$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa File: 357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa (raw, json) Hash identifier: C2XDfdA4YiC9QmFyFeLPiYLBkuLPKdMsnezTl4oan5k= Subject key identifier: CA:3F:55:33:F8:46:1C:74:31:A2:C0:03:C1:E2:B9:03:E9:36:2D:68 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 53557DD946103FC1F75284DE95C99AE66AFC42CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa Signing time: Fri 13 Feb 2026 15:00:42 +0000 ROA not before: Fri 13 Feb 2026 15:00:42 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:55:7d:d9:46:10:3f:c1:f7:52:84:de:95:c9:9a:e6:6a:fc:42:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:42 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=19bafa1d7284dd7498aec92ab5cdcbc49be5e926632b765852d7cbf72ecb0ccf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:3a:0a:c0:97:3d:35:8f:00:09:57:6f:6d: 3d:b6:a6:bf:a1:2e:2f:4e:ae:2d:c0:49:45:30:97: 93:f0:f3:ab:10:8c:23:e2:e6:6d:99:3d:64:15:3d: db:e6:a7:2f:e0:39:9b:bb:44:a5:a8:f5:a6:ac:d0: d0:86:2f:55:b0:77:53:db:01:3d:dd:50:90:fb:41: bd:c0:9d:df:18:0c:41:e8:ce:05:26:58:46:b3:5c: b7:7b:cf:21:b7:32:71:ad:75:d6:15:32:65:75:63: d8:de:5d:4e:31:a5:d4:60:49:6e:cb:f3:49:8d:ae: 04:a9:38:cc:a1:0c:d0:13:07:24:10:2a:db:45:d5: 96:42:cb:03:b7:ae:2a:ba:c1:22:49:39:02:e0:07: 90:d3:15:47:64:29:96:9b:5f:8a:3f:19:81:28:9d: e9:78:fd:70:fb:f7:23:26:19:7d:88:c0:99:99:58: 92:eb:a6:33:01:22:e0:9b:5a:43:fb:9b:19:eb:74: 69:28:7c:20:00:7a:a4:b8:6b:2e:30:7e:f1:a8:c2: 76:96:68:17:a3:c5:76:ed:7d:b0:44:ef:b2:65:f0: 2d:31:de:a4:3c:d0:d5:74:33:9c:f8:62:8b:e1:91: 4e:a6:40:e3:29:1c:a6:c1:e6:f1:91:80:d8:11:48: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:55:33:F8:46:1C:74:31:A2:C0:03:C1:E2:B9:03:E9:36:2D:68 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption 18:d1:3e:02:78:9a:ce:ab:86:e6:63:b3:9c:b7:66:00:30:0e: 17:6e:b9:cd:a3:55:92:c1:45:bc:3a:0a:ff:33:90:b4:b1:41: aa:d8:58:0b:8a:ba:f2:7e:7a:e5:93:e7:8d:88:fa:87:e2:25: d6:9c:62:11:f8:1b:8a:69:86:ff:3f:be:5a:35:aa:26:ae:54: 9d:33:da:97:12:d6:ca:14:4a:46:9c:f5:7d:41:f2:cb:45:9c: 05:ea:c6:20:a6:02:80:e2:7b:7b:56:39:1f:aa:fa:ea:27:a7: 19:c5:f1:9b:a3:ed:7a:da:b2:40:65:81:82:c8:60:3e:2b:5b: 09:bc:65:06:a7:94:22:37:95:c6:b4:98:b4:dd:50:38:00:53: 36:86:26:9a:3b:d6:b4:fc:c7:f4:3e:86:36:95:e3:e6:da:4a: 6f:c2:14:f2:70:2a:08:76:7f:91:d0:29:87:5e:d8:97:09:20: 54:68:5c:a2:b8:a1:9e:8a:36:30:9b:63:c8:f6:91:6f:0e:1c: b2:ee:69:26:c1:53:b2:7b:84:b3:d5:48:fb:9e:a1:19:75:fd: c7:9f:27:cd:b6:c1:af:2a:f8:d1:f0:34:c4:98:bd:76:42:fd: 94:70:1c:9c:06:82:58:65:50:e8:d4:0c:c0:74:ca:80:8e:b0: d3:57:65:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU1V92UYQP8H3UoTelcma5mr8Qs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDQyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWJhZmExZDcyODRkZDc0OThhZWM5MmFiNWNkY2JjNDli ZTVlOTI2NjMyYjc2NTg1MmQ3Y2JmNzJlY2IwY2NmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcQjoKwJc9NY8ACVdvbT22pr+hLi9Ori3ASUUwl5Pw86sQ jCPi5m2ZPWQVPdvmpy/gOZu7RKWo9aas0NCGL1Wwd1PbAT3dUJD7Qb3And8YDEHo zgUmWEazXLd7zyG3MnGtddYVMmV1Y9jeXU4xpdRgSW7L80mNrgSpOMyhDNATByQQ KttF1ZZCywO3riq6wSJJOQLgB5DTFUdkKZabX4o/GYEonel4/XD79yMmGX2IwJmZ WJLrpjMBIuCbWkP7mxnrdGkofCAAeqS4ay4wfvGownaWaBejxXbtfbBE77Jl8C0x 3qQ80NV0M5z4YovhkU6mQOMpHKbB5vGRgNgRSLLjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyj9VM/hGHHQxosADweK5A+k2LWgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1N2ExNWU3LTBkZDgtNGFjNC04OGI0LTA5OTZhMWY3ZTdiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBABjRPgJ4ms6rhuZjs5y3ZgAw Dhduuc2jVZLBRbw6Cv8zkLSxQarYWAuKuvJ+euWT542I+ofiJdacYhH4G4pphv8/ vlo1qiauVJ0z2pcS1soUSkac9X1B8stFnAXqxiCmAoDie3tWOR+q+uonpxnF8Zuj 7XraskBlgYLIYD4rWwm8ZQanlCI3lca0mLTdUDgAUzaGJpo71rT8x/Q+hjaV4+ba Sm/CFPJwKgh2f5HQKYde2JcJIFRoXKK4oZ6KNjCbY8j2kW8OHLLuaSbBU7J7hLPV SPueoRl1/cefJ822wa8q+NHwNMSYvXZC/ZRwHJwGglhlUOjUDMB0yoCOsNNXZdc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:06 2026 by rpki-client