$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa File: 35e17b2d-e386-449d-8b46-4deb40b06ad8.roa (raw, json) Hash identifier: +5+iR1K7Jm90JQizQs1rfcDGga5qTlThqUKyI8hMlWI= Subject key identifier: AF:AF:F4:01:5E:1C:BA:FA:C2:B7:AD:FB:EC:0A:41:17:11:05:63:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4444DF998F343622440C5AA8AD098D140DC05742 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa Signing time: Tue 17 Feb 2026 00:30:13 +0000 ROA not before: Tue 17 Feb 2026 00:30:13 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:44:df:99:8f:34:36:22:44:0c:5a:a8:ad:09:8d:14:0d:c0:57:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 17 00:30:13 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=d1fb94e7964c3bd3594e11e12be815733df17976f163a3477cb18de8b979a2e2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c3:86:14:5e:79:eb:ea:72:fb:11:75:85:77: fc:59:c1:31:30:54:03:3a:c0:8b:62:e6:e3:30:2f: d8:0b:24:f7:c5:e8:76:1b:18:74:12:8b:0f:54:62: 00:f4:86:da:7c:77:15:37:d0:5d:c3:c4:40:b6:6d: 9e:a6:e1:db:77:c4:37:9b:7f:9f:01:30:27:69:81: 96:dc:10:de:d0:11:0d:a6:0c:1a:59:8f:bf:50:c4: 97:64:e4:3d:d1:b7:cf:40:0f:15:b6:44:d6:62:6a: 58:55:77:64:d0:00:4a:de:0f:9a:b3:71:a8:75:b4: 38:df:0e:87:bc:7e:27:c1:b7:3b:df:00:a8:fe:af: 1b:f8:a6:20:ee:3e:f0:92:4c:7e:36:cf:73:b7:ff: 41:0a:d7:a3:c2:e4:e8:46:43:18:1d:8d:71:32:a8: 81:ea:54:c1:ac:22:53:68:69:22:63:d2:f9:33:8a: e8:9e:1d:c4:bf:da:e4:a0:45:1a:98:e8:10:b6:9e: ca:93:78:d3:bf:86:6d:8f:c0:75:e9:f4:12:13:12: 7c:9a:a6:74:77:71:2f:d4:ec:6c:08:33:12:fd:35: da:aa:d6:4b:59:f3:cf:5d:7d:26:88:02:7d:65:69: a1:0d:b0:e2:d1:be:ef:1b:b7:29:32:7d:24:cd:fc: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AF:F4:01:5E:1C:BA:FA:C2:B7:AD:FB:EC:0A:41:17:11:05:63:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35e17b2d-e386-449d-8b46-4deb40b06ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:60::/44 Signature Algorithm: sha256WithRSAEncryption 84:a4:89:6d:d5:16:fa:34:2d:74:ed:8e:b9:4b:d1:24:cf:9a: 57:9d:c9:10:b6:4a:dd:36:05:fa:60:10:9e:5d:ad:22:c7:5c: d4:c8:3f:2d:f8:21:42:c8:20:d3:b2:54:f4:fa:c7:47:a2:0b: 6a:47:3b:20:5e:c2:f6:fb:91:07:5b:f5:b2:54:0b:ae:86:eb: 95:02:ac:8e:3d:41:46:40:bd:db:10:33:e9:5d:12:c5:78:44: b8:1b:d2:8a:d5:60:70:d4:0f:8a:8f:97:a1:fb:81:34:74:f3: 8e:20:8d:34:9d:dd:3e:47:5b:8a:d6:4c:19:57:e4:50:9f:22: c8:e3:be:7f:04:44:6d:51:34:84:6c:36:1e:96:e8:c9:4e:c0: 49:89:0b:81:dd:6c:05:ce:ce:85:fb:e9:cf:68:d7:83:bc:25: fe:d8:48:72:e9:3b:ab:ec:cb:0f:3d:87:0e:e1:74:c9:b3:a8: 8d:f9:f1:47:0a:57:b0:b0:e6:6d:84:6d:1c:b5:30:a2:54:8a: ac:81:5a:44:02:8b:b9:2a:d1:e0:c2:ec:8c:68:42:8d:dc:e7: db:e1:80:4b:cd:c8:b0:4f:c0:da:13:7a:b4:a0:94:7a:49:a6: 5d:80:05:49:60:d9:54:d1:d3:77:d5:5e:e2:3b:53:ce:49:d1: 75:fc:2c:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURETfmY80NiJEDFqorQmNFA3AV0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjE3MDAzMDEzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWZiOTRlNzk2NGMzYmQzNTk0ZTExZTEyYmU4MTU3MzNk ZjE3OTc2ZjE2M2EzNDc3Y2IxOGRlOGI5NzlhMmUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtw4YUXnnr6nL7EXWFd/xZwTEwVAM6wIti5uMwL9gLJPfF 6HYbGHQSiw9UYgD0htp8dxU30F3DxEC2bZ6m4dt3xDebf58BMCdpgZbcEN7QEQ2m DBpZj79QxJdk5D3Rt89ADxW2RNZialhVd2TQAEreD5qzcah1tDjfDoe8fifBtzvf AKj+rxv4piDuPvCSTH42z3O3/0EK16PC5OhGQxgdjXEyqIHqVMGsIlNoaSJj0vkz iuieHcS/2uSgRRqY6BC2nsqTeNO/hm2PwHXp9BITEnyapnR3cS/U7GwIMxL9Ndqq 1ktZ889dfSaIAn1laaENsOLRvu8btykyfSTN/NldAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr6/0AV4cuvrCt6377ApBFxEFY0IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1ZTE3YjJkLWUzODYtNDQ5ZC04YjQ2LTRkZWI0MGIwNmFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAGAwDQYJKoZIhvcNAQELBQADggEBAISkiW3VFvo0LXTtjrlL0STP mledyRC2St02BfpgEJ5drSLHXNTIPy34IULIINOyVPT6x0eiC2pHOyBewvb7kQdb 9bJUC66G65UCrI49QUZAvdsQM+ldEsV4RLgb0orVYHDUD4qPl6H7gTR0844gjTSd 3T5HW4rWTBlX5FCfIsjjvn8ERG1RNIRsNh6W6MlOwEmJC4HdbAXOzoX76c9o14O8 Jf7YSHLpO6vsyw89hw7hdMmzqI358UcKV7Cw5m2EbRy1MKJUiqyBWkQCi7kq0eDC 7IxoQo3c59vhgEvNyLBPwNoTerSglHpJpl2ABUlg2VTR03fVXuI7U85J0XX8LMs= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:36 2026 by rpki-client