$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa File: 06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json) Hash identifier: m16V5rJOgq1MHjTCT7rxoQremvc6B1OxuZ7u5eEM9To= Subject key identifier: 34:97:60:C2:85:BE:9B:D6:CF:CC:3A:E6:29:DF:0B:E0:6A:36:30:73 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0D36BB37B76B9C6189AF7763CA3DE2DB5EA07DC0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa Signing time: Sun 01 Mar 2026 01:00:11 +0000 ROA not before: Sun 01 Mar 2026 01:00:11 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:36:bb:37:b7:6b:9c:61:89:af:77:63:ca:3d:e2:db:5e:a0:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:11 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=15ec31257061df0404c1adf869bb0d6c541602d0cc71f70cf3a2b98aa09d7003, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:d6:da:66:bd:81:54:be:73:c1:eb:72:98: 6f:33:8f:be:7f:cd:2b:56:de:d9:6d:0e:2e:67:fe: a7:a5:fe:32:90:e6:00:75:b9:73:db:02:38:25:5d: 55:e8:a2:ba:8a:fb:76:a1:0e:32:b3:a9:e4:54:1b: db:da:ea:41:bb:b9:3b:61:7e:27:57:7c:94:d4:06: 0f:9e:00:dc:25:38:7b:30:7c:77:18:fa:8e:f7:de: 1c:56:25:50:76:3a:84:57:7c:eb:07:0d:f2:74:20: 31:79:5f:a0:21:f6:5b:01:46:64:6c:1c:cd:d4:fd: fd:80:05:f1:40:19:34:16:d3:1a:b1:12:30:70:7d: b1:92:83:9c:76:4b:21:ed:e4:13:e6:d2:af:9c:0a: 2f:da:65:00:0b:63:4e:b7:86:9a:4c:e6:6d:40:89: f5:c1:f3:79:e5:07:f7:8f:0f:7c:89:36:7d:5c:e2: 8d:ae:c9:92:c8:bb:40:8c:06:ce:c2:95:03:e8:a5: f6:9d:c7:45:6a:93:f9:23:fa:f4:92:52:43:1f:a0: 2e:fd:f7:15:60:4d:c8:78:1e:65:ca:2a:af:dc:ba: 9e:1e:2d:36:38:98:48:3c:c3:40:1d:14:e4:5e:16: cd:98:13:44:a6:03:42:3c:2e:af:3d:d2:0e:c8:e3: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:60:C2:85:BE:9B:D6:CF:CC:3A:E6:29:DF:0B:E0:6A:36:30:73 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption 29:9a:17:3c:ef:34:ab:bc:6a:84:de:8a:a1:a3:1a:27:cd:ca: 5e:c3:cc:e4:cb:e3:b9:3c:72:42:97:17:0a:96:aa:a2:ee:87: 4c:63:1b:1c:de:37:23:bf:0e:63:01:ed:44:65:e9:86:0b:f1: cd:13:4b:43:2f:79:38:41:d5:0b:39:e3:30:52:a9:74:c2:8f: 0b:a5:f9:49:b4:3e:44:54:c0:44:46:02:1a:d6:a7:00:5d:77: b2:24:82:c4:84:c3:1c:64:db:10:5b:f3:c6:a6:d7:dc:53:0f: e8:b3:ff:5f:c2:e1:ae:96:a2:ae:dd:c0:89:de:db:17:6f:ac: 1d:28:4f:52:5c:64:78:b8:1a:99:ee:db:58:cf:f5:51:56:0c: 19:3b:af:90:ba:df:00:b2:ce:9d:8d:2c:81:f3:e4:13:e4:b9: 61:4e:6e:05:f4:cd:62:07:40:9c:56:d6:57:6f:32:f7:2a:cc: cf:86:16:6b:a8:b5:97:fa:ba:d9:be:9b:7f:2e:09:ea:1b:58: 84:e8:62:d6:26:71:39:69:9a:b8:8f:1e:a4:38:6a:6d:94:2f: bd:87:51:22:d5:57:1e:c3:16:d0:49:f2:26:ec:57:3c:de:3c: fb:45:47:22:f2:17:3c:6c:d7:b3:86:0d:86:f2:2d:14:f2:23: 43:b7:8f:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDTa7N7drnGGJr3djyj3i216gfcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDExWhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWVjMzEyNTcwNjFkZjA0MDRjMWFkZjg2OWJiMGQ2YzU0 MTYwMmQwY2M3MWY3MGNmM2EyYjk4YWEwOWQ3MDAzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiI9baZr2BVL5zwetymG8zj75/zStW3tltDi5n/qel/jKQ 5gB1uXPbAjglXVXoorqK+3ahDjKzqeRUG9va6kG7uTthfidXfJTUBg+eANwlOHsw fHcY+o733hxWJVB2OoRXfOsHDfJ0IDF5X6Ah9lsBRmRsHM3U/f2ABfFAGTQW0xqx EjBwfbGSg5x2SyHt5BPm0q+cCi/aZQALY063hppM5m1AifXB83nlB/ePD3yJNn1c 4o2uyZLIu0CMBs7ClQPopfadx0Vqk/kj+vSSUkMfoC799xVgTch4HmXKKq/cup4e LTY4mEg8w0AdFOReFs2YE0SmA0I8Lq890g7I40E5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNJdgwoW+m9bPzDrmKd8L4Go2MHMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2ZTBhOTdlLWI1MDAtNDM0Yy05NGI0LTNlYWRkMzRlNWQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBACmaFzzvNKu8aoTeiqGjGifN yl7DzOTL47k8ckKXFwqWqqLuh0xjGxzeNyO/DmMB7URl6YYL8c0TS0MveThB1Qs5 4zBSqXTCjwul+Um0PkRUwERGAhrWpwBdd7IkgsSEwxxk2xBb88am19xTD+iz/1/C 4a6Woq7dwIne2xdvrB0oT1JcZHi4Gpnu21jP9VFWDBk7r5C63wCyzp2NLIHz5BPk uWFObgX0zWIHQJxW1ldvMvcqzM+GFmuotZf6utm+m38uCeobWIToYtYmcTlpmriP HqQ4am2UL72HUSLVVx7DFtBJ8ibsVzzePPtFRyLyFzxs17OGDYbyLRTyI0O3j6k= -----END CERTIFICATE-----Generated at Mon Mar 2 04:28:35 2026 by rpki-client