$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa File: 0fac8622-056c-4350-9d70-b107bedf3e94.roa (raw, json) Hash identifier: aIV+HIly1uIGBF43ozqVgIrJBWEs15WFZ+Nny5UtvVA= Subject key identifier: 3F:F6:53:BF:C8:22:AD:A6:25:F4:43:81:57:55:05:09:9C:0A:61:10 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 340B5B2DB3FB7FE3D8E7D15320652C0FA14D9450 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa Signing time: Fri 13 Feb 2026 15:10:43 +0000 ROA not before: Fri 13 Feb 2026 15:10:43 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0b:5b:2d:b3:fb:7f:e3:d8:e7:d1:53:20:65:2c:0f:a1:4d:94:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:43 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=77f38a9325d0ed510e26c4c8dbd7af22d71a9591bc74c0c44b5dcb67db9e6047, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:34:61:54:a2:f6:21:1e:1b:dd:85:19:96: 1f:05:dd:53:6e:7d:6f:a0:9e:42:ef:a4:9a:57:f8: 3f:d5:c7:96:1a:63:ab:34:c5:89:77:c9:80:2b:39: 6a:58:a4:ff:8c:6f:f4:39:38:d6:53:82:b6:31:b1: cb:27:13:72:8e:d1:23:d9:e4:16:a1:3b:20:b9:c5: db:3a:8e:48:98:83:07:fc:47:89:0f:f6:b3:51:d7: 5e:17:08:c6:bb:fb:2a:67:90:6a:ba:26:2f:8d:68: 7b:5a:d2:46:88:34:c2:43:98:32:90:ab:ca:f9:0e: ae:55:e5:ec:5a:01:63:03:29:89:f1:3f:fb:1c:b8: b4:27:74:7b:74:d5:ca:6b:86:a1:df:7b:02:1b:da: b6:32:cf:01:08:49:59:70:bf:44:a5:6b:27:d1:0f: ab:9a:0c:d2:f1:c7:07:f7:31:6d:f9:2f:21:da:73: 2a:86:ce:99:50:94:d1:78:05:13:40:93:fd:00:f5: 2f:79:49:ce:fe:24:3b:5a:93:c0:29:2f:5b:5f:54: 30:c5:57:d6:af:11:4d:7a:01:b3:af:45:8f:b5:9b: f1:0e:d7:cb:96:e3:da:7f:8f:28:df:98:e9:f2:05: b2:61:4d:16:60:8e:cb:e8:8f:c8:94:ff:f6:cb:70: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:53:BF:C8:22:AD:A6:25:F4:43:81:57:55:05:09:9C:0A:61:10 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6103::/48 Signature Algorithm: sha256WithRSAEncryption 5a:8d:03:1e:8e:86:43:56:66:d9:88:91:64:28:fd:3a:9e:7c: c1:b0:ac:45:bc:04:fd:35:76:76:3b:c9:de:75:ec:fd:26:01: 9e:0b:3c:b8:a2:23:44:61:1f:9d:d6:c0:d6:98:8a:f3:c3:74: 68:81:2b:dc:43:25:60:f2:ed:82:b2:a7:7a:7c:7d:14:a8:e9: 12:86:57:fd:71:3b:d3:0a:99:5a:dc:9b:94:c1:97:dd:4a:4b: 60:2b:ce:cf:f2:5e:d9:6c:61:11:82:a7:af:5b:12:d8:cf:cd: 3b:e4:b1:07:e3:36:aa:77:80:73:62:70:2c:1c:65:79:a8:5a: c9:f0:d3:91:83:c5:97:e3:2d:75:4b:6f:1b:66:f5:75:4d:23: ae:84:8e:51:b4:34:9f:56:83:bc:3a:67:a3:ad:df:f4:ef:e8: a9:28:f6:87:bf:e0:71:54:c4:c3:e4:4b:59:64:bb:c1:df:5d: d6:d5:57:fb:d3:21:1d:73:00:ee:56:12:8b:58:88:75:5a:d4: a8:a1:79:a2:65:64:c3:21:39:78:37:b1:47:7b:22:0e:ea:c3: df:3e:39:a9:0f:ec:85:92:17:64:76:2d:13:f7:83:6f:a8:60: 0e:59:ce:a6:87:91:d5:5f:7b:9d:7c:36:d7:78:a1:1c:02:e6: 6e:f5:60:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNAtbLbP7f+PY59FTIGUsD6FNlFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDQzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2YzOGE5MzI1ZDBlZDUxMGUyNmM0YzhkYmQ3YWYyMmQ3 MWE5NTkxYmM3NGMwYzQ0YjVkY2I2N2RiOWU2MDQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnTTRhVKL2IR4b3YUZlh8F3VNufW+gnkLvpJpX+D/Vx5Ya Y6s0xYl3yYArOWpYpP+Mb/Q5ONZTgrYxscsnE3KO0SPZ5BahOyC5xds6jkiYgwf8 R4kP9rNR114XCMa7+ypnkGq6Ji+NaHta0kaINMJDmDKQq8r5Dq5V5exaAWMDKYnx P/scuLQndHt01cprhqHfewIb2rYyzwEISVlwv0SlayfRD6uaDNLxxwf3MW35LyHa cyqGzplQlNF4BRNAk/0A9S95Sc7+JDtak8ApL1tfVDDFV9avEU16AbOvRY+1m/EO 18uW49p/jyjfmOnyBbJhTRZgjsvoj8iU//bLcHrhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP/ZTv8giraYl9EOBV1UFCZwKYRAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBmYWM4NjIyLTA1NmMtNDM1MC05ZDcwLWIxMDdiZWRmM2U5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQMwDQYJKoZIhvcNAQELBQADggEBAFqNAx6OhkNWZtmIkWQo/Tqe fMGwrEW8BP01dnY7yd517P0mAZ4LPLiiI0RhH53WwNaYivPDdGiBK9xDJWDy7YKy p3p8fRSo6RKGV/1xO9MKmVrcm5TBl91KS2Arzs/yXtlsYRGCp69bEtjPzTvksQfj Nqp3gHNicCwcZXmoWsnw05GDxZfjLXVLbxtm9XVNI66EjlG0NJ9Wg7w6Z6Ot3/Tv 6Kko9oe/4HFUxMPkS1lku8HfXdbVV/vTIR1zAO5WEotYiHVa1KiheaJlZMMhOXg3 sUd7Ig7qw98+OakP7IWSF2R2LRP3g2+oYA5ZzqaHkdVfe518Ntd4oRwC5m71YA0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:08 2026 by rpki-client