$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: gZeZdTPg9DiLk+FBybzFL00Y8kKYOI0rmDKGYQLwVsc= Subject key identifier: 9E:A4:7A:E9:49:46:AE:2C:FD:41:1D:08:23:11:82:CE:06:9B:95:2C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C21A823E3A919E220C171FE763068D82B497542 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Sat 28 Feb 2026 05:10:43 +0000 ROA not before: Sat 28 Feb 2026 05:10:43 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:21:a8:23:e3:a9:19:e2:20:c1:71:fe:76:30:68:d8:2b:49:75:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:10:43 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=ce54cb500cc81a44f98fffd5a992c714a17ffd4a22da29aac84734b49c70367d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:b3:52:ed:6c:64:a4:44:f9:02:d8:a3:85: 1d:2f:30:f9:a2:40:f9:dc:47:ed:ad:00:6b:22:aa: 58:ed:5d:18:b1:27:00:ee:0a:95:8c:47:9a:c9:3c: 45:08:08:6f:41:fa:ab:0f:30:00:1a:06:4f:6e:80: 27:2d:bb:2f:87:91:79:9a:40:26:6d:82:c6:c2:f1: 3e:9b:37:e8:84:39:5c:b5:c6:92:59:13:66:3d:8f: bf:55:71:17:67:37:34:d5:81:90:31:86:1d:37:52: 3b:15:a3:8c:9e:70:28:d4:04:9f:7c:8b:da:44:01: d7:18:a7:cc:5d:46:6e:f3:68:77:c3:76:73:ef:d4: e8:60:9e:c5:5e:2f:2d:26:b0:19:ab:c9:2b:27:b5: 68:53:bf:49:32:65:b6:5b:fb:9d:e9:5a:7f:71:ba: 15:6e:dd:62:58:23:a2:39:90:02:5f:a6:c5:00:68: 0f:29:d0:37:20:be:32:d4:d5:fa:d4:85:dc:46:6e: 5a:24:49:2d:c2:96:62:52:53:1d:e6:9e:cc:02:ff: d9:b9:1b:15:73:d3:6d:20:51:ef:56:02:95:71:e6: c5:83:66:11:f7:77:9b:7e:e9:22:a4:35:1e:ec:cd: 5e:b4:45:34:2a:91:f4:f0:39:11:74:22:50:0a:a2: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A4:7A:E9:49:46:AE:2C:FD:41:1D:08:23:11:82:CE:06:9B:95:2C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 77:eb:5d:1d:86:eb:c6:d8:78:21:fd:5e:09:77:53:83:b7:e1: e4:d2:1f:a2:e9:a8:e3:ad:0b:e0:27:9e:62:a3:3c:c0:21:c3: 5c:d2:7f:a1:2d:63:20:3f:1f:87:c0:9a:3f:c2:13:5f:f8:9d: 1e:e2:ff:3d:13:04:75:df:25:8a:7d:dd:c3:46:12:ac:23:08: de:83:3c:ca:47:aa:ab:5a:0b:00:0d:05:9a:09:5b:e0:f4:5c: 9c:73:b1:98:3e:45:67:50:0a:fd:4d:bb:56:12:17:d3:57:70: 60:bb:02:34:e8:bd:01:a0:93:e4:ba:36:91:ab:fe:33:2b:7f: 6b:e3:17:e1:ca:de:2d:a6:5c:4b:a0:68:bf:d1:e0:75:33:78: ab:1a:89:ea:53:df:34:f0:9d:6f:12:ee:ef:25:06:af:93:9e: 25:55:37:33:5e:d1:3f:11:5e:b0:f2:5b:91:51:01:12:95:ae: 20:bc:18:5f:34:df:ff:31:8e:41:67:aa:d4:86:11:d2:db:41: 97:c0:ae:79:b2:e1:23:bd:b0:17:3f:c5:15:71:a5:08:f7:89: b9:7c:21:35:22:ed:54:06:89:f7:a5:c9:6f:66:bc:4c:be:c1: 64:93:f9:dc:76:25:81:69:64:ed:67:02:46:f4:8e:05:8b:88: 11:21:15:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHCGoI+OpGeIgwXH+djBo2CtJdUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUxMDQzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTU0Y2I1MDBjYzgxYTQ0Zjk4ZmZmZDVhOTkyYzcxNGEx N2ZmZDRhMjJkYTI5YWFjODQ3MzRiNDljNzAzNjdkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoqrNS7WxkpET5AtijhR0vMPmiQPncR+2tAGsiqljtXRix JwDuCpWMR5rJPEUICG9B+qsPMAAaBk9ugCctuy+HkXmaQCZtgsbC8T6bN+iEOVy1 xpJZE2Y9j79VcRdnNzTVgZAxhh03UjsVo4yecCjUBJ98i9pEAdcYp8xdRm7zaHfD dnPv1OhgnsVeLy0msBmrySsntWhTv0kyZbZb+53pWn9xuhVu3WJYI6I5kAJfpsUA aA8p0DcgvjLU1frUhdxGblokSS3ClmJSUx3mnswC/9m5GxVz020gUe9WApVx5sWD ZhH3d5t+6SKkNR7szV60RTQqkfTwORF0IlAKolB/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnqR66UlGriz9QR0IIxGCzgablSwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAHfrXR2G68bYeCH9Xgl3U4O3 4eTSH6LpqOOtC+AnnmKjPMAhw1zSf6EtYyA/H4fAmj/CE1/4nR7i/z0TBHXfJYp9 3cNGEqwjCN6DPMpHqqtaCwANBZoJW+D0XJxzsZg+RWdQCv1Nu1YSF9NXcGC7AjTo vQGgk+S6NpGr/jMrf2vjF+HK3i2mXEugaL/R4HUzeKsaiepT3zTwnW8S7u8lBq+T niVVNzNe0T8RXrDyW5FRARKVriC8GF803/8xjkFnqtSGEdLbQZfArnmy4SO9sBc/ xRVxpQj3ibl8ITUi7VQGifelyW9mvEy+wWST+dx2JYFpZO1nAkb0jgWLiBEhFfQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:34 2026 by rpki-client