$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa File: 16493254-23cd-454e-98e8-0cfbdb8f499f.roa (raw, json) Hash identifier: beoyWbQeSuO8ua04r6/eHZ/IBiyRGFjXMhnydMVfC34= Subject key identifier: 85:84:37:01:B5:BC:AF:1D:2E:C2:6A:94:F9:E4:72:0F:16:CA:E2:65 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48D8E3472DF78ABD942EEF3259E417E883F28EEA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa Signing time: Fri 13 Feb 2026 15:00:13 +0000 ROA not before: Fri 13 Feb 2026 15:00:13 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d8:e3:47:2d:f7:8a:bd:94:2e:ef:32:59:e4:17:e8:83:f2:8e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:13 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=07e01a73508b25680e62d7352875f031d15aab8099e05ff1f26900dc15dfc82d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:95:8a:c0:5f:c5:03:37:1c:00:79:f3:b2: 78:22:b9:cb:40:aa:88:a1:e7:55:16:50:20:a1:24: 24:f8:08:3f:dd:f2:95:5a:7b:3d:93:cb:01:ab:e7: 34:b8:45:16:4b:d5:fd:00:4c:a2:11:e7:68:5c:70: 56:88:7b:18:1c:99:31:cf:b7:50:cd:8c:85:13:24: 33:aa:4f:0f:bd:1c:4e:e3:d5:76:f1:d1:c0:6c:1e: 6f:31:ef:70:60:da:cc:a5:7a:bd:1e:87:6e:87:1f: bc:ac:67:4f:94:cb:3e:56:e3:aa:1e:13:43:ce:93: 50:73:88:de:98:c5:e4:16:dc:70:2b:0c:89:c2:57: 95:6f:7d:1c:76:7e:d4:fc:5f:16:f6:9b:d6:27:c7: ce:ca:f7:14:d2:b3:45:11:07:d8:7a:7e:50:1e:f3: ca:08:fe:0d:56:46:ea:f1:fe:48:ac:2b:9c:66:74: e4:bc:23:f1:43:a6:e8:6e:c2:fe:3f:54:02:68:d1: 73:a8:0e:97:ad:f1:93:cf:a6:b5:f9:c5:fb:06:50: eb:99:cb:6c:cc:fa:7f:04:19:57:35:ea:e1:ad:e6: 0f:72:a7:46:21:f0:24:be:a4:db:f5:e7:92:60:cf: 84:47:89:c9:1b:16:0d:5e:82:9b:ec:36:a8:d0:31: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:84:37:01:B5:BC:AF:1D:2E:C2:6A:94:F9:E4:72:0F:16:CA:E2:65 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611f::/48 Signature Algorithm: sha256WithRSAEncryption 5d:62:6f:21:ea:b4:9b:bc:e0:33:1b:8d:72:e8:c7:4c:49:6b: 07:67:e5:4e:d7:d1:3b:f0:8a:2b:71:1a:68:46:1a:be:26:b9: 5e:1a:09:06:70:76:37:36:0b:ba:bd:c7:3e:29:2b:92:44:36: aa:9b:ab:3e:fc:b5:04:31:01:d3:93:2c:19:4d:9c:31:ad:41: 2f:50:36:9b:c5:5c:13:cc:18:ae:32:15:90:43:c8:35:0d:5c: 76:ee:6d:76:16:5b:d5:dc:ad:5c:0f:9e:4c:ab:16:78:8b:fd: 6a:90:cb:93:44:e9:c9:fb:a5:3f:c8:31:2b:2a:a1:73:5f:da: 92:6c:db:c3:97:fb:43:e2:e8:5e:53:e8:e5:a7:bd:d8:a2:fa: 04:d1:d0:0e:c4:90:48:02:c1:94:2e:65:8b:6e:27:1e:2f:21: e3:35:5d:38:15:f9:ff:6c:26:c9:83:27:af:0d:9b:c9:04:05: c0:6b:44:86:61:af:01:96:88:ce:41:f5:9f:1b:f8:d5:03:09: bc:12:9a:fa:6a:30:14:52:1c:13:d3:0b:72:cf:38:02:d6:16: 15:a9:2a:58:fb:ba:0b:b7:45:e3:6a:6e:f6:3e:9d:c2:95:27: 6f:3a:78:9d:66:82:f7:e8:f8:cd:c8:6f:a9:17:c0:35:33:5b: 8a:39:9f:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSNjjRy33ir2ULu8yWeQX6IPyjuowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDEzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2UwMWE3MzUwOGIyNTY4MGU2MmQ3MzUyODc1ZjAzMWQx NWFhYjgwOTllMDVmZjFmMjY5MDBkYzE1ZGZjODJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxcJWKwF/FAzccAHnzsngiuctAqoih51UWUCChJCT4CD/d 8pVaez2TywGr5zS4RRZL1f0ATKIR52hccFaIexgcmTHPt1DNjIUTJDOqTw+9HE7j 1Xbx0cBsHm8x73Bg2syler0eh26HH7ysZ0+Uyz5W46oeE0POk1BziN6YxeQW3HAr DInCV5VvfRx2ftT8Xxb2m9Ynx87K9xTSs0URB9h6flAe88oI/g1WRurx/kisK5xm dOS8I/FDpuhuwv4/VAJo0XOoDpet8ZPPprX5xfsGUOuZy2zM+n8EGVc16uGt5g9y p0Yh8CS+pNv155Jgz4RHickbFg1egpvsNqjQMSlNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhYQ3AbW8rx0uwmqU+eRyDxbK4mUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE2NDkzMjU0LTIzY2QtNDU0ZS05OGU4LTBjZmJkYjhmNDk5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR8wDQYJKoZIhvcNAQELBQADggEBAF1ibyHqtJu84DMbjXLox0xJ awdn5U7X0TvwiitxGmhGGr4muV4aCQZwdjc2C7q9xz4pK5JENqqbqz78tQQxAdOT LBlNnDGtQS9QNpvFXBPMGK4yFZBDyDUNXHbubXYWW9XcrVwPnkyrFniL/WqQy5NE 6cn7pT/IMSsqoXNf2pJs28OX+0Pi6F5T6OWnvdii+gTR0A7EkEgCwZQuZYtuJx4v IeM1XTgV+f9sJsmDJ68Nm8kEBcBrRIZhrwGWiM5B9Z8b+NUDCbwSmvpqMBRSHBPT C3LPOALWFhWpKlj7ugu3ReNqbvY+ncKVJ286eJ1mgvfo+M3Ib6kXwDUzW4o5n4s= -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:07 2026 by rpki-client