$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa File: 3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa (raw, json) Hash identifier: 7g5IAicrSiD7lINidjJAJO2diExuggd9T1oDV0XxUOg= Subject key identifier: 5C:32:B9:75:C3:70:05:C8:EB:8B:03:69:A8:EB:70:AD:98:44:EA:03 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 64EA8FFD7739039EEF0958AF3C15318CEB2EE62A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa Signing time: Fri 13 Feb 2026 15:00:10 +0000 ROA not before: Fri 13 Feb 2026 15:00:10 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ea:8f:fd:77:39:03:9e:ef:09:58:af:3c:15:31:8c:eb:2e:e6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:10 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=1159da23f3856d6d687ab14b8a48df98cce6ff4e431f0adfd5c6b4f17dca9cc0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:7d:cc:93:bb:c7:ac:9a:a2:4d:7a:08:77: 9d:f5:36:07:8c:a3:e3:e7:2f:d8:61:a6:a6:19:a5: ff:66:d9:d6:02:8e:5f:14:80:6d:df:bf:8a:2a:79: e1:97:7d:8c:04:01:88:95:9d:a5:50:10:92:5b:1b: 93:5d:25:a3:85:5b:10:89:35:eb:dc:63:ce:64:2c: 7f:eb:b0:87:54:64:f6:8d:4a:14:41:1e:0f:36:88: bd:95:8b:13:e0:e7:e2:45:8b:36:93:59:d4:27:a7: 2c:cd:f2:3d:c1:c3:d3:80:70:77:72:5a:79:93:f2: cc:84:6f:29:43:bf:e6:52:d5:3b:a5:0d:6e:d5:08: a2:c0:dc:1d:c7:1d:64:67:36:21:2b:7a:d5:30:67: 09:d8:2b:12:ef:64:92:fb:48:09:5a:ae:8c:d8:10: 8d:b3:08:82:a9:6c:42:3f:ec:1d:fc:38:1e:a1:66: 7e:6c:8d:4a:51:65:eb:99:2d:c1:1d:98:6b:c3:34: 3a:0b:e2:ff:9a:59:73:9a:95:51:89:d4:f5:b6:c0: e1:f1:39:b1:c3:35:de:1d:e2:bf:00:c0:c4:8d:d2: cf:ce:ca:42:d7:21:3d:25:82:bc:23:b9:1b:61:ba: 86:37:4b:00:31:62:48:83:48:5b:6f:a2:90:53:ec: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:B9:75:C3:70:05:C8:EB:8B:03:69:A8:EB:70:AD:98:44:EA:03 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 8c:d4:61:1d:54:ad:2d:19:2e:95:f2:99:e6:98:50:69:ca:6a: 76:9b:2c:d6:1e:2f:cb:33:c9:98:ae:5a:49:92:66:2d:46:a8: bb:a3:76:75:15:56:88:70:53:a0:3a:c0:27:df:a4:0e:b4:2f: 86:2d:84:c6:56:05:38:40:35:e7:6c:d1:d0:02:92:d4:90:e1: c5:5d:73:a7:24:bf:1b:1a:60:fa:68:fc:49:1d:19:90:03:5d: f4:77:02:4d:66:67:60:fc:91:69:fc:4f:4f:dd:c1:14:a9:e4: f2:9e:c6:a2:51:77:d3:4c:c1:c5:37:14:5f:d9:a4:7b:15:09: 5b:63:01:57:62:26:88:ec:3d:c0:6f:b3:fa:3c:f6:78:eb:4c: c9:57:55:b6:5b:91:8b:ec:8d:ba:6c:cd:19:d6:5f:d0:ce:5d: 37:1b:41:75:7f:70:ee:f5:6a:1d:b7:d2:57:46:23:bd:c5:6d: bf:2a:4b:fb:9c:35:37:13:03:99:d5:1f:e4:10:3a:05:d3:ad: b5:ae:80:91:fb:92:b7:a3:3a:9b:e0:fb:d3:18:ba:d4:45:e5: 52:d2:0c:9a:74:63:58:e4:a8:52:a8:94:51:79:8c:d6:fe:c4: 4e:a7:63:a9:2f:e3:6f:4f:1a:12:b1:da:f5:69:c6:97:f5:39: c1:26:fe:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZOqP/Xc5A57vCVivPBUxjOsu5iowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDEwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTU5ZGEyM2YzODU2ZDZkNjg3YWIxNGI4YTQ4ZGY5OGNj ZTZmZjRlNDMxZjBhZGZkNWM2YjRmMTdkY2E5Y2MwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBa33Mk7vHrJqiTXoId531NgeMo+PnL9hhpqYZpf9m2dYC jl8UgG3fv4oqeeGXfYwEAYiVnaVQEJJbG5NdJaOFWxCJNevcY85kLH/rsIdUZPaN ShRBHg82iL2VixPg5+JFizaTWdQnpyzN8j3Bw9OAcHdyWnmT8syEbylDv+ZS1Tul DW7VCKLA3B3HHWRnNiEretUwZwnYKxLvZJL7SAlarozYEI2zCIKpbEI/7B38OB6h Zn5sjUpRZeuZLcEdmGvDNDoL4v+aWXOalVGJ1PW2wOHxObHDNd4d4r8AwMSN0s/O ykLXIT0lgrwjuRthuoY3SwAxYkiDSFtvopBT7Am7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXDK5dcNwBcjriwNpqOtwrZhE6gMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNkNDYwMmMwLTk1OTktNDMyNS1iYThkLWRjOGIxOWM2YzI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAIzUYR1UrS0ZLpXymeaYUGnK anabLNYeL8szyZiuWkmSZi1GqLujdnUVVohwU6A6wCffpA60L4YthMZWBThANeds 0dACktSQ4cVdc6ckvxsaYPpo/EkdGZADXfR3Ak1mZ2D8kWn8T0/dwRSp5PKexqJR d9NMwcU3FF/ZpHsVCVtjAVdiJojsPcBvs/o89njrTMlXVbZbkYvsjbpszRnWX9DO XTcbQXV/cO71ah230ldGI73Fbb8qS/ucNTcTA5nVH+QQOgXTrbWugJH7krejOpvg +9MYutRF5VLSDJp0Y1jkqFKolFF5jNb+xE6nY6kv429PGhKx2vVpxpf1OcEm/is= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:52 2026 by rpki-client