$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa File: 14940c51-4f09-4f8f-b749-976965c7a655.roa (raw, json) Hash identifier: ZX9NaXSQYuM7dnysVKq9ni88aBk8yic6KzmdGO5Om3M= Subject key identifier: 00:47:09:FC:8E:5F:B8:6C:51:9A:C2:07:34:13:68:C9:D1:F3:74:C0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5E0128867132C12790DCDDC486A37D0D97F09CC4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa Signing time: Sun 01 Mar 2026 00:50:09 +0000 ROA not before: Sun 01 Mar 2026 00:50:09 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:01:28:86:71:32:c1:27:90:dc:dd:c4:86:a3:7d:0d:97:f0:9c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:09 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=8c79f6651aad4a36e87fd760280ed67c486641a353110302ddfa053c01e1ec59, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:e5:c1:75:b8:c8:8e:19:6f:c6:1b:f2:40: cb:c3:14:52:81:94:e7:32:5a:24:47:0d:96:f3:ea: 12:89:5e:af:cf:8a:9f:79:9d:a1:a7:8d:07:d7:92: 81:0f:de:07:71:45:b6:5b:71:98:fc:68:01:5d:b7: 12:92:28:56:2d:30:3c:9c:ab:3b:61:a0:39:b6:83: 91:10:bd:c3:f8:65:c1:4a:99:3d:6d:c7:b7:63:9e: 9a:53:0f:7a:c9:cf:f0:d5:26:a4:44:74:d4:72:a8: 7b:69:34:5d:8c:9f:19:62:8a:78:21:05:51:26:c0: 5e:74:90:73:0c:69:b7:d4:e0:c9:5b:e4:e2:96:3f: 6d:61:b8:6e:10:31:e3:07:1c:4a:26:b6:4f:48:7b: 41:cd:4a:7b:df:6f:dc:1f:80:53:8b:74:c5:ff:a9: 0b:3a:63:a8:aa:38:72:e8:c9:55:ab:48:8d:c9:58: ca:da:08:82:47:e8:61:ef:11:a8:9a:4b:42:f3:e2: 30:38:10:79:07:32:f3:d9:6d:8c:3f:ca:2e:e4:48: 51:87:9c:e7:af:72:7f:75:7e:34:68:11:fc:5d:5a: 92:a9:d5:7e:31:5f:df:e4:a8:09:29:2f:cf:a1:f8: a4:1c:b7:77:da:55:0b:ab:b6:16:f2:c1:5c:71:7a: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:47:09:FC:8E:5F:B8:6C:51:9A:C2:07:34:13:68:C9:D1:F3:74:C0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6124::/48 Signature Algorithm: sha256WithRSAEncryption 0f:2e:d8:42:e3:18:a3:d3:60:b0:2c:a0:08:45:74:c0:6f:c4: 1f:df:4e:38:08:84:15:8b:26:c1:90:87:9d:ab:bd:5b:92:39: 68:cf:4f:5c:a9:c1:a8:81:ab:fe:01:aa:ec:fb:51:af:a1:46: af:c1:c9:e7:b9:e8:55:f6:f8:a2:40:92:32:b2:24:10:7b:5a: 31:de:82:0e:c4:93:ab:16:6f:9b:22:12:d3:dc:93:b4:9b:06: dd:98:2b:83:cc:65:b8:58:6b:51:6d:5c:98:9b:ad:f4:67:7a: 6c:17:3b:fe:be:8a:56:be:c5:93:53:16:51:4a:44:4b:f6:f1: d1:8d:0a:6f:ca:3a:70:bf:4a:44:87:46:36:6b:a2:c2:1d:45: f9:fb:a0:a2:c6:46:24:c1:a9:87:d2:4b:b4:dd:02:a0:ab:68: fb:e9:96:24:e4:bb:5b:69:9a:4f:bc:73:19:3c:42:d6:10:8d: 19:ee:d6:ad:8b:22:8a:db:0e:5e:49:b1:47:bd:61:16:e0:1e: 26:33:7f:0e:df:e9:1b:26:e2:e5:46:71:a0:cf:73:ce:42:e7: 25:fb:29:d5:44:25:b0:87:e1:f1:7d:96:1d:53:0a:b1:83:f4: 09:dd:2f:b7:73:52:5e:24:0c:be:05:75:61:99:84:c1:bf:61: d1:7e:67:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXgEohnEywSeQ3N3EhqN9DZfwnMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDA5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Yzc5ZjY2NTFhYWQ0YTM2ZTg3ZmQ3NjAyODBlZDY3YzQ4 NjY0MWEzNTMxMTAzMDJkZGZhMDUzYzAxZTFlYzU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNp+XBdbjIjhlvxhvyQMvDFFKBlOcyWiRHDZbz6hKJXq/P ip95naGnjQfXkoEP3gdxRbZbcZj8aAFdtxKSKFYtMDycqzthoDm2g5EQvcP4ZcFK mT1tx7djnppTD3rJz/DVJqREdNRyqHtpNF2MnxliinghBVEmwF50kHMMabfU4Mlb 5OKWP21huG4QMeMHHEomtk9Ie0HNSnvfb9wfgFOLdMX/qQs6Y6iqOHLoyVWrSI3J WMraCIJH6GHvEaiaS0Lz4jA4EHkHMvPZbYw/yi7kSFGHnOevcn91fjRoEfxdWpKp 1X4xX9/kqAkpL8+h+KQct3faVQurthbywVxxepqvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAEcJ/I5fuGxRmsIHNBNoydHzdMAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0OTQwYzUxLTRmMDktNGY4Zi1iNzQ5LTk3Njk2NWM3YTY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSQwDQYJKoZIhvcNAQELBQADggEBAA8u2ELjGKPTYLAsoAhFdMBv xB/fTjgIhBWLJsGQh52rvVuSOWjPT1ypwaiBq/4Bquz7Ua+hRq/Byee56FX2+KJA kjKyJBB7WjHegg7Ek6sWb5siEtPck7SbBt2YK4PMZbhYa1FtXJibrfRnemwXO/6+ ila+xZNTFlFKREv28dGNCm/KOnC/SkSHRjZrosIdRfn7oKLGRiTBqYfSS7TdAqCr aPvpliTku1tpmk+8cxk8QtYQjRnu1q2LIorbDl5JsUe9YRbgHiYzfw7f6Rsm4uVG caDPc85C5yX7KdVEJbCH4fF9lh1TCrGD9AndL7dzUl4kDL4FdWGZhMG/YdF+ZzU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:43 2026 by rpki-client