsurnRzk0QnW9H+Daf7BA3sAJDSBK W4b8ZdGF2i2l/5v6kHWf+/IzGNwrHFZJjPKvYHpEAdG+l4O+iTDdzq1Nt3Kq37qI EZYLDafcNwhG2f4RYTg4z2NUS3GqLafCOJ5JL9HDK8JQIKRBCXRANu/3HWWhYCU3 7hcf7+jCWWkbwtaSPHO5KcGFUFKPsFfc3nYDLez1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXKuCBNGV7z0kkMt9FiYbwz+Q4SYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzODg1ZmZkLTI5NTktNDQ2Ni05NmNiLWQ2YjJkMWRjZmZhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwYTANBgkqhkiG9w0BAQsFAAOCAQEAfrUB9zScfuEENr6a/gPk/9rF 3iXXAWUuQFUUrtopFquFwRbDhr5vHFvQQwdhQCF8iQFYnm/ZNl8SIfDd/zJrG0Sr R4DpucuDfY8Kl1M7mhaK0tZcTLfeF1RhkJHCOxf1yUNWkGORV/OeSS+SrpknDNfW 0077kUCno8te22gjwJJT3M36sGgJ2mE6VSgl7kvWbzyzKoo7Dq4SCdNFoNmhD5xh dlLPgMl67brrHyyI8vNV5raqn7jVpV4GG2rzt627PM+8FsRSoAOCMKfUzJ+d5J/I ssG4uaqOrAVwxVkOWRq2qZ9nqDFreFrocKqgaN01w9vYqK5KNplZsBCgrWh00g== -----END CERTIFICATE-----Generated at Fri Jun 12 05:50:25 2026 by rpki-client