$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa File: 2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json) Hash identifier: Adlht0LuXc3xvPKFv5mFmaQVgF0dl5DF6y52e+ZmqbE= Subject key identifier: 49:1D:4C:F4:A2:C7:71:98:AD:A9:9C:14:5E:FB:0B:4C:1D:66:F5:54 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 22F22AFD687EE52F4AC0E7498F274B78844C72D3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa Signing time: Fri 20 Feb 2026 01:30:12 +0000 ROA not before: Fri 20 Feb 2026 01:30:12 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f2:2a:fd:68:7e:e5:2f:4a:c0:e7:49:8f:27:4b:78:84:4c:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 20 01:30:12 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=7b3248c4a3d2381adf2b2e1927a27dbca215f4e29d7405c234bee5a317b35a46, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:f2:5a:8d:89:63:f1:cf:dd:f3:9d:f9:59: 8e:c4:4b:67:82:13:69:17:de:d1:22:97:32:bd:fb: fd:4e:73:f7:15:c4:3a:4a:63:96:52:11:a0:3b:20: 60:e5:dc:8c:49:e1:3c:64:fe:09:b7:03:6b:46:bf: 86:2e:37:c5:e0:3c:cc:96:d1:b4:3c:4c:11:0d:67: 4b:35:36:a0:5e:ea:86:70:8c:86:8a:69:00:19:e8: a8:5c:a6:a7:c8:d0:a6:6c:d0:94:a8:5c:67:16:b1: 1c:3d:28:d9:1c:5c:69:a9:78:89:c5:44:a1:bc:5a: 8c:25:43:6f:89:4c:2b:4f:6f:6d:19:ff:b9:00:f6: be:78:81:72:36:35:34:a4:10:9d:b2:16:9f:4e:42: aa:16:ca:2f:4f:24:49:7c:fb:2f:11:f3:3e:73:00: 66:e8:af:34:a1:55:d2:4a:99:17:e3:1b:b7:24:11: 6f:14:9b:62:16:59:02:eb:4f:c8:74:d2:c2:2d:13: e5:b5:55:4f:75:04:e6:ca:27:ed:bc:2e:eb:bf:52: dc:b9:1e:df:33:09:fd:e3:90:f2:a8:1d:d1:20:4b: ff:45:4c:68:6f:ba:86:58:b3:ea:3e:b7:2d:3e:f2: 3d:82:af:71:bb:cd:6e:13:49:ec:a0:94:b9:e7:c0: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1D:4C:F4:A2:C7:71:98:AD:A9:9C:14:5E:FB:0B:4C:1D:66:F5:54 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:80::/44 Signature Algorithm: sha256WithRSAEncryption 20:1c:2b:9e:0f:7a:78:87:65:d4:41:84:cd:43:b6:ef:e9:52: e2:ca:b2:4f:e0:98:b3:c2:bc:30:49:ec:8d:bf:4b:74:ad:6c: 54:68:ef:97:c9:8c:c7:b9:28:de:b2:b1:10:e9:d4:aa:d4:02: 09:b0:67:7d:0d:b6:6f:d0:0c:df:f7:7a:eb:ef:a2:11:5b:33: 15:38:18:43:60:10:5e:04:31:a1:8e:50:76:85:cc:13:49:2b: bf:ee:dd:9e:77:3b:d2:80:43:2d:ba:50:d3:95:cf:e5:a6:04: 1a:fd:ab:dd:e7:3c:0f:e5:de:41:66:92:99:f9:84:3d:b5:de: 99:1c:93:28:26:10:69:9d:80:b0:c1:3e:e2:d9:8e:2d:0b:df: 17:24:75:8f:61:8e:6a:88:4e:21:e1:fc:3f:3b:3c:7c:a5:fd: 4b:a4:02:a2:45:ce:d9:09:ef:ba:72:cb:3d:c5:35:e7:25:15: 5d:55:61:de:9f:c9:d1:79:e8:d1:30:14:37:86:b7:91:26:1e: dc:dc:b5:05:e1:b4:e4:a9:20:30:1f:8b:8b:52:71:b4:a0:f0: 9a:5d:28:66:2d:d2:55:77:34:59:9d:56:d8:ad:8b:4d:50:66: e5:aa:45:74:9d:77:ef:17:40:e6:1b:fd:5e:c3:1f:58:2d:8b: fb:89:8e:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIvIq/Wh+5S9KwOdJjydLeIRMctMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjIwMDEzMDEyWhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjMyNDhjNGEzZDIzODFhZGYyYjJlMTkyN2EyN2RiY2Ey MTVmNGUyOWQ3NDA1YzIzNGJlZTVhMzE3YjM1YTQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7VPJajYlj8c/d8535WY7ES2eCE2kX3tEilzK9+/1Oc/cV xDpKY5ZSEaA7IGDl3IxJ4Txk/gm3A2tGv4YuN8XgPMyW0bQ8TBENZ0s1NqBe6oZw jIaKaQAZ6KhcpqfI0KZs0JSoXGcWsRw9KNkcXGmpeInFRKG8WowlQ2+JTCtPb20Z /7kA9r54gXI2NTSkEJ2yFp9OQqoWyi9PJEl8+y8R8z5zAGborzShVdJKmRfjG7ck EW8Um2IWWQLrT8h00sItE+W1VU91BObKJ+28Luu/Uty5Ht8zCf3jkPKoHdEgS/9F TGhvuoZYs+o+ty0+8j2Cr3G7zW4TSeyglLnnwF7LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSR1M9KLHcZitqZwUXvsLTB1m9VQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiODk2MjFhLTZjMjktNGNiZi04OTc2LTM5MzBjNGU1ZDkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAIAwDQYJKoZIhvcNAQELBQADggEBACAcK54PeniHZdRBhM1Dtu/p UuLKsk/gmLPCvDBJ7I2/S3StbFRo75fJjMe5KN6ysRDp1KrUAgmwZ30Ntm/QDN/3 euvvohFbMxU4GENgEF4EMaGOUHaFzBNJK7/u3Z53O9KAQy26UNOVz+WmBBr9q93n PA/l3kFmkpn5hD213pkckygmEGmdgLDBPuLZji0L3xckdY9hjmqITiHh/D87PHyl /UukAqJFztkJ77pyyz3FNeclFV1VYd6fydF56NEwFDeGt5EmHtzctQXhtOSpIDAf i4tScbSg8JpdKGYt0lV3NFmdVtiti01QZuWqRXSdd+8XQOYb/V7DH1gti/uJjhI= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:19 2026 by rpki-client