$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: ZB2Rl9Vl/rXiLay/TxwGyf0CYuFdb3GCESQyrlM4k8k= Subject key identifier: A1:6F:EB:32:97:18:B4:F1:64:96:13:4A:70:4A:45:95:8C:22:A9:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7EE692212004868472AE9E9B45BB2F2BD066B23A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Sat 28 Feb 2026 05:00:11 +0000 ROA not before: Sat 28 Feb 2026 05:00:11 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e6:92:21:20:04:86:84:72:ae:9e:9b:45:bb:2f:2b:d0:66:b2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:00:11 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=738e83c7731ba136b4fc9b66877346eba83f6819cc59cdd9929de5821babafc8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:90:c1:74:f6:09:5b:ff:7f:0d:aa:24:f4: d6:ed:95:af:ce:d1:2a:3d:89:1a:44:7f:6b:85:02: 01:d2:fe:9a:aa:0b:d1:e3:82:e9:d1:0d:21:63:14: 0b:73:e0:db:bc:d5:c5:36:86:78:08:31:fc:31:f7: 11:0b:1a:ea:f2:c0:fa:61:10:89:c2:d6:29:b7:e4: 6d:2d:53:ba:31:03:a6:f8:7d:50:26:09:3b:30:53: 9e:f7:21:78:0c:e2:b2:87:7a:31:6a:d4:35:10:31: 25:9e:87:f0:bc:6f:c3:83:ca:38:aa:a4:32:85:a4: 8c:37:66:51:90:4d:e7:26:89:4d:61:96:de:e4:00: 01:e6:95:01:8b:88:5a:96:80:70:d6:53:99:28:d3: 77:21:72:0e:a8:08:47:70:83:5c:92:60:0e:78:0b: 98:ad:19:1f:a8:be:18:c0:5b:ed:52:0f:01:e4:0a: eb:1f:3e:b7:95:d4:1b:c6:ac:ad:97:c3:0a:ad:70: ed:23:f4:82:32:e7:66:9c:34:d0:9d:23:29:a3:26: a9:9e:5a:ad:97:7e:c9:c3:0c:88:67:6b:cc:15:d7: 1a:7c:81:5a:ef:5f:09:65:f6:51:0b:e9:15:81:8b: 3a:00:57:b7:67:03:d2:04:d8:23:19:ee:2d:a0:7e: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6F:EB:32:97:18:B4:F1:64:96:13:4A:70:4A:45:95:8C:22:A9:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 88:ea:30:8f:c4:44:79:e3:e3:5d:34:44:a8:62:f3:32:b0:72: d6:1d:35:e2:28:79:55:6e:5c:7b:15:4c:4b:01:8e:63:5d:69: e6:07:58:93:07:98:73:60:91:52:95:1c:67:d8:8b:c7:c8:05: b0:d3:9e:7a:ab:3b:a9:eb:92:ab:96:65:79:81:bb:7b:36:c2: 0e:2b:80:94:1c:4a:7f:86:53:0f:c8:d7:c4:af:97:b7:30:78: 24:ac:14:bc:de:b5:6d:e4:4b:ee:53:61:0a:f6:40:31:7b:3a: 99:71:ec:6a:6b:e9:11:49:a4:97:db:42:97:bb:eb:f5:1f:12: 82:98:b2:df:3e:17:2c:8c:b4:c7:0b:5f:be:e2:d5:e4:f8:7f: 66:04:98:d7:f5:96:51:fc:52:08:0e:df:52:c5:56:2b:22:d8: 6f:16:5a:77:1e:c3:1e:da:67:ec:94:b5:7f:e1:ae:20:79:83: bc:a4:66:14:80:55:fb:0d:01:10:1a:9c:6b:b3:bd:85:2a:f4: e6:2d:88:9a:cf:12:4a:83:d6:7f:c7:da:29:2a:c7:44:e4:ba: 04:6e:fb:e9:32:d2:b6:78:03:4d:cd:9b:0b:8f:8e:d5:4f:f0: 43:68:12:50:65:ca:ca:eb:8c:43:ee:83:7f:db:80:eb:fe:68: 00:14:ed:82 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfuaSISAEhoRyrp6bRbsvK9BmsjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUwMDExWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzhlODNjNzczMWJhMTM2YjRmYzliNjY4NzczNDZlYmE4 M2Y2ODE5Y2M1OWNkZDk5MjlkZTU4MjFiYWJhZmM4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYaJDBdPYJW/9/Daok9Nbtla/O0So9iRpEf2uFAgHS/pqq C9HjgunRDSFjFAtz4Nu81cU2hngIMfwx9xELGurywPphEInC1im35G0tU7oxA6b4 fVAmCTswU573IXgM4rKHejFq1DUQMSWeh/C8b8ODyjiqpDKFpIw3ZlGQTecmiU1h lt7kAAHmlQGLiFqWgHDWU5ko03chcg6oCEdwg1ySYA54C5itGR+ovhjAW+1SDwHk CusfPreV1BvGrK2XwwqtcO0j9IIy52acNNCdIymjJqmeWq2XfsnDDIhna8wV1xp8 gVrvXwll9lEL6RWBizoAV7dnA9IE2CMZ7i2gfp1zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoW/rMpcYtPFklhNKcEpFlYwiqagwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAiOowj8REeePjXTREqGLzMrBy 1h014ih5VW5cexVMSwGOY11p5gdYkweYc2CRUpUcZ9iLx8gFsNOeeqs7qeuSq5Zl eYG7ezbCDiuAlBxKf4ZTD8jXxK+XtzB4JKwUvN61beRL7lNhCvZAMXs6mXHsamvp EUmkl9tCl7vr9R8Sgpiy3z4XLIy0xwtfvuLV5Ph/ZgSY1/WWUfxSCA7fUsVWKyLY bxZadx7DHtpn7JS1f+GuIHmDvKRmFIBV+w0BEBqca7O9hSr05i2Ims8SSoPWf8fa KSrHROS6BG776TLStngDTc2bC4+O1U/wQ2gSUGXKyuuMQ+6Df9uA6/5oABTtgg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:51 2026 by rpki-client