$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa File: 3026e026-f5e8-46be-927e-d13ed27dd55c.roa (raw, json) Hash identifier: PdHajJzC3TRjMWwz+uejdzF16s3rm+4CZX0tTCkpOoo= Subject key identifier: 84:D9:EE:3F:01:69:3D:7D:66:BB:14:38:4A:9A:E6:B9:C2:AB:E3:D6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 12E03B506E1AF4EC2C7885883187F95E82B38AB5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa Signing time: Sun 01 Mar 2026 01:00:09 +0000 ROA not before: Sun 01 Mar 2026 01:00:09 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e0:3b:50:6e:1a:f4:ec:2c:78:85:88:31:87:f9:5e:82:b3:8a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:09 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=d80230493c5c5e92682dbdc229f45809cae2591c5f5bc9ca59f8da94a1b2f9ae, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:fd:20:e9:db:73:31:42:47:01:05:12:6e: 12:47:02:22:89:9e:8c:f4:95:5c:c8:80:1f:cf:38: 9d:ef:0a:e9:cc:82:d5:ff:3f:e0:31:61:3c:6f:bc: f8:ae:f8:f9:77:4a:5b:2f:8c:9a:5d:57:70:60:c0: 4e:16:94:8d:47:43:1d:f0:7d:b9:d9:ce:5f:dd:09: 3e:7e:77:03:b9:a8:d3:5e:e7:10:a1:51:80:24:3d: 97:c0:0a:5b:9d:e8:68:12:e3:d0:3d:01:7d:2f:d5: f0:08:20:cb:cb:31:15:8a:37:6e:27:ea:bf:45:92: 11:d2:2b:5d:35:f5:74:39:79:9d:19:a4:83:ba:c9: 67:0a:1f:55:3a:1a:da:3f:8d:a1:11:63:e5:54:29: 21:21:3d:cc:51:7e:eb:34:06:b1:8a:ed:41:b1:25: 05:4a:d1:e5:3e:04:33:6e:ea:b0:6c:30:e2:45:5b: a4:0b:47:3d:8b:65:73:a9:e7:ec:15:ca:59:45:c4: 11:fc:e9:9d:5d:72:9f:2d:1d:74:f6:2f:a1:a0:ff: 71:6e:04:9c:fe:c7:bd:a4:30:ee:6f:60:33:81:8a: a4:f4:0a:73:81:a8:aa:7f:b4:d8:59:7e:15:36:1e: 65:79:13:b0:03:f7:ae:28:ea:57:3c:81:7e:91:0b: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:EE:3F:01:69:3D:7D:66:BB:14:38:4A:9A:E6:B9:C2:AB:E3:D6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f108::/48 Signature Algorithm: sha256WithRSAEncryption 75:36:fe:43:e4:7a:58:45:3d:bb:e2:06:7b:c2:eb:83:57:d4: 82:52:1e:b9:a9:c4:4f:c5:ec:91:b9:e0:18:49:46:e7:58:85: 81:03:29:9d:d1:9b:0a:a7:7e:e0:bd:ea:fd:dd:72:1b:a2:7b: 8e:55:6b:01:20:23:ff:81:31:7d:06:db:b1:33:de:6e:2d:b5: 7b:4c:d5:a6:74:31:29:d3:0f:31:5d:6e:20:ab:5f:05:07:7d: a1:49:e7:1b:44:58:75:34:7a:18:93:ca:04:58:b9:61:5f:8d: 13:bb:f8:22:bb:08:27:a6:24:8e:79:40:b8:67:4d:92:c5:86: 76:6a:a4:28:08:df:e4:71:30:96:d4:de:1c:5a:17:d8:b5:7c: 20:11:c0:7e:a1:eb:4c:8a:de:2a:d1:34:3d:fe:99:c2:1f:67: 91:0b:b6:50:3b:8d:50:ee:0c:88:8b:ee:dd:b7:49:02:06:2f: ba:16:a5:46:93:4d:18:2e:67:1e:d8:46:53:36:44:2a:1d:16: 4d:ff:a2:2f:59:e3:81:c5:ae:89:ca:b9:99:c8:7b:9f:c6:4c: ab:9d:f2:fe:8f:77:da:74:e8:75:94:1c:5e:58:3b:7a:22:c6: 1f:e3:a2:f2:3f:03:65:ad:8b:68:6a:21:c2:73:74:50:19:65: e2:6d:43:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEuA7UG4a9OwseIWIMYf5XoKzirUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDA5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODAyMzA0OTNjNWM1ZTkyNjgyZGJkYzIyOWY0NTgwOWNh ZTI1OTFjNWY1YmM5Y2E1OWY4ZGE5NGExYjJmOWFlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0FP0g6dtzMUJHAQUSbhJHAiKJnoz0lVzIgB/POJ3vCunM gtX/P+AxYTxvvPiu+Pl3SlsvjJpdV3BgwE4WlI1HQx3wfbnZzl/dCT5+dwO5qNNe 5xChUYAkPZfAClud6GgS49A9AX0v1fAIIMvLMRWKN24n6r9FkhHSK1019XQ5eZ0Z pIO6yWcKH1U6Gto/jaERY+VUKSEhPcxRfus0BrGK7UGxJQVK0eU+BDNu6rBsMOJF W6QLRz2LZXOp5+wVyllFxBH86Z1dcp8tHXT2L6Gg/3FuBJz+x72kMO5vYDOBiqT0 CnOBqKp/tNhZfhU2HmV5E7AD964o6lc8gX6RC/utAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhNnuPwFpPX1muxQ4SprmucKr49YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMjZlMDI2LWY1ZTgtNDZiZS05MjdlLWQxM2VkMjdkZDU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QgwDQYJKoZIhvcNAQELBQADggEBAHU2/kPkelhFPbviBnvC64NX 1IJSHrmpxE/F7JG54BhJRudYhYEDKZ3RmwqnfuC96v3dchuie45VawEgI/+BMX0G 27Ez3m4ttXtM1aZ0MSnTDzFdbiCrXwUHfaFJ5xtEWHU0ehiTygRYuWFfjRO7+CK7 CCemJI55QLhnTZLFhnZqpCgI3+RxMJbU3hxaF9i1fCARwH6h60yK3irRND3+mcIf Z5ELtlA7jVDuDIiL7t23SQIGL7oWpUaTTRguZx7YRlM2RCodFk3/oi9Z44HFronK uZnIe5/GTKud8v6Pd9p06HWUHF5YO3oixh/jovI/A2Wti2hqIcJzdFAZZeJtQ4Y= -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:54 2026 by rpki-client